In an alarming demonstration of how artificial intelligence (AI) can be exploited, it has emerged that AI tools, including OpenAI's ChatGPT, can be misused to generate photo-realistic images of Aadhaar and permanent account number (PAN) cards, the two most essential identification documents for most Indians. These AI-generated forgeries are so convincing that they could easily fool an untrained eye or even some basic verification systems.
This revelation has triggered concern among cybersecurity experts and digital rights advocates alike, especially given the importance of these documents in accessing banking, government subsidies, mobile connections and more. What is even more unsettling is how easy it is becoming for fraudsters to use AI to mimic official-looking IDs — and how hard it is for ordinary citizens to detect the fraud.
While fraudsters creating genuine-looking fake Aadhaar is definitely worrying, the problem is compounded by the lack of basic security and data protection in the entire system. In April 2022, the comptroller and auditor general (CAG), in a report, highlighted the generation of multiple Aadhaar numbers, saying, "All Aadhaar numbers were not paired with the documents relating to personal information of their holders, and even after nearly ten years, the UIDAI could not identify the exact extent of mismatch. Though with the introduction of inline scanning in July 2016, the personal information documents were stored in the central identities data repository (CIDR), the existence of unpaired biometric data from earlier period indicated deficient data management." (
Read: Aadhaar Database Continues To Have Faulty Biometrics, Unpaired Documents: CAG)
It suggests that officials of the UIDAI may be as clueless as ordinary people when identifying a genuine-looking fake Aadhaar. And yet, everybody from the retailer selling SIMs to banks and financial institutions demands an Aadhaar identity and trusts it implicitly. Most of them merely check if the photo on the ID paper matches the person sharing it. There is no other authentication or verification, although the original idea was that it would be verified by pinging the UIDAI central database. Only lenders make this effort.
It is pertinent to note that, in October 2024, the Supreme Court of India (SC) ruled that Aadhaar cannot be used as proof of date of birth (DoB) or proof of age and for determination of age in a motor accident claim and the school leaving certificate having a statutory recognition is valid and acceptable proof. (
Read: Aadhaar Is Not Suitable as Proof of Age or Date of Birth: Supreme Court). Even banks no longer consider Aadhaar as proof of residence unless corroborated by another official ID.
Now, with fraudsters and criminals using AI tools freely to create fake Aadhaar and PAN cards for anyone, the issue becomes quite severe and endangers the entire ID ecosystem in India.
Why Does This Matter?
Aadhaar and PAN cards are not just identity documents — they are digital keys to Indian citizens' lives. Aadhaar is linked to bank accounts, mobile numbers, tax filings and government welfare schemes. PAN cards are mandatory for financial transactions, tax payments, and property purchases.
If a fraudster can convincingly forge these documents, they can open bank accounts in someone else's name, conduct fraudulent financial transactions, or even gain access to government subsidies and digital services.
In a worst-case scenario, such forgery could lead to identity theft, blackmail, or financial loss. It also poses a significant national security risk if misused for laundering money, financing illegal activities, or bypassing sanctions.
AI Tools Capable of Generating Fake ID Cards
The latest developments in AI have improved image generation and text rendering to an unprecedented level. Tools like ChatGPT, especially when used in combination with third-party image-generation models such as DALL·E or Midjourney, are capable of creating realistic images from simple prompts.
With sufficient technical skill and creativity, a fraudster or cybercriminal can prompt an AI to generate a forged image of an Aadhaar card or PAN card by specifying attributes such as name, gender, date of birth, Aadhaar number and even inserting a photo of anyone, including but not limited to a celebrity or random individual.
In an experimental test, I was able to generate highly believable fake Aadhaar and PAN cards for prominent international figures like Donald Trump and Cristiano Ronaldo using AI-driven platforms. And remember, I only provided the names of Mr Trump and Mr Ronaldo. ChatGPT obtained the rest of the information on its own to create the IDs. The AI generated not only the layout and design of the cards but also realistic fonts, barcodes, and personal details, all in the correct government format.
While several AI tools like ChatGPT have content filters that are designed to prevent such misuse, these barriers are not foolproof — especially when external tools or model modifications are involved. Open-source AI tools, which do not carry the same restrictions as commercial platforms, make it even easier for bad actors to bypass ethical safeguards.
How Do AI Models Create Fake IDs?
The process is deceptively simple and does not require advanced hacking skills.
