Complete 2026 guide to filing Forms 3CA-3CD and 3CB-3CD on the income-tax e-filing portal ā applicability, UDIN, schema updates and key pitfalls.
Form 3CA-3CD & 3CB-3CD: The Definitive Filing Guide for AY 2026-27
For AY 2026-27, every business with turnover above ā¹1 crore ā or ā¹10 crore under the cash-threshold variant ā and every professional with gross receipts above ā¹50 lakh must file a tax audit report under Section 44AB of the Income-tax Act, 1961. That report takes the form of either Form 3CA-3CD (if the books are already audited under another statute) or Form 3CB-3CD (if the income-tax audit is the only audit conducted). Both are uploaded by a Chartered Accountant on the income-tax e-filing portal (incometax.gov.in) and must be accepted by the taxpayer before 30 September 2026 ā the standard due date for AY 2026-27.
Which Form? 3CA vs 3CB ā Getting the Foundation Right
The choice between Form 3CA and Form 3CB is not discretionary. It follows directly from whether the taxpayer already has a legal obligation to get their accounts audited under any other statute.
Use Form 3CA when the taxpayer is subject to a separate statutory audit:
- A company (mandatory audit under Section 139 of the Companies Act, 2013)
- A co-operative society under a state co-operative societies Act
- A banking company, an insurance company, or an electricity undertaking governed by its own statute
In these situations, a statutory audit is already underway. The CA issues Form 3CA as a companion certificate, confirming that the tax audit has been conducted with reference to the statutory audit report. Form 3CD ā the detailed statement of particulars ā is attached to Form 3CA.
Use Form 3CB when no separate statutory audit exists:
- A proprietorship, partnership firm, Limited Liability Partnership (LLP) not otherwise required to audit, an Association of Persons (AOP), or a Body of Individuals (BOI)
- Any assessee who crosses the Section 44AB threshold but has no other audit framework governing their books
Here, the CA both audits the books and issues the certificate. Form 3CB is the full audit report; Form 3CD is attached as the statement of particulars.
Why this matters in practice: Filing Form 3CB for a private limited company ā even unintentionally ā can be treated by the assessing officer as non-filing of the tax audit report. The assessment system may raise a defect notice under Section 139(9), and in the worst case, the Section 271B penalty may be invoked as though no audit was done at all.
Section 44AB Applicability: Who Needs a Tax Audit for AY 2026-27?
Run through each trigger carefully before concluding that a client is not liable:
For business assessees:
- Standard threshold: Total sales, turnover, or gross receipts exceed ā¹1 crore in FY 2025-26.
- Enhanced threshold (ā¹10 crore): Available only when both of the following hold simultaneously:
- Cash receipts during the year do not exceed 5% of total receipts
- Cash payments during the year do not exceed 5% of total payments
If either condition fails ā even because of a single large cash transaction ā the threshold collapses to ā¹1 crore. There is no partial relief.
For professional assessees:
- Gross receipts exceed ā¹50 lakh in FY 2025-26.
For presumptive taxation opt-outs:
- A person who declared income under Section 44AD (business), Section 44ADA (professionals), or Section 44AE (goods carriers) in any of the five immediately preceding financial years, but who now declares income below the applicable presumptive rate, must get their accounts audited regardless of turnover.
Practical tip for founders and finance heads in the ā¹1ā10 crore band: Audit your cash transaction percentages before the financial year ends. A single large cash advance payment to a vendor, or a cash sale to an unregistered buyer, can flip you from the ā¹10 crore bracket to the ā¹1 crore bracket and create an unexpected and costly audit obligation.
Critical Form 3CD Clauses for AY 2026-27
Form 3CD contains 44 clauses ā plus sub-clauses ā and extends across several pages in the JSON schema. For AY 2026-27, these deserve more than routine treatment:
Clause 26 ā Amounts Inadmissible Under Section 43B, Including MSME Payments
Section 43B(h), effective from AY 2024-25, disallows business expenditure payable to a Micro or Small Enterprise (MSE) if payment is not made within the time prescribed under the MSMED Act, 2006:
- 15 days where no written agreement exists between the parties
- 45 days from the date of acceptance of goods or services where a written agreement exists
If outstanding amounts remain unpaid as on the balance-sheet date, the entire unpaid sum is disallowed in that year and allowable only in the year of actual payment. Auditors must obtain Udyam Registration numbers from all significant vendors. A vendor who claims MSME status without a valid Udyam certificate should not be treated as an MSE for this clause.
