{"id":187629,"date":"2022-06-01T21:04:32","date_gmt":"2022-06-01T15:34:32","guid":{"rendered":"https:\/\/blog.forumias.com\/?p=187629"},"modified":"2022-06-01T21:04:32","modified_gmt":"2022-06-01T15:34:32","slug":"why-misuse-of-aadhaar-information-is-a-real-danger","status":"publish","type":"post","link":"https:\/\/forumias.com\/blog\/why-misuse-of-aadhaar-information-is-a-real-danger\/","title":{"rendered":"Why Misuse Of Aadhaar Information Is A Real Danger"},"content":{"rendered":"\n

Context<\/strong>: In a bizarre reversal, the Union government withdrew a notification from a Unique Identification Authority of India (UIDAI) office cautioning people against sharing photocopies of their Aadhaar card, just two days after the advisory was issued, claiming that it would be \u201cmisinterpreted\u201d.<\/p>\n

The advisory had urged people to use masked Aadhaar.<\/p>\n

The masked Aadhaar facility has been in place since 2018 and this came about following a report by the Centre for Internet and Society that publicly available datasets<\/strong> had sensitive details such as full Aadhaar number details and also included bank account details of individuals.<\/p>\n

Why UIDAI was right to issue the advisory?<\/h5>\n

The dangers of providing the full Aadhaar number to several agencies are evident in the way these numbers have been used by fraudsters for criminal purposes<\/strong> such as identity theft, Know Your Customer (KYC)-related fraud among others in recent years, and which have been documented in news reports.<\/p>\n

The UIDAI has itself registered far more potential fraud cases<\/strong> related to the issue highlighted above in recent years compared to the past.<\/p>\n

Other scams that are of a higher order have also been revealed recently, related to biometrics theft<\/strong> that have allowed scamsters to steal welfare benefits at the expense of genuine beneficiaries.<\/p>\n

The Internet is full of leaked data<\/strong> and this poses a major threat to user privacy<\/strong>.<\/p>\n

How identity can be verified using one’s Aadhaar copy?<\/h5>\n

One way is to scan the QR code on one’s Aadhaar copy<\/strong> (through UIDAI\u2019s QR Code Reader app).<\/p>\n

By scanning the QR code, the entity (that wants to verify your identity) receives a document with one’s personal details and photo. The entity can then match the details on one’s Aadhaar copy with this digitally signed document.<\/p>\n

So, if someone morphs one’s Aadhaar copy, the fraud will be caught once the QR code is scanned<\/strong>, because details on the Aadhaar copy won\u2019t match the ones on the QR Code Reader app.<\/p>\n

Scanning the QR code tells the entity if the Aadhaar copy is genuine (or not). It won\u2019t however tell them if the person who submitted the Aadhaar copy is you. To check this, the entity must match<\/strong> the photo thrown up by the scanned Aadhaar QR code with your face \u2013 in person. Or, like banks and other RBI regulated entities, conduct video verification.<\/p>\n

Unfortunately, not all players follow this process. Often, service providers simply accept the Aadhaar copy as proof of identity without scanning the QR code<\/strong> on UIDAI\u2019s QR Code Reader app. They also don\u2019t verify through in-person, video or live selfie-based verification.<\/span><\/p>\n

If a service provider fails to conduct this diligence, a fraudster can use a stolen Aadhaar copy to impersonate someone<\/strong>. <\/span><\/p>\n

What happens if Aadhaar OTP or biometrics are also stolen?<\/b><\/span><\/h5>\n

Once a scammer has access to OTP or biometrics, it becomes easier to commit financial frauds<\/strong>. For instance<\/strong>: Telangana police\u2019s recently warned about frauds perpetrated using the Aadhaar-enabled Payment System (AePS). <\/span><\/p>\n

– AePS is a facility that lets one perform banking transactions like cash withdrawal and fund transfer. These transactions are done through a mini-ATM carried by a banking correspondent. For an AePS transaction, all you need is a person\u2019s Aadhaar number, bank name and fingerprints.<\/em> <\/span><\/p>\n

So, criminals can withdraw funds from a victim\u2019s bank account<\/strong> by stealing her Aadhaar number and biometrics. This type of AePS-related fraud recently happened in Haryana with criminals allegedly stealing victims\u2019 biometrics from a government website.<\/span><\/p>\n

A divided view on safety of Aadhaar<\/h5>\n

The UIDAI has been indecisive about the inherent dangers in the indiscriminate use of the Aadhaar number or the Aadhaar card by citizens. This is evident from its series of flip-flops on the issue<\/strong>, even before this latest withdrawal notice.<\/p>\n

There seems to be a contradiction of views within the authority<\/strong> on the issue of potential misuse of the Aadhaar number.<\/p>\n

–<\/strong> On the one hand, in statements advising caution and user discretion<\/strong> in revealing one\u2019s Aadhaar number, it is seeking to treat these as sensitive information just like the biometrics provided by citizens to the authority.<\/p>\n

–<\/strong> Yet, on the other, it has sought to universalise the open use of the Aadhaar<\/strong> as an identity document with missionary zeal and has downplayed the risks of doing so.<\/p>\n

Way forward<\/h5>\n

The UIDAI must popularise the use of the masked Aadhaar facility<\/strong> as a start and rethink ways to tighten the scrutiny over how Aadhaar numbers are issued and utilised.<\/p>\n

Law enforcement agencies must crack down on data leaks and websites carrying unmasked Aadhaar-related information.<\/p>\n

Further, to protect the public against misuse of Aadhaar data, a data protection law is critical<\/strong>.
\n<\/span><\/p>\n

Source<\/strong>: This post is based on the following articles<\/p>\n

– <\/span><\/b>“<\/span>Caution first: On the Aadhaar advisory<\/span><\/b>” published in <\/span>The Hindu<\/span><\/b> on <\/span>1st June 22<\/span><\/b>.<\/span><\/p>\n

–<\/span><\/b> “<\/span>Why Misuse Of Aadhaar Information Is A Real Danger<\/span><\/b>” published in <\/span>The Times of India<\/span><\/b> on<\/span> 31st May 22<\/span><\/b>.<\/span>\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Context: In a bizarre reversal, the Union government withdrew a notification from a Unique Identification Authority of India (UIDAI) office cautioning people against sharing photocopies of their Aadhaar card, just two days after the advisory was issued, claiming that it would be \u201cmisinterpreted\u201d. The advisory had urged people to use masked Aadhaar. The masked Aadhaar… Continue reading Why Misuse Of Aadhaar Information Is A Real Danger<\/span><\/a><\/p>\n","protected":false},"author":10328,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":""},"categories":[1230,9],"tags":[10498,10496],"class_list":["post-187629","post","type-post","status-publish","format-standard","hentry","category-9-pm-daily-articles","category-public","tag-the-hindu","tag-times-of-india","entry"],"jetpack_featured_media_url":"","views":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/posts\/187629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/users\/10328"}],"replies":[{"embeddable":true,"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/comments?post=187629"}],"version-history":[{"count":0,"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/posts\/187629\/revisions"}],"wp:attachment":[{"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/media?parent=187629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/categories?post=187629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forumias.com\/blog\/wp-json\/wp\/v2\/tags?post=187629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}