Digital Signature Guide
A practical guide to electronic signature options, authentication workflows, and how to execute investment and tax documents securely.
Tip: Use your browser's "Print → Save as PDF" option to download this reference guide.
Digital Signature Framework
Everything You Need to Know About E-Signatures
Prepared by Jasvinder Singh • NovaRock Advisory (AMFI ARN-344268 | IRS PTIN P03472019)
Guide Contents
- Digital signature classifications in India
- Popular e-sign platforms
- Step-by-step: How to e-sign documents
- Security best practices
- Common mistakes to avoid
- Troubleshooting guide
- Legal validity and compliance
- Cost comparison
- Frequently asked questions
Section 1: What is a Digital Signature?
A digital signature is an electronic form of a signature that can be used to authenticate the identity of the sender of a message or the signer of a document. It also ensures that the original content of the message or document that has been sent remains unchanged.
Types of Digital Signatures in India
1. e-Sign (Aadhaar-based)
What it is:
An electronic signature service using Aadhaar authentication. Approved by the Controller of Certifying Authorities (CCA) under the Ministry of Electronics and Information Technology.
How it works:
- Enter your Aadhaar number on the platform
- Receive OTP on your registered mobile number
- Enter OTP to authenticate
- Document is digitally signed instantly
Legal Validity: Legally valid under the IT Act 2000 (amended 2008)
Best for: Quick document signing, KYC processes, and mutual fund applications
2. DSC (Digital Signature Certificate)
What it is:
USB token-based digital signature issued by licensed Certifying Authorities. Higher security level than e-Sign.
How it works:
- Purchase DSC from authorized CA (such as eMudhra, Sify, or nCode)
- USB token contains your digital certificate
- Install drivers and sign documents using software
- Requires physical token for each signing event
Cost: ₹800 - ₹2,500 per year (validity 1-3 years)
Best for: Income tax filings, company registrations, and bulk statutory signings
3. Electronic Signature (Standard e-Signature)
What it is:
Simple electronic signature (such as signing on a touchscreen or uploading a scanned signature image).
How it works:
- Sign on a touchscreen device (tablet or phone)
- Or upload a scanned copy of physical signature
- Or type your name in signature font
Legal Validity: Valid for general internal documents, but not accepted for government or regulated financial transactions
Best for: Internal documents, informal agreements, and preliminary correspondence
| Type | Security Level | Cost | Setup Time | Best For |
|---|---|---|---|---|
| e-Sign (Aadhaar) | Medium-High | Free for Investors | 5 minutes | Financial documents |
| DSC (USB Token) | Very High | ₹800-2,500/yr | 2-3 days | Government filings |
| Standard e-Signature | Low-Medium | Free | Instant | General documents |
Section 2: Popular e-Sign Platforms in India
For Investment and Financial Documents
1. NSDL e-Sign
Provider: National Securities Depository Limited
- Most trusted platform for financial documents
- Integrated with all major AMCs and RTAs (CAMS, KFintech)
- Aadhaar OTP-based authentication
- Free for individual investors
- Website: egovesign.nsdl.com
2. DigiLocker
Provider: Government of India (MeitY)
- Free government platform for storing and signing documents
- Directly linked with Aadhaar and PAN
- Store KYC documents, PAN, and Aadhaar securely
- Integrated e-Sign feature
- App: Available on Play Store and App Store
3. eMudhra e-Sign
Provider: eMudhra (Licensed CA)
- Both individual and corporate solutions
- Higher transaction limits on institutional plans
- Supports bulk signing workflows
- API integration for businesses
4. DocuSign India
Provider: DocuSign Inc.
- Enterprise-grade workflow platform
- Advanced signing templates and multi-party routing
- Used by multinational corporations
- Mobile app support
For mutual fund applications and financial documents with my practice, you will primarily use NSDL e-Sign or DigiLocker. Both are free, government-approved, and universally accepted by financial institutions across India.
Section 3: Step-by-Step: How to e-Sign Documents
Method 1: Using NSDL e-Sign (Recommended)
You will receive an email or SMS with a secure link to sign the document from me, the AMC, or the RTA.
Click the link to redirect to the secure NSDL e-Sign gateway. Review the document carefully before proceeding.
Enter your 12-digit Aadhaar number. Ensure it matches the number registered with your PAN and bank records.
Click "Send OTP". You will receive a 6-digit OTP on your Aadhaar-registered mobile number within 30 seconds.
Enter the OTP within 5 minutes. Click "Sign" or "Submit".
A success confirmation will appear. The document is now digitally signed. Download the signed copy for your personal records.
Method 2: Using DigiLocker
- Download the DigiLocker app from the Play Store or App Store
- Sign up using your Aadhaar with one-time OTP verification
- Access the issued documents or upload the required file
- Select the document to sign from your account repository
- Choose the e-Sign option and authenticate with your Aadhaar OTP
- Download the signed document directly from DigiLocker
The entire signing process takes 2 to 5 minutes. Keep your registered phone nearby for the OTP and maintain a stable internet connection to avoid gateway timeouts.
