GST Supplier Verification for ITC Protection: GSTR-2B, Section 16, and Vendor Due Diligence Guide

Why GST Verification Matters: 7 Business Reasons

1. Protecting Input Tax Credit

This is the most important reason. Input Tax Credit reduces your net GST cost by allowing you to set off tax paid on purchases against tax payable on outward supplies. But ITC is not guaranteed merely because the supplier issued an invoice.

A supplier who does not file properly can become your problem. If the supplier does not report the invoice correctly, your GSTR-2B may not reflect it. If that happens, your ITC claim becomes risky and may need to be deferred or disputed depending on the facts and timing.

2. Preventing Payment Fraud

GST verification helps you avoid paying entities that are fake, misrepresenting themselves, or using registration details that do not belong to them. A basic portal lookup helps confirm whether the registration is active and whether the legal name matches the counterparty.

3. Improving Vendor Due Diligence

When onboarding a new vendor, GST verification confirms that the supplier's registration details, PAN linkage, business name, and state code make sense together. A weak onboarding process creates recurring ITC and reconciliation problems later.

4. Supporting Clean Interstate and B2B Compliance

For interstate B2B supplies, the correctness of supplier registration, state code, invoice details, and place of supply all matter. Mismatches raise scrutiny risk and can create classification or tax-position disputes.

5. Helping with Marketplace and Contract Requirements

E-commerce platforms, government procurement systems, and many enterprise procurement teams rely on GST registration as a gating condition. A supplier whose GSTIN is cancelled or inactive may not pass onboarding, even before the tax impact is examined.

6. Strengthening Audit Readiness

GST scrutiny increasingly depends on data comparison. Purchase books, supplier filings, GSTR-2B, and ITC claims are all compared. A business that cannot show a basic vendor verification process looks weak during scrutiny, especially where high-value purchases or recurring mismatches are involved.

7. Protecting Reputation and Governance

Banks, auditors, procurement partners, and large customers look for clean compliance controls . Repeated dealings with non-compliant or suspicious suppliers can create a governance problem even where the business did not intend fraud.

The Scale of GST Fraud in India

GST fraud and fake ITC remain major enforcement concerns, and authorities increasingly rely on analytics, invoice matching, and system data to identify suspicious claims. The practical implication is that businesses can no longer assume that unsupported ITC will remain unnoticed until a distant audit. System-driven scrutiny has become more important than before. This is also why supplier-side filing behavior matters so much for recipients.

Section 16: The Conditions for Valid ITC

Section 16 of the Central Goods and Services Tax Act, 2017 is often summarised through four core conditions, but current ITC eligibility must be understood more broadly.

The traditional summary is:

• You must possess a valid tax invoice or prescribed document
• You must have received the goods or services
• The tax charged must have been paid to the government
• You must have furnished your return

But current law also links ITC availability to the supplier furnishing invoice details and to the communicated credit not being restricted under the Act. That means recipient-side verification now depends partly on supplier-side reporting behavior and system communication.

The Complete ITC Conditions Table

A good invoice by itself is no longer a complete risk shield. Each condition must be independently satisfied.

Blocked Credits Under Section 17(5)

Even if a supplier is perfectly verified and compliant, some purchases carry no ITC eligibility under Section 17(5) of the CGST Act, 2017. These are blocked credits - categories where the law denies ITC regardless of whether the supplier is genuine, the invoice is valid, and the tax has been paid.

Finance teams frequently miss this distinction. They verify the supplier correctly, confirm the invoice in GSTR-2B, and still claim ITC on an ineligible expense.

Categories Blocked Under Section 17(5)

Practical implication: Supplier verification protects your ITC on eligible purchases. It does not create ITC on ineligible ones. Run a Section 17(5) check on the nature of the expenditure before assuming ITC availability.

Method 1: Verify by GSTIN on the Portal

Go to the GST portal, open Search Taxpayer, and use the GSTIN or UIN search option. Enter the 15-digit GSTIN and complete the captcha. The portal returns the registered legal name, registration status, registration date, constitution of business, and jurisdiction details.

What You Should Actually Check

• Whether the legal name matches the supplier's invoice or onboarding documents
• Whether the GSTIN status is Active
• Whether the state code in the first two digits matches the supplier's stated state
• Whether the taxpayer type (Regular, Composition, ISD, etc.) is consistent with the invoice format presented

A GSTIN that exists is not the same as a GSTIN that is safe. An active GSTIN belonging to a different entity from the one that issued the invoice is a serious risk.

Method 2: Verify by Business Name

Where the portal supports it, business name search is useful during vendor onboarding or where the supplier has provided a trade name but not yet shared the GSTIN. It can also help detect name misuse, where a fraudster uses a real business name with a false or mismatched registration number.

