Retrospective GST Cancellation and ITC Denial: Courts Protect Bona Fide Buyers

GST Registration, Fake Entities and Retrospective Cancellation – Law, Lapses and Harsh Consequences for Honest Taxpayers (2017–2026 still continues)

 1. when the gateway itself becomes a risk

GST was introduced in July 2017 with the promise of a unified tax on supply, seamless input tax credit (ITC) and a simple online registration system. Registration under GST was projected as a one‑time gateway: once a person is properly vetted and issued a GSTIN, the entire supply chain should be able to rely on that registration and transact with reasonable confidence.

The ground reality from 2017 to 2026 tells a completely different story. Genuine businessmen and professionals are asked to furnish multiple documents, undergo Aadhaar authentication, respond to repeated online queries and even face physical verification before registration is granted, sometimes after long delays. Despite this, the same system has allowed thousands of fake entities and multiple registrations to be created by misusing PAN, Aadhaar and benami addresses, which are later branded as “non‑existent” or “bogus” and cancelled with retrospective effect based on intelligence reports.

The most disturbing feature is that instead of accepting that fake registrations reflect failure of departmental verification and risk systems, officers frequently push the blame to taxpayers who dealt with such registered persons in good faith. ITC is denied to buyers, huge demands with interest and penalty are raised, and genuine assessees are left fighting litigation for years, while the officials who approved such registrations face no visible accountability. This article examines the statutory framework, the procedural reality, the systemic lapses, the emerging jurisprudence, and the continuing harsh consequences for honest taxpayers from 2017 to 2026 and beyond.

2. Statutory framework – what the law actually provides

2.1 Sections 22 to 30 of the CGST Act

Sections 22 to 30 of the CGST Act, 2017 form the backbone of the registration regime. In brief:

• Section 22: Prescribes threshold‑based registration; persons whose aggregate turnover exceeds prescribed limits (currently 20/40 lakh for normal States and 10 lakhs for notified special category States) must register, subject to notifications.
• Section 24: Mandates compulsory registration for specified categories such as inter‑State suppliers, casual and non‑resident taxable persons, persons required to deduct or collect tax at source, etc., irrespective of turnover.
• Section 25: Lays down the procedure for registration, the principle of one registration per State, separate registrations for different places of business and the concept of “distinct persons” for multi‑State operations.
• Section 27: Provides special provisions for casual and non‑resident taxable persons, including advance deposit of estimated tax liability.
• Section 28: Deals with amendment of registration particulars, both on the taxpayer’s application and on the officer’s own motion.
• Section 29: Empowers the proper officer to cancel registration, either on application or Suo motu, including from a retrospective date “as he may deem fit”, after giving reasonable opportunity of being heard.

On paper, this framework attempts to balance ease of doing business with adequate safeguards.

2.2 Rules 8 to 26, Rule 25 and the online process

Chapter III of the CGST Rules, 2017 (Rules 8 to 26) translates these provisions into detailed procedures.

Key rules include:

• Rules 8 and 9: Provide for online application in FORM GST REG‑01 (Part A and Part B), PAN validation with CBDT, generation of Temporary Reference Number (TRN), Aadhaar authentication and officer’s verification.
• Rule 10: Deals with grant of registration and issue of certificate in REG‑06, mentioning GSTIN, date of liability and principal place of business.
• Rule 22: Governs cancellation proceedings, including notice in REG‑17, reply in REG‑18 and order in REG‑19.
• Rule 25: Allows physical verification of the place of business, before or after grant of registration, requiring a reasoned report with photographs in REG‑30.

The law clearly expects a meaningful verification exercise by the proper officer, especially in risk‑prone cases, with verifiable records of such verification.

