A case of Al-generated EPIC card in Bengal
A case of an AI-generated Elector's Photo Identity Card (EPIC) — the official voter identity document issued by the Election Commission of India — surfaced in West Bengal, raising serious concerns about AI-enabled electoral fraud.
The incident came to light in the context of the Special Intensive Revision (SIR) of electoral rolls in West Bengal, where over 80 lakh claims and objections are under adjudication.
The AI-generated EPIC card was a convincingly fabricated document bearing a real voter's details but with altered information — potentially being used to impersonate a voter or insert a fraudulent entry into the electoral roll.
The case highlighted the vulnerability of the existing EPIC system to generative AI tools capable of producing photorealistic identity document forgeries.
The incident is part of a broader pattern: during India's 2024 Lok Sabha elections, AI-generated deepfake videos of politicians circulated widely; AI-generated voter cards represent an escalation from disinformation to document fraud.
West Bengal has also been at the centre of separate EPIC controversy — the same EPIC number being assigned to different voters in different states — indicating systemic weaknesses in the EPIC database.
EPIC (Elector's Photo Identity Card): History, Purpose, and Current System
The Elector's Photo Identity Card (EPIC) was introduced by the Election Commission of India in 1993 under T.N. Seshan's tenure as Chief Election Commissioner, as a measure to reduce impersonation fraud at polling booths. It serves a dual purpose: as proof of electoral registration (enabling the voter to vote) and as a general-purpose identity document. Each voter is assigned a unique alphanumeric EPIC number. The physical card was supplemented in 2021 with an e-EPIC (Electronic EPIC) — a digitally downloadable version in PDF format, accessible via the Voter Helpline App or the ECI's portal (voters.eci.gov.in).
Key Details
- EPIC is issued by the Electoral Registration Officer (ERO) of the voter's constituency.
- It contains: Photo, name, father's/husband's name, address, date of birth, and EPIC number.
- Form 6 is used to apply for a new EPIC; Form 8 for corrections.
- e-EPIC (from January 2021): Password-protected PDF, downloadable using mobile number linked to voter registration.
- The EPIC system has a documented duplicate-number problem — the same EPIC number has been found assigned to voters in different states (e.g., West Bengal and Gujarat simultaneously).
- Section 62 of the Representation of the People Act, 1951: Every person registered in the electoral roll of a constituency has the right to vote there.
The AI-generated EPIC case exploits two weaknesses simultaneously: the relative ease of replicating the visual design of an EPIC card using AI image generation tools, and the lack of a robust real-time digital verification system to authenticate EPICs at polling stations.
Generative AI and Document Forgery: The Threat Landscape
Generative AI — particularly diffusion models and large multimodal models capable of generating photorealistic images and documents — has dramatically lowered the technical barrier for creating convincing fake identity documents. Where document forgery previously required printing equipment, laminates, and physical skill, modern AI tools can generate a visually indistinguishable replica of an EPIC card (or any identity document) from a simple text prompt with a reference image. The emergence of AI-generated EPIC cards in the electoral context is distinct from deepfake videos: it represents a shift from disinformation (manipulating what people believe) to document fraud (manipulating administrative records).
Key Details
- Generative Adversarial Networks (GANs) and diffusion models (e.g., Stable Diffusion, DALL-E, Midjourney) can generate photorealistic images including identity documents.
- The 2026 amendment to India's IT Rules (effective February 2026) specifically targets AI-generated synthetic content, requiring platforms to deploy technical measures to detect and prevent certain categories of harmful AI content.
- The amendment defines "synthetic information" and mandates intermediaries to label AI-generated content — but this primarily addresses disinformation, not document fraud.
- Document fraud using AI falls under the Indian Penal Code (now Bharatiya Nyaya Sanhita, 2023): Section 420 (cheating), Section 468 (forgery for purpose of cheating), Section 471 (using forged document as genuine).
- International precedent: AI-generated passport and driver's licence images have already been used in identity fraud cases in the US and UK.
