Protecting Your Documents During Job Applications in India

Last updated: 8 October 2026 · By the Asuraa Team

Quick answer: Share only your resume and contact details until you have a verified offer, and give ID and bank documents only at background verification or joining. Use a masked Aadhaar, which UIDAI describes as hiding the first eight digits so only the last four show, and watermark every copy with the company name, purpose and date. Never share OTPs, PINs or passwords with any recruiter.

Key takeaways

• A resume and contact details are enough to apply; Aadhaar, PAN and bank details are normally needed only at background verification or joining.
• UIDAI's masked Aadhaar hides the first eight digits of the 12-digit number and shows only the last four.
• UIDAI lets residents check their Aadhaar authentication history and lock biometrics, both of which require a registered mobile number.
• In May 2022, the government withdrew a UIDAI regional advisory against sharing Aadhaar photocopies and asked people to use normal prudence instead.
• The Digital Personal Data Protection Rules, 2025 were notified on 14 November 2025, with an 18-month window for phased compliance.

Job hunting means handing your personal documents to people you have never met. Most of them are genuine recruiters and HR teams, but fake recruiters also collect Aadhaar, PAN and bank details to open accounts, take loans or run scams in your name. The fix is not to stop sharing, but to share the right document at the right stage, in a safer form.

What documents should you share at each stage of hiring?

Share as little as possible early on, and hand over identity and bank documents only after you have a verified offer from a verified company. A resume and portfolio are enough to get an interview; formal ID usually becomes necessary at offer, background verification and joining.

If someone asks for Aadhaar, PAN or bank details before you have even spoken to an interviewer, treat that as a warning sign. Our guide to the background verification process in India explains what legitimate checks involve, and how to check if an offer letter is fake covers the offer stage.

What is a masked Aadhaar and when should you use it?

A masked Aadhaar is a version of your e-Aadhaar in which the first eight digits of the 12-digit number are hidden as "xxxx-xxxx" and only the last four are visible, according to UIDAI. You can download e-Aadhaar from the official myAadhaar portal and select the masked Aadhaar option before downloading, as The Quint's step-by-step guide shows.

Use a masked copy whenever a recruiter or employer only needs to see your name, photo and address, rather than to run an Aadhaar-based process that requires the full number. During applications and early verification, a masked copy is usually enough. If an employer's payroll or PF process genuinely needs the full number, it will normally be collected through a formal HR system at joining, not over WhatsApp.

How do you watermark document copies before sending them?

Add a short, specific line across every copy that says who it is for, what it is for and the date. For example: "For ABC Technologies Pvt Ltd background verification only, 08-10-2026". If the copy leaks, it cannot easily be reused for a bank account, SIM card or loan application elsewhere.

Follow these steps:

1. Scan or photograph cleanly. Make sure the text is readable, then crop out anything unnecessary.
2. Add the watermark text. Use any PDF editor or phone scanner app that supports text annotations. Place the text across the middle of the document, overlapping (but not hiding) key details.
3. Keep it semi-transparent. The document should stay legible for genuine verification.
4. Save as a flattened PDF. Flattening merges the watermark into the page so it is harder to remove.
5. Name the file clearly. For example, "Name_PAN_ABC-Tech_BGV.pdf", so you know where each copy went.
6. Keep a log. A simple note of which company received which documents, and when, helps if you later need to report misuse.

Avoid sending unmarked full-resolution scans of Aadhaar, PAN, passport or bank passbook to anyone you have not verified.

Which requests are red flags for identity theft?

Any request for OTPs, UPI PINs, card PINs, net banking passwords or remote screen access is a scam, without exception. No employer needs these to hire or pay you.

Other warning signs:

• ID documents requested before any interview or offer.
• Requests to share documents only on WhatsApp or Telegram, from a personal number.
• A request for a selfie holding your Aadhaar or PAN card, outside a known, official verification flow.
• Asking you to open a new bank account or SIM "for salary" using a link they send.
• Asking you to sign blank forms or agreements you have not read.
• Pressure to send documents within minutes to "hold your seat".

These patterns overlap with common fraud formats covered in our guides on WhatsApp and Telegram job scams and how to verify a recruiter on LinkedIn.

How can you check whether your Aadhaar has been misused?

You can review your Aadhaar authentication history on the UIDAI resident portal or the mAadhaar app using your Aadhaar number or Virtual ID, and a registered mobile number is mandatory for this, according to UIDAI. Look for authentications you do not recognise.

