Updating Mobile Numbers - Unique Identification Authority of India

Utilize Aadhaar with Freedom

Why am I required to verify my Bank account, Demat account, PAN, and other services with Aadhaar? Open or Close

According to the Supreme Court Judgement in the Aadhaar case (494 of 2012), residents are no longer obligated to verify their Bank account with Aadhaar. However, linking PAN with Aadhaar is mandatory. Residents have the option to voluntarily use their Aadhaar number in either physical or electronic form for authentication purposes, or through offline verification, or any other specified method by UIDAI. Mandatory Aadhaar authentication is only applicable when backed by law, especially for subsidies, benefits, and services, as stated in the notification under section 7 of the Aadhaar Act, 2016 (as amended).

By linking bank accounts, demat accounts, mutual fund accounts, PAN, and other entities with Aadhaar, individuals ensure their own security as it prevents impersonation by fraudsters. These fraudsters often carry out unauthorized transactions and transfer funds from others' accounts to their own, going undetected due to the submission of fake identities during the account opening process. They operate bank accounts under fictitious names or companies, engaging in money laundering or harboring black money. Verifying all bank accounts with Aadhaar eliminates the possibility for such unscrupulous individuals to go unnoticed, ensuring greater safety and security in the banking system by establishing the identity of each account holder uniquely and conclusively through eKYC. Currently, out of a total of 110 crore accounts, 96 crore bank accounts have been linked to Aadhaar.

Simultaneously, by utilizing Aadhaar and implementing other process improvements, individuals contribute to the elimination of bogus, fake, and duplicate identities that could be used for tax evasion and misappropriation of public funds, among other fraudulent activities. Through Aadhaar, the government has successfully identified and removed over 6 crore fake, duplicate, and ghost beneficiaries, saving an estimated Rs. 90,000 crore of public money. Additionally, the use of Aadhaar has helped combat tax evasion, money laundering, and terror financing by exposing ghost and shell entities and companies. Verification of identity through Aadhaar has also prevented unscrupulous individuals from impersonating others in various examinations and tests for college admissions and job applications, ensuring fairness and justice for genuine candidates. Aadhaar's identity verification has brought transparency and equity to numerous other areas of the system.

I provided my Aadhaar card to a service provider to verify my identity. Can my Aadhaar number be misused to harm me? Open or Close

No. Merely knowing your Aadhaar number does not pose any threat or harm. Your Aadhaar number functions similarly to other identity documents such as a passport, voter ID, PAN card, ration card, or driver's license, which you have been using without apprehension for many years. The Aadhaar identity is instantly verifiable, making it highly reliable. Moreover, as per the Aadhaar Act 2016, Aadhaar cards are meant to be verified either physically or electronically through authentication, offline verification, or other specified methods. Verification is conducted using fingerprint, iris scan, OTP authentication, and QR codes, among other secure techniques. Thus, it is nearly impossible for anyone to impersonate you when you prove your identity using Aadhaar. Just like with other identity documents, people freely provide documents such as passports, voter IDs, PAN cards, ration cards, and driver's licenses without fear that someone will misuse them. If any fraudulent activity occurs, law enforcement agencies handle them according to the law. The same principle applies to Aadhaar. In fact, Aadhaar offers more security than many other identity documents since it can be instantly verified through biometric and OTP authentication, as well as QR codes. Furthermore, the Aadhaar Act 2016 imposes strict penalties, including fines and imprisonment, for anyone misusing your Aadhaar number or attempting to harm you.

What happens if a fraudster obtains a copy of my Aadhaar card and tries to open a bank account in my name without my knowledge? Will I not be harmed? Open or Close

Under the Prevention of Money Laundering (PML) Rules, Aadhaar is considered an officially valid document for opening a bank account. However, banks are still required to conduct other necessary due diligence for banking transactions and Know Your Customer (KYC) purposes. If a fraudster attempts to open a bank account using your Aadhaar without the bank conducting proper due diligence, you, as the Aadhaar holder, cannot be held accountable for the bank's negligence. It is similar to the situation where a fraudster opens a bank account using someone else's voter card or ration card; the responsibility lies with the bank, not with the cardholder. To date, no Aadhaar holder has suffered any financial loss due to such misuse.

