KYC on Dating Apps: What India's Proposed Mandate Means for Your Privacy

On March 23, 2026, the Parliamentary Committee on the Empowerment of Women tabled its Fourth Report on "Cyber Crimes and Cyber Safety of Women" in both Houses of Parliament. Among its recommendations: mandatory Know Your Customer (KYC) verification for all users of social media platforms, dating apps, and online gaming services.

If implemented, every person signing up for a dating app in India would need to verify their identity through government-issued documents -- the same process you follow when opening a bank account.

The proposal has triggered a debate that sits at the intersection of two legitimate concerns: protecting users from scams, harassment, and fake profiles on one side, and preserving digital privacy and anonymous expression on the other.

This article breaks down what the proposal actually says, how it would work, what it means for your privacy as a dating app user, and how the technology exists to solve the underlying problems without sacrificing anonymity.

What Exactly Did the Parliamentary Committee Propose?

The Committee on the Empowerment of Women recommended that the Ministry of Home Affairs and the Ministry of Electronics and Information Technology implement mandatory identity verification across digital platforms. The key provisions include:

• Mandatory KYC authentication before users can access social media, dating apps, and online games
• Periodic re-verification of existing users
• High-risk flagging for accounts repeatedly reported for abusive behaviour
• Stricter licensing guidelines for dating and gaming platforms
• Robust age verification mechanisms to prevent minors from accessing inappropriate content

The committee's rationale focuses on combating fake profiles, impersonation, and anonymous harassment. Linking accounts to verified identities, the panel argues, would create accountability and reduce cybercrime.

It is important to understand that this is a recommendation, not a law. Parliamentary committee reports carry significant influence on policy direction, but implementation requires separate legislative or regulatory action by the government.

The Problem the Proposal Aims to Solve

The committee's concerns are grounded in real data. India faces a genuine online safety crisis, particularly for women:

• 66% of Indian adults have experienced a romance scam, according to a Norton Cyber Safety Insights Report -- the highest rate globally.
• 43% of Indian users became victims of romance scams in 2024, per a McAfee study.
• 77% of Indian dating app users have encountered fake profiles or AI-generated photos.
• 39% of users discovered that conversations they believed were with real people were actually with scammers.
• India accounted for 12% of new romance scam profiles globally in 2024, behind only the US (38%) and Nigeria (14%), according to Moody's.
• Indian citizens lost a staggering INR 22,845 crore (approximately USD 2.7 billion) to cyber frauds in 2024 -- a 206% increase from the previous year.

These are not abstract numbers. They represent real people who were manipulated, extorted, and defrauded through platforms that failed to verify who was on the other end of the conversation.

The committee's logic is straightforward: if every user must verify their identity, bad actors can be identified and held accountable.

Why KYC on Dating Apps Is More Complicated Than It Sounds

The proposal's premise -- verified identity reduces harm -- is intuitively appealing. But when applied to dating apps specifically, the consequences are more complex than the committee's report acknowledges.

1. KYC Creates a Massive Data Honeypot

Mandatory KYC means dating apps would store government ID documents -- Aadhaar numbers, PAN cards, passport details -- alongside intimate personal data like sexual orientation, relationship preferences, and private conversations.

This creates what security professionals call a "honeypot": an irresistible target for hackers.

Consider the track record: 52% of dating apps have experienced data breaches, leaks, or hacks in the past three years, according to Mozilla's research. The Tea dating app exposed 72,000 user images, including verification selfies. Match Group, which operates Tinder and Hinge, has had multiple data incidents.

Now imagine those breaches including Aadhaar numbers.

Cybersecurity consultant Harman Singh, with over 15 years in the field, warns: "Mandating KYC for dating apps without establishing ironclad security standards for how that identity data is stored and protected is putting the cart before the horse. You're asking platforms with poor security track records to become custodians of government identity documents."

2. Anonymity Protects Vulnerable Users

The committee frames anonymity as the problem. But for many dating app users, anonymity is the protection.

• LGBTQ+ individuals who are not publicly out use anonymous dating to explore connections safely. Mandatory KYC tied to their legal identity eliminates this safety net.
• Women in conservative families use anonymous dating to avoid discovery by family members who might react with social punishment or violence.
• Professionals in public-facing roles -- teachers, doctors, government employees -- use anonymous profiles to date without professional consequences.
• Domestic abuse survivors rely on anonymity to form new connections without being tracked by former partners.

Mandating real-identity verification doesn't just create a privacy inconvenience. For these groups, it creates genuine risk.

3. KYC Doesn't Stop Sophisticated Scammers

Professional scammers and organised romance fraud operations typically use stolen or synthetic identities. They can pass KYC checks using compromised documents -- a problem the Indian banking sector, which has had KYC for decades, still struggles with.

A 2024 Moody's report identified 1,193 new entities globally with potential ties to romance scams -- a six-year high. These are not individuals who would be deterred by uploading an Aadhaar card.

The users most affected by mandatory KYC would be ordinary people who value privacy, not the criminals the policy targets.

