1. Introduction

Online identity vs real identity mismatch disputes arise when a person's identity, personal information, photograph, credentials, or claimed status on a digital platform does not match their actual identity or verified records. Such disputes may involve social media accounts, online employment applications, digital banking, Aadhaar authentication, electronic contracts, online examinations, or identity verification systems.

A mismatch does not automatically establish fraud. It may result from a genuine spelling error, outdated information, a technical failure, a name change, identity theft, impersonation, or deliberate misrepresentation. Legal liability depends on the facts, the applicable law, the person's intention where relevant, and the consequences of the mismatch.

In India, these disputes may involve the Information Technology Act, 2000, the Aadhaar Act, 2016, the Bharatiya Nyaya Sanhita, 2023, applicable data-protection legislation, contractual principles, and constitutional protections relating to privacy and personal liberty.

2. Meaning and Scope

Online identity refers to the identity a person presents or uses in a digital environment. It may include a username, profile photograph, email address, digital credentials, identification number, professional profile, or verified account.

Real identity refers to the person's actual identity, established through reliable evidence such as appropriate official records, verified credentials, or other legally acceptable proof.

An identity mismatch occurs when these two do not correspond or when the digital identity is associated with the wrong person.

Common examples include:

A person using another individual's photograph and name on a social media account.

A job applicant submitting inaccurate qualifications or identity documents through an online recruitment portal.

An individual using another person's credentials to complete an online examination.

A bank account being opened using forged or stolen identity documents.

An incorrect date of birth or name in an identity database causing authentication failure.

A genuine person being wrongly suspected of impersonation because of a technical or biometric mismatch.

3. Types of Online Identity Mismatch Disputes

A. Identity theft and impersonation

Identity theft occurs when another person's identifying information is misused, often to obtain money, access accounts, deceive others, or conduct unauthorised transactions. Impersonation may attract criminal liability when the statutory requirements are satisfied.

B. False digital profiles

A person may create an account using a false name, photograph, professional designation, or other person's credentials. The legal consequences depend on whether the conduct involves deception, unlawful gain, defamation, harassment, fraud, or another recognised legal wrong.

C. Employment and recruitment discrepancies

An applicant may provide inconsistent information about their qualifications, experience, employment history, age, or identity. An employer may investigate the discrepancy, but disciplinary or recruitment decisions should be based on reliable evidence and applicable employment rules.

D. Aadhaar and biometric mismatch

A genuine person's fingerprints, photograph, demographic details, or other records may fail to match an identity database. Such a failure is not, by itself, proof of impersonation or fraud. Authorities must distinguish technical errors from deliberate identity misuse.

E. Online examination impersonation

A candidate may attempt to sit an examination using another person's identity or credentials. This can lead to cancellation of candidature, disciplinary proceedings, or criminal prosecution, depending on the applicable rules and evidence.

F. Privacy and data-protection disputes

A mismatch may arise because an organisation collects inaccurate personal data, links one person's information to another, or fails to correct an identified error. Depending on the circumstances, this may raise issues of privacy, accuracy, security, and lawful processing of personal data.

4. Legal Framework in India

A. Information Technology Act, 2000

The Information Technology Act addresses several forms of digital wrongdoing. Depending on the facts, Section 66C may apply to dishonest or fraudulent use of another person's electronic signature, password, or other unique identification feature. Section 66D addresses cheating by personation using a computer resource or communication device.

A simple discrepancy in a digital profile does not automatically satisfy these provisions; the required statutory elements must be established.

B. Aadhaar Act, 2016

Sections 34–36 address specified forms of impersonation and unauthorised conduct under the Aadhaar framework. Section 34 concerns impersonation at enrolment, Section 35 concerns specified impersonation involving changes to an Aadhaar holder's information, and Section 36 concerns falsely pretending to be authorised to collect identity information.

These provisions apply according to their precise statutory conditions and should not be treated as covering every identity mismatch.

C. Bharatiya Nyaya Sanhita, 2023

Depending on the facts, provisions relating to cheating, cheating by personation, forgery, and the use of forged documents or electronic records may become relevant. A mismatch alone does not establish these offences; the prosecution must prove the applicable elements.

