The Fetch EPFO Data by Mobile Number API retrieves a taxpayer's consolidated Employees' Provident Fund Organisation (EPFO) records using just their registered mobile number. The endpoint queries the EPFO ecosystem, aggregates employer history, contribution timelines, UAN linkages, and member profile data, and returns it in a single structured response — without CRIF bureau enrichment.This is a synchronous, single-call workflow: provide a mobile number, receive the EPFO profile. It is the fastest way to verify employment history and PF contribution patterns for individuals whose mobile number is linked to their UAN.
Key Benefits
Single-Call Simplicity — No multi-step orchestration, polling, or job IDs to manage.
Mobile-First Lookup — Works with just a registered mobile number; no UAN or PAN required upfront.
Consolidated Employment View — Returns aggregated employer history and contribution trail in one payload.
No Bureau Dependency — Faster, lighter response without CRIF enrichment overhead.
{"success":true,"data":{"mobile_number":"9999999999","uan":"100000000000","member_profile":{},"employment_history":[],"contribution_summary":{},"passbook":[]},"message":"EPFO data retrieved successfully."}
{"success":false,"error":{"code":"EPFO_RECORD_NOT_FOUND","message":"No EPFO profile is linked to the supplied mobile number."}}
Returned when the mobile number is not linked to any UAN or EPFO member profile. Verify the number with the user and confirm it is the one registered with their employer.
EPFO Combined with CRIF Enrichment — Companion endpoint that augments EPFO data with CRIF bureau insights for richer underwriting.
UAN Lookup — Resolves a UAN directly from PAN or other identifiers when mobile-based lookup is not viable.
Employment Verification — Standalone employer-confirmation API for cases where full EPFO history is not required.
Compliance and Legal Considerations
EPFO records contain sensitive personal and employment information governed by India's Employees' Provident Funds and Miscellaneous Provisions Act, 1952, the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (DPDP Act). Integrators must obtain explicit, informed, and revocable consent from the individual whose data is being fetched before invoking this endpoint, and must clearly disclose the purposes for which the data will be used. Maintain a documented data retention and deletion policy aligned with the consent scope, restrict access on a need-to-know basis, log access for audit purposes, and provide the individual with rights to review and request deletion of their data.