This method is weaker than GSTIN search because business names can be similar, abbreviated, or differently punctuated. Use it as a screening tool, not a final check.

Method 3: Verify by PAN

PAN-linked search is especially useful in two situations:

• When you are dealing with a multi-state supplier and want to see all registrations linked to the same PAN
• When you suspect misuse of your own PAN or another entity's PAN for unauthorised GST registration

For vendor verification, PAN-linked checks help confirm whether the registration pattern matches what the supplier claims. A supplier claiming operations in several states should normally have corresponding state-wise GST registrations linked to the same PAN.

Method 4: GSTR-2B Reconciliation

This is the most important practical verification method for ITC protection.

GSTR-2B is an auto-drafted ITC statement generated for recipients based on data furnished by suppliers. It is made available on the 14th day of the succeeding month for monthly filers. Its static nature is important - unlike GSTR-2A , GSTR-2B does not change after it is generated for the period, making it reliable for claim review.

An invoice appearing in GSTR-2B is a strong practical indicator that the supplier has reported the invoice. If the invoice does not appear, your claim becomes materially riskier. That is why monthly GSTR-2B reconciliation should happen before finalising ITC in GSTR-3B.

GSTR-2B Reconciliation Workflow

BUSY's GSTR reconciliation software automates this matching workflow and surfaces unmatched invoices before your GSTR-3B deadline.

GSTR-2A vs GSTR-2B: Why the Difference Matters

The practical distinction matters because the two statements work very differently.

Why GSTR-2A Cannot Be Used for Final ITC Claims

GSTR-2A's dynamic nature was the problem it created for recipients. A supplier could file, receive your payment, then amend or cancel entries - and your 2A view would change after you had already based your ITC claim on it. GSTR-2B's static lock solves this by giving you a fixed, period-specific statement.

Practical guidance: Use GSTR-2A mid-month to check whether suppliers have filed yet. Use GSTR-2B after the 14th to finalise the ITC you actually claim in GSTR-3B.

Method 5: e-Invoice IRN and QR Code Verification

If the supplier falls within the e-invoicing mandate , invoice verification should not stop at the GSTIN level. The current e-invoicing mandate applies to businesses with turnover exceeding ₹5 crore. E-invoices must be reported to the Invoice Registration Portal and carry an Invoice Reference Number (IRN) and signed QR code.

The QR code can be verified using the official GSTN e-services app or the relevant IRP tools. This confirms that the invoice was registered through the system and that key invoice fields align with the reported data. It is especially useful for goods receipt teams and finance teams checking high-value B2B invoices.

The 30-Day Reporting Restriction

From 1 April 2025, taxpayers with turnover above ₹10 crore cannot report invoices older than 30 days on the IRP. For covered suppliers, an invoice that lacks an IRN - or has an IRN generated more than 30 days after the invoice date - should be treated as irregular and investigated before ITC is claimed.

Method 6: RCM Transactions - A Different Verification Requirement

Under the Reverse Charge Mechanism (RCM) provisions of Section 9(3) and 9(4) of the CGST Act, 2017, the recipient pays GST directly to the government rather than the supplier. This changes the ITC verification requirement significantly.

What Changes Under RCM

What You Still Need to Verify Under RCM

Even though supplier filing behavior does not affect ITC under RCM, the following still require verification:

• Whether RCM actually applies - misclassifying a forward charge supply as RCM (or vice versa) creates a compliance exposure
• Whether the supplier is genuinely unregistered - for Section 9(4) RCM on purchases from unregistered suppliers, confirm the unregistered status; if the supplier is actually registered, RCM does not apply and they should be issuing a normal tax invoice
• Invoice documentation - the invoice or self-invoice must carry the prescribed particulars under Rule 46 to support ITC
• Notified categories under 9(3) - services such as legal services from advocates, goods transport by GTA, and security personnel supplied by an agency are covered under RCM regardless of registration status

Key risk for unregistered supplier purchases: If a supplier who should be registered is operating without registration and you treat the transaction as RCM under Section 9(4), you may be inadvertently helping the supplier evade mandatory registration. Verify that the supplier's turnover genuinely falls below the registration threshold before applying RCM treatment.

GSTIN Status Types: What Each Means for ITC

When you perform a GSTIN lookup, the status returned is not just informational - it directly governs whether a purchase from that supplier carries ITC risk. The table below includes the ITC outcome for each status type.

Cancelled GSTIN: The Most Common Risk

A cancelled GSTIN is the scenario that most frequently results in ITC denial notices. The GSTIN may have been valid when the supplier relationship began. If the supplier's registration was subsequently cancelled - whether because they crossed below the threshold, voluntarily surrendered, or had registration cancelled by the department - any invoices dated after the cancellation date cannot carry ITC for the recipient.

