Every landlord, hotel desk, gym and HR team asks for "a copy of your Aadhaar". Once you hand over the full 12 digits, you do not control where it goes. The simple habit that reduces the risk: share a masked copy that shows only the last four digits.

What a masked Aadhaar is

A masked Aadhaar replaces the first eight digits with X's and keeps the last four. It identifies you to the person checking while giving a stranger much less to misuse. UIDAI itself offers a masked Aadhaar download option on its portal, and for most routine verifications a masked copy is what you should be offering first. If an organisation insists on the full number, ask why, and whether it is required for that purpose.

Two ways to get one

  1. Download the masked version from your Aadhaar account on the official UIDAI site, then share that PDF.
  2. Mask your existing card by blurring the first eight digits on a scan or photo. This is what you need when all you have is the physical card or an old PDF.

The mistake to avoid: online "blur Aadhaar" sites

Search for how to blur an Aadhaar number and many results are web tools where you upload the card image. That means the full, unmasked card is sent to a server you know nothing about, which is the exact exposure you were trying to prevent. Avoid any tool that uploads the original.

Also avoid drawing a black box in a generic photo editor and saving a layered file. Always export a flattened image or PDF, so the hidden digits cannot be recovered.

Masking on your phone, offline

LumenScan does the masking on the device:

  1. Scan the card (front and back); it straightens and cleans the pages.
  2. Combine front and back onto a single page.
  3. Use the on-device masking to blur the Aadhaar (and PAN) number before you share.
  4. Export the flattened PDF and send it.

The OCR and masking run on your phone and nothing is uploaded, so the unmasked card never leaves it. You can also lock the original inside the Face ID vault.

A few habits that help

  • Write the purpose on the copy ("for rental agreement, 31 Oct 2026") so it is harder to reuse.
  • Keep the unmasked original only in a locked place.
  • Send masked copies by your own chosen channel, not through a stranger's "upload here" link.

Masking is not a legal shield, and some processes (like e-KYC) legitimately need the full number. For everything else, show the last four and keep the rest to yourself.