Is it legal for a courier to photograph your ID on delivery?

At a glance

A delivery agent can ask to see ID where the delivery genuinely needs it — confirming you’re the right recipient, or checking age for a restricted item — but photographing and keeping a copy of your Aadhaar or other ID usually goes further than the purpose needs. Under India’s DPDP Act, collection is tied to purpose, so verifying who you are isn’t the same as storing your document. You can decline the photo, show ID instead, and give a masked version where proof is genuinely required.

Educational resource only. This explains how couriers photographing your ID is treated under India’s Digital Personal Data Protection Act, 2023 (DPDP Act); it is not formal legal advice.

On this page

• Can a courier ask for your ID at all?
• When is a photo of your ID actually justified?
• What happens to that photo afterwards?
• How to handle it at the door
• What you can do about it
• FAQ

The situation

The delivery arrives and the agent asks to photograph your Aadhaar, driving licence, or other ID “for proof of delivery” — or snaps it before you can ask why. It happens most with high-value orders, cash-on-delivery, and age-restricted items. Handing over a document feels like part of the transaction, but a photo of your ID sitting on a delivery agent’s personal phone is exactly the kind of loose copy that leaks — and often the delivery didn’t need it at all.

Can a courier ask for your ID at all?

Yes, where the delivery genuinely needs to confirm something — but “asking to see” is the ceiling for most deliveries, not “photographing and keeping.” Your ID is personal data, and the courier or e-commerce company behind the delivery is a Data Fiduciary. Under the DPDP Act it must give a clear notice of why it’s collecting (Section 5), and its collection is limited to what the stated purpose needs (Section 6). There are real reasons a delivery might need a quick ID check — confirming you’re the named recipient of a high-value or cash-on-delivery parcel, or checking age for a restricted item like alcohol or certain medicines. But each of those is satisfied by looking, not by capturing and storing a copy of your Aadhaar, driving licence or Voter ID.

When is a photo of your ID actually justified?

Rarely — for almost every delivery, verifying you is a glance, and a stored photo fails the minimisation test. The honest question is what the photo adds over a simple check:

• Reasonable: the agent glances at ID to confirm you’re the right recipient, or that you meet an age requirement, then hands it back.
• Hard to justify: photographing your ID “for records,” when a signature, a one-time password (OTP), or a simple confirmation already proves delivery.
• Over-collection: capturing a full Aadhaar or ID image for an ordinary parcel that needed no identity check at all.

Proof that a parcel reached the right person is normally handled by an OTP or a signature — not by a copy of your identity document. Age-restricted deliveries need the agent to be satisfied about your age, which a look achieves; storing your ID is a separate step that needs its own justification, and usually doesn’t have one.

What happens to that photo afterwards?

A photo on an agent’s phone is the real risk — it must be secured and deleted once its purpose ends, and often it’s neither. The DPDP Act requires a Data Fiduciary to keep personal data secure and erase it once the purpose is served (Section 8). An ID image sitting in a delivery agent’s personal gallery, a WhatsApp thread, or an app with loose access is a security failure the company is answerable for — not a harmless formality. Once the delivery is done, there’s usually no purpose left for that copy to exist at all.

How to handle it at the door

Show rather than surrender, ask what it’s for, and decline an unnecessary photo.

1. Offer to show, not be photographed. For a genuine recipient or age check, letting the agent look is enough — you can decline the photo.
2. Ask the purpose. “What’s the photo for, and where does it go?” A delivery that can’t explain it is over-collecting.
3. Give the masked or minimal version. Where some ID proof is genuinely required, a masked Aadhaar (first eight digits hidden) does the job without exposing the full number.
4. Use the app’s proof, not a personal phone. Delivery confirmation belongs in the company’s OTP or signature flow, not an agent’s private gallery.

What you can do about it

Refuse the unnecessary, and escalate a company that over-collects or mishandles your ID.

• Decline politely but firmly. An ordinary delivery doesn’t need a photo of your ID; you can complete it with an OTP or signature.
• Ask for deletion. If your ID was photographed, you can ask the company to confirm the image is deleted once the delivery is done.
• Escalate if mishandled. If a company makes an unnecessary ID photo a condition of delivery, or won’t secure or delete it, raise a grievance with it, and you can complain to the Data Protection Board of India.

FAQ

Can a delivery agent legally photograph my Aadhaar? Only where a genuine purpose needs it and it’s handled securely — which is rare. For most deliveries a look confirms you, and a stored photo is over-collection you can decline.

Isn’t the photo needed as proof of delivery? No — proof of delivery is normally an OTP or a signature. A copy of your identity document isn’t what confirms a parcel reached the right person.

What about age-restricted deliveries like alcohol or medicines? The agent needs to be satisfied about your age, which a glance at ID achieves. Being satisfied is one thing; photographing and storing your ID is a separate step that needs its own justification.

The agent says it’s “company policy.” Does that override my rights? No. An internal policy can’t override the DPDP Act’s rule that collection be limited to what the stated purpose needs.

Can I ask them to delete a photo they already took? Yes. Once the delivery is complete the purpose is over, so you can request erasure of the image and ask for confirmation.