Section 4: Security Best Practices
Recommended Procedures
- ✓ Always verify the sender domain before clicking any e-sign link
- ✓ Read the entire document and verify nominee details before signing
- ✓ Keep your Aadhaar-registered mobile number active and accessible
- ✓ Download and archive signed documents immediately following completion
- ✓ Use a private, secure internet connection (avoid public Wi-Fi networks)
- ✓ Verify that the digital signature certificate panel appears on the completed PDF
- ✓ Keep your Aadhaar and PAN security credentials confidential
Prohibited Actions
- ✗ Never share your Aadhaar OTP with anyone, including advisory personnel
- ✗ Do not sign documents without reviewing all terms and schedules completely
- ✗ Do not open e-sign links from unverified or suspicious email addresses
- ✗ Avoid signing financial paperwork on shared public computers or internet cafes
- ✗ Do not ignore browser SSL certificate warnings during authentication
- ✗ Never authenticate blank or incomplete forms
Legitimate e-sign platforms will never ask for your net banking password, debit card PIN, or UPI credentials. If any portal requests these details, discontinue the session immediately.
Section 5: Common Mistakes to Avoid
Mistake #1: Aadhaar-Mobile Number Mismatch
Problem: OTP is not received because the mobile number registered with UIDAI is outdated or inactive.
Solution:
- Update your mobile number at an authorized Aadhaar enrollment center
- Or use the UIDAI self-service portal (requires biometric authentication)
- Temporary workaround: Complete physical signature submission if time-sensitive
Mistake #2: Session Timeout
Problem: Taking too long to review the document leads to an expired session token before OTP entry.
Solution:
- Download the draft PDF first, review it offline, then open the signing link
- Keep the browser tab active during the OTP delivery window
- Do not close or switch browser tabs while the OTP is being generated
- Complete the entire submission within 5 minutes of opening the link
Mistake #3: Incorrect Aadhaar Input
Problem: Typing an incorrect 12-digit number causes immediate UIDAI authentication failure.
Solution:
- Verify the number directly from your original card or DigiLocker
- Ensure your Aadhaar is linked with your PAN (mandatory under statutory rules)
- Enter all 12 digits continuously without spaces or hyphens
Mistake #4: Active VPN or Proxy Blocking
Problem: Indian government and banking e-sign gateways block non-domestic VPN/proxy IPs for fraud prevention.
Solution:
- Disable active VPN services prior to opening the e-sign link
- Use a direct local internet connection (broadband or mobile data)
- Clear browser cache if the page fails to load
Mistake #5: Excessive OTP Regeneration Requests
Problem: Clicking "Resend OTP" multiple times causes a temporary gateway lockout.
Solution:
- Wait at least 2 minutes before requesting a single OTP retry
- Do not trigger multiple requests within the same active session
- If locked out, wait 30 minutes before initiating a new attempt
Mistake #6: Browser Compatibility & Pop-up Restrictions
Problem: Gateway redirect fails to render due to browser extensions or disabled JavaScript.
Solution:
- Use an updated Google Chrome, Mozilla Firefox, or Microsoft Edge browser
- Ensure JavaScript and cookies are enabled in browser settings
- Temporarily disable third-party ad blockers during signing
- Try opening the link in an incognito or private browsing window
Section 6: Troubleshooting Guide
Issue: OTP Not Received
Possible Causes and Solutions:
- Mobile number not active in UIDAI database
- Visit an authorized Aadhaar enrollment center with your original ID
- Submit a mobile number update request
- Updates generally activate within 24 to 48 hours
- Carrier network latency
- Wait up to 3 minutes for carrier delivery
- Check your SMS inbox and carrier spam filters
- Request a fresh OTP after the countdown timer resets
- Do Not Disturb (DND) filtering
- Check with your mobile provider to ensure transactional SMS headers are permitted
- OTPs are statutory transactional messages, but high carrier filtering can cause delays
Issue: Document Not Opening
Resolution Steps:
- Clear browser cache and stored cookies
- Update your browser to the latest version
- Disable third-party browser extensions temporarily
- Test across an alternative browser (Google Chrome recommended)
- Verify internet stability
- Contact me if the signing link has exceeded its statutory validity window
Issue: "Invalid Certificate" Error
Resolution Steps:
- Confirm that your Aadhaar-PAN linking is completed on the Income Tax portal
- Verify that demographic details (name, date of birth) match across PAN and Aadhaar
- Ensure the name on the mutual fund application matches your identity documents exactly
Issue: Digital Signature Not Visible on Final PDF
Verification Steps:
- Download the signed PDF and open it in Adobe Acrobat Reader
- Check the Signature Panel at the top or side navigation bar
- Click the signature panel to inspect the valid Certifying Authority timestamp
- If no digital signature exists, the transaction was not finalized—repeat the submission
Always download and save your signed PDF document immediately. Platform signing links expire after statutory completion windows (usually 7 to 30 days). Store backup copies in your secure cloud and local archives.