Does connecting my bank account, PAN, and other services with Aadhaar expose me to potential vulnerability? Open or Close

Absolutely not. Since banks do not share your bank information with anyone else, nobody can access your bank account simply by knowing your Aadhaar number. Furthermore, neither UIDAI nor any other entity has access to your bank account information. To illustrate, when you provide your mobile number to various organizations such as banks, passport authorities, or income tax departments, does the telecom company gain access to your bank details or tax returns? Of course not! Similarly, when you provide your Aadhaar number to different service providers, your details are retained by those specific providers, and neither the Government nor UIDAI can access your personal information spread across different service providers.

Recently, UIDAI released a advisory cautioning against openly sharing your Aadhaar number on public platforms, particularly social media. Does this mean I should avoid using Aadhaar altogether? Open or Close

You should not hesitate to use your Aadhaar for proving your identity and conducting transactions, just as you would use your bank account number, PAN card, debit card, or credit card anywhere necessary. What UIDAI advises is that Aadhaar should be freely used to establish identity and facilitate transactions, but it should not be shared on public platforms like Twitter or Facebook. Consider this: when you make purchases or pay bills for school, water, electricity, telephone, or other utilities, you provide your debit card details, credit card details, or a cheque that contains your bank account number. Similarly, you can confidently use your Aadhaar to prove your identity whenever required. When using Aadhaar, exercise the same level of caution as you would with other ID cards – neither more nor less.

Can a fraudster withdraw money from my bank account linked to Aadhaar if they have my Aadhaar number or Aadhaar card? Have any Aadhaar holders experienced financial loss or identity theft due to impersonation or misuse? Open or Close

Just as someone cannot withdraw money from your bank account solely based on your bank account number, nobody can withdraw funds from your Aadhaar-linked bank account just by knowing your Aadhaar number. Similar to how you require your signature, debit card, PIN, or OTP to withdraw money from your bank, when using Aadhaar to make withdrawals, you would need your fingerprint, IRIS scan, or OTP sent to your Aadhaar-registered mobile phone. No Aadhaar holder has suffered any financial loss or identity theft due to misuse or impersonation. Importantly, over 300 million authentications are conducted daily on the Aadhaar platform. Since its inception, more than 30.125 billion authentications have been successfully completed as of May 28, 2019. UIDAI continually enhances and reviews its security systems and safety measures to make Aadhaar more secure and efficient. There has not been a single breach of biometric data from the Aadhaar database. Therefore, people should freely use Aadhaar to prove their identity as required under the provisions of the Aadhaar Act, 2016.

If Aadhaar is meant to be freely used for establishing identity and is safe to do so, why has UIDAI advised against sharing Aadhaar numbers on social media or public platforms? Open or Close

You use your PAN card, debit card, credit card, or bank cheques when necessary. However, do you openly share these details on the internet or social media platforms like Facebook or Twitter? Obviously not! You avoid sharing such personal information unnecessarily in the public domain to prevent unwanted invasion of your privacy. The same logic should be applied when using Aadhaar.

There are many agencies that accept physical copies of Aadhaar without performing biometric or OTP authentication or verification. Is this a good practice? Open or Close

Aadhaar authentication should be conducted for availing benefits, services, and privileges specified under Section 7 of the Aadhaar Act, 2016. If the purpose for which Aadhaar authentication is intended has a legal backing from the parliament or is in the interest of the state, then verification can be done offline using the QR code on the physical copy of Aadhaar. If any agency fails to adhere to these best practices, they will be held fully responsible for any situations or losses arising from potential misuse or impersonation. The Aadhaar holder is not accountable for the wrongdoing of any agency.

E-Aadhaar

What is Masked Aadhaar? Open or Close

The option to mask Aadhaar allows you to conceal your Aadhaar number in your downloaded e-Aadhaar. Masked Aadhaar involves replacing the first 8 digits of the Aadhaar number with characters like "xxxx-xxxx," while only the last 4 digits remain visible.

How can a resident download e-Aadhaar? Open or Close

Residents can download e-Aadhaar in two ways.

• Using the Enrollment Number: Residents can download e-Aadhaar by entering the 28-digit enrollment number, along with their full name and pin code. During the download process, an OTP is sent to the registered mobile number. Residents also have the option to use TOTP for downloading e-Aadhaar instead of OTP. TOTP can be generated using the mAadhaar mobile application.
• Using the Aadhaar Number: Residents can download e-Aadhaar by entering the 12-digit Aadhaar number, along with their full name and pin code. During the download process, an OTP is sent to the registered mobile number. Residents also have the option to use TOTP for downloading e-Aadhaar instead of OTP. TOTP can be generated using the mAadhaar mobile application.

