Documents & Signatures

Is This e-Aadhaar Real? Aadhaar App QR vs the PDF Signature Check

Checking an Aadhaar someone gave you: when to verify the PDF's digital signature, when to scan the Secure QR, and when to ask for a live QR from the new Aadhaar app.

myutils.me7 min read

A phone scanning a QR code on a card next to a document with a seal, with the words “e-Aadhaar: QR or signature”

A tenant, a new hire or a buyer gives you their Aadhaar. It might arrive as a PDF on WhatsApp, a printout, or a screen on their phone. Each form has a different check, and using the wrong one tells you nothing: a signature check can't be run on paper, and looking closely at a printout can't catch a good edit.

UIDAI builds two independent proofs into Aadhaar. The e-Aadhaar PDF carries UIDAI's digital signature over the whole file. The Secure QR code, on the e-Aadhaar and on printed Aadhaar, carries the holder's details and photo signed by UIDAI. UIDAI's new Aadhaar app adds a third: a QR the holder shares live from their phone.

Which check fits what you were given

You were givenUse this checkWhat you need
The e-Aadhaar PDF filePDF digital signature, then the QRThe file and its password
A printout or photocopy of e-AadhaarScan the Secure QRA phone with UIDAI's QR scanning app
A screenshot or photoScan the QR if it is sharp, otherwise ask for moreAs above
The holder in person, with the Aadhaar appA QR shared live from the holder's appYour phone with the Aadhaar app

Check 1: the PDF's digital signature

An e-Aadhaar downloaded from UIDAI is signed by UIDAI. If anyone changes the name, date of birth, address or photo and saves the file, the signature no longer matches.

  1. Ask for the original PDF, not a screenshot. Forwarding over WhatsApp or email doesn't change it.
  2. Open the e-Aadhaar verifier and select the file. The holder will need to give you the password or type it themselves; the format is in our e-Aadhaar signature guide.
  3. Read the result. Signature is valid means the file is exactly as UIDAI signed it and the certificate leads to an India CCA root. Signature is not valid means the file was changed after signing. The file is checked in your browser and isn't uploaded.

If your PDF reader shows a yellow question mark instead, that isn't a fake; the linked guide explains why. What this check can't do is tell you the person in front of you is the person in the file. For that, compare the photo.

Check 2: the Secure QR code on the e-Aadhaar or a printout

The large QR code on e-Aadhaar and on Aadhaar letters is UIDAI's Secure QR. It holds the holder's demographic details and photo, signed by UIDAI. A scanner that checks UIDAI's signature shows you what UIDAI put in the code, regardless of what is printed next to it.

  1. Install UIDAI's own QR scanning app. UIDAI publishes an Aadhaar QR Scanner app, and the new Aadhaar app also offers QR code verification. Download either only from UIDAI's links on uidai.gov.in.
  2. Scan the QR on the printout or on the PDF shown on a screen.
  3. Compare what the app shows with the card: name, date of birth, gender, address and photo.
  4. Compare the photo in the app with the person.

This is the best check for paper. A forger can change printed text in minutes, but can't produce a QR that passes UIDAI's signature with different details. If the QR won't scan, or the app reports a problem with it, treat the card as unverified and ask for the PDF or a live share.

Check 3: a live QR from the new Aadhaar app

UIDAI's new Aadhaar app lets the holder share their Aadhaar as a verifiable credential and choose which details to include, such as name and photo without the address. The holder secures the app with face authentication at registration and a PIN. UIDAI's FAQs list selective sharing of the Aadhaar verifiable credential and QR code verification among the app's services.

In practice the holder opens the app, chooses what to share and shows a QR on their screen, and you scan it with your own Aadhaar app. Screens and menu names in the app change between versions, so follow the app's own prompts.

The advantage is freshness. A PDF or printout could be months old and could belong to someone else. A live share comes from the holder's own app, registered with their face, at the moment you check. UIDAI's offline verification framework is built on this idea: the verifier checks UIDAI's signature on what the holder shares, without contacting UIDAI's central database.

How the three checks compare

QuestionPDF signatureSecure QR on the documentLive QR from the app
Was the document changed after UIDAI issued it?Yes, catches any editCatches edits to the details in the codeNot applicable
Works on a printoutNoYesNot applicable
Shows UIDAI's photo of the holderShows the PDF's photoYesYes, if the holder shares it
Needs the holder presentNoNoYes
Proves the holder controls this Aadhaar nowNoNoClosest of the three

A worked example. Ravi rents his flat to a tenant who sends an e-Aadhaar PDF. Ravi's PDF reader shows a yellow question mark, so he runs it through the e-Aadhaar verifier: signature valid. He then scans the QR in the PDF with UIDAI's app and the photo matches the PDF. When the tenant comes to sign the agreement, Ravi compares the photo with the person. Had the tenant instead sent a printout, the QR scan and the face comparison would have been the whole check.

Red flags

  • The file opens without a password, when e-Aadhaar PDFs from UIDAI are password-protected. A file without one has been re-saved at some point; check the signature.
  • The QR doesn't scan in UIDAI's app, while the rest of the page is crisp.
  • The QR shows different details or a different photo from the printed ones.
  • A "verified" stamp, tick or "signature valid" mark printed on paper. A mark on paper, including the one on our tool's print-ready copy, is only ink. On paper, scan the QR.
  • The holder won't share the PDF or show a QR, only a cropped photo.

Frequently asked questions

Is a printout of e-Aadhaar valid?

UIDAI treats e-Aadhaar as equally valid as the physical Aadhaar letter. Whether a particular office accepts a printout is its own decision, and scanning the QR is how you check one.

Can I verify an Aadhaar number online without the card?

UIDAI's site has a service to check whether an Aadhaar number exists, which shows partial details only. It doesn't confirm the person's name and photo, so the QR or signature checks are stronger.

Does a masked Aadhaar pass these checks?

Yes. A masked e-Aadhaar shows only the last four digits of the number, and it is signed and carries a QR like the full version.

Do I need internet to scan the QR?

The QR contains the signed data itself, so the check doesn't depend on looking anything up at UIDAI. Installing the app and keeping it updated needs internet.

Is an AI-made Aadhaar card caught by these checks?

Yes, if it is checked properly. An AI tool can draw a realistic card, but it can't produce UIDAI's signature on a PDF or in a QR code. AI-made fake Aadhaar and PAN cards covers this.

Sources

Topics

  • e-Aadhaar
  • Aadhaar App
  • Secure QR Code
  • Offline Verification
  • PDF Signature

myutils.me

Written by the team behind myutils.me, a free, independent app that brings ITR status, refunds and AIS/TIS for each PAN into one dashboard. Check anything important against the Income Tax portal before you act on it.

All guides