Thehindu iconThehinduSep 11, 2026 ~5 min source read

IRCTC deactivates 3.04 crore user IDs and suspends 6.33 crore for suspicious activity

India’s railway ticketing arm has moved to curb bulk bookings by touts and bots, combining account actions with technical changes and tighter early-window rules for bookings.

IRCTC deactivates over three crore user IDs, suspends 6.33 crore IDs

Share this story

Send the public story page.

Useful takeaways from this story.

IRCTC deactivated 3.04 crore user IDs and suspended 6.33 crore more after detecting suspicious booking activity associated with bulk agents and fake accounts.

Technical measures — anti-BOT tools (cutting malicious traffic 55–65%) and a CDN — plus UI and server upgrades have increased capacity and reduced load on the New Generation Ticketing (NGeT) system.

Enforcement actions include blocking 16,041 suspicious email domains and registering 592 cyber-crime complaints covering about 4.21 lakh suspicious PNRs.

# What happened Corporation (IRCTC) has taken large-scale action against accounts it flagged for suspicious ticketing activity. The company deactivated 3.04 crore user IDs and suspended 6.33 crore additional IDs pending verification. Suspended accounts cannot make bookings until they verify their authenticity.

# Why IRCTC acted IRCTC says agents and touts were creating fake user IDs to make bulk bookings and then selling confirmed tickets at inflated prices. That practice raised concerns about fairness and deprived genuine passengers of access during critical booking windows.

# Enforcement steps taken

  • 3.04 crore user IDs deactivated and 6.33 crore IDs suspended. Suspended users must verify identity to resume bookings.
  • 16,041 suspicious email domains blocked.
  • 592 complaints filed on the Cyber Crime Portal, covering roughly 4.21 lakh suspicious PNR numbers.
  • A network security team is taking down fake websites and mobile apps that impersonate IRCTC.

# Technical and operational responses

System capacity and user interface changes

  • NGeT currently handles between 1.33 crore and 1.74 crore logins and processes 17 lakh to 20 lakh bookings on each Advanced Reservation Period (ARP) opening day.
  • IRCTC launched a beta version of a new UI on July 15 that consolidates availability across classes (Sleeper, AC 3-tier, AC 2-tier) onto a single screen to reduce navigation steps.

# Booking-window rules

# Usage patterns and peak load IRCTC reported that only 8.43% to 14.14% of the day's bookings are completed in the first hour (8–9 a.m.), with over 85% of bookings completed later in the day. The first 15 minutes of the window see the highest concurrent demand. On September 7, the site recorded 20,06,353 tickets — the highest single-day load this year, attributed to festive-season demand.

# Related enforcement note Administration suspended licences of an IRCTC-linked kitchen and three ISKCON food outlets in a separate action mentioned by IRCTC, reflecting concurrent regulatory activity tied to service partners.

# What this means for users If you had an account that was suspended or deactivated, you will need to follow IRCTC's verification steps before booking again. For regular passengers, the combination of technical upgrades and tighter early-window rules aims to reduce bot-driven bulk bookings and make availability fairer during ARP openings.

More context around this story.

Loading more related stories...

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app