Practical action: Set a calendar reminder to re-verify high-value recurring suppliers quarterly, not just at onboarding. A supplier who passes verification in April may have a cancelled GSTIN by September.

How to Identify a Fake or Risky GST Invoice

A structurally valid GSTIN on an invoice does not guarantee that the invoice is authentic. Fraudsters can use real GSTINs that belong to other businesses, generate invoices from cancelled registrations, or create entirely fictitious registration numbers that superficially follow the correct format.

Red Flags to Check on Every Invoice

Mandatory Invoice Particulars Under Rule 46

Rule 46 of the CGST Rules, 2017 specifies the particulars that must appear on a tax invoice for it to be a valid document for ITC purposes. An invoice that is missing mandatory particulars weakens your ITC support even if the supplier is otherwise compliant.

Required Particulars Under Rule 46

Consequences of Not Verifying: ITC Reversal

The consequences of claiming ITC from a non-compliant or fake supplier extend beyond the disallowed credit. The department can demand the full credit amount, add interest, and levy a penalty - all of which accumulate from the date of the original credit. At a high level, the consequences are:

• ITC denial: The credit claimed is reversed and cannot be used to offset output tax
• Interest at 18% per annum: Applicable from the date the credit was taken to the date of payment
• Penalty under Section 122: Up to 100% of the tax amount involved for fraud cases
• Criminal liability under Section 132: For cases involving fabricated invoices or wilful default

The buyer may face ITC denial or reversal , interest exposure, and further proceedings.

Rule 37: The 180-Day ITC Reversal Rule Explained

Rule 37 of the CGST Rules, 2017 deals with a specific and commonly overlooked ITC risk that is entirely separate from supplier non-compliance. It applies even where the supplier is genuine, the invoice is valid, and the invoice appears in GSTR-2B.

The Rule 37 mechanic: If you avail ITC on a purchase but do not pay the supplier the invoice value (including tax) within 180 days from the invoice date, you must reverse the ITC.

Rule 37 - Key Numbers

How Rule 37 Works in Practice

Suppose you receive an invoice dated 1 April 2026 for ₹10,00,000 (taxable) plus ₹1,80,000 GST at 18%. You claim the ₹1,80,000 as ITC in April's GSTR-3B. If you have not paid the supplier the full ₹11,80,000 by 28 September 2026 (180 days), you must reverse the ITC.

Interest on the reversed ITC runs at 18% per annum from the date you originally claimed the credit - not from the reversal date. That means delay compounds the cost.

Once you make the payment to the supplier, you can re-claim the ITC in the return for the period in which payment is made.

Rule 37 and Vendor Due Diligence

Rule 37 creates a direct connection between your payment terms and your ITC health. Payment terms beyond 180 days with any supplier create a structural Rule 37 risk. Finance teams should flag invoices approaching the 180-day mark in their accounts payable aging reports and either make payment or reverse ITC before the deadline.

Note on MSME suppliers: The MSMED Act requires payment to registered MSME suppliers within 45 days (or the agreed credit period, which cannot exceed 45 days). Section 43B(h) of the Income-tax Act (applicable from AY 2024-25) disallows deduction for unpaid MSME dues beyond 45 days. Rule 37's 180-day limit is a GST-specific deadline - both clocks run independently.

GST Notices for ITC Disputes: What to Expect

Understanding the enforcement process helps you respond correctly and avoid escalation. When the department identifies an ITC mismatch or a suspicious claim, it typically follows a staged process.

Stage 1: ASMT-10 - Scrutiny Notice

An ASMT-10 is a scrutiny notice issued under Section 61 of the CGST Act when the department identifies discrepancies in your return - typically through system-driven comparison of your GSTR-3B ITC claims against GSTR-2B data.

The notice will specify the discrepancy and give you an opportunity to explain or accept the difference. You have 30 days to file a reply in Form ASMT-11. If the explanation is satisfactory, the matter closes. If not, the department may proceed to assessment.

Stage 2: DRC-01 - Show Cause Notice / Demand Notice

If the scrutiny is not resolved, the department can issue a DRC-01 as a summary of the demand, typically preceded by a show cause notice under Section 73 (non-fraud cases) or Section 74 (fraud / suppression cases). Under the Finance Act 2024 amendment, Section 74A now provides a unified framework for demands involving fraud or wilful misstatement effective from 1 November 2024.

