Last updated: November 2026. Official UIDAI services are available only on uidai.gov.in, myaadhaar.uidai.gov.in and UIDAI’s official apps. The UIDAI helpline number is 1947. Never use a “helpline” or “update” link sent to you on WhatsApp or SMS.
Aadhaar is linked to almost everything in your financial life — your bank accounts, PAN, mobile SIM, provident fund and many government benefits. That convenience has a downside: a careless photocopy, a leaked OTP or a cloned fingerprint can be enough for someone to misuse your identity.
The Unique Identification Authority of India (UIDAI) gives every Aadhaar holder several free tools to stay protected. Most people have never used them. This guide explains each one in simple steps, plus everyday habits that keep your Aadhaar safe.
Why Aadhaar safety matters
Your Aadhaar number on its own is not a password, and UIDAI says that knowing someone’s number is not enough to steal from them. The risk comes when the number is combined with something else:
- An OTP you are tricked into sharing, which can be used for e-KYC to open a bank account, loan or SIM in your name.
- Your fingerprint, copied from documents such as property registration papers, which fraudsters have used to withdraw cash through Aadhaar-enabled payment services (AePS) at micro-ATMs.
- A photocopy of your card that ends up being used to apply for a loan or a SIM card without your knowledge.
The tools below shut down each of these routes.
1. Use masked Aadhaar instead of the full card
A masked Aadhaar is an official e-Aadhaar PDF that shows only the last four digits of your number (for example, XXXX XXXX 1234). It is valid for most purposes where you simply need to prove your identity — hotel check-in, rental agreements, office records and so on.
How to download a masked Aadhaar
- Go to myaadhaar.uidai.gov.in and log in with your Aadhaar number and the OTP sent to your registered mobile.
- Select Download Aadhaar.
- Tick the option “Do you want a masked Aadhaar?” and download.
- The PDF is password-protected. The password is the first four letters of your name in capital letters followed by your year of birth (for example, RAHU1990).
Some services — such as opening a bank account or a government scheme that needs full KYC — still require the complete number. For everything else, share the masked version.
2. Generate a Virtual ID (VID)
A Virtual ID is a temporary, 16-digit number linked to your Aadhaar. You can use it in place of your Aadhaar number for online verification and e-KYC, so the service provider never sees your real number. You can create a new VID whenever you like, and the old one stops working.
- Online: log in to myaadhaar.uidai.gov.in and choose VID Generator.
- By SMS: from your registered mobile, send
GVIDfollowed by a space and the last four digits of your Aadhaar to 1947 (for example, GVID 1234). - App: use UIDAI’s official mobile app.
3. Lock your biometrics
This is the single most effective step against fingerprint-based AePS fraud. When your biometrics are locked, nobody can authenticate with your fingerprint, iris or face — not even you — until you unlock them.
How to lock or unlock biometrics
- Log in to myaadhaar.uidai.gov.in (or open UIDAI’s official app).
- Select Lock / Unlock Biometrics.
- Read the notice, tick the checkbox and confirm the lock.
When you need a fingerprint for something genuine — collecting a ration, a bank’s biometric KYC, a new SIM — you can unlock temporarily. The lock switches back on automatically after a short period.
Who should lock biometrics? Practically everyone, and especially elderly family members who rarely use fingerprint authentication but whose fingerprints may be on old property or bank papers. Lock their biometrics for them using their registered mobile number.
4. Check your Aadhaar authentication history
UIDAI keeps a record of every time your Aadhaar is used for authentication — when, by which type of method (OTP, fingerprint, face or demographic), and whether it succeeded. Checking it every few months is the easiest way to spot misuse early.
- Log in to myaadhaar.uidai.gov.in.
- Choose Authentication History.
- Select a date range and the type of authentication, and view the records.
If you see a fingerprint authentication you did not do, or an e-KYC on a date when you did not open any account, treat it as a red flag (see “What to do if you suspect misuse” below).
5. Keep your registered mobile number current
Every Aadhaar OTP goes to your registered mobile. If that number belongs to an old SIM you no longer use, you will not get alerts — and, worse, someone else may now have that number. Updating your mobile requires a visit to an Aadhaar Seva Kendra or enrolment centre. You can check which number is linked using Verify Email/Mobile Number on uidai.gov.in.
While you are at it, check how many SIM cards are registered in your name using the TAFCOP facility on the government’s Sanchar Saathi portal, and report any number you do not recognise.
Quick comparison: which tool protects against what?
| Tool | Protects against | Where |
|---|---|---|
| Masked Aadhaar | Misuse of photocopies and scans | myAadhaar → Download Aadhaar |
| Virtual ID (VID) | Your real number being stored by service providers | myAadhaar, SMS to 1947, official app |
| Biometric lock | Fingerprint cloning and AePS cash withdrawal | myAadhaar or official app |
| Authentication history | Undetected misuse | myAadhaar |
| Updated mobile number | Missing OTP alerts | Aadhaar Seva Kendra |
Everyday habits that keep Aadhaar safe
- Never share an Aadhaar OTP with anyone who calls you. UIDAI, banks and telecom companies will never ask for it over the phone.
- Write the purpose and date on photocopies — for example, “For XYZ Bank savings account only, 06/11/2026” — across the copy, without covering your photo.
- Do not post your Aadhaar on social media or in WhatsApp groups, even partly blurred.
- Prefer QR-code verification: the secure QR code on your e-Aadhaar can be verified by an offline scan without sharing your number at all.
- Delete Aadhaar PDFs from shared computers at cyber cafés and print shops, including the Downloads folder.
- Watch your bank SMS alerts. An AePS withdrawal shows up as a cash withdrawal you did not make.
What to do if you suspect Aadhaar misuse
- Lock your biometrics immediately using the steps above.
- Report to UIDAI by calling 1947, emailing help@uidai.gov.in, or using the grievance option on the myAadhaar portal.
- If money was lost, call 1930 or file a complaint at cybercrime.gov.in and inform your bank. Our guide on reporting UPI and banking fraud explains the full process and your rights under RBI rules.
- Check your credit report for loans or credit cards you did not apply for, and dispute any you find with the credit bureau.
Frequently asked questions
Can someone take money from my bank account with only my Aadhaar number?
Not with the number alone. A transaction also needs your fingerprint, an OTP or another authentication factor. That is why locking biometrics and never sharing OTPs are so important.
Is masked Aadhaar legally valid?
Yes. It is an official, digitally signed e-Aadhaar from UIDAI. It is accepted for identity verification by most organisations, though some KYC processes still need the full number.
Will locking biometrics stop my ration or pension?
Biometric authentication will fail while the lock is on. Simply unlock it temporarily before you visit, complete the authentication, and the lock will turn back on automatically.
Is there a fee for these services?
Downloading e-Aadhaar, generating a VID, locking biometrics and viewing authentication history are free online. Updating details at an Aadhaar centre may carry a small official fee.
Bottom line
Spend ten minutes today: download a masked Aadhaar, lock your biometrics, generate a VID and look at your authentication history. Then do the same for your parents. Combined with good phone security — see our smartphone security guide — these steps close most of the doors fraudsters use.
Note: UIDAI occasionally changes the menu names and steps on its portal and apps. If an option has moved, use the search or help section on uidai.gov.in. This article is for general information only; see our disclaimer.