Is e-Aadhaar equally valid as a physical copy of Aadhaar? Open or Close

According to the Aadhaar Act, e-Aadhaar holds the same level of validity as a physical copy of Aadhaar for all purposes. To view the UIDAI circular regarding the validity of e-Aadhaar, please visit https://uidai.gov.in/images/uidai_om_on_e_aadhaar_validity.pdf.

How to verify digital signatures in e-Aadhaar? Open or Close

To verify digital signatures in e-Aadhaar, your computer must be connected to the internet.

• Download your e-Aadhaar and open the PDF file using Adobe Reader only.
• Right-click on the icon displaying "validity unknown" and select "Validate Signature."
• A window displaying the signature validation status will appear. Click on "Signature Properties."
• Click on "Show Signer's Certificate."
• Ensure that a certification issued by the name "(n)Code Solutions CA 2014" is present.
• In the Summary tab, click on "Export."
• Click "Next" to save the certificate on your local system (desktop/laptop).
• Afterwards, click "Next" and then "Finish."
• Go to the "Trust" tab and click on "Add to trusted certificate." Select all three options under "Certified documents" and click "Ok."
• Click on "Validate Signature" again and close the window.
• Once "(n)Code Solutions CA 2014" is added as a trusted identity, any subsequent documents with digital signatures from CCA will be automatically validated upon opening.
• If the certificate is found to be expired on the machine, please download e-Aadhaar again and re-validate the signature using the aforementioned procedure. Add the newly downloaded certificate to the "Trusted Certificate" category on the local machine to include a valid/current digital certificate.
• To validate the invalid digital signature on the downloaded e-Aadhaar on another machine (i.e., laptop/desktop), download and validate the digital certificate as per the above procedure on the alternate machine.

Note: Once "NIC sub-CA for NIC 2011, National Informatics Centre" is added as a trusted identity, any subsequent documents with digital signatures from CCA will be automatically validated upon opening.

What exactly is e-Aadhaar? Show/Hide

e-Aadhaar is a digitized version of Aadhaar that is protected by a password and digitally signed by the UIDAI competent authority. It can be obtained by downloading it from the official website or the UIDAI mobile application.

What software do I need to open e-Aadhaar? Show/Hide

To open e-Aadhaar, you will require 'Adobe Reader'. If you do not currently have it installed, you can download it from the following link: https://get.adobe.com/reader/

What is the password for e-Aadhaar? Show/Hide

To access e-Aadhaar, you need to use a password that consists of the first four letters of your name in capital letters, followed by the year of your birth (YYYY).

Example 1:

Name: SURESH KUMAR

Year of Birth: 1990

Password: SURE1990

Example 2:

Name: SAI KUMAR

Year of Birth: 1990

Password: SAIK1990

Example 3:

Name: P. KUMAR

Year of Birth: 1990

Password: P.KU1990

Example 4:

Name: RIA

Year of Birth: 1990

Password: RIA1990

mAadhaar FAQs

Does my profile on mAadhaar become inactive if I switch to a new phone with my registered mobile number? Show/Hide

Yes, if your Aadhaar profile is registered on one phone and you register the same profile on another phone, the profile on the first phone will automatically become inactive. Aadhaar can only be registered on one device at a time.

Which iOS version is compatible with the mAadhaar app? Show/Hide

The mAadhaar app for iPhone is compatible with iOS 10.0 and above.

How can I set up the m-Aadhaar app on my phone (Android & iOS)? Show/Hide

The mAadhaar app is available for both Android and iPhone users in India. Follow the steps below to install the app:

What are the features and benefits of the M-Aadhaar application? Show/Hide

The mAadhaar app offers more than just an Aadhaar card in your wallet. With the mAadhaar app, you can enjoy the following benefits:

- Download or retrieve a lost or forgotten Aadhaar

- View or show your Aadhaar in offline mode, especially when you need to present your ID proof

- Update your address in Aadhaar with or without document proof

- Store and manage Aadhaar details of your family members (up to 5 members) on one phone

- Share paperless eKYC or QR code with service providers

- Secure your Aadhaar by locking it or locking your biometrics

- Generate or retrieve a Virtual ID (VID) to use instead of your Aadhaar for services (if you have locked your Aadhaar or do not wish to share it)