Here is a rough overview of how it typically works:
Prompt engineering: A user enters a prompt into an AI image-generation tool like 'Create an Aadhaar card for Cristiano Ronaldo with this photo and a random 12-digit number'.
Image generation: The AI creates an image based on existing Aadhaar card layouts, using learned patterns from millions of images online.
Editing and finishing: With basic photo editing software, users can clean up imperfections, insert QR codes, or adjust fonts to make the ID appear more official.
Sharing or using: The fake ID can now be used for scams, online verifications, or even as profile images on fake social media or job portals.
Some cybercriminals go a step further by using generative AI to spoof biometric data or voice patterns, combining fake ID cards with deepfake technology to trick high-end know-your-customer (KYC) verification processes (not much used in India, though).
Signs of a Fake Aadhaar or PAN Card
While AI-generated documents can be incredibly convincing, there are still some telltale signs that may help detect a fake:
Fonts and spacing: Inaccurate font style or size, misaligned text, or uneven spacing can indicate a fake.
QR code anomalies: Scanning the QR code on an Aadhaar card should open UIDAI's official verification page. If it redirects elsewhere or does not work, it is suspicious or fake.
Blurry or distorted photos: AI-generated faces or photos may have unnatural lighting, artefacts, or odd textures.
Incorrect format: PAN cards have a specific alphanumeric structure (e.g., ABCDE1234F). Random deviations or inconsistencies may signal fraud.
A missing or digitally altered UIDAI or income tax (I-T) department seal can be a red flag.
How to Verify Aadhaar and PAN Cards
Aadhaar verification: Visit the UIDAI website (
https://uidai.gov.in) and use the 'Verify Aadhaar Number' service. This confirms if the Aadhaar number is valid and active. However, if the fraudster is using a real Aadhaar number for a fake ID, then UIDAI may not be able to tell so. Remember, e-KYC authentication and yes or no answer are paid services offered by UIDAI to authentic organisations.
PAN verification: The I-T department offers a PAN verification service at
https://www.incometax.gov.in, allowing users to confirm details against a PAN number.
QR code scan: Use the mAadhaar app to scan QR codes on Aadhaar cards. Fake cards often have non-functional or doctored QR codes.
How You Can Protect Your ID
It is crucial for individuals to take steps to safeguard their personal identity documents and avoid becoming victims of fraud. Here are some practical measures:
Avoid sharing Aadhaar and PAN publicly: Do not upload copies of your IDs on social media or unsecured websites. Masked Aadhaar (where only the last 4 digits are visible) is safer for most verifications.
Enable Aadhaar lock: The UIDAI portal allows users to lock and unlock their Aadhaar number temporarily, adding an extra layer of security.
Regularly monitor bank accounts and mobile connections: Unauthorised activities such as SIM swaps or bank account openings should be caught early by keeping tabs on transactions and account changes. You can visit
https://tafcop.sancharsaathi.gov.in/telecomUser/ to check or know the number of mobile connections in your name from across the country. If you do not recognise the mobile number mentioned on the next page, you can report by clicking on 'Not My Number'.
Promptly report misuse: If you suspect identity theft or unauthorised use of your Aadhaaror PAN, immediately lodge a complaint with the UIDAI or the I-T department and report it to the police.
While the onus of security partly lies with users, the broader problem demands systemic reforms. AI tools are evolving faster than regulatory frameworks can keep up.
In the present circumstances, what the Indian government and global AI companies need to do is work together to build or create robust filters, digital watermarks, and awareness and adopt proactive monitoring and action.
AI platforms must strengthen restrictions to block prompts related to fake ID generation. All official identity documents need to carry invisible digital watermarks that AI cannot replicate. All citizens must be educated on spotting fake IDs and verifying documents through trusted portals.
Further, all government authorities and law enforcement agencies (LEAs) need to actively monitor forums, social media, and dark web platforms for the circulation of fake ID tools and services.
Remember, at the end of the day, AI is a powerful tool — but like all tools, it can be used for good or ill. While the technology behind models like ChatGPT is designed to assist, educate, and create responsibly, the misuse of generative AI to produce fake Aadhaar and PAN cards reveals the darker side of innovation.
By learning to verify, protect, and report, we can ensure that our identities remain our own — not just a string of digits that AI can mimic.
Stay Alert, Stay Safe!
