How to Verify a CA UDIN Online: Step-by-Step Guide for Banks, Businesses and Clients

A Unique Document Identification Number, or UDIN, is one of the quickest ways for a bank, company, regulator, lender or client to check whether a document presented as being certified or issued by a practising Chartered Accountant is linked to the ICAI UDIN system. The verification process is public-facing, but it is not anonymous: the current ICAI portal asks the verifier to identify themselves and validate both a mobile number and an email address before the result is shown.

The most useful starting point is ICAI's official Verify UDIN page. Use the official portal rather than a third-party checker because UDIN is an ICAI system and the portal is the authoritative source for verification.

What UDIN verification is designed to do

ICAI introduced UDIN to help protect documents, reports and certificates issued by practising Chartered Accountants against impersonation and misuse. ICAI made UDIN mandatory in phases: certificates from 1 February 2019, GST and income-tax audit reports from 1 April 2019, and other audit and assurance functions from 1 July 2019. ICAI's official UDIN mandate announcement explains this phased implementation.

For a recipient, the practical purpose is narrower: take the UDIN printed, typed or otherwise communicated on the CA-issued document and check it through ICAI's system. A successful verification helps establish that the UDIN exists in ICAI's system and allows the verifier to view the information the portal makes available for that UDIN.

How to verify a UDIN online

1. Open the official verification page. Go to ICAI's Verify UDIN page.
2. Select the verifier type. The portal asks who is carrying out the verification, such as an authority, regulator, bank or other stakeholder.
3. Enter the verifier's details. Fill in the name of the verifier, mobile number and email address. The current page marks these fields as mandatory.
4. Enter the UDIN exactly. Copy the Unique Document Identification Number from the CA-signed or CA-certified document. Avoid typing from memory; a single incorrect character can prevent a proper match.
5. Complete the captcha and declaration. The portal requires the captcha and a declaration confirming that the verifier information is correct and is not impersonating another authority, regulator or bank.
6. Request the OTPs. The current portal sends separate OTPs to the mobile number and email address entered by the verifier.
7. Validate both OTPs. Enter and verify the mobile OTP and the email OTP.
8. Verify the UDIN. After the OTP checks are completed, use the Verify UDIN function to view the information made available by ICAI for that UDIN.

ICAI's fifth-edition UDIN FAQs also state that a regulator or third party does not need to register on the UDIN portal merely to verify a UDIN. The verifier instead supplies the requested verification details and completes the OTP process.

What should you compare after verification?

Do not stop at seeing that a UDIN can be found. Treat the portal result as one control in a document-verification process. Compare the information shown by ICAI with the document in your possession and with the context in which the document was submitted.

• Document identity: confirm that the verified record corresponds to the certificate, report or document you are reviewing.
• CA details: compare the Chartered Accountant-related information shown by the portal with the name, membership details and signature block on the document.
• Document particulars: where the portal displays document description, figures or other particulars, check whether they are consistent with the document received.
• Purpose and period: make sure the certificate or report relates to the entity, period and purpose for which you are relying on it.

Worked example: net-worth certificate submitted to a bank

Assume a company gives its bank a net-worth certificate signed by a Chartered Accountant and carrying a UDIN. The bank should first open the official ICAI verification page, enter its verifier details, complete both OTP checks and submit the UDIN. If the portal returns the UDIN, the reviewer should then compare the available CA and document information with the certificate submitted by the customer.

The verification should not replace the bank's normal credit or documentation checks. If the net-worth amount is material to a lending decision, the bank may still need to review the certificate date, the financial statements or records supporting it, the identity of the entity, any conditions stated in the certificate and the bank's internal approval requirements.

What a successful UDIN verification does not prove

This distinction is important. UDIN verification is not the same as an independent audit of the underlying transaction, balance or claim. ICAI's verification page carries a disclaimer that the UDIN system is intended to facilitate verification and certification of documents and to secure their authenticity for regulators, while responsibility for the member's verification and certification remains with the concerned member.

So a valid UDIN should not be interpreted as ICAI guaranteeing every figure, assumption or conclusion in the document. The recipient should still apply the level of due diligence appropriate to the decision being made.

Common mistakes to avoid

• Using an unofficial verification website. Always prefer the ICAI portal for the actual UDIN check.
• Checking only the UDIN number. Compare the verification result with the document and the CA details rather than treating a successful lookup as the entire review.
• Entering a shared or incorrect email or mobile number without control. The current workflow sends separate OTPs to both channels, so use contact details controlled by the actual verifier.
• Ignoring obvious document inconsistencies. A mismatch in entity name, period, purpose, CA identity or document particulars needs clarification even if the UDIN itself can be verified.
• Assuming verification equals commercial approval. UDIN verification is an authenticity-related control; it does not replace lender, investor, tax, legal or compliance review.

A practical verification checklist

1. Use the official ICAI Verify UDIN page.
2. Enter the verifier details accurately.
3. Copy the UDIN directly from the received document.
4. Complete both mobile and email OTP verification.
5. Compare the portal result with the document's CA and document particulars.
6. Check the entity, reporting period and purpose for which the document is being relied upon.
7. Escalate any mismatch before accepting the certificate or report.
8. Retain evidence of the verification where your organisation's documentation policy requires it.

Practical takeaway

For a bank, business or client, UDIN verification should be treated as a simple but important authenticity control: verify through ICAI, complete the dual-OTP process, compare the returned information with the actual document, and investigate any mismatch. A successful UDIN check strengthens confidence that the document is linked to ICAI's UDIN system, but professional due diligence on the underlying document still remains necessary.