PAN card fraud: a loan you never took, on a PAN you shared once
A copy of your PAN, with an Aadhaar copy and a photo, is enough for a fraudster to apply for an instant loan or a credit card in your name, and you find out when a recovery call comes or your credit score falls. Check your credit report free from CIBIL, Experian, Equifax or CRIF High Mark, dispute any loan you did not take with the lender and the bureau, and report it at cybercrime.gov.in. Banks never ask you to update PAN through an SMS link.
How it plays out
The "update your PAN" link, and the loan that arrived six months later
The SMS says her bank account will be suspended today unless her PAN is updated, with a link. The page that opens has the bank's colours and asks for her name, PAN, date of birth, address and a photo of her PAN card "for re-verification". She fills it in on the bus to work. The page says "updated successfully", and nothing else happens.
Six months later the calls start. A recovery agent for a lending app she has never heard of says her loan of ₹45,000 is two months overdue and is going to legal. She says she never took a loan. He reads out her PAN, her date of birth and her address.
Her credit report shows two loans she never applied for and a credit card, all opened within a week of the day she filled in the form. Her score has fallen far enough that the home loan she has applied for is turned down.
The details on the fake page were enough to apply in her name, with someone else's selfie and a doctored copy of an Aadhaar. Each lender's checks were satisfied by the documents they were shown.
Two loans and a credit card she never applied for, a credit score that cost her a home loan, and four months of letters to clear her name. No money left her own account.
A composite of PAN-misuse patterns as described in RBI, Income Tax Department and Indian police advisories and in reported cases, including the PAN-update phishing SMS and loans taken on stolen identity documents. No real person, bank, lender or case is depicted; the amounts are illustrative.
Where it could have stopped
The link. A bank does not suspend an account through an SMS link or update PAN on a page it texted you; PAN and KYC changes happen in its own app or at the branch. Closing the message without tapping it would have kept her PAN, date of birth and address away from the people who used them.
High riskWhat EnfoldAI does here
Scam SMS filter
EnfoldAI's SMS filter flags the "update PAN or your account will be blocked" message, link and all, in the inbox, before the page that collects your details is ever opened.
Flags scam and spam SMS automatically.
Auto-check with EnfoldAIHow this scam works
The order is the explanation. Find where your own experience stops in this list. That is how far along the script has run.
- Lenders, especially instant-loan apps and card issuers, identify an applicant largely by PAN, an Aadhaar copy and a photograph. A fraudster with your PAN, date of birth and address, plus a doctored or borrowed Aadhaar image and a selfie, can apply in your name.
- The details come from many places: a phishing SMS ("update your PAN or your account will be blocked"), a fake loan or job application form, a photocopy left at a shop or hotel, a document forwarded on WhatsApp, or a data leak.
- The loan is approved, the money goes to an account the fraudster controls, and the repayments are never made. The default is reported against your PAN, so your credit score falls and the recovery calls come to you.
- Variations: a credit card issued in your name; a SIM, a GST registration or a company directorship using your PAN; high-value purchases or deposits reported against your PAN that show up in your tax statements.
- Most people find out only when they apply for credit themselves and are refused, which can be months after the fraud.
If it has already happened
In order, and the order matters. The first step is the one that can still get the money held, so it comes before everything else.
- If you entered banking details or an OTP into an "update PAN" page, call your bank first, on the number on your card or passbook, and have net banking and cards blocked.
- Download your credit report from each bureau: CIBIL, Experian, Equifax and CRIF High Mark each give one free full report a year. List every loan, card and enquiry you do not recognise.
- Report the identity theft at cybercrime.gov.in, and on 1930 as well if money has left your account. Keep the acknowledgement number; every lender and bureau will ask for it.
- Write to each lender's grievance officer that you never applied, quoting the complaint number, and ask in writing for the loan to be closed as fraudulent and the bureaus corrected.
- Raise a dispute with every bureau that shows the loan. RBI requires a dispute about your credit information to be resolved within 30 days, with compensation payable after that.
- If a lender rejects your complaint or does not resolve it within 30 days, complain to the RBI Ombudsman at cms.rbi.org.in.
- Do not pay a recovery agent for a loan you did not take, even to stop the calls. Tell them in writing that the loan is disputed as fraud, and report harassment.
PAN card misuse: common questions
The questions people actually ask about this one, answered in a line or two each.
How do I check if my PAN card is being misused?
PAN card se fraud ho sakta hai kya?
Someone took a loan on my PAN. How do I get it removed?
Is the "update your PAN or your account will be blocked" SMS genuine?
Check before you trust
Paste any SMS, link or app and get a verdict before money moves. Auto-scan flags scam messages the moment they arrive.
Suspicious message? Check it free →