3. Registration procedure and document requirements – law versus practice

3.1 Step‑by‑step online process

In theory, registration is fully electronic through the common GST portal. The practical steps are:

• Part A of REG‑01: The applicant enters PAN, State/UT, mobile number and email ID; PAN is validated with the Income‑tax database and OTPs are sent to generate TRN.gstcouncil+1
• Part B of REG‑01: Using TRN, the applicant furnishes detailed particulars: legal name, trade name, principal and additional places of business, constitution, partners/directors, authorised signatory, bank account details and description of goods/services (HSN/SAC).
• Aadhaar authentication: Under Rule 8(4A), specified persons must undergo Aadhaar authentication; if they fail or choose not to authenticate, registration can be kept pending and physical verification may be triggered with longer processing timelines.
• Scrutiny and clarification: The proper officer scrutinises the form and attachments; if any deficiency is noticed, he issues REG‑03 and the applicant replies in REG‑04 with clarifications and additional documents.
• Grant or rejection: If satisfied, the officer grants registration in REG‑06 with GSTIN, normally within 7 working days (longer where physical verification is ordered); if not satisfied, he rejects the application in REG‑05 with recorded reasons. If he fails to act within prescribed timelines, registration is deemed approved.
• Physical verification: Rule 25 empowers the officer to order physical verification, pre‑ or post‑registration, and requires a detailed REG‑30 report with photographs of premises.

In this design, the first‑level registering authority is the gatekeeper. If he performs a genuine verification, most fake registrations should be blocked at the entry itself.

3.2 Documents – statutory list versus extra‑statutory insistence

The CGST Act does not lay down an exhaustive list, but typical requirements (based on Rules and portal instructions) are:

• PAN and identity documents of the applicant and key persons.
• Constitution documents: partnership deed, certificate of incorporation, MoA/AoA, LLP agreement, HUF declaration, etc.
• Proof of principal place of business: property tax receipt, electricity bill, sale deed; or rent/lease agreement with owner’s NOC; or consent letter with owner’s proof.
• Bank documents: cancelled cheque, bank statement or passbook.
• KYC of proprietors/partners/directors and authorised signatory: Aadhaar, PAN, photograph and address proof.
• Authorisation: board resolution or authority letter in favour of authorised signatory.

In practice, particularly after fake ITC scams, many officers began demanding extra documents such as trade licence, shop and establishment registration, professional tax registration, photographs of premises, security deposits or post‑dated cheques, although these demands are not clearly backed by the statute. This over‑documentation delays and harasses genuine applicants, but has not prevented fraudsters using forged documents and benami premises from obtaining registrations.

4. Fake entities and multiple registrations – problem born at the registration stage

4.1 Misuse of Aadhaar and PAN, weak KYC and identity theft

Investigations and DGGI press releases show a common pattern: fraudsters collect copies of PAN, Aadhaar and bank documents from gullible individuals by promising jobs, small loans or commission and then use these to apply for GST registration without the real person’s knowledge. In many fake ITC cases, dozens of GSTINs are obtained in the names of daily‑wage earners, students or housewives who have never visited the GST portal.

In the early years, Aadhaar‑OTP‑based authentication, without robust biometric or in‑person verification, made such misuse easier. The system had no effective way to detect identity theft beyond simple PAN validation and OTPs which remained under the fraudster’s control. Later, these are described as “fake registrations obtained by the taxpayer”, but in truth they are registrations obtained by third parties using stolen identity and weak departmental verification.

4.2 Mechanical or absent physical verification

Rule 25 gives a powerful tool to detect non‑existent or bogus premises through physical verification. Yet many fraudulent registrations passed through because physical verification:

• was not carried out at all despite risk indicators, or
• was done only as a formality with skeletal REG‑30 reports and generic remarks.

Reports from several States show that field visits were sometimes delegated to local staff or outsourced, with minimal training and no accountability even when later investigations revealed that premises were never active businesses. If Rule 25 verification had been used seriously and documented properly with photographs and local inquiries, many fake entities could have been detected within months instead of operating for three to four years.

4.3 Multiple GSTINs with common credentials and poor risk‑flagging

Section 25 permits separate registrations for multiple places of business, but no system can justify situations where dozens of GSTINs share common mobile numbers, emails, addresses or IP footprints without attracting scrutiny. In the initial years, the risk engine did not robustly flag such patterns, allowing “GST racket operators” to control entire chains of entities from a single back‑office and use them for circular trading and fake credit.

Only after large‑scale fake ITC cases drew public attention did authorities begin issuing SOPs for cancellation of registration and repositories of “non‑genuine taxpayers”. By that time, significant damage had already occurred and the focus shifted from front‑end prevention to back‑end enforcement.

