Identity Theft in India: Warning Signs and What to Do Next
TL;DR: Identity theft in India usually looks less like a movie plot and more like a loan you never took out or a SIM card you never requested. Here's how to recognize it early and what recovery actually involves.
What identity theft actually looks like in practice
It rarely announces itself. Most cases surface indirectly — a collection call about a loan you never applied for, a credit report showing an account you don't recognize, a notice about a SIM card issued in your name that you never requested. The common thread is that someone used enough of your personal information (name, Aadhaar, PAN, address) to convincingly impersonate you to a bank, lender, or telecom provider.
Common warning signs
- Unexpected loan or credit card offers being declined — sometimes the first sign is being rejected for credit you'd normally qualify for, because an existing fraudulent account has already affected your credit profile.
- Unfamiliar entries on your credit report — accounts, cards, or loans you don't recognize.
- Collection calls for debts you never incurred.
- SIM or mobile connections issued in your name that you didn't request — check this periodically through your telecom operator or the government's connection-verification tools.
- Aadhaar authentication history showing activity you don't recognize — checkable directly through UIDAI's portal.
What to do the moment you suspect it
- Pull your credit report immediately from one of the major Indian credit bureaus (CIBIL, Experian, Equifax, CRIF) to check for unfamiliar accounts — you're entitled to one free report annually from each.
- Check your Aadhaar authentication history through UIDAI's portal, and lock your biometrics if you haven't already.
- Report to the specific institution first — if a fraudulent loan or account is with a specific bank or lender, contact them directly to dispute and freeze it.
- File a formal complaint through cybercrime.gov.in and, for identity-specific fraud, consider filing a police report (FIR) as well, since this creates the documented record often needed for dispute resolution with banks and credit bureaus.
- Dispute incorrect entries with the credit bureau directly — each bureau has a formal dispute process for exactly this kind of fraudulent entry.
Why this takes longer to resolve than a simple fraud transaction
Unlike a single fraudulent UPI transaction, identity theft can involve multiple institutions simultaneously — a loan with one lender, a card with another, a SIM with a telecom provider — each requiring its own dispute process. This is part of why catching it early through regular credit report checks matters more here than in most other fraud categories; the longer it goes unnoticed, the more entangled the cleanup becomes.
Preventive habits that reduce your risk
- Check your credit report periodically, not just when something feels wrong — this is the earliest reliable warning system available to you.
- Lock your Aadhaar biometrics as a default state, unlocking only when genuinely needed.
- Be selective about where you share Aadhaar, PAN, and full ID details, since these are the core building blocks identity theft relies on.
- Monitor whether your core identifiers — phone number and email — are already circulating in breaches or broker listings, since these often serve as the connective thread attackers use to assemble a convincing enough profile for impersonation.
This is where Scan My Shadow fits in — checking your phone number and email across 1,500+ sources gives you visibility into exactly the kind of exposure that makes identity theft easier to pull off.
Two specific angles worth checking directly: PAN card misuse and unauthorized CIBIL checks — both common early signs of identity theft in India.
To see what a stranger could already find about you: See what's visible about you.
Sources
- TransUnion CIBIL: Free CIBIL Score and Report
- Vikaspedia (Government of India): Sanchar Saathi portal
Related Reading
- SIM Swap Fraud: How It Works and How to Protect Your Number
- Investment or Trading App Scam Recovery
- Investment Scams Cost Australians $96M in 2026
FAQs
How is identity theft different from a data breach?
A data breach is exposure — your information being accessed or leaked. Identity theft is the active misuse of that exposed information to impersonate you for financial or other gain. A breach can lead to identity theft, but doesn't automatically mean it has occurred.
Am I liable for fraudulent loans taken in my name?
Generally not, once properly disputed and reported — but the burden is on you to prove the fraud and file the necessary reports promptly, which is why fast, documented action matters.
What are the different types of identity theft?
Financial identity theft (loans, cards opened in your name), account takeover (existing accounts accessed and misused), and document-linked fraud (Aadhaar or PAN misused for a new SIM or bank account) are the three most common types in India.
What's an example of identity theft?
A common example: someone uses a leaked PAN and address to apply for a personal loan in your name, and the first you hear of it is a collections call or a credit report entry for a loan you never took.
I think I'm a victim of identity theft — what do I do first?
File a report at cybercrime.gov.in or call 1930 immediately, dispute the specific fraudulent account or transaction with the bank or lender involved, and request a credit freeze or fraud alert with the credit bureaus while the dispute is investigated.
How often should I check my credit report to catch this early?
Checking at least once or twice a year is a reasonable baseline, and more frequently if you've recently experienced a breach notification or other signs of exposure.
Readers outside India should see identity theft protection and free alternatives, and the biggest data breaches includes the Aadhaar leak.
Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.
See if your email has already leaked
Check my email free →- Checks your email against known data breaches
- Shows which sites leaked it, and when
- Shows what leaked: passwords, phone, address
- Result on screen in about 30 seconds
- We don't store the email you check