You can also lock your biometrics. UIDAI explains that once biometric locking is enabled, your biometrics stay locked until you unlock them temporarily or disable the lock; you can manage this through the UIDAI website, the mAadhaar app, an enrolment centre or an Aadhaar Seva Kendra, and again a registered mobile number is required (UIDAI biometric lock FAQ).

Beyond Aadhaar, check your credit report periodically for loans or cards you did not apply for, and watch your bank statements after any job application where you shared financial details.

What do most guides on document safety get wrong?

Many guides claim UIDAI has told people never to share a photocopy of Aadhaar. That is not quite accurate. In May 2022, UIDAI's Bengaluru regional office issued an advisory along those lines, but the government withdrew it with immediate effect, saying it could be misinterpreted, and advised people simply to use normal prudence when sharing their Aadhaar number (UIDAI clarification, 29 May 2022).

The practical takeaway is not panic but proportion. Sharing Aadhaar with a verified employer at the right stage is normal. Sharing an unmarked copy with an unverified "HR" contact on WhatsApp is the risk. Masking, watermarking and timing reduce that risk without making you look difficult to hire.

Another gap: guides focus only on Aadhaar, while PAN and bank details are often more useful to fraudsters for loans and mule accounts. Apply the same care to every financial document.

What rights do you have over the data employers collect?

India's data protection law gives you rights over the personal data companies collect, including during hiring. The Digital Personal Data Protection Rules, 2025, notified on 14 November 2025, give effect to the DPDP Act, 2023 with an 18-month window for phased compliance, according to the government's explainer.

Under this framework, organisations must give a clear notice explaining why they collect data, and individuals can seek access, correction, updating and erasure of their data in certain cases, and withdraw consent. Organisations must also inform affected people without delay after a data breach. As these duties phase in, you can reasonably ask a company how your documents will be stored and when they will be deleted if you do not join. This is general information, not legal advice.

What should you do if your documents have been misused?

Act quickly and report through official channels. If you have lost money or suspect fraud using your identity, file a complaint on the National Cyber Crime Reporting Portal or call the cybercrime helpline 1930, then inform your bank. You can also use the portal's suspect search and "Report Suspect" option to flag the numbers or email IDs that collected your documents. Our guide on how to report a job scam in India explains each step.

FAQ

Should I share my Aadhaar card with a recruiter?

Not at the application or interview stage. A resume and contact details are enough until you have a verified offer from a verified company. At background verification or joining, sharing ID is normal; use a masked Aadhaar where the full number is not required, and watermark the copy with the company name, purpose and date. Never share Aadhaar over WhatsApp with an unverified contact.

What is a masked Aadhaar?

A masked Aadhaar is a version of your e-Aadhaar where the first eight digits of the 12-digit number are hidden as xxxx-xxxx and only the last four digits are visible, as UIDAI describes it. You can download e-Aadhaar, including the masked version, from the official myAadhaar portal. It is useful when someone needs to see your identity details but not your full Aadhaar number.

How should I watermark documents before sending them to a company?

Add a semi-transparent line of text across each copy naming the company, the purpose and the date, such as "For XYZ Pvt Ltd background verification only, 08-10-2026". Keep details readable, save the file as a flattened PDF so the watermark is harder to remove, and keep a log of which company received which documents.

Can a fake recruiter misuse my PAN card?

Yes, PAN and bank details can be misused for loans, credit cards or mule bank accounts, so they deserve the same care as Aadhaar. Share them only after verifying the employer, ideally at joining through an official HR system. Check your credit report and bank statements periodically, and report suspected misuse on cybercrime.gov.in or the 1930 helpline.

How do I check if my Aadhaar has been misused?

Check your Aadhaar authentication history on the UIDAI resident portal or the mAadhaar app using your Aadhaar number or Virtual ID; a registered mobile number is mandatory. Look for authentications you do not recognise. You can also lock your biometrics through UIDAI so they cannot be used until you temporarily unlock them or disable the lock.

Did UIDAI say not to share Aadhaar photocopies?

A UIDAI regional office in Bengaluru issued such an advisory in May 2022, but the government withdrew it with immediate effect because it could be misinterpreted. The official position was that Aadhaar holders should use normal prudence when sharing their Aadhaar number. In practice, masked and watermarked copies shared at the right stage are a sensible middle path.

Final thoughts

Protecting your documents is mostly about timing and proportion: verify first, share later, and mark every copy. A strong resume gets you to the interview without handing over your ID, so make sure yours is sharp with the Asuraa AI resume reviewer, which checks it against the job description you are targeting.