Aadhaar Fingerprint Cloning Scam through an app

How it looks through an app, the red flags and what to do.

A fake app can be installed from a link, from a file sent on chat or even from a lookalike listing. Once on your phone it can ask for powerful permissions. Aadhaar Fingerprint Cloning Scam is one of the ways this shows up: Fraudsters use leaked fingerprints and Aadhaar numbers to withdraw money through Aadhaar-enabled payments. Learn how to lock your biometrics.

What aadhaar fingerprint cloning scam looks like through an app

• A screen-sharing or remote-control app that a caller asks you to install.
• A loan app that asks for contacts and photos.
• A "KYC", "challan" or "bank rewards" app from a link.

The set-up begins with data. Fingerprint images and Aadhaar numbers are scraped from old registration records, rental agreements or leaked databases. Agents sometimes keep copies of the prints they collected for legitimate work. A scammer assembles your Aadhaar number, linked bank and a usable fingerprint image. They do not need to speak to you, which is what makes it hard to notice.

Red flags to check on the app

• A debit message arrives for a withdrawal you did not make.
• A caller mentions biometric mismatch and asks for your Aadhaar number.
• You gave fingerprints to an unknown agent for a service.
• Small repeated withdrawals appear without any OTP.
• It has few or odd reviews, or a name with spelling changes.
• It asks you to turn off Play Protect.

What to do

1. Lock your Aadhaar biometrics through the official UIDAI app or website.
2. Check the last few weeks of your bank statement for small cash debits.
3. Turn on SMS alerts for every transaction in your bank app.
4. Change the passwords of your bank and email from a clean device if the app had access.
5. Run a phone scan (Safeavio Sentinel lists risky apps and settings).
6. Call your bank, and call 1930 if money moved.

Report the fake app to the store it came from and, if money moved, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. Call 1930 right away and give the transaction time and amount.
2. Contact your bank on the number printed on your passbook and raise a dispute in writing.
3. File a complaint on cybercrime.gov.in and keep the acknowledgement.
4. Lock biometrics on the official UIDAI service so it cannot happen again.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio Sentinel cannot lock your Aadhaar biometrics. That is done on the official UIDAI service. What it can do is help you with the call and text side of this scam: the scam check reads a message you paste and points out fake authority and requests for identity numbers. The Money Shield checklist reminds you of questions before you share anything. It does not watch your bank account or recover money.

Full guide: Aadhaar Fingerprint Cloning Scam: how it works, signs and what to do. Other channels: phone call, social media.

Questions