- Use Aadhaar SMS services in offline mode

- Check the status of your Aadhaar service requests through the app

- Assist others who do not own a smartphone in accessing Aadhaar services through common services

- View your update history and authentication records

- Book appointments to visit an Aadhaar Seva Kendra

- Sync your Aadhaar profile data after successfully completing an update request

- Use time-based one-time passwords instead of SMS-based OTPs for Aadhaar online services on the UIDAI website

- Locate the nearest Aadhaar enrolment centre (EC)

- The More section in the app provides information about the mAadhaar app, contact details, usage guidelines, terms and conditions, and other essential information. It also includes helpful FAQs and a link to a chatbot, as well as important document download links for Aadhaar enrolment or update/correction forms.

Additionally, residents can request an Aadhaar PVC card using their Aadhaar number, virtual ID, or enrolment ID by paying a nominal fee of Rs. 50. The Aadhaar PVC card will be delivered by Speed Post to the registered address in the Aadhaar database. The mAadhaar app requires internet connectivity, but QR code scanning through mAadhaar works both online and offline.

Is it necessary to have a registered mobile number in order to use the m-Aadhaar app? Open or Close.

No, it is not necessary. Anyone in India who has a smartphone can download and use the mAadhaar app.

If a resident does not have a registered mobile number linked to their Aadhaar, they will only be able to access a limited number of services, such as ordering an Aadhaar reprint, locating an enrollment center, verifying Aadhaar, and scanning QR codes.

However, having a registered mobile number is mandatory to access all other Aadhaar services and Aadhaar profile services listed under My Aadhaar. A resident can register their profile in the app on any smartphone, but the OTP (one-time password) will only be sent to their registered mobile number.

How can one avoid having to enter their password repeatedly when opening the app? Open or Close.

To prioritize the security and privacy of Aadhaar holders, the app does not offer a save password feature. Therefore, the user will need to enter their password each time they wish to access their profile or My Aadhaar.

How can a resident create a profile on the m-Aadhaar app? Open or Close.

Only individuals who have an Aadhaar linked to a registered mobile number can create an Aadhaar profile in the mAadhaar app. They can register their profile on any smartphone, but the OTP will only be sent to their registered mobile number. The following steps should be followed to register an Aadhaar profile:

- Launch the app.

- Tap on the Register Aadhaar tab located at the top of the main dashboard.

- Create a 4-digit PIN or password (remember this, as it will be required to access the profile).

- Provide a valid Aadhaar number and enter the valid captcha.

- Enter the valid OTP and submit it.

- The profile will be successfully registered.

- The registered tab will now display the registered Aadhaar name.

- Tap on the My Aadhaar tab in the bottom menu.

- Enter the 4-digit PIN or password.

- The My Aadhaar dashboard will appear.

How can a resident view their profile? Open or Close.

To view the profile, simply tap on the profile summary located at the top of the main dashboard (profile image, name, and Aadhaar number on the cyan tab). The following steps can be followed to access the Aadhaar profile:

- Launch the app.

- Tap on the Aadhaar Profile tab at the bottom of the main dashboard.

- Enter the 4-digit PIN or password (created during the profile registration process).

- The front side of the Aadhaar card will appear. Swipe left to view the back side.

- To view other added profiles, continue swiping left.

Note: To access the Aadhaar Profile page and its services, tap on the My Aadhaar tab at the bottom of the dashboard screen.

Is there a process to update Aadhaar details through the m-Aadhaar app, such as date of birth, mobile number, and address? Open or Close.

No, the mAadhaar app currently does not provide the facility to update demographic details like name, date of birth, and mobile number. Only the address can be updated using the document facility. However, future versions may include the option to update demographic information.

Is there any difference in the specifications and/or functionality of the m-Aadhaar app between iOS and Android devices? Open or Close.

No, the mAadhaar app offers the same services to both iOS and Android device users. The functionality and user experience are the same regardless of the device used.

Is it necessary to have a registered mobile number in order to use the m-Aadhaar app? Open or Close.

No, anyone in India with a smartphone can download and use the mAadhaar app.

Residents who do not have a registered mobile number linked to their Aadhaar will only be able to access a limited number of services, such as locating an enrollment center, verifying their Aadhaar, and scanning QR codes.

However, having a registered mobile number is mandatory to access all other Aadhaar services and the Aadhaar Profile services listed under My Aadhaar. To register their profile, residents can use any smartphone app. However, the one-time password (OTP) will only be sent to their registered mobile number.