D. Constitutional protection of privacy

Article 21 of the Constitution protects personal liberty and has been interpreted to include the right to privacy. Digital identity systems and the handling of personal information must be assessed in accordance with applicable constitutional and statutory requirements.

E. Digital personal data protection

The Digital Personal Data Protection Act, 2023, provides a statutory framework for the processing of digital personal data, subject to its provisions, commencement and applicable rules. Where identity information is inaccurate or incorrectly linked, the relevant rights and obligations must be assessed under the law in force at the time.

5. Important Case Laws on Online Identity and Identity Mismatch

The following judgments provide relevant principles concerning digital identity, privacy, electronic evidence, impersonation, and identity verification. Some are directly concerned with digital identity systems, while others establish legal principles applicable to identity-mismatch disputes.

1. Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Court: Supreme Court of India.

Principle: The nine-judge Constitution Bench recognised privacy as a fundamental right protected by the Constitution, particularly under Article 21 and the freedoms and liberties guaranteed by Part III.

Legal significance: Digital identity systems can involve sensitive personal information and the ability to connect different records to a particular individual. The judgment establishes that privacy is constitutionally protected and that state action affecting privacy must satisfy applicable constitutional standards.

Application: A person challenging excessive or unjustified collection or use of identity information may rely on the constitutional principles established in this case.

2. Justice K.S. Puttaswamy (Retd.) v. Union of India (2018) — Aadhaar judgment

Court: Supreme Court of India.

Principle: The Court examined the constitutional validity of the Aadhaar framework, including authentication, identity verification, privacy safeguards, and the permissible uses of Aadhaar.

Legal significance: Identity verification must be considered within the relevant statutory framework. An authentication system is not a universal determination of every aspect of a person's identity, and its use is subject to the limits established by law.

Application: Where a genuine individual faces an identity dispute because of authentication failure, the underlying records, available verification methods, and statutory safeguards must be examined rather than assuming that a failed authentication proves impersonation.

3. Shreya Singhal v. Union of India (2015)

Court: Supreme Court of India.

Principle: The Court struck down Section 66A of the Information Technology Act, 2000, as unconstitutional and considered the distinction between online expression, intermediary liability, and constitutionally protected speech.

Legal significance: Online conduct must be assessed under the correct legal provision. The existence of an online profile, a disputed digital statement, or an allegation concerning online conduct does not independently establish criminal liability.

Application: In disputes involving false online profiles, disputed statements, or accusations made through digital platforms, the specific conduct and applicable law must be examined separately. This case is relevant to the online context, although it does not directly decide the general question of identity mismatch.

4. Binoy Viswam v. Union of India (2017)

Court: Supreme Court of India.

Principle: The Court considered the statutory requirement linking Aadhaar with PAN under Section 139AA of the Income-tax Act, 1961, and the associated constitutional challenges.

Legal significance: The case demonstrates that identity-linking requirements between databases are governed by legislation and constitutional limits, rather than by the technical capabilities of a system alone.

Application: Where two official records cannot be linked or contain inconsistent particulars, the relevant statutory requirements, verification process, and available remedies must be examined.

5. Anvar P.V. v. P.K. Basheer (2014)

Court: Supreme Court of India.

Principle: The Court explained the requirements under Section 65B of the Indian Evidence Act, 1872, for the admissibility of electronic records produced as secondary evidence.

Legal significance: Electronic material must satisfy the applicable evidentiary requirements before it can be relied upon in court. A screenshot, online profile, email, or digital record should not automatically be treated as conclusive proof of who created it or who controlled the account.

Application: In online impersonation disputes, evidence such as account records, messages, transaction logs, and electronic documents must be properly established in accordance with the evidence law applicable to the proceeding.

6. Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020)

Court: Supreme Court of India.

Principle: The Court clarified the requirements for admitting electronic records under Section 65B of the Indian Evidence Act, 1872, including the circumstances in which the prescribed certificate is required.

Legal significance: The authenticity and admissibility of electronic evidence are central to disputes involving online accounts and digital identity. Evidence must be evaluated according to the applicable rules rather than accepted solely because it appears on a screen.

Application: When a party alleges that an online identity belongs to another person, properly preserved and admissible electronic evidence may be important in establishing the relevant facts.

