Aadhaar Card Update: UIDAI Introduces AVC for Safer Offline Verification — Here’s How the New System Works

By Siddhi Jain | Dec 15, 2025, 08:43 IST

The Unique Identification Authority of India (UIDAI) has rolled out a major update to Aadhaar verification rules by introducing Aadhaar Verifiable Credential (AVC), a new digital identity mechanism designed to make offline Aadhaar verification more secure, privacy-focused, and user-controlled. The changes, officially notified on December 9, 2025, aim to reduce unnecessary data sharing and curb misuse of physical Aadhaar copies.

Under the new framework, Aadhaar holders will no longer be required to share their complete 12-digit Aadhaar number for offline verification. Instead, UIDAI is shifting toward a digital-first and consent-based identity system that prioritizes data minimisation and stronger safeguards.

What Is Aadhaar Verifiable Credential (AVC)?

AVC is a digitally signed credential issued by UIDAI that allows Aadhaar holders to verify their identity offline without exposing sensitive information. Unlike photocopies of Aadhaar cards, AVC contains only limited and user-approved data.

An AVC may include:

Only the last four digits of the Aadhaar number
Name
Address
Date of birth
Gender
Photograph

Most importantly, the Aadhaar holder has full control over what information is shared during the verification process. This marks a significant shift from earlier practices where individuals had little control over how much personal data was disclosed.

New Aadhaar App: More Control for Users

To support the AVC framework, UIDAI is launching a new Aadhaar application, which will replace the limited functionality of older apps. Through this app, users can:

Select exactly which details to share with a verifying entity
Generate Aadhaar Verifiable Credentials instantly
Avoid sharing their full Aadhaar number altogether

The objective is clear: secure identity verification without exposing core Aadhaar data, even in offline environments.

Offline Face Verification Added

One of the most significant additions under the updated rules is offline face verification. With this feature:

Verifying agencies can capture a live facial image of the Aadhaar holder
The image is matched with the Aadhaar photo stored in the Aadhaar app
No internet connection or real-time UIDAI server access is required

This enhances security while maintaining privacy, especially in areas with limited connectivity. It also reduces the risk of identity fraud associated with stolen or copied documents.

Shift Away From Physical Aadhaar Copies

UIDAI has reiterated its intent to reduce dependence on physical Aadhaar cards and photocopies, which are prone to misuse. UIDAI CEO Bhuvnesh Kumar has previously warned that physical copies can be easily duplicated, altered, or misused.

The new AVC-based system promotes a paperless and digital identity ecosystem, making Aadhaar verification safer for both users and service providers.

New Definition of Aadhaar Applications

The updated rules introduce a revised definition of “Aadhaar Application”, which now includes all UIDAI-authorised apps and portals. The earlier specific reference to mAadhaar has been removed, reflecting UIDAI’s move toward a more comprehensive and future-ready digital infrastructure.

Mandatory Registration for Offline Verification Entities (OVSEs)

For the first time, UIDAI has introduced a formal registration process for organisations that wish to conduct offline Aadhaar verification using AVC or paperless offline e-KYC.

Under the newly added Rule 13A:

Any entity seeking to perform offline Aadhaar verification must register with UIDAI
UIDAI has the authority to review applications, seek additional details, and approve or reject registrations
UIDAI can also levy registration fees or transaction charges

If an application is rejected, UIDAI must provide reasons within 15 days, and the applicant entity can seek a review within 30 days.

Strict Action for Rule Violations

UIDAI has also strengthened enforcement provisions. Institutions found guilty of:

Misusing offline Aadhaar verification
Failing to follow prescribed procedures
Concealing information or refusing audits

may face penalties, suspension, or even cancellation of registration. UIDAI can also revoke an entity’s permission to conduct Aadhaar-based verification altogether.

Why This Update Matters

The introduction of Aadhaar Verifiable Credential marks a crucial step toward privacy-first digital governance in India. By giving users control over their data, eliminating full Aadhaar number sharing, and enforcing stricter compliance for verification agencies, UIDAI aims to strike a balance between ease of verification and data protection.

Overall, the new Aadhaar verification rules signal a decisive move toward a safer, smarter, and more user-centric identity ecosystem—one that aligns with global best practices in digital privacy and security.

ChatGPT can make mistakes. Check important info