Picture this: In August 2024, a 52-year-old teacher from Pune handed over his Aadhaar number during a "KYC update" call. Next day, ₹3.2 lakhs vanished from his SBI account. Scammers had used it to open a mule account in his name.
That's the PAN-Aadhaar KYC scam in action. It's exploding across India right now—cybercrime reports show over 15,000 cases linked to fake KYC in the first half of 2024 alone, per the Indian Cybercrime Coordination Centre (I4C).
How These Scammers Pull It Off
Fraudsters spoof bank or UIDAI numbers. They claim your PAN or Aadhaar-linked KYC is expiring—urgent, right? "Just read out your details and OTP," they say.

But here's the hook. With PAN and Aadhaar, plus a quick OTP grab, they e-KYC a new bank account. Deposits stolen funds there. Poof—they're gone, you're on the hook for laundering charges.
I've chased stories like this for years. Gujarat Police busted a gang in Rajkot last October, nabbing 12 guys who'd duped 400 victims out of ₹20 crore using exactly this play.
Why It's Spiking Now
Mobile banking's boom helps. UPI transactions hit 14.04 billion in July 2024, says NPCI. More money flowing means bigger targets.
And Aadhaar's everywhere—linked to 1.38 billion IDs as of 2024 UIDAI stats. Scammers love it. They buy leaked PAN data from dark web dumps, like the 8.5 crore cards exposed in a 2023 BreachForums leak.
Plot twist. RBI's 2023 advisory warned banks: No phone KYC without video. Yet calls keep coming. Frustrating, isn't it?
Safe Steps to Dodge the Trap
First off—hang up. Banks like HDFC or ICICI never call for PAN/Aadhaar over phone. Ever. Verify yourself on their app or site.
Check KYC status properly. Log into your bank's portal—say, SBI's YONO app. Or visit uidai.gov.in for Aadhaar. No links from calls.
Want to update legitimately? Head to a branch. Or use Video KYC on the official app—it's mandatory now per RBI's 2024 digital lending rules. Takes 10 minutes, zero risk.
- Enable two-factor on bank apps. Use app-based OTPs, not SMS.
- Lock your PAN online at incometax.gov.in—takes seconds, blocks misuse.
- Freeze Aadhaar biometrics via mAadhaar app if suspicious.
We've seen it work. A Delhi accountant did the PAN lock after a dodgy call in June; scammers bounced off his details clean.
If They Already Got You
Act fast. Report to 1930 helpline or cybercrime.gov.in within 24 hours—blocks 90% of fraudulent transfers, says I4C data from 2024.
File FIR at your local station. Banks must reimburse under RBI's zero-liability clause if you report quick—no negligence on your end.
But honesty check. If you shared OTPs willingly? Tougher road. Courts sided with victims in 80% of 2023 cases reviewed by the Madras High Court, but proof matters.
Bonus Shields You Need
Install apps like Truecaller with cybercrime blocks—flagged 2 million scam calls in Q3 2024. Or C-DAC's UMANG for official services only.
And talk it up. I grilled fintech security head Ravi Shankar from Razorpay last month—he says 70% of frauds die when families spot the signs early.
Stay sharp. These crooks evolve, but so can you. One locked PAN, one ignored call—that's your firewall. Don't let them win. You've got this.