A Digital Forensics Model for the Examination of QR Code and Android App to Investigate Aadhaar Card Identity Fraud

Abstract

There are various new-age crime rackets reported with the help of digital technology and such cases are routinely investigated by the police and digital forensics analysts. In the course of investigation of different rackets such as Aadhaar card, ATM card, PAN card, ration card, voter identity card, passport, fake Indian currency note, various electronic gadgets such as mobile phones, laptops, desktops, biometric scanners, GPS devices, SIM cards, portable skimmers and hi-tech printers are usually taken from the fraudsters for digital forensics analysis. In one case, some Aadhaar cards, mobile phones, laptops, SIM cards and memory card were seized from some suspected airline passengers by the law enforcement agency. All the key probe elements were received for digital forensics examination. In this paper, we propose a digital forensics model for decoding a distorted QR code and specialized Android app used in the creation of fake Aadhaar cards. This model comprised a new algorithm to decode QR codes and recovery of background data including resources associated with the QR code. The proposed model was tested with a QR code retrieved from a suspect’s laptop and Aadhaar card document. The Android app used for preparation of fake Aadhaar card was analyzed in our model and also checked in a mobile phone to verify data generated through the app. The result of the analysis detects fake Aadhaar cards. Further, examination of mobile phones and laptops revealed various technical data, supporting link evidence for preparing disputed fake Aadhaar cards for ID proof.

Keywords:

• Aadhaar card
• Android app
• decode
• digital forensics
• ID proof
• QR code

Acknowledgment

The authors are thankful to Mr. Oscar Ochoi, MSAB and Mr. Ajay Sariyal, MSAB for providing technical support to analyze the data for successful investigation of the case.

Disclosure statement

No potential conflict of interest was reported by the authors.