How Do You Verify an Aadhaar (Aadhar) and Spot a Fake One?

What do you have in front of you?

The right check depends on what you were given. Pick your case.

What does each check prove, and what doesn't it prove?

No single check does everything. Scroll sideways on a phone.

For the safest result, combine two checks: the status check for the number, and the QR scan for the photo and details.

How do you check whether an Aadhaar number is valid?

UIDAI's Check Aadhaar Status page is on myaadhaarbeta.uidai.gov.in. Its heading says it checks "if an Aadhaar number is active and truly belongs to the person you're verifying". The page shows whether the number is valid and active (not deactivated or omitted). It may also show the age band, gender, state and the last 4 digits of the registered mobile.

1. Open the Check Aadhaar Status page

   Use only UIDAI's own site. No login and no OTP are needed for this check.

2. Enter the number and the captcha

   Type the 12-digit Aadhaar number, then the captcha, and click Validate Aadhaar Number.

3. Read the result carefully

   See whether the number is valid and active. If the page shows the age band, gender, state or last 4 mobile digits, compare them with the card and the person.

   You'll know it worked when the page confirms the number is valid and active.

   A valid number is not proof of identity. Someone can know a real number that isn't theirs. Always check the QR too.

This page is different from Check Enrolment or Update Status, which tracks your own enrolment or update request. Use that page only for your own requests; see Update status & rejection fixes.

How do you scan the secure QR code on an Aadhaar?

Every check of a card or print should include the secure QR code. UIDAI says it can be read only with the Aadhaar App, the Aadhaar QR Scanner app or UIDAI's Windows QR reader, and it works offline. A normal camera or QR app can't show the real details.

The QR holds: the last 4 digits of the Aadhaar number, name, address, gender, date of birth, photo, and a masked mobile number and email.

• Compare the photo with the face of the person in front of you. That is the check a status page can't do.
• A PVC card has no hologram since 17 Oct 2025. A missing hologram is not a sign of a fake; the QR is what counts.
• More about the app: the new Aadhaar App.

How do you check an offline e-KYC XML file?

Offline e-KYC is a file the Aadhaar holder downloads from UIDAI and shares. It is digitally signed by UIDAI. It holds the name, address, photo, gender, date of birth, a hash (a scrambled code) of the mobile number and email, and a reference ID.

• Holders: get the file only from UIDAI's own offline e-KYC page, and share it only with someone you trust.
• Checkers: because the file is signed, any change to the details breaks the signature.

How do you check the digital signature on an e-Aadhaar PDF?

An e-Aadhaar PDF is password-protected and digitally signed by UIDAI. It is as valid as the physical card. The signature is issued by "(n)Code Solutions CA 2014". If someone changes even one detail in the file, the signature stops being valid.

1. Open the file in Adobe Reader

   Password example: SURESH KUMAR, born 1990 → SURE1990. Unsure of the password? Use our PDF password helper.

2. Validate UIDAI's signature

   Validate UIDAI's signature in Adobe Reader. Our download guide has the full validation steps.

   You'll know it worked when the signature shows as valid with a green tick.

3. Scan the QR too

   A valid signature proves the file is UIDAI's. The QR and the photo help you check that it belongs to the person in front of you.

Which copy to use where: e-Aadhaar vs PVC vs masked Aadhaar.

What should hotels, shops and offices do?

Instead of keeping photocopies, businesses can register as offline verification entities (OVSE) at ovse.uidai.gov.in and verify customers through the app. In December 2025, UIDAI was reported as saying that storing photocopies violates the Aadhaar Act, and hotels and similar businesses are expected to register. More than 100 entities had registered by April 2026, according to reports.

• Don't store photocopies or a customer's VID. UIDAI says agencies must not store the VID.
• Need OTP or fingerprint checks? That is Aadhaar authentication, which has its own rules. Private entities need MeitY approval under the 2025 rules. See OTP, face and biometric authentication.
• Checking a customer's PAN as well? That is a separate check; see our guide to verifying a PAN.

What are the red flags of a fake Aadhaar?

Fake e-Aadhaar copies, including AI-generated ones, have been reported in the news. A fake can look perfect, so check the data, not the design.

Not red flags: a PVC card without a hologram (none since 17 Oct 2025), and a masked e-Aadhaar that shows only the last 4 digits. Both are normal.

Using someone else's identity is impersonation under the Aadhaar Act, with a penalty of up to 3 years in jail. More warning signs: Aadhaar fraud and scams.

What goes wrong when verifying an Aadhaar, and how do you fix it?

If your own details are wrong or your Aadhaar is not active, an Aadhaar centre or UIDAI's Regional Office can help, depending on the reason. Aadhaar Seva Kendras usually open on Sundays too; check your centre's hours before you go.

Bottom line

Check the number on UIDAI's status page, then scan the secure QR and match the photo with the person. For a PDF, validate the signature. Don't trust a photocopy alone. For help, UIDAI's free helpline is 1947.