Blog

Tax updates, compliance guides, and practical information

GST September 2026

Biometric Aadhaar Authentication Mandatory for GST Registration

Introduction

The Delhi High Court has made biometric-based Aadhaar authentication mandatory for every GST registration granted anywhere in India, with immediate effect. The interim order, dated 08.09.2026, was passed by the Division Bench of Justice Anil Kshetarpal and Justice Shail Jain in W.P.(C) 12210/2026 (Neha v. Union of India & Ors.), tagged with W.P.(C) 6218/2026 (Vikram Kaushal v. Director General of Income Tax (Investigation) & Ors.). The Bench treated both petitions as pointing to a systemic pattern of identity-based GST registration fraud, rather than isolated grievances. Businesses in Ghaziabad and the wider NCR that are planning a new GST registration should factor in the changed timeline explained below.

Background

Both writ petitions arose from identity-based GST registration fraud, that is, registrations obtained by third parties using the petitioners' PAN and Aadhaar credentials without their knowledge or consent. Such misuse exposes innocent individuals to proceedings under the CGST Act for turnover and tax liabilities with which they have no connection.

Procedural History

  • 21.08.2026: The Court characterised the pattern as pointing to "rampant" fraudulent registrations and the attendant risk of liability being fastened on innocent PAN/Aadhaar holders. Senior Advocate Mr. Tarun Gulati was requested to assist the Court as amicus and to file a note on measures to curb the practice. Thereafter, the Commissioner of Delhi Police was impleaded as Respondent No. 5.
  • 01.09.2026: Mr. Gulati placed on record a ten-point note of suggested safeguards (summarised below), in addition to the administrative measures already in force.
  • 08.09.2026 (instant order): Respondents 1, 2 and 4, along with the Commissioner (Department of Trade and Taxes), filed written submissions, and Delhi Police filed a status report. The Bench recorded its concern that the officer deputed by the Commissioner of Delhi Police was not conversant with the issue, notwithstanding the deputation itself reflecting institutional seriousness.

Statistics Placed on Record

The written submissions disclosed (via Annexure G, a reply of the Minister of State for Finance in the Rajya Sabha) the scale of the problem:

Period Fraudulent registrations detected Tax evasion detected
FY 2023-24 ~2,800 ₹15,085 crore
FY 2024-25 ~1,654 ₹13,109 crore

The submissions also confirmed the current position on the ground: biometric-based Aadhaar authentication presently applies only where an application is flagged "risky" under the data-analytics/risk-parameter regime, that is, the mechanism under the proviso to Rule 8(4A) of the CGST Rules, 2017 (read with Section 25 of the CGST Act, 2017), extended pan-India vide Notification No. 13/2024-Central Tax dated 10.07.2024. The Bench observed that although the Minister had represented on the floor of the House that biometric authentication had been made "mandatory," this had not, in practical terms, been implemented as a universal requirement even a year later.

The Court's Direction

Finding that counsel for the Respondents could not demonstrate any operational impediment to universal biometric authentication, the Bench passed the following interim direction:

No GST registration is to be granted anywhere in the country, henceforth, without biometric-based Aadhaar authentication.

This operates, in effect, as an interim judicial override of the risk-based gating presently built into Rule 8(4A) of the CGST Rules, 2017, moving from a "flagged applications only" model to universal biometric authentication as a precondition for registration, at least until the next date of hearing. Liberty has been granted to the authorities to place on record any genuine practical difficulty in implementation, and they have been directed to examine the amicus's ten suggestions. The matter stands listed for further consideration on 22.09.2026.

