Aadhaar Fingerprint Cloning Scam
Fraudsters use leaked fingerprints and Aadhaar numbers to withdraw money through Aadhaar-enabled payments. Learn how to lock your biometrics.
Some bank withdrawals can be authorised by an Aadhaar number and a fingerprint at a micro-ATM, with no card or OTP. Fraudsters collect fingerprints from registry documents, rental papers and property records, then clone them onto a thin material. They pair this with your Aadhaar number to withdraw money. Victims often see only a sudden debit message with no OTP at all, which is why this scam surprises even careful people.
How the scam works
The set-up begins with data. Fingerprint images and Aadhaar numbers are scraped from old registration records, rental agreements or leaked databases. Agents sometimes keep copies of the prints they collected for legitimate work. A scammer assembles your Aadhaar number, linked bank and a usable fingerprint image. They do not need to speak to you, which is what makes it hard to notice.
The pressure part is often hidden. The fraudster uses a cloned fingerprint at a micro-ATM or a banking correspondent's device and withdraws small amounts several times. Small amounts avoid alarms. If they do contact you, it is a call claiming to be from a bank about a failed Aadhaar verification, trying to get your Aadhaar number and OTP to complete the job.
The payoff comes as repeated withdrawals from the account linked to your Aadhaar, often before the victim reads the alert messages. The money goes through a local agent and is withdrawn as cash, which makes tracing harder. The loss may only be noticed when a salary or pension balance looks short. Prompt reporting matters because the bank can start dispute steps only after you tell them.
An example of what you may see
Example call (invented): 'Sir, this is verification desk. Your Aadhaar biometric did not match during a transaction. To stop the account from closing, tell me your Aadhaar number and the code sent to your phone.' The caller invents a mismatch, adds a closing threat and asks for the code. Real banks never ask for your Aadhaar number and OTP on an unexpected call. The safe response is to hang up and check your account through your bank's official app.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A debit message arrives for a withdrawal you did not make.
- A caller mentions biometric mismatch and asks for your Aadhaar number.
- You gave fingerprints to an unknown agent for a service.
- Small repeated withdrawals appear without any OTP.
- Someone asks you to place your finger on a device you do not know.
- A caller says your biometrics will be blocked unless you act today.
What to do right now
- Lock your Aadhaar biometrics through the official UIDAI app or website.
- Check the last few weeks of your bank statement for small cash debits.
- Turn on SMS alerts for every transaction in your bank app.
- Ask your bank whether Aadhaar-enabled payments can be disabled on your account.
- Never give fingerprints to people at street camps or unknown agents.
If you already paid or shared a code
- Call 1930 right away and give the transaction time and amount.
- Contact your bank on the number printed on your passbook and raise a dispute in writing.
- File a complaint on cybercrime.gov.in and keep the acknowledgement.
- Lock biometrics on the official UIDAI service so it cannot happen again.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio Sentinel cannot lock your Aadhaar biometrics. That is done on the official UIDAI service. What it can do is help you with the call and text side of this scam: the scam check reads a message you paste and points out fake authority and requests for identity numbers. The Money Shield checklist reminds you of questions before you share anything. It does not watch your bank account or recover money.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Can money leave my account without an OTP?
Some Aadhaar-enabled payment methods use your Aadhaar number and fingerprint instead of an OTP. That is why locking your biometrics on the official service and enabling debit alerts are useful steps for many account holders.
How do fraudsters get my fingerprint?
From records where prints were captured and stored, such as property or rental paperwork, and from leaked databases. Only give fingerprints to officials you can verify at official offices, not to roving agents. Prefer official offices and avoid camps that collect prints.
Does locking biometrics block my own use?
A lock stops biometric authentication until you unlock it, and you can unlock it temporarily when you need it for a genuine service. Use only the official UIDAI app or website for this. Keep the app installed from the official store.