Check your credit report for loans and cards you never took, review Aadhaar authentication history on the UIDAI website, check your tax records (AIS / Form 26AS) on the income tax portal, and see SIMs in your name on Sanchar Saathi. If you find misuse, lock Aadhaar biometrics, dispute entries with the lender and credit bureau, and report on cybercrime.gov.in.
Key takeaways
- A free credit report is the fastest way to spot loans or cards taken in your name.
- UIDAI's authentication history shows when and how your Aadhaar was used.
- Locking Aadhaar biometrics stops fingerprint-based e-KYC misuse.
- Dispute fake loans with both the lender and the credit bureau, in writing.
- Identity theft is punishable under IT Act s.66C; cheating by personation under s.66D.
What does identity theft look like in India?
Identity theft means someone uses your personal identifiers, mainly PAN, Aadhaar, photos, signature or bank details, to pretend to be you. In India it most often shows up as:
- Loans in your name, especially small instant loans or "buy now, pay later" credit approved with digital KYC.
- Credit cards or consumer-durable loans taken at a store with a copy of your PAN and a photo.
- SIM cards issued using your Aadhaar or a forged copy, later used for fraud.
- Bank accounts opened in your name and used to move fraud money.
- Tax entries you do not recognise, such as high-value transactions or income linked to your PAN.
Victims usually find out late, through a recovery agent's call, a credit score drop or a loan rejection. If loan-app agents are already harassing you or your contacts, read our guide on loan app harassment alongside this one.
How to check if your PAN card is misused
- Get your credit report from one or more of India's RBI-licensed credit bureaus. You are entitled to a free full report from each bureau once a year, and many lenders and apps show it free more often. Look at every loan and card listed, including closed ones and enquiries you did not make.
- Log in to the income tax e-filing portal and review your Annual Information Statement (AIS) and Form 26AS. Unknown high-value transactions, TDS entries from employers you never worked for, or property deals are red flags.
- Look for unknown enquiries. A hard enquiry from a lender you never approached means someone applied for credit using your PAN.
- Repeat every few months if your PAN copy has been widely shared or you have already found one case of misuse.
Never pay "PAN check" websites or agents who promise to find misuse for a fee. The official checks above are free.
How to check if your Aadhaar is misused online
UIDAI keeps a record of every authentication done with your Aadhaar. You can see it yourself:
- Go to the UIDAI website (myAadhaar) or open the mAadhaar app and log in with your Aadhaar number and the OTP sent to your registered mobile.
- Open Authentication History and choose a date range.
- Check the type (biometric, OTP, demographic), the date and the agency that requested it. An authentication you do not recognise, especially biometric e-KYC, can mean your Aadhaar was used to open a SIM or account.
- Note the details and report them to UIDAI through its grievance channel or helpline 1947, and include them in your police complaint.
Your registered mobile number must be with you and active for this. If the OTP is going to a number you do not recognise, update your mobile at an Aadhaar centre immediately.
How to lock Aadhaar biometrics and protect your number
Biometric lock stops anyone from using your fingerprint, iris or face for authentication until you unlock it. It is one of the most useful defensive steps against SIM and account fraud.
- Lock biometrics: on myAadhaar or mAadhaar, choose the biometric lock option and confirm with OTP. Unlock temporarily only when you yourself need a biometric check, for example at a bank branch.
- Use a Virtual ID (VID) instead of your Aadhaar number where services accept it.
- Share masked Aadhaar (only the last four digits visible) when an organisation just needs ID proof.
- Write the purpose and date across any photocopy you hand over, such as "For SIM verification only, date".
| Check | Where | What it reveals |
|---|---|---|
| Credit report | Credit bureaus (free annual report) | Loans, cards and enquiries on your PAN |
| AIS / Form 26AS | Income tax e-filing portal | Income, TDS and high-value transactions on your PAN |
| Authentication history | myAadhaar / mAadhaar | When and by whom your Aadhaar was authenticated |
| Mobile connections in your name | Sanchar Saathi | SIMs issued against your identity |
| Bank and email alerts | Your own bank and email | New accounts, new devices, changes to contact details |
What to do if your PAN or Aadhaar is misused
- Lock Aadhaar biometrics and change passwords for email and net banking.
- Report on cybercrime.gov.in (or call 1930 if money was lost), describing each fake loan, SIM or account. Our cyber complaint guide covers filing and tracking. For larger cases, file a written complaint at the police station or cyber cell and ask for an FIR.
- Write to each lender that shows a fake loan. State that you never applied, attach your complaint acknowledgement and ask for the loan documents, KYC used and the account the money went to. Ask them to stop recovery calls while they investigate.
- Raise a dispute with the credit bureau through its online dispute form. The bureau checks with the lender and corrects the record if the lender confirms the error.
- Disconnect unknown SIMs through Sanchar Saathi.
- Escalate: if a bank or NBFC lender ignores you, complain to the RBI Ombudsman through cms.rbi.org.in. For tax entries you do not recognise, give feedback on the AIS entry on the income tax portal and keep the record.
Keep one folder with every complaint number, letter and reply. Lenders and bureaus move faster when you can show a clear paper trail.
What is the punishment for identity theft in India?
Several laws apply, often together:
- IT Act, 2000 s.66C punishes fraudulent or dishonest use of another person's electronic signature, password or other unique identification feature.
- IT Act s.66D punishes cheating by personation using a computer resource or communication device.
- BNS s.318 (cheating, earlier IPC 420) and the BNS provisions on forgery apply when fake documents or signatures are used to obtain a loan or SIM.
- The Aadhaar Act, 2016 has its own penalties for impersonation and unauthorised use of identity information.
Separately, the Digital Personal Data Protection Act, 2023 places duties on organisations that collect your data; its rules are being brought into force in phases. If your data leaked from a specific organisation, keep that in your complaint. For forged signatures on loan papers, our guide on signature forgery and handwriting experts explains how forgery is proved.
Can a private detective help in an identity theft case?
A detective cannot access bank, Aadhaar, telecom or credit records; those come only through you, the lender or the police. Where a professional helps is the human side: when the misuse points to someone you know, such as a former employee, relative, tenant or business partner who had your documents, or when you need the address or background of a person named in loan documents. Lawful investigation of that kind can strengthen your FIR. See how forged documents are checked, or find a verified professional through Hire Your Detective.
Bottom line
Check four places: your credit report, your tax statement, your Aadhaar authentication history and Sanchar Saathi. Lock your biometrics, share only masked or marked ID copies, and if you find misuse, report it to the police and dispute every entry in writing with the lender and the credit bureau. Most cleanups succeed when the victim keeps a careful paper trail.
Sources & official links
This guide is general information, not legal advice. Laws and procedures change, and every case is different — speak to a lawyer about your situation. In an emergency, call 112.