What information is the QR code meant to carry?
UIDAI’s authentication and offline-verification regulations define Aadhaar Secure QR Code as containing digitally signed data such as demographic information, the holder’s photograph and the last four Aadhaar-number digits.
The useful feature is the relationship between the data and UIDAI’s signature. A person can see information printed on a document; the verification mechanism is intended to check the signed information rather than rely solely on appearance.
Do not describe the QR code as a hidden bank account or a general-purpose link for making payments. Its role belongs to identity-document verification.
Scanning, reading and verifying are different
A scanner captures the code. Software may decode the information. Appropriate verification then needs to establish that the signed data is valid under the authorised process.
Those stages should not be compressed into “my phone opened it, so the customer is verified”. A generic camera application may not perform all the checks required by the receiving service.
| Action | What it establishes on its own |
|---|---|
| Seeing a QR pattern | A code is visible on the document |
| Scanning it | The device has attempted to capture the code |
| Reading decoded fields | The software has displayed some information |
| Validating signed data | The appropriate verification checks have been performed |
The receiving organisation may still have additional requirements for its actual service. Authenticity of document data and approval of an application are separate decisions.
Which tools should be used?
Use UIDAI’s current published tools or the authorised verification process required by the receiving institution. The UIDAI Aadhaar-app FAQ discusses scanning Aadhaar QR codes and document verification features.
Avoid uploading Aadhaar documents to an unknown “QR checker” found through an advertisement. The customer’s identity information should not be shared simply to demonstrate that a code can be read.
If a scan fails, check the document quality and the official tool’s instructions. Do not recreate or edit the QR image. An altered code is not a legitimate correction to UIDAI’s information.
How is it different from Masked Aadhaar and offline XML?
Masking concerns how the Aadhaar number is displayed. Secure QR concerns signed data represented in a code. Offline XML is another document format used in Aadhaar Paperless Offline e-KYC.
These concepts can relate to the same identity without being interchangeable. A masked number does not remove the need for verification. An XML request is not necessarily satisfied by a screenshot of a QR code. Follow the particular service’s instructions.
For PAN applications, our document guide remains the owner of applicant-specific requirements. This page does not create a new universally accepted PAN proof format.
An example at an identity-service counter
Illustrative example: A customer brings a printed Aadhaar document with a clearly visible QR code. A retailer is tempted to accept it because it looks professionally printed.
The retailer instead follows the authorised service’s verification requirements. If its process uses a supported Aadhaar QR tool, the actual verification result matters. If it requires another permitted method, the retailer uses that route rather than invent a shortcut.
The customer is told what information is being checked and why. A successful document check is recorded according to the service process, without announcing that every related application is now approved.
Questions about Secure QR
Is it the same as the QR code on a shop’s payment stand?
No. A payment QR and Aadhaar Secure QR carry information for different purposes. Do not use one as though it were the other.
Does the QR replace the whole KYC process?
No. It supports verification within the applicable arrangement. The receiving institution’s service requirements still matter.
Can a retailer repair a damaged QR code?
Do not edit or recreate it. Obtain an appropriate official document or follow the receiving service’s supported alternative process.