LS15

India's identity stack cut welfare leakage, pushed fraud upstream

India runs the world’s largest state-operated trust layer: Aadhaar authentication (17,759 crore cumulative transactions), DBT, Account Aggregator consent rails, DigiLocker and telecom KYC purges. Official data show the layer works where verification is the binding constraint: ₹5.14 lakh crore of estimated DBT savings from deleting duplicate beneficiaries, and card/internet/digital-payment fraud collapsing to 293 cases (₹29 crore) in FY26 from 13,332 cases (₹517 crore) in FY25. But fraud did not disappear; it migrated to channels where the verified identity is real and the consent is coerced: loan-book fraud (₹40,774 crore, 85% of FY26 fraud value) and social-engineering cybercrime (₹52,976 crore lost over six years).

The numbers

  • 177,592 million (17,759.21 crore): Cumulative Aadhaar authentication transactions. India, since inception, UIDAI dashboard updated 22 May 2026
  • ₹5,14,202 crore: Estimated DBT savings from deduplication. India, cumulative upto March 2025, DBT Mission
  • 538.32 million: Account Aggregator cumulative consents fulfilled. India, as of July 2026, Sahamati
  • ₹48,021 crore across 10,114 cases: Total reported bank/FI fraud value. India, FY2025-26, RBI Annual Report
  • ₹52,976 crore: Cyber-enabled fraud losses to households. India, six years to 2026, I4C data cited by NHRC
  • 3.40 crore: Mobile connections disconnected as fraudulent. India, cumulative to March 2025, DoT Sanchar Saathi

How the mechanism moves

  • State-issued biometric ID (Aadhaar) with free authentication for welfare → Deletion of 6.36 crore duplicate ration cards and 4.09 crore fake LPG connections: Government to households: deduplication of the beneficiary register
  • Deduplicated beneficiary registers plus bank-account seeding (JAM) → ₹5.14 lakh crore estimated fiscal savings; subsidy share of expenditure down 16%→9%: Fiscal channel: leakage recovered becomes fiscal space
  • Cheap e-KYC (₹3 per transaction cap, draft UIDAI schedule) replacing branch-based verification → Collapse in bank customer-acquisition cost; 741 banks live on UPI; 90%+ formal account penetration: Firms/banks: verification cost falls, distribution widens
  • Consent-based data portability (Account Aggregator, 538m consents) → ₹1.6 lakh crore of loans originated on shared bank-statement data; thin-file borrowers underwritten: Credit channel: verified cashflow substitutes for collateral
  • Tokenisation, 2FA and real-time monitoring on retail payments → Digital-payment fraud cases down 97.8% over two years to 293: Regulatory hardening closes the credential-theft door
  • Credential-theft door closed → Fraud migrates to social engineering (₹52,976 crore over six years) and loan-book fraud (₹40,774 crore, 85% of FY26 value): Displacement channel: attackers move to authorised-transaction and corporate-credit vectors
  • Mule accounts as the settlement layer for social-engineering fraud → MuleHunter.AI live in 26 banks; IDPIC incorporated Oct 2025; 3.40 crore SIMs disconnected: State response: behaviour-based vouching layered on top of identity-based vouching

Data comparison

  • Card/internet/digital-payment fraud cases: 13332cases (FY26 vs FY25, RBI) → 293cases (FY26 vs FY25, RBI)
  • Card/internet/digital-payment fraud value: 517₹ crore (FY26 vs FY25, RBI) → 29₹ crore (FY26 vs FY25, RBI)
  • Advances (loan) fraud value: 30367₹ crore (FY26 vs FY25, RBI) → 40774₹ crore (FY26 vs FY25, RBI)
  • Total reported fraud cases, banks and FIs: 23722cases (FY26 vs FY25, RBI) → 10114cases (FY26 vs FY25, RBI)
  • AA cumulative consents fulfilled: 408.77millions (Jul-26 vs Feb-26, Sahamati) → 538.32millions (Jul-26 vs Feb-26, Sahamati)
  • AA monthly data shares on linked accounts: 265.67millions (Jul-26 vs Feb-26, Sahamati) → 343.78millions (Jul-26 vs Feb-26, Sahamati)
  • Aadhaar face authentications, monthly: 4.61crore (Jun-2025 vs Jun-2024, UIDAI/PIB) → 15.87crore (Jun-2025 vs Jun-2024, UIDAI/PIB)
  • Broadband subscribers: 25crore (2024-25 vs 2014-15, DoT/MeitY) → 103crore (2024-25 vs 2014-15, DoT/MeitY)