5. Intelligence reports, retrospective cancellations and chain‑wide damage

5.1 DGGI, data analytics and enforcement drives

As GSTN data, e‑way bills and e‑invoices accumulated, data analytics started identifying suspicious ITC patterns. DGGI reported detection of thousands of fraudulent ITC cases with large tax amounts and repeated arrests. Patterns such as high ITC pass‑through with minimal outward tax payment, non‑filing of returns and mismatched e‑way‑bill behaviour led to mapping of entire networks of fake entities.

On this basis, intelligence reports were prepared naming certain registrations as “non‑genuine”, “paper firms” or “risky exporters” and circulated to jurisdictional officers. These officers then initiated proceedings for cancellation and demand, often treating the intelligence report as the primary basis without fresh independent verification at the local level.

5.2 Retrospective cancellation under Section 29(2) – legal power versus misuse

Section 29(2) allows cancellation from such date, including any retrospective date, as the officer may deem fit where grounds such as contravention or non‑filing exist. Relying on this, officers began cancelling registrations with retrospective effect, sometimes right from the date of grant, declaring the entity “non‑existent from inception”.

High Courts have consistently imposed limits:

• Retrospective cancellation has serious civil consequences – it affects not only the cancelled person but also all counterparties whose ITC is linked to that registration.
• Show‑cause notices must clearly propose retrospective effect and specify the period; officers cannot suddenly back‑date cancellation in the final order without such proposal.
• Orders must be speaking and reasoned, dealing with the taxpayer’s reply and documents; mechanical, template‑style orders are invalid.

Analyses such as “Fake Registration or Failed Verification? Retrospective GST Cancellation – Blame on Bona Fide Taxpayers” summarise these rulings and stress that arbitrary retrospective cancellations are unsustainable in law.

5.3 ITC denial to buyers based only on supplier’s retrospective cancellation

The harshest impact is often not on the allegedly fake entity, which may vanish, but on buyers who purchased when the supplier was “Active” on the portal.

• In M/s Gargo Traders v. Joint Commissioner, State Tax (Calcutta High Court), the taxpayer had claimed ITC on purchases from Global Bitumen for 2018–2019, supported by tax invoices, e‑way bills, transportation documents and bank payments. Authorities denied ITC solely because the supplier’s registration was retrospectively cancelled covering the period. The High Court held that, without disproving genuineness of transactions or showing collusion by the buyer, denial of ITC merely on retrospective cancellation was unsustainable and remanded the matter for fresh consideration.
• In M/s Engineering Tools Corporation v. Assistant Commissioner (Madras High Court), ITC was reversed only on the ground that the supplier’s registration was cancelled with retrospective effect. The Court held that ITC cannot be rejected merely because of such cancellation; authorities must verify the genuineness of the transaction based on tax invoices, e‑way bills, lorry receipts, delivery challans and proof of payment, and ITC cannot be denied solely on supplier’s status.

Despite these clear pronouncements, many officers still treat retrospective cancellation of the supplier as an automatic ground to deny ITC to buyers, without any independent finding of collusion or failure of due diligence.

6. Harsh consequences for honest taxpayers (2017–2026 and still continuing)

6.1 Shifting departmental verification failures onto buyers

From 2017 onwards, a typical pattern can be seen:

• The department grants registration after examining documents and sometimes after Rule 25 physical verification, and uploads REG‑30 reports showing premises as available.
• The registered person files return, pays some tax and remains “Active” on the portal for a period.
• Later, based on an intelligence report, the department cancels this registration retrospectively and labels the entity “fake from inception”.

If the same tax administration that checked PAN, Aadhaar, address proof and, in some cases, visited the premises now says that the entity was fake from the beginning, it is essentially admitting its own failure of KYC and verification. Yet, instead of acknowledging this and fixing internal systems or taking action against errant officers, the usual course is:

• Deny ITC to buyers who purchased when the GSTIN was valid and visible on the official portal.
• Raise demands with interest and penalty under Sections 73 or 74 against such buyers.
• Attach bank accounts, block refunds and treat entire chains of buyers as part of bogus credit networks.

Commentaries on fake GSTINs and ITC denial correctly describe these cases as examples where departmental lapses in registration and monitoring are converted into grounds for punishing bona fide taxpayers.

