Aadhaar Offline Verification (OVSE) — What Businesses Need to Know

Identity verification is a crucial step for businesses before offering any service to the customer. The traditional paper-based verification is time-consuming, prone to manual errors, and document fraud. The online verification requires accessing the CIDR database and OTP authentication. However, it often fails in remote locations due to OTP delays or poor internet connectivity. The offline Aadhaar verification solves this issue with paperless and secure verification.

What is Aadhaar Offline Verification?

It is a method of verifying an Aadhaar identity without requesting authentication from the CIDR database. Instead, businesses can verify identities using a QR code and an XML file. It is a paperless e-KYC solution for organizations. 

Types of Aadhaar Offline Verification Methods

Aadhaar Secure QR Code Verification

This is the most widely used and simplest form of Aadhaar verification, where every form of aadhaar (PVC card, printed, e-Aadhaar, Aadhaar app) contains a digitally signed QR code which can be scanned for verification.

How it works

• User shows Aadhaar QR code (digitally or physically)
• OVSE scans the QR code and starts the verification process.
• Their system validates using UIDAI digital signature
• If the digital signatures match the user’s Aadhaar is verified 

The QR code is tamper-proof because the signature breaks if modified

Aadhaar Paperless Offline e-KYC

This is a shareable identity file instead of a scannable code. The user downloads an encrypted XML file from UIDAI which has the user’s demographic information and shares it with the OVSE along with a ‘share code’ for them to open the XML file.

How it works

• User downloads XML from the UIDAI portal
• The user shares the XML file and the ‘share code’ with the OVSE.
• OVSE opens the file and validates the data.
• Data is extracted by the OVSE.

eAadhaar Verification

eAadhaar is a digital version of an Aadhaar card and can be downloaded in multiple formats, each file is password protected, digitally signed by UIDAI and has a secure QR code in it as well.

How does it work?

• The user downloads the e-Aadhaar file from UIDAI.
• The downloaded file is shared with the OVSE.
• OVSE checks for the digital signature in the file.
• Optionally, the OVSE may also scan the QR code to double-check the eAadhaar

Aadhaar Verifiable Credential Verification

This is the future of Aadhaar verification. Instead of sharing documents, the Aadhaar App issues verifiable credentials stored in the user’s phone. The user shares only the required data fields that they select.

How it works

• OVSE requests the user for the credentials
• User approves request
• App shares signed credentials
• Verifier validates signature locally

How to Apply for OVSE Registration?

Follow the steps below to apply for OVSE registration:

• Go to UIDAI  OVSE Registration Page
• Click on Apply for OVSE Registration.
• Login with the Aadhaar Number.
• Complete the step-by-step process.

What are the Technical Requirements to Become an OVSE?

These are the technical requirements an entity must have to become an OVSE:

• Logo in SVG format (less than 10kb)
• A callback URL where UIDAI will post the response data
• Organization name to display on Aadhaar App
• Domain name verification
• Public Certificate with a minimum of 2 years’ validity at least
• Application ID – Android/iOS (App to App intent call)

How Aadhaar Offline Verification (OVSE) Works: Step-by-Step Guide

Here is how offline verification of Aadhaar works:

 

Step 1: Users share the Aadhaar QR Code or XML

The individual provides the offline Aadhaar verification data in the form of a Secure QR code or a password-protected XML file.

 

Step 2: Business Scans or uploads the Data

Business scans the Aadhaar Secure QR code or uploads the XML file to the system for decryption and verification.

 

Step 3: Digital Signature Validation

The system verifies the digital signature issued by UIDAI to confirm that the Aadhaar data is genuine, untampered, and officially issued.

 

Step 4: Data Verification

After successful signature validation, the demographic details are matched with the information submitted by the user for identity confirmation.

What Are Aadhaar OVSE Compliance Guidelines?

UIDAI has made several rules to make offline verification secure. Everfy Offline Verification Seeking Entities should follow these rules:

No Collection of Aadhaar Number or Biometric

According to the Aadhaar Act, 2016, OVSE can’t collect or store the full 12-digit Aadhaar number. OVSE also cannot collect fingerprints, iris scans, or facial data as per Regulation 14(A) of Aadhaar Authentication and Offline Verification Regulations, 2022.

 

Businesses can use masked Aadhaar or the last four digits of the Aadhaar card for reference according to section 7 of the Aadhaar Act, 2016, or any law passed by Parliament.

