PAN and Aadhaar: The Complete 2026 Guide

Every serious financial act in India — opening a bank account, filing a return, buying a mutual fund, even getting a new SIM — starts with the same two documents. PAN is your tax identity; Aadhaar is your identity. Most of us carry both and use both, yet few of us know exactly what each one does, where each gets updated, what an update costs right now, and what to do when one of them silently stops working.

This guide is the map for our documents cluster: what each document is for, the fastest way to get each, the current fee list, where the PAN-Aadhaar link stands, how e-KYC and offline verification actually work, and the security habits that keep both safe. Where a walkthrough deserves its own post, I hand you off to it rather than repeat it here.

What each document actually does

A PAN (Permanent Account Number) is a ten-character alphanumeric issued by the Income Tax Department. It identifies you to the tax system: returns, refunds, TDS credits, demat accounts, property and vehicle transactions — all keyed to it. One person, one PAN; holding two is a violation, and duplicates must be surrendered.

An Aadhaar is a twelve-digit number issued by UIDAI to residents after enrolment with fingerprints, iris scans and a photograph. It proves identity and address, powers direct benefit transfers (LPG subsidy, scholarships, MGNREGA wages) and has become the default KYC document for banks, mutual funds and telecom.

The clean way to remember the split:

• PAN answers who is this taxpayer? Aadhaar answers who is this person, and where do they live?
• You can legally hold one without the other. Minors commonly have Aadhaar but no PAN; exempt categories (covered below) can hold PAN without linking Aadhaar.
• Most real products need both. A demat account, a mutual fund folio, a home loan — each will ask for PAN, and each will run KYC on Aadhaar or equivalent documents.

Getting a PAN: the instant, free route

If you have no PAN yet, you may not need the paper application at all. The e-Filing portal runs an Instant e-PAN service: free, available without even logging in, which issues a digitally signed PAN in electronic form using your Aadhaar. Three prerequisites: a valid Aadhaar, a mobile number linked to that Aadhaar (for the OTP), and access to DigiLocker, which the portal uses to pull your date-of-birth proof — Class X marksheets, birth certificates, driving licences and a few other DigiLocker-held documents qualify.

The flow, compressed:

1. On the e-Filing portal, click Instant e-PAN under Quick Links, then Get New e-PAN.
2. Enter your 12-digit Aadhaar, validate the OTP sent to your Aadhaar-linked mobile, and allow DigiLocker to share one date-of-birth document.
3. Note the acknowledgement number, then check status and view or download the e-PAN from the same Check Status / Download e-PAN tile.

Two limits matter: minors cannot use this route, and neither can anyone who already holds a PAN. The e-PAN itself costs nothing; a printed physical card is a separate, paid product from the PAN service providers. Source: Income Tax e-Filing portal, Instant e-PAN FAQ (accessed 3 November 2026).

The full walkthrough — eligibility fine print, why applications get rejected, and how the printed card arrives afterwards — lives in our instant e-PAN guide, Free PAN Card in 10 Minutes: Instant e-PAN Guide (2026).

Aadhaar: enrolment is free, updates have a price list

Aadhaar enrolment has always been free. What people actually pay for is updates — and UIDAI revised that price list on October 1, 2025, the first change in years, so guides quoting ₹50 biometric updates are out of date. The current schedule, from UIDAI's own fee document:

A few extras worth knowing: updating your email address through the Aadhaar app is free until December 31, 2026; the mandatory biometric update is a stand-alone transaction and cannot be clubbed with anything else. Source: UIDAI, Aadhaar Enrolment and Update charges schedule, uidai.gov.in PDF (accessed 3 November 2026).

Where do you actually get these done? Three channels. Aadhaar Seva Kendras — UIDAI's own dedicated centres with bookable appointment slots — are the cleanest experience for anything involving biometrics. Neighbourhood enrolment/update centres (often in banks, post offices and CSCs) handle the routine queue. And myAadhaar portal at myaadhaar.uidai.gov.in handles demographic and document updates from home, plus services like address update with a head-of-family consent. UIDAI's helpline, 1947, resolves lost EIDs and update-status queries for free.

The PVC card, briefly: the pocket-sized plastic version is ordered online from myAadhaar for ₹75, inclusive of GST and speed post — the fee was ₹50 until December 31, 2025 (current fee per UIDAI's Aadhaar Online Services page, accessed 3 November 2026; the January 1, 2026 revision cross-checked against Economic Times' report of the same date). The e-Aadhaar PDF, meanwhile, is a free download. Which version suits which need, and the exact download steps on every channel, are covered in our guide Aadhaar Download and PVC Card Order: All Methods.

PAN-Aadhaar linking: where things stand

The rule comes from Section 139AA: every PAN holder eligible for Aadhaar must intimate the two together, and a PAN not linked to Aadhaar became inoperative from July 1, 2023. Inoperative does not mean deleted — it means the tax system stops cooperating:

• Pending income tax refunds are not issued, and no interest accrues on them for the inoperative period.
• Tax deducted at source on your payments runs at the higher Section 206AA rate (20% or the specified rate, whichever is higher) instead of your slab-backed rate.
• Tax collected at source similarly defaults to the higher Section 206CC treatment.

Linking is still open — permanently, on payment of the ₹1,000 fee under Section 234H, paid through e-Pay Tax on the portal before submitting the Link Aadhaar request. Once processed, the PAN turns operative again. Source: Income Tax e-Filing portal, Link Aadhaar FAQ, citing Circular No. 03 of 2023 dated March 28, 2023 (accessed 3 November 2026).

