IRCTC Deactivates 3.03 Crore Suspicious User IDs and Mandates Aadhaar KYC for Tatkal Bookings

Booking a Tatkal or Vande Bharat ticket online is set to look and feel different for millions of Indian Railways passengers. IRCTC has quietly combined a massive KYC clean-up with tighter Aadhaar-based checks, deactivating 3.03 crore suspicious user IDs and restricting high-demand bookings to verified accounts. The shift aims to push bots and touts out of the queue, while keeping genuine passengers inside it.

In 2025, IRCTC’s internal fraud sweep deactivated 3.03 crore user IDs flagged as suspicious and pushed another 4.86 crore accounts into revalidation, alongside blocking 12,819 shady email domains linked to unusual booking patterns. Officials say these measures, coupled with stronger cybercrime tracking, are meant to clean up years of distorted demand and restore fairness in online ticket allocation.

IRCTC Aadhaar KYC crackdown: What exactly has changed

The biggest change now confronting users is at the point of booking. IRCTC has made Aadhaar verification compulsory for all online Tatkal tickets and for tickets booked on the opening day of the Advance Reservation Period, when seats typically vanish within minutes. Only Aadhaar-verified accounts can access these high-pressure booking windows, whether for regular superfast trains or premium services like Vande Bharat.

According to IRCTC’s statement, Aadhaar-based authentication is designed to stop mass creation of fake profiles and scripted logins that corner Tatkal quotas before normal users even see availability. The verification relies on a one-time OTP-based process linked to Aadhaar, with the system now integrated across the IRCTC website and the Rail Connect mobile app for consistency.

Railway Minister Ashwini Vaishnaw told Parliament that Aadhaar OTP checks, first piloted on Tatkal bookings in select trains, extended the window to secure confirmed Tatkal seats by around 65 percent in those services. For passengers, that translates to a slightly longer chance to grab tickets in premium and high-demand trains instead of watching entire coaches fill up within seconds of quota opening.

Impact on family accounts, agents and frequent travellers

The new rules particularly affect households that use one IRCTC login to book tickets for several family members. The account holder’s Aadhaar must be verified, but co-passengers do not need separate IRCTC IDs; they only need valid ID proof for travel as before. However, families that relied on unverified, older logins may now see booking attempts blocked until KYC is completed.

Authorised agents and cyber café operators face a different kind of scrutiny. IRCTC’s data shows a pattern of concentrated bookings and suspicious PNR clusters that triggered 376 complaints on the National Cyber Crime Portal in 2025 alone. While licensed agents remain part of the ecosystem, bulk creation of retail IDs and script-based bookings are squarely in the crosshairs of the KYC drive.

IRCTC anti-fraud action (2025)	Scale
Suspicious user IDs deactivated	3.03 crore
User IDs under revalidation	4.86 crore
Suspicious email domains blocked	12,819
Cybercrime complaints on suspicious PNRs	376

How Aadhaar KYC and login recovery will work for users

For most passengers, the Aadhaar process is expected to surface as a KYC prompt during login or at the payment stage. Users must log in, navigate to the profile section, choose Aadhaar authentication, enter their Aadhaar number and validate via OTP sent to their registered mobile. Reports from earlier phases show this has already been rolled out across hundreds of trains.

Those whose accounts are disabled or forced into revalidation will likely be nudged towards online grievance channels such as IRCTC’s eQuery portal and email support, rather than call centres alone. User feedback over the past year indicates that sharing Aadhaar and basic ID details through these official channels has helped many passengers regain access, though resolution times remain uneven.

Behind the scenes, IRCTC has also upgraded its website architecture and Rail Connect app, adding a content delivery network and advanced anti-bot filters to handle genuine spikes in traffic during Tatkal hours. For everyday users that should mean faster page loads, fewer crashes and a booking race in which human speed, not scripts or tout networks, increasingly decides who actually gets a confirmed seat.