Meerut, April 2025 — A major identity fraud operation has been busted in Uttar Pradesh. This operation compromised the Aadhaar biometric ecosystem. This reveals a disturbing breach of digital security. It affects thousands of citizens across at least 12 Indian states.
The joint cybercrime team was led by SP Sambhal Krishna Kumar Bishnoi and ASP Anukriti Sharma. They arrested four individuals. These individuals are believed to be central to the racket. The accused are Ashish Kumar, Dharmender Singh, and Raunak Pal from Badaun. Kasim Hussain is from Amroha. They are all in their 20s. They allegedly exploited loopholes in UIDAI systems. This allowed them to manipulate digital identities on a massive scale.
“This gang tampered with biometric data of over 1,500 Aadhaar holders,” SP Bishnoi confirmed. He added that the suspects have been booked under the Aadhaar Act, IT Act 2016, and Passport Act 1967. Their offenses include cheating, identity theft, unauthorized access, and document forgery.
How the Scam Worked
The gang is accused of running a technically advanced and highly organized network. This network has over 200-300 agents across states like Uttar Pradesh, Delhi, and Punjab. It also spans West Bengal, Tamil Nadu, Andhra Pradesh, and Madhya Pradesh.
These “retailers” collected Aadhaar-related documents. Clients were willing to illegally update personal information such as name, mobile number, address, or birth date. They did this for a fee ranging between ₹2,000 to ₹5,000.
According to investigators:
- Over 1,500 Aadhaar records were manipulated.
- 400+ fake supporting documents (birth certificates, ration cards) were discovered.
- Changes were pushed into government databases through cloned credentials and tampered biometric scans.
The Tech Brains Behind It
Ashish Kumar, a BTech dropout, is said to be the mastermind. Police revealed he developed fake portals mimicking official Aadhaar and Passport Seva websites. These allowed their agents to input forged information and even generate fake passports.
The key to their success lay in bypassing UIDAI’s biometric security protocols:
- They cloned iris and fingerprint data of real Aadhaar operators.
- Using advanced spoofing software, they avoided UIDAI’s geo-fencing restrictions.
- They uploaded the data remotely — making it appear as if legitimate operators were performing the biometric authentication.
ASP Sharma said, “They even manipulated fingerprint scanners to accept silicone-molded fakes. These were crafted using real biometric impressions, often from people in vulnerable communities.”
Beyond Aadhaar: Fake Passports and Documents
The scam extended into passport fraud, with at least 20 forged passports traced back to the gang. Stricter Aadhaar verification rules came into effect in December 2024. The gang then pivoted to using third-party portals. They also used fake documents to maintain their illicit activity.
“The scanners and fake websites allowed them to impersonate operators and enter Aadhaar systems virtually undetected,” said Sharma.
Digital Identity Under Threat
This case underscores the urgent need for stronger digital security protocols and enforcement mechanisms, especially as government services increasingly move online.
The investigation is ongoing, and further arrests are likely as police track down the network of agents spread across multiple states.