4. It Conflicts With the DPDPA's Core Principles

India's own Digital Personal Data Protection Act (DPDPA), enacted in 2023, establishes data minimization as a foundational principle. Apps should collect only the data necessary for their stated purpose.

The stated purpose of a dating app is facilitating connections between people. Collecting government identity documents goes well beyond what's necessary for that purpose.

Dr. Pavan Duggal, a Supreme Court advocate and one of India's leading cyber law experts, has noted: "There is a fundamental tension between the parliamentary committee's KYC recommendation and the DPDPA's data minimization principle. The law says collect less; the committee says collect more. One of them will have to yield."

The DPDPA's penalty provisions are already substantial -- INR 500 million to INR 2.5 billion for non-compliance. If mandatory KYC forces apps to collect more data than necessary, it could create a legal contradiction within India's own regulatory framework.

What Happens Next?

The parliamentary committee's report is a recommendation, not legislation. Several paths are possible:

Scenario 1: Full Implementation

The government accepts the recommendation and mandates KYC for all dating apps. This would require regulatory changes under the IT Act or new rules under the DPDPA framework. Implementation would likely take 12-18 months and face legal challenges.

Scenario 2: Modified Implementation

The government implements a softer version -- perhaps requiring verification at the platform level (the app verifies the user) without requiring government ID storage. This would address fake profiles without creating an identity data honeypot.

Scenario 3: Industry Self-Regulation

Dating apps voluntarily implement stronger verification systems to pre-empt regulation. Some apps already use video verification, behavioural analysis, and AI-powered fraud detection that verify users are real without requiring government documents.

Scenario 4: No Action

The recommendation joins previous committee reports that influenced public discourse but did not result in direct legislation. The government focuses on DPDPA enforcement instead.

The Better Alternative: Verification Without Identification

The core question isn't whether dating app users should be verified. It's whether verification requires identification.

These are different things:

• Verification confirms that a user is a real, unique person. It answers: "Is this a real human, not a bot or duplicate account?"
• Identification confirms exactly who that person is. It answers: "What is this person's legal name, address, and government ID number?"

The first is necessary for safe dating. The second is not -- and it creates more risks than it solves.

Technologies that verify without identifying include:

• Liveness detection: Confirms a real person is behind the camera, not a photo or deepfake
• Behavioural analysis: Identifies bot-like or scam-like patterns in how users interact
• Phone number or email verification: Confirms a person controls a real contact method without storing government documents
• Zero-knowledge proofs: Cryptographic methods that prove a fact about you (e.g., "I am over 18") without revealing the underlying data

Platforms like Hidnn demonstrate that it's possible to verify users are genuine while preserving their right to control when and how they share their identity. The technology exists. The question is whether regulation will be designed around it.

What You Should Do Right Now

Regardless of how the KYC debate resolves, you can take practical steps to protect your privacy:

1. Know your rights under the DPDPA. You have the right to access your data, request deletion, and withdraw consent. Exercise these rights with every dating app you use.

2. Audit your current apps. Check what identity documents or verification data each app holds. Request deletion of anything unnecessary.

3. Choose privacy-first platforms. Apps that verify you're real without requiring government IDs offer the best balance of safety and privacy. This approach becomes especially important if KYC regulation moves forward.

4. Separate your dating identity from your government identity. Use a dedicated email address for dating apps. Don't link social media accounts. Share personal details only through encrypted channels.

5. Follow the legislative process. The parliamentary committee recommendation will be debated. Public input matters. Digital rights organisations like the Internet Freedom Foundation track these developments and provide analysis.

Frequently Asked Questions

Is KYC on dating apps mandatory in India right now?

No. As of April 2026, KYC on dating apps is a recommendation from the Parliamentary Committee on the Empowerment of Women, not a law. Implementation would require separate regulatory or legislative action by the government. No timeline has been announced.

What documents would be required for dating app KYC?

The committee's report does not specify exact documents, but India's existing KYC framework for financial services typically accepts Aadhaar, PAN card, passport, voter ID, or driving licence. If applied to dating apps, similar documents would likely be required.

Would KYC eliminate fake profiles on dating apps?

Not entirely. Professional scammers often use stolen or synthetic identities that can pass KYC checks. However, KYC would raise the barrier for casual fake profile creation and make it easier to identify repeat offenders. The trade-off is that it also creates significant privacy risks for legitimate users.

How does KYC affect LGBTQ+ dating app users in India?

Despite the decriminalisation of homosexuality through the 2018 Supreme Court ruling, social acceptance varies widely. Mandatory KYC linking government identity to dating profiles could expose LGBTQ+ individuals to family, employers, or communities where their orientation is not accepted. This is a safety concern, not just a privacy preference.

Can dating apps verify users without collecting government IDs?

Yes. Technologies like liveness detection, behavioural analysis, phone verification, and zero-knowledge proofs can confirm that a user is a real, unique person without requiring government identity documents. This approach aligns with the DPDPA's data minimization principle and protects user privacy while addressing the problem of fake profiles.

---

The goal of safer dating apps is one everyone shares. The question is whether we achieve it by collecting more identity data or by building smarter verification that doesn't require it. Privacy and safety are not opposites. The right technology makes them allies.