KYC fraud — account misused after documents shared
Immediate Actions — First 30–60 Minutes
1
Lock your Aadhaar biometrics immediately on the UIDAI portal (uidai.gov.in) or via the mAadhaar app — this prevents your Aadhaar from being used for biometric authentication.
2
Check your Aadhaar authentication history on uidai.gov.in — it shows where and when your Aadhaar has been used for authentication in the past.
3
If your PAN was shared: check the Income Tax portal (incometax.gov.in) for any returns filed or accounts linked under your PAN that you did not authorise.
4
Call 1930 immediately and report the document misuse.
5
Contact your bank and inform them that your KYC documents may have been compromised — ask them to add an additional verification step for any new account opening or loan application.
Short-Term Steps — First 48–72 Hours
1
File a complaint on cybercrime.gov.in and with the local cyber police station, specifically mentioning identity theft.
2
Check the CKYC registry (ckycreg.in) to see what accounts are linked to your KYC documents — this is the central KYC record that financial institutions use.
3
Run a credit report check on CIBIL, CRIF, Experian, or Equifax — look for any loan applications, credit enquiries, or accounts you did not open.
4
If a bank account was opened in your name fraudulently: report to the bank, to the RBI (crpc.rbi.org.in), and to the police. The bank is responsible for KYC verification failures.
5
Check whether any company has been registered in your name using the MCA portal (mca.gov.in) — search your name and DIN if applicable.
Resolution Steps — Next 2–8 Weeks
1
Fraudulent accounts opened in your name must be reported to the bank and the police — the bank has an obligation to close them after investigation.
2
For fraudulent loans taken in your name: file a criminal complaint and notify the lending institution — they must initiate a fraud investigation. Your credit bureau records must be corrected after investigation.
3
CIBIL and other bureaus have a dispute mechanism — file a dispute for any unauthorised enquiries or accounts. Resolution typically takes 30–45 days.
4
If you receive legal notices for loans you did not take: do not ignore them. File a police complaint and respond to the notice through a lawyer to establish your non-involvement.
5
Periodically check your Aadhaar usage, credit reports, and CKYC data — identity fraud often surfaces months after the documents were shared.
Prevention — Never Let This Happen Again
✓
Never share KYC documents with anyone who contacts you unsolicited — approach your bank or government office directly if KYC updating is required.
✓
Lock your Aadhaar biometrics as a default — unlock only when you need biometric authentication, then re-lock.
✓
Mask your Aadhaar number when sharing a copy — the last 4 digits are sufficient for most purposes. Use a ‘Masked Aadhaar’ from the UIDAI portal.
✓
Check your Aadhaar authentication history quarterly — it takes 2 minutes and reveals any unauthorised use.
✓
Download your credit report for free from CIBIL once a year — early detection of fraudulent accounts is the best defence.
Watch Video Guide
Your Rights
Identity theft is a criminal offence under Section 66C of the IT Act 2000, punishable with up to 3 years imprisonment and a fine of ₹1 lakh. You are not liable for loans or crimes committed using your identity without your knowledge, provided you report them promptly and can demonstrate you were not involved. Financial institutions are required to conduct proper KYC — if they failed to do so and enabled fraud in your name, they bear regulatory liability.
Key Contacts & Portals
| Who / What | Contact / Action |
|---|---|
| UIDAI Aadhaar Lock | uidai.gov.in or 1947 — lock biometrics immediately |
| Cyber Crime Portal | cybercrime.gov.in | 1930 |
| CKYC Registry | ckycreg.in — check accounts linked to your KYC |
| RBI Banking Ombudsman | crpc.rbi.org.in | 14448 |
| Who / What | Contact / Action |
|---|---|
| CIBIL Dispute | cibil.com — dispute fraudulent accounts |
| MCA Company Search | mca.gov.in — check for companies registered in your name |
| Income Tax Portal | incometax.gov.in — check PAN misuse |