Evidence and analysis

  • Aadhaar is now the transaction-level trust primitive for the Indian economy, not just an ID card UIDAI’s own dashboard reports 17,759.21 crore (177.6 billion) cumulative authentication transactions, run through 492 Authentication User Agencies and 35 Authentication Service Agencies; 3,335.91 crore identities created at scale. Dashboard last updated 22 May 2026. Monthly run-rate: 229.33 crore authentications and 39.47 crore e-KYC transactions in June 2025 alone (PIB/MeitY).
  • Government’s fiscal return on the trust layer is deduplication, not digitisation: ₹5.14 lakh crore estimated savings to March 2025 DBT Mission’s Estimated Gains table (official, upto March 2025): total ₹5,14,201.92 crore, of which ₹83,063.87 crore accrued in FY2024-25 alone. Mechanism is explicit and countable: deletion of 6.36 crore duplicate/fake ration cards (PDS, ₹3,12,977.81 crore), 4.09 crore duplicate/fake LPG connections (PAHAL, ₹74,031.34 crore), 1.32 crore fake MGNREGS job cards (₹74,888.19 crore), 2.12 crore ineligible PM-KISAN beneficiaries (₹22,106.14 crore).
  • Verified identity plus consented data has become a credit-origination input for banks and NBFCs, not just a compliance step Sahamati (RBI-recognised SRO) ecosystem dashboard: 538.32 million cumulative consents fulfilled and 326.30 million cumulative accounts linked as of July 2026, with 343.78 million data-share events in that month alone (up from 265.67 million in Feb-26). Sahamati states the framework has enabled loans worth ₹1.6 lakh crore across 1.8+ crore loan accounts.
  • Retail digital-payment fraud has been near-eliminated in reported RBI data, but total fraud value hit a three-year high RBI Annual Report 2025-26 (released 29 May 2026): banks and FIs reported 10,114 fraud cases involving ₹48,021 crore in FY26 vs 23,722 cases / ₹32,803 crore in FY25. Card/internet/digital-payment frauds fell to 293 cases (₹29 crore) from 13,332 cases (₹517 crore) in FY25 and 28,836 cases (₹1,452 crore) in FY24. The advances (loan) category was 8,640 cases worth ₹40,774 crore: about 85% of total fraud value.
  • The residual attack surface is the household, not the credential: fraud now targets consent, not identity I4C data cited by the National Human Rights Commission (June 2026): Indians lost about ₹52,976 crore to cyber-enabled fraud over six years, with roughly 8% linked to ‘digital arrest’ scams. In these cases KYC is valid and the transfer is customer-authorised: the trust layer authenticates the victim correctly while the victim is being socially engineered.
  • The state responded by extending vouching upstream into telecom and downstream into bank-account behaviour DoT (Rajya Sabha reply, 20 March 2025): 3.40 crore mobile connections disconnected under Sanchar Saathi, including 0.78 crore identified by the AI tool ASTR as taken on fake documents and 1.19 crore for exceeding the per-person SIM limit; 3.19 lakh IMEIs blocked; 16.97 lakh WhatsApp profiles disengaged. On the banking side, RBI’s MuleHunter.AI is live in 26 banks (Ministry of Finance, Rajya Sabha), and the Indian Digital Payment Intelligence Corporation was incorporated as a Section 8 company on 16 October 2025 to run real-time fraud analytics.
  • India is institutionalising a licensed private ‘voucher’ class, with a capital floor that decides who may broker trust The DPDP Rules, 2025 were notified in the e-Gazette on 13 November 2025. Rule 4 creates a registered Consent Manager: India-incorporated company, minimum net worth ₹2 crore, interoperable and independently certified platform, blind to the data it routes, 7-year consent-record retention. Rule 4 commences 13 November 2026; most substantive duties commence 13 May 2027.
  • Private firms cannot buy their way into the identity rail; access is gated by government sponsorship The Aadhaar Authentication for Good Governance (Amendment) Rules, 2025 (notified 31 January 2025 by MeitY) require any non-government entity seeking Aadhaar authentication to route a justified proposal through a Union or State Ministry, which refers it to the Centre and then to UIDAI; MeitY launched the Aadhaar Good Governance Portal on 27 February 2025 to process these. UIDAI’s 2021 draft pricing set ₹3 per successful e-KYC and ₹0.50 per yes/no authentication for private entities, with government welfare authentications exempt.
  • Document verification has been substantially disintermediated from clerks and notaries to a state wallet MeitY (Lok Sabha, 18 March 2026): DigiLocker has 67 crore registered users and more than 967 crore documents issued; UMANG offers 2,446 services with 10.51 crore users and 741 crore transactions. Underlying connectivity: broadband subscribers 25 crore (2014-15) to 103 crore (2024-25); data cost per GB ₹269 to ~₹7.9.
  • Alternative explanation tested: the FY26 digital-fraud collapse is partly a reporting artefact, not purely trust-layer efficacy RBI states the data covers only frauds of ₹1 lakh and above, that frauds reported in a year may have occurred years earlier, and that FY26 includes 314 cases worth ₹30,199 crore relating to previous years reported afresh after the Supreme Court’s March 2023 judgement. So ~63% of FY26 reported fraud value is backdated reclassification. Inference: the direction of the digital-payments decline (97.8% fewer cases across two years) is too large to be reporting noise, but the FY26 value spike is largely accounting, not a fresh loss event.
  • The macro payoff of cheap verification shows up as payment volume growth with falling ticket size NPCI product statistics: UPI processed 23,658.35 million transactions worth ₹29,87,880.49 crore in July 2026 across 741 live banks, versus 22,716.07 million and ₹28,92,138.67 crore in June 2026: volume +22% YoY while value rose 19%, implying declining average ticket size as verified low-value payments displace cash.

Sources

Esc to close · searches every report and post, in both languages