What to Do If Your PAN Card Is Misused?

What PAN scams have been reported?

PAN fraud usually takes one of two forms. Either someone tricks you into handing over details, or someone uses your PAN details without you knowing. The table lists only patterns flagged by official bodies or reported in the news.

The real PAN 2.0 project does not need you to apply again. The government's PAN 2.0 FAQ says existing valid PAN cards stay valid. Any message saying "your old PAN will stop, download PAN 2.0 here" is a red flag. PAN 2.0 explained →

How can you tell if your PAN is being misused?

Misuse can show up months later. Watch for these signs:

• Calls or messages about EMIs, overdue loans or credit cards you never applied for.
• A sudden drop in your credit score, or loan enquiries you don't recognise.
• Income, TDS (tax deducted at source) or big purchases in your AIS that aren't yours.
• A tax notice about income, deposits or property you know nothing about.
• A GST notice, or a GST registration in your name that you never made.
• OTPs you didn't ask for, or an email saying your e-Filing password was changed.

None of these proves fraud on its own. A bank error or a mixed-up PAN can look the same. Check calmly using the steps below.

How do you check if your PAN has been misused?

Do these three checks. All are free. Do them once a year, and at once if you see a warning sign.

1. Check your AIS and Form 26AS

   Log in at incometax.gov.in. Open the Annual Information Statement (AIS) from the dashboard menu. Pick the financial year. AIS lists salary, interest, TDS, share and property deals and other high-value items reported on your PAN.

   Look at the names of the payers and banks. A salary from a company you never worked for, or a bank you never used, is a warning sign. Form 26AS, on the TRACES site linked from e-Filing, now shows only TDS and TCS (tax collected at source). Downloaded AIS and Form 26AS PDFs are password-protected. The AIS PDF opens with your PAN in small letters plus your date of birth (DDMMYYYY). Our file unlock tool builds the password for you in your browser.

   You'll know it worked when you see each reported item with the source's name and amount.

   If you can't log in: use "Forgot Password" on the portal. Logging in with Aadhaar as user ID works only if PAN and Aadhaar are linked. If a password reset email arrives that you didn't ask for, someone may be trying to get in.

2. Get your credit report

   India has four credit bureaus: TransUnion CIBIL, Experian, Equifax and CRIF High Mark. RBI rules let you get one free full credit report each calendar year from each bureau, with your score. Request it on the bureau's own website. Lenders commonly use your PAN to match loans to you.

   Read the list of loans, cards and "enquiries". An enquiry is a lender checking your record after an application. One you didn't make can mean someone applied in your name.

   You'll know it worked when the report lists every loan and card you have, and nothing more.

   If the bureau can't find you: you may have no credit history yet. That is normal if you have never borrowed.

3. Search your PAN on the GST portal

   Go to gst.gov.in → Search Taxpayer → Search by PAN. At the time of writing, this search works without logging in. Enter your PAN and the captcha. The portal lists the GST registrations (GSTINs) on that PAN, with each one's state and status.

   You'll know it worked when you see "no records" or only the registrations you made yourself.

   If an unknown GSTIN appears: note its number, state and status, and take a screenshot. Then see GST steps below.

What should you do if you think your PAN was misused?

Act in this order. Skip the steps that don't fit your case. Keep a folder with screenshots, letters, complaint numbers and dates.

1. Stop, secure your accounts and save evidence

   Don't reply to the caller or message. Don't pay any "fee" to fix the problem. From a trusted device, change your e-Filing, email and net banking passwords. Take screenshots of messages, sender numbers, links and any loan or GST details.

   You'll know it worked when you can log in with your new passwords and nobody else can.

2. Report money loss on 1930 or cybercrime.gov.in

   Call 1930, the national cybercrime helpline, or file at cybercrime.gov.in. Give the date, amount, transaction ID and the account money went to. The government says this system lets frauds be reported quickly so that funds can be stopped. Then call your bank on the number printed on your card or passbook to block cards or net banking.