The Bengal EPIC case demonstrates that AI's threat to elections extends beyond the much-discussed deepfake videos — it now directly threatens the integrity of the electoral registration system itself, the foundational layer of the democratic process.
India's Regulatory Framework for AI-Generated Content and Electoral Integrity
India currently lacks a dedicated AI regulation law. The primary regulatory framework for AI-generated content in the electoral context comes from: (1) IT Rules 2021 and the 2026 amendment addressing synthetic content; (2) Election Commission guidelines on deepfakes and AI-generated campaign content; and (3) Model Code of Conduct provisions during elections. The ECI in 2024 issued guidelines requiring political parties to disclose AI-generated content in advertisements and mandated pre-certification of political ads on social media. The 2026 assembly election cycle has added a requirement for candidates to disclose their official social media accounts at nomination.
Key Details
- IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (amended February 2026): Platforms must deploy technical measures to identify and restrict certain AI-generated harmful content.
- The 2026 amendment introduced a three-hour takedown regime for certain categories of AI-generated harmful content.
- MeitY (Ministry of Electronics and Information Technology) is the nodal ministry for AI content regulation.
- The ECI's Media Certification and Monitoring Committees (MCMCs) now scrutinise political ads including AI-generated content for pre-certification.
- There is no specific provision in Indian law yet for verifying the authenticity of AI-generated identity documents at the point of submission to government databases.
The legal framework exists to punish AI-based document fraud after the fact, but proactive verification mechanisms — real-time AI detection tools or blockchain-based EPIC authentication — are still absent from India's electoral infrastructure.
Electoral Integrity and the Role of Technology: A Dual-Use Problem
Technology in elections presents a dual-use challenge: the same digital tools that improve voter access and administrative efficiency also create new vectors for fraud. India's ECI has progressively digitised electoral processes — from ERONET (electoral roll management) to e-EPIC downloads to the Voter Helpline App — making the system more accessible but also expanding the attack surface. The AI-generated EPIC case underscores the need for a proactive technological defence: AI-based fraud detection, watermarking or cryptographic signing of official documents, and biometric linkage of voter registration to Aadhaar (which the 2021 Electoral Laws Amendment Act enabled on a voluntary basis).
Key Details
- Aadhaar-voter roll linkage: Enabled voluntarily under the Electoral Laws (Amendment) Act, 2021 — if implemented fully, it would allow cross-verification that could detect fake or duplicate voter registrations.
- ERONET: The Election Commission's digital platform for maintaining electoral rolls. Claims and objections are submitted through ECINET.
- e-EPIC uses a password-protected PDF system but does not currently incorporate cryptographic signatures or blockchain-based verification.
- The ECI has commissioned research on AI-enabled tools for detecting fake voter registrations and duplicate entries.
The AI-generated EPIC incident is a direct argument for accelerating Aadhaar-voter roll de-duplication and introducing cryptographic authentication for e-EPIC — turning the vulnerability into a catalyst for institutional reform.
- EPIC introduced: 1993, under Chief Election Commissioner T.N. Seshan.
- e-EPIC launched: January 2021.
- EPIC duplicate numbers: Same EPIC number assigned to voters in multiple states — documented in West Bengal, Gujarat, and Haryana.
- West Bengal SIR: 80 lakh claims and objections under adjudication; AI-generated EPIC discovered during this process.
- IT Rules 2026 amendment (effective February 2026): First Indian regulation specifically targeting AI-generated synthetic content.
- Three-hour takedown regime: Platforms must remove flagged AI-generated harmful content within 3 hours.
- Electoral Laws (Amendment) Act, 2021: Enabled voluntary Aadhaar-voter roll linkage.
- Legal provisions for document fraud: BNS (formerly IPC) Sections 420 (cheating), 468 (forgery for cheating), 471 (using forged document as genuine).
- Generative AI tools capable of producing EPIC-quality document images are freely available.