6.2 Long‑term financial, business and reputational damage

For honest businesses, especially small and medium enterprises, the consequences are severe:

• Working capital shock: Reversal of ITC with interest on genuine purchases can wipe out margins and cause serious cash‑flow crises.
• Bank and credit risk: Large disputed GST demands and attachments adversely affect credit ratings and borrowing capacity.
• Contract and tender issues: Government and corporate buyers treat entities under serious GST litigation as risky, affecting eligibility for tenders and supply contracts.
• Compliance and litigation burden: Handling notices, filing detailed replies, pursuing appeals before FAA and High Courts, and preparing for eventual Tribunal hearings consumes huge managerial time and professional fees.

Analyses and case‑notes indicate that businesses which relied in good faith on GST portal status and 2A/2B data are bearing the brunt of these retrospective actions, while the real masterminds behind fake ITC syndicates often remain in the background.

6.3 Psychological impact and erosion of tax morale

Beyond financial loss, there is serious damage to tax morale:

• Honest taxpayers see that fraudsters managed to obtain multiple registrations using fake KYC and operate for years.
• Officers who granted those registrations and failed to monitor them are rarely held accountable; sometimes they are even credited for later “detecting” fake entities.
• Genuine buyers and small traders, who followed the law and documented their transactions, are targeted for ITC reversal and penalty based largely on departmental failures.

This creates a perception that no matter how carefully one complies, one is not safe from retrospective actions based on internal lapses of the department. Such a perception is harmful for long‑term voluntary compliance.

 7. Jurisprudence and emerging safeguards – some hope, but not enough

Courts are gradually building safeguards, though field‑level implementation is uneven.

• Due process for cancellation: High Courts insist on proper show‑cause notices, clear proposal of retrospective effect, opportunity of hearing and speaking orders; cryptic, template orders cancelling registration from inception are being set aside.
• Protection for bona fide buyers: Judgments like Gargo Traders (Calcutta High Court) and Engineering Tools Corporation (Madras High Court) hold that ITC cannot be denied merely because the supplier’s registration was cancelled retrospectively, if the buyer has invoices, e‑way bills, transport documents and bank payments and no collusion is shown.
• Recognition of system failure: Recent articles and case‑law analysis on “fake registration or failed verification” strongly argue that many so‑called fake registrations are actually State verification failures and that blame should not be mechanically transferred to buyers.

However, relief still depends on approaching higher forums; there is no uniform administrative circular implementing these principles proactively. Many taxpayers cannot afford protracted litigation and either pay under protest or suffer recovery.

8. The way forward – shifting focus back to system responsibility

To protect honest taxpayers and clean up the system, some key reforms are essential:

• Front‑end KYC strengthening: Biometric‑linked Aadhaar where feasible, in‑person verification in risk‑flagged cases, better integration with MCA, banks and other databases, and serious use of Rule 25 physical verification with geo‑tagged evidence.
• Clear accountability framework: Internal rules must fix responsibility on officers for grossly negligent grant of registrations and repeated mechanical cancellations, with proper review and corrective action.
• Buyer protection principles in law or circulars: The principles from Gargo Traders and Engineering Tools Corporation should be formally adopted – where the buyer has invoice, e‑way bill, proof of receipt of goods and bank payment and no collusion is proved, ITC should not be denied merely on retrospective cancellation of supplier’s registration.
• Time‑bound dispute resolution and functioning GSTAT: Early and effective functioning of the GST Appellate Tribunal across all States is crucial so that registration and ITC disputes do not remain stuck at High Court level for years.
• Balanced narrative: Public and departmental discourse must move from “fake taxpayers” to “fake registration and verification failure”. Analyses on fake GSTINs and ITC denial highlight that many fake registrations are symptoms of weak front‑end checks and delayed risk detection; bona fide taxpayers should not be used as scapegoats for these systemic deficiencies.

From July 2017 to March 2026, experience clearly shows that GST registration is not a mere technical formality; it is the starting point of either trust or distrust in the system. Unless the registration machinery is made genuinely robust and accountable, and unless jurisprudence protecting bona fide taxpayers is consistently implemented at the field level, the harsh consequences of retrospective cancellation and ITC denial will continue to fall on those who are actually trying to comply.