   You'll know it worked when you get a complaint or acknowledgement number. Write it down.

   If 1930 is busy: file online at cybercrime.gov.in straight away, then keep trying the call.

3. File a police complaint

   Give a written complaint at your local police station or cyber cell. Say that your PAN was misused, list what happened, and attach copies of your evidence. Ask for a stamped copy or the FIR (first information report) number. Lenders, credit bureaus and tax officers may ask for it.

   You'll know it worked when you hold a stamped copy or FIR number.

4. Dispute fake loans with the lender and credit bureau

   Write to the lender's grievance desk. Say you never applied for the loan or card, and ask them to close it and correct your credit record. Attach your police or cybercrime complaint. Also raise a dispute on the credit bureau's website.

   Under RBI's framework, a credit data complaint should be resolved by the lender and bureau together within 30 days of filing. After that, compensation of ₹100 a day of delay applies. If the lender doesn't reply within 30 days, or you're unhappy with its reply, complain to the RBI Ombudsman at cms.rbi.org.in within 90 days.

   You'll know it worked when a fresh credit report no longer shows the loan as yours.

   Don't pay a loan you didn't take just to stop the calls. Ask for the loan papers and the KYC documents used instead.

5. Correct wrong tax entries

   In AIS, open the item and choose a feedback option. "Information is denied" means you don't recognise it at all. "Information relates to other PAN/year" fits if it belongs to someone else. The portal sends an acknowledgement.

   If you got a notice, reply on the e-Filing portal before the due date. Also write to your Assessing Officer (AO), the tax officer in charge of your PAN. Attach your police complaint and proof. Find your AO →

   You'll know it worked when your AIS shows the feedback you gave.

   If the deadline is near: reply on time anyway and say the transaction is not yours. A tax professional can help with notices.

6. Report a fake GST registration

   Click the unknown GSTIN in the search result to see its details. These may show which state or central GST office is in charge. Write to that GST office. Say the registration was made on your PAN without your consent and ask them to cancel it. Attach your police complaint and ID proof.

   You'll know it worked when the GSTIN's status changes to cancelled in a later search.

How do you report a fake PAN message or website?

You can report even if you didn't fall for it. That helps others.

The Income Tax Department's phishing page says it does not ask for detailed personal information by email. It also says it does not email asking for PINs, passwords or similar access details. After reporting, delete the message. If your Aadhaar was used in the same fraud, see Aadhaar fraud and scams. For PAN agency numbers, see PAN customer care.

How can you share your PAN safely?

You often must give your PAN: for bank accounts, large deposits, property and investments. Where PAN is mandatory → These habits lower the risk:

• Write on every photocopy: the purpose, the name of who you gave it to, and the date. Sign across it, without covering the PAN or photo. A marked copy is harder to reuse.
• Give copies, never the original card, unless an official asks to see it.
• Don't post your PAN or e-PAN PDF on social media or in open WhatsApp groups.
• Share OTPs with no one. An OTP can approve a loan, an e-Sign or a password change in your name.
• Use only official sites for PAN work: incometax.gov.in, onlineservices.proteantech.in and pan.utiitsl.com. Type the address yourself; don't follow links in messages.
• Lost your card? Get a reprint or download the e-PAN. Reprint a lost PAN → If it was stolen with other documents, a police complaint helps later.
• Keep only one PAN. A second PAN is not allowed. Surrender a duplicate PAN →
• Shared your Aadhaar copy too? Lock your Aadhaar biometrics so nobody can use your fingerprints. How to lock Aadhaar biometrics →

What can go wrong, and how do you fix it?

Bottom line

Fake PAN messages are common, and your PAN number can be misused for loans or GST registrations. Check your AIS, credit report and GST search once a year. If money is lost, call 1930 first. For e-Filing help, call 1800 103 0025. For PAN card help, call Protean on 020-27218080.