Free demo hits. Pay when you go live. Request access
Identity & KYC

Aadhaar eKYC (OTP) API

Run a complete, consent-based Aadhaar eKYC: the person enters the OTP sent to their Aadhaar-linked mobile, and you receive their verified name, date of birth, gender, address and photograph. The gold standard for regulated onboarding.

Response
Async, by webhook
Inputs
2 required
Consent
Recorded per request
Billing
Per successful call
POST /v1/aadhaar-ekyc-otp
Sandbox · Production
  1. Your application sends

    • Aadhaar number*
    • OTP entered by the person*
  2. emver API

    Issues a hosted consent link, tracks the person's authorisation and assembles the result.

  3. Completed via

    UIDAI OTP on the Aadhaar-linked mobile

  4. You receive by webhook

    • Verified name
    • Date of birth
    • Gender
    • Full address
    • Photograph
    • Masked Aadhaar
    • Consent reference
aadhaar-ekyc-otp Full reference
Overview

What the Aadhaar eKYC (OTP) API does

Where demographic validation only confirms a number is genuine, OTP-based eKYC proves the person in front of you controls the Aadhaar and returns the full KYC record from the authority: name, date of birth, gender, full address and photo. It is the identity check regulators expect for accounts, lending and high-value onboarding.

The flow is two calls: generate the OTP against the Aadhaar number, then submit the OTP the person received. emver hosts the consent screen if you want it, captures the consent artefact and returns a masked Aadhaar with the KYC data.

Consent is part of the contract

OTP-based eKYC is consent by construction: the person must enter the code sent to their own mobile. emver stores the consent text, timestamp and transaction reference with the request.

Benefits

Why teams use the Aadhaar eKYC (OTP) API

Full Aadhaar eKYC with a one-time password on the registered mobile.

Regulator-grade identity

Meets KYC expectations for accounts, loans and investment products.

Address included

Removes the need for a separate address proof for most onboarding flows.

Photo for face match

Pair the returned photo with Face Match and Liveness to close the loop.

Consent artefacts stored

Every eKYC keeps its consent record for audits and data-subject requests.

Use cases

Where it's called

Where the Aadhaar eKYC (OTP) API is typically called, and what it settles there.

Account opening

Fully digital KYC for savings, current and demat accounts.

Lending and insurance

Identity and address in one step before disbursal or policy issue.

Employee onboarding

Verified identity and address for the personnel file.

Age-gated platforms

Confirm date of birth for gaming, trading and other restricted services.

How it works

Four steps, one response envelope

Request and response details, environments and a ready-to-import collection are in the developer console.

  1. 01

    Authenticate

    Call with your organisation API key. Sandbox and production use the same contract.

  2. 02

    Create the consent link

    Send the person's details and the documents you need. You receive a hosted link to share on any channel.

  3. 03

    The person authorises

    They sign in and choose what to share. Nothing moves without their approval.

  4. 04

    Receive the result

    Verified documents and details arrive by webhook or on the status endpoint.

Privacy and security built in

Consent recorded · Payloads not retained beyond your retention window · Every request traceable

FAQ

Aadhaar eKYC (OTP) API: frequently asked questions

What teams ask before adding the Aadhaar eKYC (OTP) API to their integration.

They cannot complete OTP eKYC. Fall back to DigiLocker, or to demographic Aadhaar validation combined with Face Match on an ID document.

No. emver can host the consent and OTP screens and hand the result back, or you can build your own and pass the consent record with the request.

No. Responses carry a masked Aadhaar, and the raw number is not persisted.

Related

APIs that run alongside it

Usually called with the Aadhaar eKYC (OTP) API, on the same key.

All APIs
Access usually set up within one working day

Start verifying with emver today.

Tell us which APIs and what monthly volume. We set up your organisation, approve the APIs with demo hits and share per-call pricing.