The mandate does not apply to everyone. Residents of Assam, Jammu and Kashmir and Meghalaya, non-residents, citizens aged eighty or more, and non-citizens are exempt — they can link voluntarily, but the inoperative consequences do not touch them.

One practical snag trips up thousands of link requests: a name or date-of-birth mismatch between the two databases. The fix is to correct whichever record is wrong — PAN corrections go through Protean or UTIITSL, Aadhaar corrections through an update centre or the portal — and where that fails, both PAN service providers offer biometric-based authentication at dedicated centres; you carry your PAN, Aadhaar and the ₹1,000 challan copy.

An inoperative PAN is silent. Your next refund simply does not arrive, and your next TDS certificate quietly shows a bigger deduction. Check the link status once a year.

One update list to rule them all: mobile and email

Here is the dependency nobody warns you about: your Aadhaar-linked mobile number is the master key. The e-PAN flow above needs its OTP. DigiLocker signs you up with it. myAadhaar services run on it. Your EPFO passbook login, most banks' profile changes, and your e-filing account recovery all lean on some OTP — and the Aadhaar one is the root of the tree.

So the order of operations when you change your number is always the same:

1. Fix Aadhaar first — a ₹75 centre visit; UIDAI's own FAQ routes mobile-number updates through Aadhaar centres rather than the online portal.
2. Then propagate downwards: update the contact in your e-filing profile, your bank account, your demat and mutual fund folios, and your EPFO/UAN record.
3. Test each OTP channel the same week — a number updated on paper but never verified is a problem you discover during a crisis.

Each of those four systems has a different click-path, different timelines and its own quirks (EPFO, for instance, routes employer-verified changes). Our guide Update Mobile and Email: Aadhaar, PAN, Bank, EPFO (2026) walks each one step by step; keep this section as the checklist and that post as the manual.

When someone asks for KYC: e-KYC, offline XML and the honest options

Sooner or later a bank, fund house, wallet or SIM counter asks to verify you. Knowing the three main mechanisms protects both your data and your patience.

Aadhaar e-KYC (OTP-based). You consent, enter the OTP sent to your Aadhaar-linked mobile, and UIDAI passes your name, gender, date of birth, masked Aadhaar and photograph to the institution. It is instant, paperless and the default at most regulated entities. The consent screen is not decoration — read what is being shared and for what purpose.

Aadhaar Paperless Offline e-KYC. If you would rather not hand anyone your biometrics or OTP, download a digitally signed XML from myaadhaar.uidai.gov.in/offline-ekyc — the file is zipped with a share phrase only you set — and hand the zip to the institution, which verifies UIDAI's signature offline. Your Aadhaar number never goes to them in this flow. Source: UIDAI, Aadhaar Paperless Offline e-KYC (uidai.gov.in, accessed 3 November 2026).

DigiLocker. Issued documents pulled from partner departments (CBSE marksheets, driving licence, vehicle RC) carry the issuer's digital signature and are accepted for KYC at most institutions. It is also the layer the Instant e-PAN flow itself uses for date-of-birth proof.

On the PAN side, the useful utility is Verify PAN Status — a quick link on the e-Filing portal where you enter the PAN (yours or a counterparty's, say a landlord's or a payer's) and see whether it is valid and active. Institutions verify PANs through the PAN verification services run by Protean and UTIITSL; as an individual, the e-Filing tool is the free public equivalent. Source: Income Tax e-Filing portal, Verify Your PAN user manual (accessed 3 November 2026).

Security hygiene worth building

Neither document is secret — your PAN and Aadhaar numbers are meant to be quoted to institutions. What is secret, and stays secret, is everything that can authorise a change or an authentication:

• Never share an OTP, PIN, or biometric with anyone. UIDAI has repeatedly advised that it never calls or messages asking for your Aadhaar OTP. No government agency, bank or KYC agent ever needs it.
• Lock what you are not using. The Biometric Lock disables fingerprint and iris authentication until you unlock it; the Aadhaar Lock goes further and blocks all authentication using the number, its virtual ID and tokens. Both toggle from myAadhaar, mAadhaar or the newer Aadhaar app, and unlock temporarily when you genuinely need a service. Source: UIDAI Authentication page (accessed 3 November 2026).
• Share masked Aadhaar (ends in the last four digits) for routine KYC wherever the form allows it — every download channel offers the masked option.
• Review your authentication history on myAadhaar periodically; an authentication you did not make is the earliest possible signal of misuse.
• Report fast. Suspicious Aadhaar activity goes to UIDAI on 1947 or [email protected]; financial cyber fraud to 1930 or cybercrime.gov.in. Speed matters — early reporting can freeze money in transit.

Your identity documents are data. The number itself is not the treasure — the OTPs and biometrics that unlock it are. Guard those two and almost every Aadhaar fraud scenario collapses.

Where to go next in this cluster

If you are getting your first PAN, start with the instant e-PAN walkthrough (Free PAN Card in 10 Minutes), then link it to Aadhaar using the steps above before your first return. If your card is lost or you want the plastic version, the Aadhaar Download and PVC Card Order guide covers every channel. And if you have changed your phone number this year, do the four-system update sweep from Update Mobile and Email: Aadhaar, PAN, Bank, EPFO before anything forces an OTP at the worst moment. The cluster is sequenced the way life throws these tasks at you: get, protect, update.

This is educational content, not legal or tax advice. For a specific dispute — an inoperative PAN, a rejected update, a suspected misuse — start with the departmental helpdesks (1947 for Aadhaar, the e-filing contact centre for PAN) or a qualified professional.