Anyone who receives a CA-signed document can verify its UDIN on the ICAI UDIN portal under "Verify UDIN" without registering. The verifier enters their own details, validates two OTPs and can then view certain information from the document the UDIN was generated for.
Facts checked: 9 October 2026, against ICAI's FAQs on UDIN (4th edition, updated 2 July 2024). Screens can change; confirm on udin.icai.org. Background: what UDIN is.
Who can verify
ICAI's FAQ says authorities, regulators, banks and others, such as RBI, SEBI, CBDT, CBIC, RERA, MCA and IBA, can ask for a UDIN. No registration is needed. The same route suits a lender, a tender body, a company secretary or a client.
Steps for the verifier
- Open the portal and click Verify UDIN.
- Select the verifier category from the drop-down.
- Enter the verifier's name, mobile number and email.
- Enter the captcha and tick the declaration, then Send OTP.
- Validate both OTPs, sent to the email and mobile entered.
- View the information shown for that UDIN.
Scanning the QR code printed with the UDIN opens the verification page with the UDIN already filled in.
What the result shows
The FAQ says only that the verifier can view "certain information" from the document. The exact fields are decided by the portal, so check them on screen. In practice, compare them with the paper in hand: signing member, firm, document type, date and description. The signing CA is told by email and SMS when a third party verifies, with the verifier's name and contact number.
Mismatch and failure cases
| What the verifier sees | Likely cause |
|---|---|
| UDIN not found | Typing error, or a number that was never generated |
| Details differ from the document | Wrong document type or date entered, or the document was altered |
| Message that the CA can revoke until a stated time | Checked within 48 hours of generation |
| Message that the UDIN can no longer be revoked | Checked after the 48-hour window |
| Revoked | CA cancelled it; a fresh one should exist |
We could not confirm from ICAI's text the exact wording shown for "not found" or "revoked", so treat that table as a guide and confirm on the portal.
What the CA should do if verification fails
- Look up the UDIN under List UDIN in your own login (older ones may sit in the archive; select the generation year).
- If the number was mistyped on the document, issue a corrected copy.
- If the details are wrong, revocation is only possible within 48 hours. Past that, generate a new UDIN within 60 days of the signing date and reissue the document.
- Tell the recipient in writing which UDIN replaces which.
Worked scenario
A bank checks a net worth certificate dated 5 October and finds the description reads "turnover certificate". The CA opens List UDIN, sees the wrong type was selected on 6 October, and the 48 hours have passed. She generates a fresh UDIN against the same 5 October signing date, still within 60 days, reissues the certificate, and sends the bank a note linking the two numbers. Use the net worth certificate or turnover certificate format and log both numbers in the UDIN register.
Frequently asked questions
Does the verifier need an ICAI login?
No. Name, mobile, email, captcha and two OTPs are enough.
Does a valid UDIN prove the figures are right?
No. It confirms who issued the document, not that the content is correct.
How to generate the UDIN in the first place?
Also see the audit glossary.
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error