Prohibition on Data Sharing and Retention

It is the duty of OVSEs to keep Aadhaar details secure. It’s the obligation of OVSEs to ensure that Aadhaar data is safe. According to Regulation 14(A) and Section 8A(2) of the Aadhaar Act, 2016, an organization can’t sell, share, or transfer Aadhaar information to any other third-party, such as vendors, partners, or affiliates.

 

The subcontractors themselves aren’t allowed to use or process Aadhaar-related data. The information on the Aadhaar card cannot be shared to facilitate advertising, marketing profiling, or commercial analysis. These OVSE standards of compliance prevent the abuse and misuse of Aadhaar data.

 

OVSEs are expected to avoid the storage of Aadhaar information. After the verification, the data should be deleted from the systems. The organization needs to maintain deletion records of information. This compliance guideline limits data retention, which reduces the risk of unauthorized data access and cyber attacks.

Digital Signature Verification

OVSE must verify the digital signature embedded in the QR code and XML file through the UIDAI-approved tools and certificates. This is mandatory under Regulation 16(B) and Regulation 16(C) of Aadhaar Authentication and Offline Verification Regulations, 2022.

 

If OVSE finds forged, edited, or tampered documents, it should reject them immediately. It ensures that the original Aadhaar is accepted and reduces the risk of impersonation.

Redaction of Aadhaar Number

Only the masked Aadhaar number can be used for verification purposes. In case If the Aadhaar holder submits full Aadhaar details, including the Aadhaar number, it is the responsibility of OVSE to redact the Aadhaar number before processing or storing. It reduces the risk of misuse in case of data breach or document loss.

 

As per Regulation 16(B) and Section 4(4)(b)(ii) of the Aadhaar Act, 2016, full Aadhaar numbers can be collected only in special cases related to national or state interest or under Parliamentary approval.

User Consent is Mandatory

OVSEs need to obtain an informed and clear consent from the Aadhaar owner before conducting an offline Aadhaar verification. This requirement is required in Section 8A of the Aadhaar (Amendment) Act 2019 section 8A(2) from the Aadhaar Act, 2016. Aadhaar Act, 2016. The business must inform its client about the reason for verification, what kind of information is being utilized, and the method by which it will be kept. Consent should be clearly stated and freely given. Users are entitled to revoke at any point. If consent is not withdrawn, the data will be removed.

Security Measures Requirements

OVSE must maintain strong IT and security systems. This includes Access controls, secure servers, encrypted storage, restricted employee permissions, and regular internal audits. Following strong security measures prevents internal misuse and cyberattacks.

Resident Notification Obligations

After completing the offline verification process, an OVSE must inform the Aadhaar holder about successful verification. Notifications may be sent through digital receipts, email, SMS, or physical acknowledgment slips.

Identity Matching Requirements

In case where offline verification is conducted remotely, additional checks are required, as per Regulation 16(B) and 16(C). OVSEs should conduct a face match manually or using a tool. They can also use OTP verification. It confirms that the person submitting the Aadhaar is genuine. It reduces the risk of fraudulent transactions and identity theft.

Disclosure Notice

When Aadhaar information is viewed only. A notice should be displayed to explain how the information. This is required under Section 8A of the Aadhaar (Amendment) Act, 2019, and related regulations. Proper screen security and viewing controls should be maintained. It gives transparency and builds trust.

Breach Reporting

If OVSE identifies a data breach, data misuse, or unauthorized access. The organization should report it in 72 hours to UIDAI as well as the individual. It also cooperates with the investigation and takes appropriate actions.

Responsibility for Third Parties

If an OVSE takes the help of a third party for Aadhaar verification. OVSE will be responsible for non-compliance. If a third party makes a mistake or misuses data, it will be treated as OVSE’s fault. Every OVSE should ensure that data privacy rules are followed.

Log Maintenance

Maintaining a log is not mandatory. However, OVSE should maintain detailed records of verification, access histories, consent records, transaction logs and grievance details. Proper documentation helps during audits, inspections, and legal proceedings. In the future, if any user raises a complaint, proper audits help OVSEs resolve issues.

Benefits of Aadhaar Offline Verification of Business

These are the benefits a business gets:

• Eliminates OTP Dependency: Aadhaar OSV works without OTP or biometric verification. This reduces OTP verification failures that occur due to OTP delays or SIM-related issues.
• Reduces Onboarding Time: Offline verification through Aadhaar QR or XML helps in instant data validation. Customers can verify in seconds. It helps businesses onboard users more quickly and improve conversions.
• Cost-Effective Verification Solution: Entities conducting online verification need to develop their own infrastructure for secure verification. Developing town infrastructure requires high spending. On the other hand, for the offline verification, businesses don’t need such infrastructure.
• Enhance Privacy: In offline verification, only the selective data is shared with the verification organization. This reduces the exposure of sensitive personal information and its misuse.

