In brief: e-KYC is the electronic verification of a customer’s identity against source records, such as Aadhaar authentication, DigiLocker documents or a video-based identification session, instead of paper documents.
What is e-KYC?
e-KYC is the completion of customer identification using electronic records fetched from an authoritative source, rather than from photocopies handed over by the customer. In India the term most often refers to Aadhaar-based e-KYC, where UIDAI returns a digitally signed identity record after the resident authenticates, and to document e-KYC through DigiLocker.
The distinction that matters is provenance. A scanned document proves only that a file exists; an electronic record signed by the issuing authority proves the data came from the registry that created it, and has not been altered in transit.
The main forms of e-KYC
- OTP-based Aadhaar e-KYC — the resident consents and authenticates with a one-time password sent to the registered mobile number.
- Biometric Aadhaar e-KYC — authentication with a fingerprint or iris scan on certified capture hardware, typically at a branch or assisted point.
- Offline or paperless Aadhaar — the resident downloads a digitally signed XML or shares a secure QR code, which the entity validates locally without calling UIDAI.
- DigiLocker document fetch — the customer authorises release of an issuer-signed document such as a driving licence, PAN or education certificate.
- CKYC download — retrieving an existing KYC record from the Central KYC Registry using the customer’s identifier.
Who can use Aadhaar authentication
Direct Aadhaar authentication is not open to everyone. Access is restricted to entities permitted under the Aadhaar Act and its notifications, so a large share of platforms build their flows on offline Aadhaar, DigiLocker and registry lookups instead. This is a common source of confusion in product planning: “we will just do Aadhaar e-KYC” is a licensing question before it is an engineering one.
Limits on OTP-based e-KYC accounts
Where OTP-based Aadhaar e-KYC is used to open an account remotely, the RBI’s KYC Master Direction attaches conditions rather than treating it as equivalent to full verification. Such accounts carry caps on aggregate balance and on total credits in a financial year, and must be converted to a fully KYC-compliant account within a defined period, after which further transactions are restricted. Product teams should design for that conversion step from the outset rather than discovering it when accounts start freezing.
What e-KYC does not settle
e-KYC confirms identity. It does not confirm that a bank account belongs to that identity, that an employer relationship exists, or that a vehicle or utility connection is genuinely the customer’s. Those need separate lookups against the relevant registry, which is why most onboarding stacks combine an identity step with two or three attribute checks.
Choosing the right e-KYC route
Several e-KYC routes are available in India, and they are not interchangeable. Each has different rules about who can use it, what it proves and which products it can support. Choosing well means matching the electronic KYC route to the product and the customer, rather than using one route for everything.
Aadhaar OTP-based e-KYC
The customer authenticates with an OTP sent to their Aadhaar-registered mobile number, and the regulated entity receives their details. It is quick and familiar, but it is available only to entities permitted to use it, and accounts opened this way can carry restrictions under the RBI’s rules until full KYC is completed.
Biometric Aadhaar e-KYC
The customer authenticates with a fingerprint or iris scan on a certified device, typically at a branch, agent location or assisted point. It suits assisted onboarding where staff and devices are present.
Offline Aadhaar verification
The customer shares a UIDAI-signed document or QR code from their Aadhaar, which the business can verify without a live authentication call. It gives verified details without the business handling the Aadhaar number itself in the same way.
DigiLocker-based e-KYC
With the customer’s consent, documents are fetched from DigiLocker as issued by the original authority. DigiLocker-based e-KYC works well for a wide range of businesses because the customer controls the share and the data comes from the issuer.
Video-based identification
A live, recorded video session with a trained official gives an in-person-equivalent identification for regulated entities, following the RBI’s V-CIP requirements. It is the route of choice when an account needs full KYC without a branch visit.
Designing an e-KYC journey customers finish
- Explain each step before it happens, especially redirects to DigiLocker or authentication screens.
- Check prerequisites early, such as whether the customer’s mobile number is linked to Aadhaar for OTP-based electronic KYC.
- Offer a fallback when one route fails, rather than ending the journey.
- Keep the customer informed about results instead of leaving them waiting.
Combining e-KYC with other checks
e-KYC confirms identity; most products need more. Add PAN verification for tax identity, bank account verification before money moves, and face match with liveness where you need to confirm the person present matches the record. Ordering these checks so the quick, decisive ones run first keeps the journey short.
Data handling in e-KYC
e-KYC data is sensitive. Store only what the purpose needs, mask Aadhaar numbers, record consent with each check, restrict access, and follow the retention periods your rules require. India’s data protection law applies alongside the KYC rules.
Keeping up with the rules
The rules on who may use which e-KYC route, and on any limits attached to accounts opened through them, are set by regulators and can change. Treat the RBI’s Master Direction on KYC and UIDAI’s guidance as the authoritative sources, and review your electronic KYC design whenever they are updated.
Measuring an e-KYC programme
Track completion rates for each e-KYC route, the reasons customers fail or abandon, how often fallbacks are used, and how long the whole journey takes. These figures show which route works best for your customers and where the journey needs simplifying.
Related terms
- KYC (Know Your Customer)
- DigiLocker
- Video KYC (V-CIP)
- CKYC and the Central KYC Registry
- OTP (One-Time Password)
Verify it with Veriqos Technologies
The document and attribute checks that surround an e-KYC flow are available individually:
- Digilocker Verification API — Verify your customers’ government documents instantly through Digilocker with Veriqos Technologies’ Digilocker Verification API — real-time verification through the customer’s Digilocker account.
- SMS OTP Verification API — Secure user logins and verify phone numbers instantly with Veriqos Technologies’ SMS OTP Verification API — for account creation, transactions, or digital onboarding.
- Bank Account Verification API — Instantly confirm the authenticity of any bank account with Veriqos Technologies’ Bank Account Verification API — account number, holder name, and status in real time.
See how these checks are applied in Fintech & Digital Lending, Banks & NBFCs.
← Back to the verification glossary
This entry explains how the check works in practice. It is general information, not legal or compliance advice — confirm current requirements against the applicable regulation.
