Aadhaar & Passport Identity Theft

आधार और पासपोर्ट पहचान चोरी

INDIA — By BharatSecure Threat Intelligence Team ·

Dangerous Risk: 10/10 Severity: Critical BharatSecure Threat Intelligence

Category: Government

Verdict Summary

Aadhaar & Passport Identity Theft is a confirmed scam. Do not engage — block the sender and report to 1930 (National Cyber Crime Helpline) immediately.

Risk score: 10/10 · Severity: Critical · Verdict: Dangerous

Scam Intelligence: Aadhaar & Passport Identity Theft

Proprietary signals from BharatSecure's scam-tracking database.

Last reportedApr 15, 2026
First documentedApr 15, 2026

How Aadhaar & Passport Identity Theft Works

  1. Hackers exfiltrate citizen data from health or government portals (e.g., ICMR)
  2. Threat actors verify Aadhaar numbers via government portals to ensure data quality
  3. Fraudsters impersonate victims to open fraudulent bank accounts or bypass KYC

How This Scam Works — Detailed Explanation

In India, Aadhaar and passport information are among the most valuable identity documents for citizens. Unfortunately, scammers exploit data leaks and breaches to steal these identities on a massive scale. With over 815 million Aadhaar and passport records reportedly leaked, criminals now have access to sensitive personal data. They use this information to impersonate victims and commit fraud, causing serious problems like unauthorized bank account openings, fake loans, or illegal KYC (Know Your Customer) verifications.

Scammers often start by obtaining partial personal details, such as name, Aadhaar number, and date of birth from data breaches or dark web sources. They then initiate fake KYC processes with banks or financial institutions, trying to open accounts or link mobile numbers with UPI apps like Google Pay or PhonePe. Since many Indians rely on mobile banking and UPI for daily transactions, this opens doors for the fraudsters to siphon funds or request unauthorized loans in the victim’s name.

These criminals also exploit WhatsApp and SMS to send phishing messages designed to look like official government or bank alerts. The victim may receive messages saying there was an attempt to verify or renew their passport without their knowledge. When they click on provided links or share OTPs under the guise of ‘security checks’, scammers gain control of bank accounts or access further Aadhaar-linked services. Victims often realize the damage only when their credit rating drops or they receive unexpected debt notices.

In the end, victims face a long struggle to reverse the damage. They must report to banks, change passwords, file FIRs with police, and sometimes contact UIDAI to block Aadhaar misuse. The scam not only results in financial losses but also severe emotional distress due to identity theft. Being vigilant and recognizing early signs such as unrecognized bank accounts or KYC alerts are essential to protect oneself from this government ID fraud menace.

Who Does Aadhaar & Passport Identity Theft Target?

Indian citizens who submitted ID for COVID-19 testing or government services

Red Flags — How to Identify Aadhaar & Passport Identity Theft

  • Unauthorized KYC attempts
  • Unrecognized bank accounts opened in your name
  • Passport verification alerts without application

What To Do If You Encounter Aadhaar & Passport Identity Theft

  1. Check your bank accounts and UPI apps regularly for any unknown transactions or linked services
  2. Immediately report to your bank if you notice unrecognized accounts or KYC attempts in your name
  3. Verify passport application status on official government websites to detect unauthorized verification alerts
  4. File a complaint with your local police and cybercrime cell if you suspect Aadhaar or passport data theft
  5. Contact UIDAI helpline to check for unauthorized Aadhaar authentication and request blocking if necessary

How to Report Aadhaar & Passport Identity Theft in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Aadhaar & Passport Identity Theft?
Aadhaar & Passport Identity Theft is a reported government scam that BharatSecure has documented as affecting Indian users. Fraudsters use it to trick victims into sharing money, OTPs, or personal and banking details. It currently carries a risk rating of 10/10 (Critical).
Is Aadhaar & Passport Identity Theft dangerous, and how common is it in India?
Yes. This scam is rated Critical severity (10/10) because it can lead to direct financial loss or identity theft. It spreads through SMS, WhatsApp, phone calls, and fake websites, and variants are reported across India throughout the year. Treat any unexpected message or call matching this pattern as suspicious until verified.
How can I protect myself from Aadhaar & Passport Identity Theft?
Check your bank accounts and UPI apps regularly for any unknown transactions or linked services Immediately report to your bank if you notice unrecognized accounts or KYC attempts in your name Verify passport application status on official government websites to detect unauthorized verification alerts File a complaint with your local police and cybercrime cell if you suspect Aadhaar or passport data theft Never share OTPs, UPI PINs, card numbers, or passwords; verify any request independently using official numbers from the company's real website; and avoid clicking links in unsolicited messages.
How do I report Aadhaar & Passport Identity Theft in India?
Call 1930 (the National Cyber Crime Helpline) within 24 hours for the best chance of recovering funds, and file a complaint at cybercrime.gov.in with screenshots and transaction details. Notify your bank's fraud team to freeze transactions, and report the suspect UPI ID or phone number to BharatSecure so other users can be warned.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.