Time Limits for GST Demands

How to Respond

• Reply to ASMT-10 within the specified time - extension can be requested in writing
• Maintain contemporaneous documentation: GSTR-2B downloads, supplier verification records, payment proof, GRNs
• Where ITC is genuinely ineligible, voluntarily pay the tax and interest in DRC-03 before the demand is confirmed - this reduces penalty exposure
• Engage a GST practitioner for anything escalated to DRC-01 level

Penalties Under Section 122

Section 122 of the CGST Act, 2017 covers the penalty framework for GST violations, including those related to fake invoices and wrongly availed ITC.

Key penalty provisions relevant to supplier verification failures

For recipients, the key risk under Section 122 arises when ITC is availed on invoices that are known to be fake or where the supply did not actually occur. This is distinct from a bonafide error, which is handled under the Section 73 demand framework.

Criminal Liability Under Section 132

Section 132 of the CGST Act, 2017 provides for criminal prosecution in cases involving deliberate fraud. Relevant offences include:

• Issuing an invoice or bill without an actual supply
• Availing or utilising ITC using a fake invoice
• Collecting tax but not depositing it with the government
• Falsifying books of account

The prescribed punishment is:

• Where tax involved exceeds ₹5 crore: imprisonment up to 5 years with fine
• Where tax involved is between ₹2 crore and ₹5 crore: imprisonment up to 3 years with fine
• Where tax involved is between ₹1 crore and ₹2 crore: imprisonment up to 1 year with fine

Section 132 prosecutions require prior sanction from the Commissioner. They are typically reserved for cases involving organised fraud rather than compliance errors.

Relevant GST Circulars on ITC

Several GST circulars directly clarify ITC eligibility and supplier compliance obligations. Practitioners and finance teams responding to notices or defending ITC claims should be familiar with the following.

These circulars are available on the CBIC website at cbic.gov.in  

GST Verification Frequency: When to Check

To verify your GSTIN, try the GST Number Search Tool

Vendor Due Diligence Checklist for GST Compliance

Use this checklist for new vendor onboarding. For existing vendors, run this against your vendor master annually.

At Onboarding

• Obtain GSTIN from the supplier in writing
• Verify GSTIN on the GST portal - confirm legal name, status (Active), and state code
• Verify PAN linkage - confirm characters 3-12 of GSTIN match the supplier's PAN
• Confirm taxpayer type - Regular (for full ITC) vs Composition (cannot pass ITC)
• Collect a copy of the GST registration certificate
• Check the e-invoice obligation - does the supplier's turnover exceed ₹5 crore?
• Confirm that payment terms do not exceed 180 days (Rule 37 risk)
• Check whether the supply category is subject to RCM under Section 9(3)
• Check Section 17(5) - is this category blocked regardless of supplier compliance?

Monthly

• Download GSTR-2B after the 14th of the following month
• Reconcile all purchase invoices against GSTR-2B entries
• Flag invoices not appearing in GSTR-2B - follow up with supplier before filing GSTR-3B
• Check aging report - flag invoices approaching 180 days unpaid (Rule 37)
• Verify IRN for e-invoice-mandated suppliers where high-value invoices are involved

Quarterly

• Re-run GSTIN status check for high-value or high-frequency suppliers
• Review composition taxpayer list - has any supplier switched categories?
• Confirm suspended or cancelled GSTINs are removed from active vendor master

Correcting GSTIN Errors in GSTR-1

If you receive a communication that a supplier has reported your GSTIN incorrectly in their GSTR-1 - meaning the invoice does not appear in your GSTR-2B - the correction path runs through the supplier, not the recipient.

The supplier must amend the B2B invoice in their GSTR-1 for a subsequent period, correcting the recipient's GSTIN to the correct number. Once the amendment is filed and processed, the corrected entry appears in your GSTR-2B for that later period. You can then claim ITC in the return for the period in which the corrected entry appears.

Do not claim ITC in GSTR-3B based on a physical invoice alone where the GSTIN error means it is absent from GSTR-2B. The risk of ITC denial on such claims is significant.

Conclusion

GST supplier verification is not a one-time onboarding task. It is a continuous compliance function that runs in parallel with your purchase and payment cycles. The ITC risk in the GST system now runs from the moment you avail credit to the moment you close a payment - and Rule 37 means it can circle back 180 days after the invoice date even for genuine suppliers.

The most effective GST supplier verification programs operate on three timelines: onboarding checks before the first transaction, monthly GSTR-2B reconciliation before GSTR-3B filing, and periodic re-verification of the vendor master. Each layer catches a different category of risk.

To verify a supplier's GSTIN, use the GST portal search tool before the first invoice is processed. For the complete GSTIN structure, state codes, and verification methods, see the companion guide: GSTIN Number: Meaning, Format, State Codes, Search and Complete Guide.

GST accounting software like BUSY integrates supplier verification, GSTR-2B reconciliation, and e-invoice validation into a single compliance workflow.