7. Vilas Prabhakar Lad v. Unique Identification Authority of India (UIDAI) (2025)

Court: Bombay High Court.

Principle: The case concerned alleged identity misuse, including fraudulent identity documents, and the response of the authorities to complaints concerning such misuse.

Legal significance: The judgment highlights the importance of an effective response by statutory authorities when credible allegations of identity fraud are brought to their attention.

Application: A person whose identity has allegedly been misused may seek appropriate action through the competent authorities. The case also illustrates why identity disputes require a meaningful investigation rather than an assumption that the complainant or the person identified in a disputed record is necessarily at fault.

These judgments should be applied according to their actual holdings. In particular, the electronic-evidence cases concern proof and admissibility, not a general rule that every digital identity mismatch constitutes a crime.

6. Determining Liability in an Identity Mismatch Dispute

A court, employer, platform, or investigating authority should distinguish between an innocent discrepancy and deliberate deception.

7. Employer and Workplace Liability

Online identity mismatch disputes are particularly important in recruitment, employee onboarding, remote work, and workplace compliance.

A. Employee identity verification

An employer may verify an applicant's identity and qualifications where legally permitted and relevant to the role. However, an inconsistent name or record should be investigated fairly before a decision is made.

B. Misrepresentation during recruitment

If an applicant deliberately submits forged certificates or falsely claims another person's qualifications, the employer may take action under applicable recruitment policies, contractual terms, and employment law.

C. Misattributed online conduct

An employee should not automatically be held responsible for a social media account or online communication merely because the account contains their name or photograph. Evidence connecting the employee to the account or activity may be necessary.

D. Employer data errors

If an employer's system links one employee's records to another person, the error may affect salary payments, attendance, tax records, or access to benefits. The organisation should investigate the discrepancy, correct inaccurate records through the appropriate process, and assess whether any legal obligations have been breached.

E. Procedural fairness

Where identity mismatch allegations could lead to dismissal, loss of benefits, or other serious consequences, the employer should follow applicable service rules, contractual terms, and procedural requirements. A reasonable investigation helps distinguish intentional misconduct from genuine error.

8. Evidence Required to Establish an Identity Mismatch

Relevant evidence may include:

Official identity documents and their verification records.

Original educational, employment, or professional certificates.

Account registration and authentication records obtained lawfully.

Emails, messages, transaction records, or relevant platform logs.

Documents recording a lawful change of name or correction of personal details.

Technical or biometric verification reports.

Witness statements and other evidence linking the disputed activity to a particular person.

The admissibility, reliability, and weight of each item depend on the applicable evidence law and the circumstances in which the evidence was obtained. Electronic records should be preserved in a manner that supports their authenticity and integrity.

9. Remedies Available to an Aggrieved Person

Depending on the nature of the dispute, a person may consider the following steps:

Request correction of inaccurate identity records from the responsible organisation or authority.

Report an impersonating account to the relevant digital platform.

Report suspected identity theft or cybercrime to the appropriate law-enforcement authority.

Seek appropriate relief under applicable privacy, data-protection, contractual, or civil law.

Challenge an unfair employment or administrative decision through the available grievance or legal process.

Seek judicial relief where a competent court has jurisdiction and the facts justify it.

A person should retain relevant records and complaint acknowledgements. Access to another person's confidential identity information must be sought through lawful procedures.

10. Conclusion

Online identity vs real identity mismatch disputes arise when digital profiles, electronic credentials, or database records conflict with a person's actual identity. These disputes may involve innocent clerical errors, technical authentication failures, deliberate impersonation, forged documents, or misuse of personal information.

The judgments in Puttaswamy, Shreya Singhal, Binoy Viswam, Anvar P.V., Arjun Panditrao Khotkar, and Vilas Prabhakar Lad provide relevant principles concerning privacy, statutory identity verification, online conduct, electronic evidence, and responses to identity fraud.

The central legal principle is that an identity mismatch is a reason to investigate, not automatic proof of fraud. Liability must be determined from reliable evidence, the applicable legal provisions, the nature of the discrepancy, and the person's involvement. A fair verification process protects both the integrity of digital identity systems and the rights of genuine individuals.