Aadhaar-PAN Synthetic Profile Scam
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Suspicious | Risk Score: 8/10 | Severity: high
How Aadhaar-PAN Synthetic Profile Scam Works
Overview: This scam involves the creation of fraudulent customer profiles for financial services using artificially combined Aadhaar and PAN data—often extracted from old leaks or phishing attempts. With AI, fraudsters seamlessly blend real and fake details, generating an almost undetectable identity. The impact is disastrous: fake accounts are used to drain loans, abuse the UPI framework, or undertake large transactions without actual customers’ consent. How It Works: Criminals purchase or obtain partial Aadhaar and PAN details—sometimes from dark web sources or previous breaches. They use AI to generate missing information and images. This hybrid profile is then used in digital onboarding systems that accept scanned IDs and digital signatures. Success lets scammers access banking, open credit lines, or set up UPI handles in the fake customer’s name, which are then misused. India Angle: Biggest impact is in metro cities and tech-driven states. New-to-credit youth, students, and those who have shared documents for jobs or rentals are especially vulnerable. Banks and NBFCs with weak ID validation systems are prime targets. Real Examples: 'Get instant approval! Just upload your Aadhaar and PAN.' Victims later find loans or credit cards they never applied for. In another case, a student’s PAN is mixed with another person’s Aadhaar, with an AI-generated photo, and used for a mobile loan. Red Flags: 1) Receive alerts for loans/accounts you never opened. 2) Bank statements show unknown UPI handles or transactions. 3) Official e-KYC records have data mismatches or unusual combinations. 4) Get calls to 'verify' ID for accounts you didn’t request. Protective Measures: Protect your Aadhaar/PAN details—never share via WhatsApp or email. Use masked e-KYC where possible. Regularly monitor your CIBIL and Aadhaar authentication history. Confirm with banks if you receive an unknown onboarding alert. If Victimised: Flag suspicious accounts or loans with your bank and credit bureau. Lodge a complaint at cybercrime.gov.in and call 1930. Freeze your credit profile if abused. Related Scams: 1) Fake rental KYC scams. 2) College admission loan fraud. 3) Identity theft for UPI account creation.
How This Scam Works — Detailed Explanation
The Aadhaar-PAN Synthetic Profile Scam is a disturbing trend where fraudsters create illicit customer profiles by combining real Aadhaar and PAN information, often extracted from old data breaches or through phishing schemes. These criminals typically operate in the shadows of the internet, utilizing dark web forums or social media platforms like WhatsApp to buy stolen Aadhaar and PAN data in bulk. Targeting vulnerable populations, they lure unsuspecting victims into sharing their personal information, often under the premise of eligibility for government welfare schemes or financial aid. Once they gather enough data, they skillfully fabricate synthetic identities that can bypass traditional verification systems used by banks and financial institutions.
In executing their plans, these fraudsters rely on psychological manipulation, presenting themselves as legitimate operators offering attractive financial products. They might send seemingly official communication about unused loans or notify potential victims about eligibility for credit cards, all while claiming to be from known banks or financial services. This might include unsolicited phone calls or messages that ask for a few verification details, such as Aadhaar numbers or PAN data, positing a fake sense of urgency. By playing on emotions like fear of missing out or prestige linked to credit access, they often trick victims into unwittingly providing sensitive information that will later be used to build fake accounts in their name.
Once the synthetic identities are established, the scammers execute their schemes by applying for loans or credits using the fake accounts created with the stolen data. In real-life instances, victims have found themselves receiving notifications about loan disbursals they never consented to, demonstrating a wrongful use of their names. For example, a small business owner in Mumbai had his details misappropriated to siphon off nearly ₹5 lakhs in loans without his knowledge, while a student in Delhi received calls from multiple banks about dubious transactions linked to his Aadhaar number. The complexity of the scam makes it incredibly difficult for victims to navigate through the mess, often finding that financial institutions are reluctant to take swift action once fraud has occurred under their names.
The financial impact of the Aadhaar-PAN Synthetic Profile Scam is staggering. According to recent reports, over ₹2,800 crores were reportedly lost in India due to UPI-related frauds within the last year, with a significant portion linked to synthetic identity scams. Agencies such as the Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) have expressed concerns over the rising trend in synthetic frauds, leading to stricter guidelines laid out for financial institutions to enhance KYC processes. Additionally, CERT-In has released advisories highlighting the methods employed in these scams, but the detection and prevention remain a challenge due to the constantly evolving tactics of fraudsters. With traditional identity verification rapidly becoming ineffective, it is crucial for consumers and institutions alike to remain vigilant against such threats.
To differentiate between genuine communications and potential scams, one should look out for specific warning signs like unsolicited verification calls, unfamiliar UPI IDs in one’s name, or discrepancies in Aadhaar or PAN data when checking e-KYC reports. Notifications from banks regarding accounts that a person did not open should raise immediate red flags. Engaging in regular monitoring of financial statements and accounts can also help victims catch unauthorized transactions early, limiting the fraud's impact. Taking proactive steps in reviewing one’s personal financial narrative is essential in protecting against such sophisticated scams.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Aadhaar-PAN Synthetic Profile Scam Target?
General public across India
Red Flags — How to Identify Aadhaar-PAN Synthetic Profile Scam
- Bank alerts for accounts you didn't create
- Strange UPI IDs in your name
- Mismatch in Aadhaar or PAN data in e-KYC reports
- Unsolicited calls for onboarding verification
What To Do If You Encounter Aadhaar-PAN Synthetic Profile Scam
- Report suspicious activities immediately to the cybercrime helpline by calling 1930 or visiting cybercrime.gov.in.
- Contact your bank's customer support, like SBI at 1800-11-1109 or HDFC at 1800-202-6161, to inquire about any unknown accounts linked to your details.
- Freeze or block your Aadhaar number by submitting a request through the Unique Identification Authority of India (UIDAI) website.
- Regularly check your UPI transaction history and account statements for unauthorized activities.
- Alert your contacts about possible phishing attempts, particularly if you received unsolicited calls asking for personal information.
- Consider subscribing to alerts from your bank for any transactions made in your account, thereby ensuring you are notified instantly.
How to Report Aadhaar-PAN Synthetic Profile Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately contact your bank using the relevant helpline. For SBI, call 1800-11-1109 and for HDFC, call 1800-202-6161 to freeze your account. Also, report the incident to the cybercrime helpline at 1930 or visit cybercrime.gov.in.
- How can I identify if I am a victim of the Aadhaar-PAN Synthetic Profile Scam?
- Be alert for bank alerts about accounts you didn't create, unexplained loans taken in your name, or unsolicited calls for onboarding verification from banks.
- How do I report this type of scam in India?
- Report any suspicion to the cybercrime helpline at 1930 or use cybercrime.gov.in to file a complaint. Additionally, inform your bank immediately about the unauthorized activity.
- How can I recover my money or protect my accounts after this scam?
- Contact your bank to report unauthorized transactions, and request to block your accounts. Additionally, follow up with a complaint to the cybercrime helpline, which can assist in further investigations.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.