The rule I had set up for myself was simple — no physical Aadhaar, no photocopies. Just the app. UPI for payment, Aadhaar app for verification, DigiLocker for other IDs.