Aadhaar is widely used in India for identity verification, opening bank accounts, completing KYC formalities, obtaining mobile connections and linking PAN. However, many people remain concerned about whether sharing their Aadhaar number could expose their personal or financial information.
The Unique Identification Authority of India (UIDAI) has addressed several common concerns through its Aadhaar Mythbusters initiative. The explanations cover data privacy, banking security, biometric protection and the information collected during Aadhaar authentication.
Does UIDAI Have Access to Your Personal and Financial Information?
According to UIDAI, its database contains information provided during Aadhaar enrolment or updates. This includes basic demographic details, such as a person’s name, gender and date of birth, along with biometric information, including fingerprints, iris scans and an enrolment photograph. Providing a mobile number or email address is optional.
UIDAI states that it does not hold information about an individual’s bank accounts, shares, mutual funds, property, health records, insurance policies, family details, caste, religion or educational qualifications.
Section 32(3) of the Aadhaar Act, 2016, also prohibits UIDAI from collecting, retaining or maintaining information about the purpose for which a person’s identity is authenticated.
What Happens When You Link Aadhaar to a Bank Account?
When Aadhaar is used to verify identity with a bank, broker, mutual fund company or mobile service provider, the requesting organisation sends the Aadhaar number and the necessary authentication information to UIDAI. Depending on the method used, this may include encrypted biometric data, an OTP or demographic details.
For a standard authentication request, UIDAI generally responds with a “Yes” or “No” indicating whether the identity verification was successful. If an organisation requests e-KYC and the process is successful, UIDAI can share basic KYC information, such as the person’s name, address and photograph, with that organisation.
However, UIDAI says it does not receive bank account details, demat account information, investment records or insurance details through this process.
Can Someone Withdraw Money Using Only Your Aadhaar Number?
UIDAI clarifies that knowing someone’s Aadhaar number alone is not enough to access their bank account or withdraw money. The number by itself does not provide access to banking services or other protected accounts.
Nevertheless, Aadhaar holders should continue to protect their financial credentials. Never disclose your bank PIN, OTP or other confidential authentication details to an unknown person. Keeping these credentials private is an important step in preventing unauthorised transactions.
Can Banks Store Your Aadhaar Fingerprints? Is the Database Secure?
According to UIDAI, banks, mobile service providers and other organisations requesting Aadhaar authentication are not permitted to retain copies of fingerprints collected during the authentication process.
When fingerprint verification is used, biometric information is encrypted and transmitted to UIDAI for authentication. Regulation 17(1)(a) of the Aadhaar (Authentication) Regulations, 2016, prohibits requesting entities from retaining copies of these fingerprints.
UIDAI also states that Aadhaar information is securely maintained in its Central Identities Data Repository (CIDR). The authority says the CIDR database has never been breached during its existence and that it uses security technologies that are regularly upgraded to address emerging threats.
Aadhaar holders should still exercise caution when sharing identity documents and using online services. Understanding how authentication works and protecting confidential credentials can help reduce the risk of misuse.
Disclaimer: This article is intended for general informational purposes only and summarises information attributed to UIDAI. Readers should consult the official UIDAI website and applicable regulations for the latest guidance on Aadhaar security, privacy and authentication. This article should not be considered legal or financial advice.