PAN Card Misuse: How to Check and Protect Yourself

A PAN card doesn't look like much — ten characters, a name, a photo. But because every loan, every bank account, every large financial transaction in India runs through it, a misused PAN can open doors a stolen password never could. Fraudsters have taken notice: reports in 2025 pointed to a sharp rise in PAN-linked fraud, much of it tied to fake loan applications and shell company registrations that victims only discover months later.

How PAN misuse actually happens

Most PAN fraud doesn't start with a dramatic hack — it starts with routine oversharing. A PAN photocopy handed to a broker for a KYC form, uploaded to an unverified "instant loan" app, or left on a public job or matrimonial listing can end up circulating far beyond its original purpose. From there, the common patterns are:

• Loan and credit card fraud — a fraudster uses your PAN to apply for a loan or credit card, often through a lender with weaker verification, and the debt shows up under your name.
• Shell company registration — your PAN is listed as a director or partner in a company you've never heard of, sometimes used to launder money or file fraudulent tax returns.
• Phishing disguised as PAN "updates" — messages claiming your PAN needs re-verification or linking to Aadhaar, designed to harvest your PAN, date of birth, and OTP in one step.
• Data breaches at third parties — PAN details stored by an app, broker, or financial platform get exposed when that company's own security fails, regardless of anything you did.

The clearest way to check for misuse

You don't need to guess. The most direct signal of PAN misuse is your own credit report: any loan, credit card, or credit inquiry made using your PAN shows up there, whether you applied for it or not. Pull your credit report from TransUnion CIBIL, Experian, Equifax, or CRIF High Mark (most offer one free check per year, and several finance apps offer more frequent free pulls) and look specifically for:

• Loans or credit cards you never applied for
• Hard credit inquiries from lenders you don't recognize
• Any account listed with an address, employer, or phone number that isn't yours

It's also worth checking the Income Tax Department's e-filing portal for any income, TDS, or company-directorship records linked to your PAN that you don't recognize — a legitimate and free way to spot the shell-company variant of this fraud.

What to do if you find something

If a loan or account shows up that isn't yours, the sequence that actually helps is: (1) contact the lender or bank directly and flag it as fraudulent, in writing; (2) raise a dispute with the credit bureau that's showing the incorrect entry — this triggers a formal investigation and can get the entry corrected or removed; (3) file a complaint on India's National Cybercrime Reporting Portal, since PAN misuse for financial fraud is a cognizable offence; and (4) if you suspect broader identity misuse beyond just this one loan, treat it as a signal to check what else of yours might be circulating, not just this one incident.

Reducing your exposure going forward

• Share your PAN only through official channels (a bank's own app or branch, not a third-party aggregator or unknown lending app).
• Avoid uploading PAN photos to social media, matrimonial profiles, or classifieds — even briefly, even in a private group.
• Set up SMS/email alerts with your bank and credit bureau for any new credit inquiry — this is often the fastest way to catch misuse before it snowballs.
• If you've shared your PAN with a broker, agent, or third party for a one-time transaction, ask what happens to that copy afterward.

A PAN is just one piece of a much wider financial identity, and checking it in isolation only tells part of the story — your phone number and email are usually leaking in parallel through separate channels. Scan My Shadow checks your phone number and email across 1,500+ sources so you can see the fuller picture, not just the PAN-shaped slice of it.

Related Reading

• Can Someone Check Your CIBIL Score Without Your Permission? — the credit-side view of the same risk.
• Identity Theft in India: Warning Signs and What to Do Next — the broader pattern PAN misuse fits into.
• How to File a Cybercrime Complaint in India — the exact filing process if you find fraud.
• You Shared Your Aadhaar or PAN With a Scammer — What to Do Now — if this happened through a scam specifically.
• Aadhaar Privacy in India: What's Actually at Risk — the equivalent risk on your other core ID.