And one more thing, if you do pull up someones record, the pan card holder gets an email(assuming they left it while registration) saying that XYZ company pulled your pan card details on XYZ date. So, I dont think it can abused so much.