Key Businesses Use Cases of Aadhaar Offline Verification

Fintech and NBFC

The offline Aadhaar verification helps banks and fintechs in verifying customer identity quickly without OTP or biometric authentication. It helps reduce onboarding time, prevents identity fraud, and ensures compliance.

 

Banking and Payments

Banks and payment service providers use Aadhaar OSV for identity verification during account opening, wallet verification, and customer re-verification.

 

Hospitality and Hospitals

Hospitality and healthcare Industries can use the Aadhaar offline verification for guest check-in and identity verification. QR verification replaces physical photocopies. It reduces manual checks.

 

Logistics and Delivery Verification

Logistics and delivery companies use Aadhaar OKYC to verify delivery partners, drivers, and recipients. It helps prevent fake identities, ensures secure onboarding, and supports large-scale verification without storing Aadhaar numbers.

Surepass Reliable Technical Service Provider for Offline Aadhaar Verification

Surepass is the reputed name in verification due to its advanced solution.

• End-to-end support for secure QR code verification and offline XML verification.
• Ready to integrate APIs and SDKs that reduce development time and cost.
• High accuracy with digital signatures verification and tamper detection.
• Ensure faster onboarding, minimal downtime, and reliable performance
• Offers dedicated technical support and documentation for smooth integration.

What are the key differences between Aadhaar OVSE vs Online Aadhaar eKYC?

Aadhaar offline verification is different from Aadhaar eKYC:

Mode of Verification

• Aadhaar OVSE: Entities verify the Aadhaar identity through the QR code and XML File.
• Online Aadhaar eKYC: In this process, the entity verifies the Aadhaar details online through CIDR authentication.

Internet Connectivity

• Aadhaar OVSE: It does not require continuous internet connectivity, as verification can be done online through QR and XML file.
• Online eKYC: Businesses need high connectivity for OTP verification and for receiving response information for verification.

Authentication Method

• Aadhaar OVSE: Verified credentials are shared with the verifier for verification.
• Online Aadhaar eKYC: It uses OTP or biometric verification and details received from UIDAI.

Data Source

• Aadhaar OVSE: Data is shared through the Aadhaar App.
• Online Aadhaar eKYC: Data is fetched live from the UIDAI CIDR database.

User Consent

• Aadhaar OVSE: All the OVSEs must obtain explicit consent of Aadhaar before verification in the form of a request.
• Online Aadhaar eKYC: In online Aadhaar eKYC, the organization obtains consent through the OTP and biometric verification.

Technical Infrastructure

• Aadhaar OVSE: Offline Aadhaar verification requires a simple setup and simple verification solutions.
• Online Aadhaar eKYC: For online Aadhaar verification, an organization needs secure authentication systems.

Use in Low Connectivity Areas

• Aadhaar OVSE: It is suitable for rural and low-network regions.
• Online Aadhaar eKYC: It is difficult for the entity verify Aadhaar online without high internet connectivity.

Risk of Data Exposure

• Aadhaar OVSE: In offline verification, only limited data is shared, and users have control over the information they share.
• Online Aadhaar Verification: It reduces the risk of live data transmission.

Compliance

• Aadhaar OVSE: The OVSE must comply with the Aadhaar Act 2016, the IT Act 2000, the DPDP, and other applicable compliance rules.
• Online Aadhaar eKYC: The organization conducting the authentication should follow the online compliance and audit rules.

Conclusion

Aadhaar offline verification is an effective solution for businesses to conduct identity verification with security and accuracy. It replaces the need for OTP verification, speeds up the onboarding process, and reduces operational costs. With secure QR codes and encrypted XML files, businesses can easily verify the identities of customers. It makes onboarding simple and efficient.

FAQs

Ques: What is the process of offline verification of the Aadhaar Card?

Ans: The offline Aadhaar verification helps in verifying the Aadhaar identities without requesting CIDR.

 

Ques: What is the meaning of offline verification?

Ans: Offline verification means confirming a person’s identity through digitally signed data or documents without connecting to a central database.

 

Ques: Is customer consent required for Aadhaar Offline Verification?

Ans: Yes, consent is required for Aadhaar offline verification.

 

Ques: Who can use Aadhaar Offline Verification?

Ans: Any authorized organization that needs identity verification, including banks, fintech, hospitals, logistics companies, hotels, etc.

 

Ques: What data can be accessed through Aadhaar OSV?

Ans: Business can access limited demographic details such as name, DOB, gender, photograph, and address.