Suggested Safeguards (Amicus Note)

The ten-point note filed by Mr. Gulati, now before the authorities for examination, proposes the following safeguards:

  1. Mandatory facial recognition against the Aadhaar database for all registrations.
  2. A 20-30 second video-KYC where the applicant displays PAN and Aadhaar and reads out a system-generated code, analogous to the eMudhra DSC verification protocol.
  3. Capture and retention of IP address and device location at the time of filing, for evidentiary use in disputed-identity cases.
  4. Mandatory physical verification of the principal place of business before registration, or alternatively, bi-annual randomised inspections based on risk scoring.
  5. Real-time inter-departmental data sharing with the Income Tax Department, including automated PAN-holder notification, cross-validated against Form 26AS / Form 16B.
  6. System-based flagging of sudden or disproportionate turnover spikes.
  7. A real-time confirmatory check with the Aadhaar holder as to knowledge of the business and the principal place of business being registered.
  8. DigiLocker notification and consent capture upon any use of PAN/Aadhaar for GST registration.
  9. A dedicated DGARM risk parameter for PAN-Aadhaar mismatch and first-time use of credentials.
  10. A requirement to nominate a corroborating person (partner, employee, associate, or family member) who can vouch for the applicant's identity and business.

Analysis and Practice Implications

Registration timelines

Practitioners and firms handling fresh GST registrations should build in the possibility of mandatory biometric authentication at a Facilitation Centre or GST Suvidha Kendra for every applicant, not merely those flagged as risky. The timelines under Rule 8(4A) and Rule 9(1) of the CGST Rules, 2017 (the 15-day and 30-day windows presently tied to risk-flagging) may need to be read afresh if universal authentication becomes the operative norm.

Identity-fraud remedies

For clients who discover a registration fraudulently obtained in their name, this order strengthens the basis for seeking urgent judicial intervention. It also signals that courts are receptive to structural relief, that is, directions of general application, rather than case-specific relief alone, in matters involving PAN/Aadhaar misuse.

Interim, not final

The direction is interim in nature and has been issued without a formal amendment to Rule 8(4A). It is subject to revision at the next hearing based on the authorities' response, whether by the Respondents demonstrating implementation difficulty or by a corresponding notification removing the risk-based qualifier. Advice to clients should treat this as a developing position rather than settled law.

System readiness

A universal rollout raises capacity questions. Facilitation Centre infrastructure, particularly outside the metros, was designed around the risk-flagged subset of applications, and a shift to 100% biometric authentication has a direct bearing on ease-of-doing-business timelines, an issue the Respondents are likely to raise on 22.09.2026.

Way Forward

  • 22.09.2026: The authorities are expected to respond, either by confirming steps toward universal implementation or by placing on record specific operational constraints.
  • Possible outcomes range from a formal amendment to Rule 8(4A) or a CBIC notification codifying universal biometric authentication, to a modified interim direction accommodating a phased rollout.
  • The amicus's ten-point note, once examined, may translate into policy and notification changes over a longer timeline, particularly the items requiring inter-departmental integration such as DigiLocker alerts and real-time Income Tax data sharing.
  • Practitioners should track the 22.09.2026 order for the operative position, especially before advising clients on registration timelines or on remedies for existing identity-fraud disputes.

How We Can Help

If you are planning a new GST registration in Ghaziabad, Sahibabad, Vaishali, or anywhere in India, or you have discovered an unauthorised registration obtained in your name, our office can advise you on the current position and timelines. Call +91 88025 86988, Chat on WhatsApp, or visit our office in Sahibabad to discuss your requirement. For a full overview of our registration and return filing work, see our GST services page. The order is summarised for general professional reference, and this update is not to be construed as legal opinion.

CA Ashish Rajput, Chartered Accountant

About the Author

CA Ashish Rajput — Chartered Accountant, Proprietor

Ashish Rajput is a practising Chartered Accountant and the proprietor of Ashish Jayalata & Associates, based in Vrindavan Garden, Sahibabad, Ghaziabad. He provides income tax, GST, audit, accounting, and business compliance services to individuals and businesses across Ghaziabad and the wider NCR region. The practice is registered with the Institute of Chartered Accountants of India (ICAI).