Clause 34 ā TDS and TCS Compliance
This clause requires full disclosure of:
- Amounts on which TDS was not deducted, or was short-deducted
- TDS deducted but deposited after the due date
- TCS defaults
The Annual Information Statement (AIS) and Taxpayer Information Summary (TIS) now surface most TDS anomalies automatically. Assessing officers cross-check Clause 34 disclosures against AIS data in most audit cases. Where TDS was deducted but not deposited on time, the underlying expenditure is also disallowable under Section 40(a)(ia) ā this must appear in both Clause 21 and Clause 34.
Clause 44 ā GST Expenditure Break-Up
Clause 44 requires total expenditure to be split into:
- Expenditure from GST-registered entities (goods and services separately)
- Expenditure from entities not registered under GST (goods and services separately)
This clause creates a hard reconciliation point between the profit and loss account and the taxpayer's GSTR-2B purchase register. The income-tax department's back-end system now matches Clause 44 totals against GSTR-9 and GSTR-9C data. An unexplained difference ā even ā¹50,000 ā can generate a Section 143(2) scrutiny notice. Prepare this reconciliation as a working paper before you sign the report.
Clauses Related to Virtual Digital Assets
If the taxpayer received any virtual digital asset (VDA) ā including cryptocurrency, non-fungible tokens (NFTs), or digital tokens ā as business income or as payment for goods or services, this must be disclosed in the relevant clause. Section 115BBH taxes VDA gains at 30% (plus applicable surcharge and cess) with no deduction permitted except the cost of acquisition, and no set-off against any other income. Verify whether any such receipts occurred and treat them as a high-priority discussion point with the client before filing.
Step-by-Step E-Filing Procedure on the Income-Tax Portal
The upload of a tax audit report involves both the CA and the taxpayer in a fixed sequence. Neither can skip their step.
- Taxpayer assigns the CA ā The taxpayer logs in to the income-tax portal, navigates to Authorised Partners ā My CA, enters the CA's membership number and PAN, selects the form type (3CA-3CD or 3CB-3CD), and confirms. Without this step, the CA cannot upload anything.
- CA logs in and navigates ā The CA accesses e-File ā Income Tax Forms ā File Income Tax Forms and selects the assigned form for the taxpayer.
- Download the current offline utility ā Go to the Downloads section and fetch the latest JSON utility for AY 2026-27. The utility version changes each time CBDT amends the schema. Never use a prior-year cached version; the validation rules differ.
- Prepare the report offline ā Complete all clauses in the JSON utility. Run the built-in validation before exporting. The utility flags structural errors (blank mandatory fields, wrong data types), but it does not validate factual accuracy ā that remains the CA's responsibility.
- Generate the UDIN ā Before signing, generate a Unique Document Identification Number (UDIN) on the ICAI portal (udin.icai.org). Select the category Tax Audit Report under Section 44AB, enter turnover or gross receipts, and confirm. The UDIN must be generated on or before the signing date of the report. It cannot be backdated.
- Upload with Digital Signature Certificate (DSC) ā Back on the income-tax portal, upload the validated JSON and sign it using a Class-3 DSC. Enter the UDIN in the designated field and submit.
- Taxpayer accepts the report ā The taxpayer logs in, goes to Pending Actions ā Worklist, reviews the filed report, and clicks Accept. Only at this point is the tax audit report considered filed. If the taxpayer rejects the report (due to a factual error, for example), the process reverts to Step 4.
- Archive the acknowledgement ā Immediately after acceptance, both the CA and the taxpayer should download the portal-generated acknowledgement from e-Filed Returns/Forms and retain it as part of the permanent file.
UDIN Compliance: Rules, Deadlines, and Consequences
UDIN is not a bureaucratic formality. A missing or invalid UDIN can make an otherwise complete filing defective. The key rules:
- Generate before signing. The UDIN must exist at or before the date on which you sign the audit report. Generating it after upload and backdating the report date is a breach of the ICAI Code of Ethics and carries disciplinary consequences.
- Link within 15 days of upload. The income-tax portal requires UDIN linkage within 15 days of the upload date. If you miss this window, the report may be treated as defective.
