Sharing Aadhaar and PAN on WhatsApp can expose users to risks

Cyber experts and police have warned that sharing Aadhaar, PAN cards, bank statements and other sensitive documents through personal WhatsApp numbers can expose users to data security risks. They advise using official verification channels and secure document submission methods

Hyderabad: These days, sharing identity, personal or financial credentials, including Aadhaar, PAN cards and bank statements, over WhatsApp may appear to be a convenient and easy way of completing the verification process for certain services, but the practice could expose individuals to serious data security risks.

People seeking loans are often asked by bank executives or finance agents to send PAN cards, bank statements, KYC and other documents to personal WhatsApp numbers. Similarly, hotels may seek Aadhaar details through WhatsApp during check-in, while property brokers frequently ask prospective customers to share identification and financial documents on their personal numbers.

---

Once a document is sent through WhatsApp, the recipient may download and store it on a phone, computer or other device. It could also become part of the device’s backup ecosystem.

Police authorities caution that users should not share such sensitive information merely because the process appears quick and convenient. “Even if the recipient has no fraudulent intentions, the information could be exposed if their device, account or cloud storage is compromised in a cyber attack,” said a senior Cybercrime official.

Another concern is accountability. If documents shared with an individual’s personal number are later misused, it could be difficult for the victim to establish how the data was stored, accessed or circulated.

Cyber experts advise people to insist on official and secure channels for submitting sensitive documents. Banks, lenders, hotels and other service providers should be asked to provide an official website, secure document upload portal or authorised verification mechanism instead of requesting documents through personal WhatsApp accounts.

Where available, users can also enquire about alternative identity verification options, including DigiLocker-based or offline verification methods.

If sending documents to a personal number is unavoidable, experts recommend using password-protected files and sharing the password separately. They also advise using masked Aadhaar copies wherever possible so that only the last four digits are visible.

Before sending any identity or financial document, users should verify who is receiving it, why it is required, where it will be stored and whether a secure alternative is available.