India Aadhaar and PAN verification API: number structure, Verhoeff check and KYC rules

Structure of Aadhaar and PAN

PAN holder-type codes

• P Individual
• C Company
• H Hindu undivided family
• F Firm or LLP
• A Association of persons
• B Body of individuals
• T Trust
• L Local authority
• J Artificial juridical person
• G Government

A retail onboarding flow that accepts a PAN whose fourth character is not P is onboarding a business as a person.

Response contents of an India verification API

A parse result tells you whether a number is well formed. A verification response tells you whether the person in front of the camera owns it. deepidv runs one session: document capture with OCR and the AI document fraud check, face liveness with a 1:1 match to the document photo, PAN verification and the Aadhaar check your licence allows, PEP and sanctions screening, and an optional 1:N match that flags the same face behind a second account.

• One decision per session, with an outcome for every step, delivered by webhook (session.status.verified, session.status.rejected, session.status.failed).
• Fields as printed on the document, with a normalized Latin form in its own field where the document uses another script.
• A reason for every non-pass outcome, separating malformed input, a record that was not found, a mismatch between document and record, and a registry that did not answer.
• A signed verification receipt with a UTC timestamp per step, anchored on Base L2 with zero personal data on chain, checkable at proof.deepidv.com.

Capturing Aadhaar, the secure QR and PAN

The Aadhaar letter, card and e-Aadhaar carry a secure QR code signed by UIDAI. deepidv verifies the signature offline, which proves the data came from UIDAI without an online call. Fields appear in English and a regional script; deepidv returns both, with the Latin form in its own field. Use masked Aadhaar, where the first eight digits are hidden, whenever you do not need the full number.

Aadhaar and PAN record checks

Online Aadhaar authentication and e-KYC are open only to entities licensed by UIDAI, or through one. Offline paths, such as the signed QR, the Aadhaar paperless offline e-KYC XML with a share code, and DigiLocker, work without that licence. PAN verification confirms the PAN is valid, the name on record, and whether it is operative: PANs not linked to Aadhaar became inoperative from July 1, 2023. deepidv runs the offline Aadhaar QR, the offline e-KYC XML, DigiLocker and PAN verification live, and confirms each path with you before enabling it.

Liveness, V-CIP and RBI rules

RBI's Master Direction on KYC allows Video based Customer Identification Process (V-CIP) for remote onboarding, run live by an official of the regulated entity with liveness checks, geotagging and recording. deepidv supplies the liveness result, face match and document checks the official relies on, and records every step with a timestamp. Personal data handling falls under the Digital Personal Data Protection Act 2023.

How deepidv runs India verification

deepidv is a verification engine and agentic compliance suite built from the ground up, without third-party verification APIs underneath. The engine is SOC 2, ISO 27001 and PCI DSS certified, and deepidv is a member of DIACC and the AVPA. Luna, the verification agent, builds and sends India verification workflows from the platform or from any LLM through MCP. Arbiter, the compliance agent, maps the workflow to RBI's Master Direction on KYC requirements, monitors accounts after onboarding and drafts suspicious transaction reports for FIU-IND for your team to review.