Fake DigiLocker app on Play Store steals your Aadhaar, PAN, and banking credentials
Counterfeit DigiLocker apps on the Play Store mimic the official government identity wallet exactly. After you log in, they harvest your Aadhaar number, mobile OTP, and linked bank credentials, then use them for loan fraud or SIM swap.
Also known as: fake DigiLocker app scam, counterfeit government identity app, fake MeitY DigiLocker, cloned DigiLocker Play Store, DigiLocker phishing app
Already happened to you? Do this in the next few minutes
Call 1930 now- 1 Call 1930 — the national cyber-crime helpline — right now. The sooner you report, the better the chance of freezing the money before it moves.
- 2 Call your bank to freeze the account and block the card immediately. Use the number printed on your card, never a number from the message or caller.
- 3 File a report at cybercrime.gov.in and keep every message, screenshot, and transaction ID.
- ! If you installed any "support", "server", "refund", or remote-access app at their request (AnyDesk, TeamViewer, Quick Support, etc.): disconnect the internet now, then run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
What to do right now
- 1 Download DigiLocker ONLY from the official Play Store listing published by 'National e-Governance Division, Govt of India' or from digilocker.gov.in
- 2 If you already installed a fake version, revoke all its permissions (storage, SMS, contacts) in Settings, then uninstall it immediately
- 3 Change your DigiLocker password, Aadhaar-linked mobile OTP preferences, and your bank's net-banking password from a clean device
- 4 Alert your bank if you suspect your Aadhaar or PAN has been copied — ask them to flag your account for unusual activity
- 5 Check for any new loans taken in your name on the CIBIL or Experian portal — fraudsters use harvested IDs to open instant credit
- 6 If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
- 7 Report at https://cybercrime.gov.in or call 1930 (national cyber helpline).
Was remote-access software installed?
If a scammer asked you to install AnyDesk, TeamViewer, Quick Support, or any remote-access app, your device may still be compromised.
Run SeraphSecure to detect and remove it →Red flags
- ⚠ The only genuine DigiLocker app is published by 'National e-Governance Division, Govt of India' — any other developer name is fake
- ⚠ A message or ad urges you to 'verify documents', 'restore access', or 'update your DigiLocker services' and links to a download page — the real app never sends such links
- ⚠ After logging in, the fake app asks for your Aadhaar OTP twice or more, or asks for your bank PIN inside the app — the real DigiLocker never asks for bank PINs
- ⚠ The app icon and colour scheme look identical to the real DigiLocker but the publisher name in the Play Store is generic or misspelled
- ⚠ Your documents appear to upload or sync, but your Aadhaar-linked bank account soon shows unauthorised transactions or a new SIM is issued on your number