Section 7: Legal Validity & Compliance
Legal Framework in India
Digital signatures in India operate under strict statutory recognition pursuant to:
- Information Technology Act, 2000 - Primary enabling legislation
- IT Amendment Act, 2008 - Formally introduced electronic signatures
- Indian Evidence Act, 1872 (Section 65B) - Admissibility of electronic records in legal proceedings
- Aadhaar Act, 2016 - Statutory framework for UIDAI-based authentication
Statutory Acceptance Across Financial Documents
| Document Type | e-Sign (Aadhaar) | DSC (USB Token) | Standard e-Signature |
|---|---|---|---|
| Mutual Fund Applications | Accepted | Accepted | Not Accepted |
| Demat Account Opening | Accepted | Accepted | Not Accepted |
| Income Tax Returns (Direct) | Not Accepted | Accepted | Not Accepted |
| Company ROC Filings | Not Accepted | Accepted | Not Accepted |
| Insurance Proposals | Accepted | Accepted | Varies by Insurer |
| Loan Agreements | Accepted | Accepted | Varies by Lender |
| General Commercial Contracts | Accepted | Accepted | Accepted |
While digital signatures are legally binding, specific legal instruments still require wet signatures on physical stamp paper under the First Schedule of the IT Act, 2000. Examples include real estate conveyance deeds, wills, power of attorney, and specific trust deeds.
Section 8: Cost Comparison
e-Sign (Aadhaar-based) - Free for Investors
- No setup costs for individual investors
- No annual maintenance fees
- Unlimited personal use for authorized investments
- Authentication expenses are covered directly by AMCs and platforms
DSC (Digital Signature Certificate)
Individual DSC Pricing:
- Class 2 DSC (Legacy): ₹800 – ₹1,200 per year
- Class 3 DSC (Current Standard): ₹1,500 – ₹2,500 per year
- DGFT DSC (Import/Export): ₹1,800 – ₹3,000 per year
Additional Hardware Costs:
- FIPS-Compliant USB Token: ₹500 – ₹800 (one-time)
- Certificate Renewal: Equivalent to purchase fee upon expiration
Commercial e-Signature Platforms
DocuSign India Pricing:
- Personal Plan: $10/month (~₹830/month)
- Standard Plan: $25/month (~₹2,080/month)
- Business Pro: $40/month (~₹3,330/month)
Adobe Sign Pricing:
- Individual: $19.99/month (~₹1,660/month)
- Small Business: $29.99/month (~₹2,500/month)
For personal investment applications and financial onboarding with my practice, free Aadhaar-based e-Sign is completely sufficient. You only need a dedicated hardware DSC token if you are executing corporate ROC filings or statutory audits.
Quick Reference Checklist
- ✓ Use NSDL e-Sign or DigiLocker for investment documents (free and government-approved)
- ✓ Keep your Aadhaar-registered mobile number active and accessible
- ✓ Ensure your Aadhaar is linked with your PAN (mandatory under statutory rules)
- ✓ Read documents completely and verify folio details before signing
- ✓ Never share your Aadhaar OTP with anyone under any circumstance
- ✓ Download and archive signed documents immediately following execution
- ✓ Use secure private internet connections rather than public Wi-Fi
- ✓ Verify the sender domain before accessing e-sign links
Section 9: Frequently Asked Questions
Q1: Is e-Sign legally valid?
Answer: Yes. e-Sign is legally valid under the Information Technology Act, 2000 (amended 2008) and carries identical legal validity to a physical pen-and-paper signature for financial transactions, banks, and government filings in India.
Q2: Can I use e-Sign without Aadhaar?
Answer: No. Domestic e-Sign in India relies on UIDAI Aadhaar authentication. If you do not have an Aadhaar number, you must execute paperwork via a physical wet signature or acquire a hardware Digital Signature Certificate (DSC).
Q3: How many times can I use e-Sign?
Answer: There is no limit for individual investors. You can sign as many authorized financial applications as required without volume restrictions.
Q4: What if my Aadhaar mobile number is not active?
Answer: You must update your mobile number at an authorized Aadhaar enrollment center. Updates typically activate within 24 to 48 hours.
Q5: Can someone misuse my e-Signature?
Answer: No. e-Sign requires a secure, time-sensitive OTP delivered directly to your registered mobile device. Without the OTP, an unauthorized party cannot sign on your behalf.
Q6: How long is an e-signed document valid?
Answer: An e-signed document is permanently valid. The embedded cryptographic certificate and timestamp provide permanent legal proof of execution.
Q7: Do I need to print e-signed documents?
Answer: Printing is not required. The digital PDF containing the verified signature certificate serves as the primary legal original. Maintain backup copies in secure storage.
Q8: What if an e-sign link expires?
Answer: Contact me directly with your transaction details, and I will issue an updated secure signing link.
Need Assistance With Document Signing?
If you encounter technical issues during e-signing or have questions regarding document verification, contact my desk directly: