What does “offline” mean here?
The term describes verification using the downloaded, signed information. It does not mean that obtaining the file requires no access to an official digital service. Nor does it mean that every later application can be completed without an internet connection.
UIDAI’s Paperless Offline e-KYC explanation describes a holder downloading the document and sharing it with an agency that verifies the information. This is different from an agency submitting a live Aadhaar authentication request for each identity check.
For a shop operator, the first distinction is therefore between helping someone understand a document and being authorised and equipped to perform a particular verification process.
What is an XML file?
XML is a structured electronic format that software can read. In this context, the important point is not the technical syntax but the signed identity information carried by the document.
UIDAI explains that its digital signature allows the receiving agency to verify authenticity and detect alteration. A readable name and photograph alone are not a substitute for checking that signature through the appropriate process.
Editing the file to correct an apparent spelling error is not an acceptable way to update the official identity information. If the underlying details need correction, the holder should follow UIDAI’s authorised update route.
What does the holder share?
The offline document contains the identity information provided by UIDAI for that purpose. UIDAI’s authentication and offline-verification regulations define the document and the information associated with it.
UIDAI’s explanatory page also describes protection using a phrase or share code supplied by the holder. The code and the file belong to that document-sharing interaction. They should not be confused with a UPI PIN, a bank password or a standing permission to reuse the person’s identity information.
Before sharing, the customer should understand who is receiving the information, why it is needed and what the authorised process requires. A retailer should not keep reusable customer files merely because downloading them was convenient.
Offline XML, online e-KYC and Secure QR
| Method or item | Main distinction |
|---|---|
| Offline XML | A signed electronic document shared for verification |
| Online Aadhaar authentication/e-KYC | An interaction through the authorised online authentication arrangement |
| Aadhaar Secure QR | Signed data carried in the Aadhaar QR representation |
| Ordinary scanned image | A visual copy that does not itself establish cryptographic verification |
The formats should not be substituted without checking the receiving service’s requirements. A PAN process that asks for its own online e-KYC step is not necessarily asking the customer to upload an offline XML file.
Our Instant e-PAN and agent-filed PAN comparison covers that separate application context.
An example of a file request
Illustrative example: A customer is told by a financial service to supply Aadhaar Offline e-KYC and asks a cyber café for help understanding the request.
The operator checks the institution’s actual instructions with the customer. The customer uses the official UIDAI service and controls the required authentication. The operator does not edit the resulting identity data or send the file to an unrelated address claiming to be support.
The receiving institution remains responsible for its verification and application process. A successful download is not a guarantee that the application will be accepted.
Questions about offline e-KYC
Is XML another Aadhaar number?
No. It is a document format carrying information for verification, not a new identity number.
Can any shop approve an application by opening the file?
No. Opening a file is different from verifying it and applying the receiving service’s requirements. A shop’s ordinary service registration does not grant every verification capability.
Is a screenshot of the XML enough?
Do not assume so. The authorised verification process needs the appropriate document and signature validation, not merely a picture of some readable fields.