The mAadhaar app can be used anywhere in India, at any time. It offers more functionality than simply carrying around an Aadhaar card in your wallet. On one hand, the mAadhaar profile is accepted as a valid form of identification by airports and railways. On the other hand, residents can use the app's features to share their electronic Know Your Customer (eKYC) information or QR code with service providers who require Aadhaar verification before offering their services.

To share the Aadhaar Paperless Offline e-KYC document with a service provider, residents can provide the XML ZIP file along with the Share Code at a time convenient to both parties.

Any Aadhaar number holder who wishes to establish their identity to a service provider (OVSE) using a digitally signed XML file downloaded from the UIDAI website can use this Aadhaar Paperless Offline e-KYC service. The service provider must have the necessary provisions to verify the offline e-KYC.

The process for service providers to use Aadhaar Offline e-KYC Verification is as follows:

- Once the service provider receives the ZIP file, they will extract the XML file using the password (share code) provided by the resident.

- The XML file will contain demographic details such as name, date of birth, gender, and address. The photo is in a base 64 encoded format that can be easily rendered using any utility or plain HTML page. The email address and mobile number are hashed for security purposes.

- The service provider must collect the resident's email address and mobile number and perform the following operations to validate the hash:

Mobile Number:

The hashing logic is as follows: Sha256(Sha256(Mobile ShareCode)) multiplied by the number of times of the last digit of the Aadhaar Number.

Example:

Mobile Number: 9800000002

Aadhaar Number: 123412341234

Share Code: Abc@123

Hashed Result: Sha256(Sha256(9800000002 Abc@123)) multiplied by 4

In case the Aadhaar Number ends with zero or one (123412341230/1), it will be hashed only once: Sha256(Sha256(9800000002 Abc@123)) multiplied by 1

Email Address:

The hashing logic is a simple SHA256 hash of the email without any additional salt.

- The entire XML file is digitally signed, and the service provider can validate the XML file using the signature and the public key provided on the UIDAI website. (Public key link: https://uidai.gov.in/images/uidai_offline_publickey_26022019.cer).

Can the Service Provider Share the Offline Paperless eKYC Document with Other Entities?

The Service Provider is strictly prohibited from sharing, publishing, or displaying either the XML or Share Code or their contents with any other entities. Failure to comply with these actions will result in legal consequences under the Aadhaar Act, 2016 (as amended) and relevant regulations.

How to Generate Offline Aadhaar XML?

The process of generating the Aadhaar Offline e-KYC is outlined below:

• Visit the URL https://myaadhaar.uidai.gov.in/offline-ekyc
• Enter your 'Aadhaar Number' or 'VID' and the provided 'Security Code' on the screen
• Click on 'Send OTP' to receive the OTP on your registered Mobile Number or m-Aadhaar mobile Application
• Enter the received OTP
• Create a Share Code, which will serve as the password for the ZIP file
• Click on 'Download' to obtain the Zip file containing the digitally signed XML

The digitally signed XML will be downloaded to the device where the above steps were performed. The Offline Aadhaar XML can also be downloaded from the mAadhaar app.

How is the Aadhaar Offline Paperless eKYC Document Different from Other Offline Identification Documents?

Identity verification can be achieved by submitting documents like PAN card, Passport, etc. to the service provider. However, these documents can still be forged and faked, making it difficult to verify their authenticity offline. The document verifier lacks the technological means to authenticate the document or its information, and must solely rely on trust.

In contrast, the XML file generated through Aadhaar Paperless Offline e-KYC is a digitally signed document using UIDAI digital signature. This allows the service provider to verify the demographic contents of the file and certify its authenticity during offline verification.

What is Aadhaar Paperless Offline e-KYC?

Aadhaar Paperless Offline e-KYC is a secure and shareable document that can be used by any Aadhaar number holder for offline identification verification.

To utilize this feature, a resident must generate their digitally signed Offline XML by accessing the UIDAI website. The generated Offline XML includes Name, Address, Photo, Gender, DOB, hash of registered Mobile Number, hash of registered Email Address, and a reference ID consisting of the last 4 digits of the Aadhaar Number followed by a time stamp. The document provides offline Aadhaar verification to service providers or Offline Verification Seeking Entities (OVSE) without the need to collect or store the Aadhaar number.