Over 3 Crore Suspicious User IDs Deactivated by Indian Railways in Less Than 12 Months: Here’s Why

In a major digital cleanup, Indian Railways has deactivated 3.02 crore suspicious IRCTC user IDs since January 2025, said Ashwini Vaishnaw, the minister of Information & Broadcasting and Electronics & Information Technology, in Parliament.  

This significant move is directed at clamping down on automated bots and fraudulent activities affecting Tatkal ticket bookings for millions of passengers. 

Crackdown on Fake Profiles Booking Tatkal Tickets 

The deactivation of 3.02 crore user IDs was prompted by the rampant misuse of software bots creating fake profiles on IRCTC. These bots were being used by fraudsters to book Tatkal tickets in bulk, which were then resold at high rates.  

This illegal activity impacted genuine passengers who were often left without access to urgent travel bookings. 

Deployment of Advanced Anti-Bot Tools 

To counter automated scripts, Indian Railways implemented anti-bot technologies like AKAMAI. These tools help in filtering out non-genuine booking attempts, enabling a more transparent reservation process.  

This action aims to improve system safety and offer fair access to ticketing services. 

OTP Verification Introduced for Tatkal Bookings 

An Aadhaar-based OTP system was rolled out for both online and offline Tatkal bookings. As of December 4, 2025, this system was active on 322 trains for online and 211 trains at reservation counters.  

The system's phased implementation has shown positive results, with 65% of trains reporting improved Tatkal ticket availability. 

Read More: Indian Railways Maintains Affordable Fares, Freight Rates Unchanged Since 2018! 

Use of Cybersecurity Layers and Regular Audits 

The reservation system now operates under increased vigilance, protected by multiple layers including network firewalls, CCTV surveillance, and end-to-end encryption.  

The infrastructure is hosted in a dedicated data centre, and regular security audits are conducted by agencies empanelled with CERT-In. Monitoring by CERT-In and the NCIIPC contributes to identifying cyber threats in real time. 

Monitoring via Cyber Crime Portals 

Complaints regarding suspicious booking patterns are being submitted to the National Cyber Crime Portal. Analysis of booked PNRs helps detect irregularities, further aiding efforts to curb fraud in the ticketing system. 

Conclusion 

The Indian Railways' action in deactivating 3.02 crore user IDs reflects a strategic effort to address misuse in its ticket booking system. The combination of technical tools, identity verification, and regular monitoring has led to noticeable improvements in Tatkal ticket availability and system reliability. 

Disclaimer: This blog has been written exclusively for educational purposes. The securities or companies mentioned are only examples and not recommendations. This does not constitute a personal recommendation or investment advice. It does not aim to influence any individual or entity to make investment decisions. Recipients should conduct their own research and assessments to form an independent opinion about investment decisions. 

Investments in the securities market are subject to market risks, read all the related documents carefully before investing.