Most cricket ID guides skip KYC or treat it as a nuisance to work around. It is neither. It is the point at which a chat-based provider relationship becomes an identity-linked account, and how you handle the documents at that moment determines whether you have a normal account or a durable identity exposure.
When KYC actually triggers
Contrary to what many first-time users expect, most Indian cricket ID providers do not ask for identity documents at signup. The pattern across the market is:
| Trigger | What is typically asked |
|---|---|
| Registration | Nothing, or just a mobile number |
| First deposit | Nothing beyond payment details |
| Small withdrawal (first time) | Sometimes bank account details for name matching |
| Larger withdrawal | Government photo ID; bank proof |
| Cumulative activity above a threshold | Full KYC pack |
| Anomalous activity flagged internally | Whatever review requires |
The lazy version of this pattern is worth flagging: a provider that never asks for any identity verification, ever, at any withdrawal size is not a good sign. It usually means they have no formal risk process, which is exactly the kind of shop that also has no formal payout process.
The other extreme – full identity capture at signup – is not necessarily better either, because it puts documents in the operator’s hands before they have demonstrated anything. The middle position, where verification scales with what you actually do on the account, is the most defensible.
What providers legitimately ask for
- Government photo ID. PAN card is the most common; Aadhaar accepted with caveats; driving licence or passport as alternatives.
- Bank proof. A cancelled cheque or a recent statement for the account you intend to withdraw to. The purpose is to match the name.
- Address proof (sometimes). A utility bill, less than three months old.
- A selfie or video verification (sometimes). To confirm the person matches the ID.
That is essentially the full list for a standard-tier account. Requests beyond it deserve scrutiny:
- Your full 12-digit Aadhaar number in plain text – unnecessary if a masked version will do.
- OTPs, PIN or bank passwords – never legitimate under any framing.
- Remote-access apps (“to help you complete verification”) – never legitimate.
- A fee to expedite or complete verification – never legitimate.
The Aadhaar problem, and its solutions
Aadhaar has become the default identity credential in India, which means it is also the most-requested and the most-exposed. The full number, once shared as an image, is out of your control forever – it cannot be revoked or reissued.
Two UIDAI features address this and are chronically underused:
Masked Aadhaar
Download from the UIDAI portal. Shows only the last four digits; masks the first eight. Visually and legally acceptable for most verification purposes. If any Aadhaar copy is going to sit on a third-party server, it should be this version, not the full one.
Virtual ID (VID)
A 16-digit temporary number that maps to your Aadhaar without exposing it. Generated on demand from the UIDAI portal, valid until you replace it. Third parties who need Aadhaar-based verification can authenticate against the VID and never see the underlying number.
For any identity check that a provider insists on, VID is the safest option. It costs a minute to generate and leaves the actual credential intact.
The chat exposure problem
This is the specific handling failure that turns ordinary KYC into a durable problem.
An identity document sent as an image over WhatsApp:
- Stays in the chat history on both devices indefinitely.
- Is backed up to WhatsApp’s cloud (Google Drive or iCloud, encrypted or otherwise depending on settings).
- Can be forwarded onward without your knowledge.
- Sits on any device the recipient uses to log into WhatsApp Web.
- Cannot be retracted.
The upload flow inside a provider portal, by contrast, at least keeps the document in a channel intended for it, and is subject to whatever data-handling policy the provider has published. Neither is perfect. The portal upload is meaningfully better.
The single change worth making: never send an identity document as a photo in a chat. Ask for a portal upload link, or use the platform’s own upload flow. If neither exists, that itself is a signal about how seriously the operator treats identity data.
A checklist worth running before you upload anything
- Am I on the real site? Type the address rather than following a link.
- Am I at a genuine trigger? An upload request unprompted by an actual withdrawal or verification step is worth pausing on.
- Is the document format masked or virtual where possible?
- Am I using the portal upload, not a chat message?
- Have I noted what I sent, when, and to whom?
Five checks that add perhaps two minutes and prevent the majority of the identity-exposure problems in this space.
What to do if documents were already exposed
- Aadhaar: monitor your authentication history at the UIDAI portal (myAadhaar section). Any unfamiliar authentication is a signal.
- PAN: check the Income Tax portal for filings or queries you did not initiate.
- Bank: monitor statements for small unrecognised transactions – a common precursor to a larger attempt.
- Credit: pull a free credit report and check for accounts or enquiries you did not authorise.
- Going forward: switch to Virtual ID for any Aadhaar-based verification.
Identity exposure through KYC handling is a slow-moving problem – the misuse often appears months later. Setting up the monitoring above is the second-best move after not creating the exposure in the first place.
Related research
- From Cricket ID to Casino ID — How the same provider account unlocks live-dealer tables, and what changes when you move from odds-based cricket markets to a house-edge product.
- Withdrawal Speed Compared — Where the 15-minute payout promise actually holds, what breaks it, and how to test any provider without risking real money.
- Market Depth by Cricket Format — How liquidity, market count and pricing efficiency shift across T20, ODI and Test cricket – and what that means for what you should bet on.
- Sportsbook vs Exchange for Cricket — Two very different products under one label: fixed-odds bookmakers versus peer-matched exchanges, and when each has the advantage.
Frequently asked questions
Do all cricket ID providers require KYC?
Effectively yes, but at different points. Most Indian providers do not ask for identity documents at signup or first deposit. Verification is commonly triggered at the withdrawal stage, particularly for larger amounts or first payouts. A provider that asks for full KYC upfront is behaving unusually for the market; one that never asks for anything is behaving worryingly.
Is it safe to send Aadhaar over WhatsApp?
Prefer not to. A photo of an Aadhaar card sitting in a chat thread stays there indefinitely, on both devices, backed up to at least one cloud, and out of your control. Where verification is genuinely required, upload through the provider portal rather than sending in chat, use a masked Aadhaar or Virtual ID rather than the full number, and share only at the point of need rather than upfront.
What is masked Aadhaar and how do I get it?
Masked Aadhaar shows only the last four digits of the number and hides the rest. You can generate it from the UIDAI portal at uidai.gov.in during Aadhaar download. It satisfies most identity-verification needs while dramatically reducing what a leaked copy exposes.
What is a Virtual ID and when should I use one?
A Virtual ID (VID) is a temporary 16-digit number that maps to your Aadhaar without revealing it. Generate one from the UIDAI portal, use it for a specific transaction, and let it expire. It is the safest way to authenticate with third parties who need Aadhaar-based verification without ever handing over the number itself.
What documents will I actually be asked for?
A government photo ID for identity – PAN card or Aadhaar most commonly – and a bank statement or cancelled cheque for the account you intend to withdraw to. Some providers accept a utility bill for address. The full driver-licence and passport combination is rarely needed for standard-tier accounts.
What if I already sent documents over chat?
Consider them exposed and act accordingly: monitor your Aadhaar authentication history on the UIDAI portal, watch for unfamiliar PAN queries on the Income Tax portal, and consider generating a Virtual ID going forward. If any misuse appears, freeze the affected credit or bank facilities immediately and report at cybercrime.gov.in.
This article is informational, intended for readers aged 18 and over, and is not legal or financial advice. If you believe identity documents have been misused, report at cybercrime.gov.in and consult your bank promptly. RBI guidance on limiting customer liability is time-sensitive.