Identity Theft in India: Warning Signs and What to Do Next

What identity theft actually looks like in practice

It rarely announces itself. Most cases surface indirectly — a collection call about a loan you never applied for, a credit report showing an account you don't recognize, a notice about a SIM card issued in your name that you never requested. The common thread is that someone used enough of your personal information (name, Aadhaar, PAN, address) to convincingly impersonate you to a bank, lender, or telecom provider.

Common warning signs

• Unexpected loan or credit card offers being declined — sometimes the first sign is being rejected for credit you'd normally qualify for, because an existing fraudulent account has already affected your credit profile.
• Unfamiliar entries on your credit report — accounts, cards, or loans you don't recognize.
• Collection calls for debts you never incurred.
• SIM or mobile connections issued in your name that you didn't request — check this periodically through your telecom operator or the government's connection-verification tools.
• Aadhaar authentication history showing activity you don't recognize — checkable directly through UIDAI's portal.

What to do the moment you suspect it

1. Pull your credit report immediately from one of the major Indian credit bureaus (CIBIL, Experian, Equifax, CRIF) to check for unfamiliar accounts — you're entitled to one free report annually from each.
2. Check your Aadhaar authentication history through UIDAI's portal, and lock your biometrics if you haven't already.
3. Report to the specific institution first — if a fraudulent loan or account is with a specific bank or lender, contact them directly to dispute and freeze it.
4. File a formal complaint through cybercrime.gov.in and, for identity-specific fraud, consider filing a police report (FIR) as well, since this creates the documented record often needed for dispute resolution with banks and credit bureaus.
5. Dispute incorrect entries with the credit bureau directly — each bureau has a formal dispute process for exactly this kind of fraudulent entry.

Why this takes longer to resolve than a simple fraud transaction

Unlike a single fraudulent UPI transaction, identity theft can involve multiple institutions simultaneously — a loan with one lender, a card with another, a SIM with a telecom provider — each requiring its own dispute process. This is part of why catching it early through regular credit report checks matters more here than in most other fraud categories; the longer it goes unnoticed, the more entangled the cleanup becomes.

Preventive habits that reduce your risk

• Check your credit report periodically, not just when something feels wrong — this is the earliest reliable warning system available to you.
• Lock your Aadhaar biometrics as a default state, unlocking only when genuinely needed.
• Be selective about where you share Aadhaar, PAN, and full ID details, since these are the core building blocks identity theft relies on.
• Monitor whether your core identifiers — phone number and email — are already circulating in breaches or broker listings, since these often serve as the connective thread attackers use to assemble a convincing enough profile for impersonation.

This is where Scan My Shadow fits in — checking your phone number and email across 1,500+ sources gives you visibility into exactly the kind of exposure that makes identity theft easier to pull off.

Two specific angles worth checking directly: PAN card misuse and unauthorized CIBIL checks — both common early signs of identity theft in India.

Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.