- One UDIN per report, per entity. Do not reuse UDINs across clients. Each Form 3CA-3CD or 3CB-3CD for each taxpayer requires a fresh UDIN.
- Do not revoke carelessly. If a UDIN is revoked after filing ā for instance, after a dispute with the client ā the department may flag the report as unsigned. Revocation should be a last resort and should be discussed with ICAI's Ethics Committee guidance before proceeding.
- Portal rejection ā automatic extension. If the portal rejects the upload because the UDIN is invalid or missing, the 30 September 2026 due date does not automatically extend. You must resolve the issue and re-upload before the deadline.
Worked Example: Partnership Firm with Multiple Reporting Challenges
All figures and facts are illustrative only and do not represent any specific taxpayer.
Background: PQR Trading Partners LLP, a goods-trading partnership not subject to any statutory audit, had the following profile for FY 2025-26 (AY 2026-27):
| Particulars | Amount |
|---|---|
| Turnover per books | ā¹3,80,00,000 |
| Aggregate turnover declared in GSTR-1 | ā¹3,65,00,000 |
| Outstanding payable to Udyam-registered MSE vendor | ā¹12,00,000 (67 days old) |
| TDS under Section 194C deducted but deposited 22 days late | ā¹48,000 (on contractor payments of ā¹9,60,000) |
| Cash loan accepted from a partner | ā¹30,000 |
Challenge 1 ā GST-Book Turnover Mismatch (Clauses 25 and 44)
The ā¹15 lakh difference between books and GSTR-1 arose from two items:
- ā¹8 lakh in sales returns posted in the books but for which GST credit notes were filed in April 2026 (next financial year)
- ā¹7 lakh in advance receipts from customers that constitute a taxable supply under the CGST Act, 2017 but are not revenue under the firm's mercantile accounting policy
Both reconciling items must be documented in the working papers. Neither is incorrect ā they reflect timing differences and accounting policy ā but they must be explained in Clause 25 and cross-referenced in Clause 44. An undocumented mismatch in the absence of such working papers is what triggers scrutiny.
Challenge 2 ā Section 43B(h) Disallowance (Clause 26)
The ā¹12 lakh payable to the Udyam-registered vendor had a written 30-day credit agreement. By 31 March 2026, 67 days had elapsed since invoice acceptance ā well past the 45-day ceiling. The full ā¹12,00,000 is disallowed under Section 43B(h) and must appear in Clause 26 of Form 3CD.
Tax impact at the firm level (assuming partners taxed at 30%): additional taxable income of ā¹12 lakhs generates approximately ā¹3,60,000 in extra tax. If advance tax was not paid on this amount, add interest under Sections 234B and 234C. The disallowance reverses in AY 2027-28 only upon actual payment to the vendor.
Challenge 3 ā Late TDS Deposit ā Section 40(a)(ia) Disallowance (Clauses 21 and 34)
TDS of ā¹48,000 was deducted on contractor payments of ā¹9,60,000 under Section 194C, but deposited 22 days after the due date. Under Section 40(a)(ia), the underlying contractor payments of ā¹9,60,000 are disallowed in AY 2026-27 and become allowable only in AY 2027-28. This disallowance appears in Clause 21; the TDS default is separately disclosed in Clause 34.
Challenge 4 ā Section 269SS Violation (Clause 31)
Accepting ā¹30,000 in cash from a partner as a loan violates Section 269SS, which bars acceptance of any loan or deposit in cash exceeding ā¹20,000 from a single person. The CA must report this in Clause 31 of Form 3CD. The firm faces a penalty under Section 271D equal to the loan amount ā ā¹30,000 ā which the assessing officer may levy without any requirement to prove mens rea.
Penalty if the audit report itself is filed late:
If PQR Trading Partners LLP misses the 30 September 2026 deadline without reasonable cause, Section 271B applies: 0.5% Ć ā¹3,80,00,000 = ā¹1,90,000, capped at ā¹1,50,000. On top of that, interest under Section 234A on the outstanding tax and exposure to scrutiny risk ā the practical cost of delay far exceeds the statutory penalty cap.
Common Mistakes That Trigger Revision Notices
Filing the wrong form
Filing Form 3CB for a private limited company, or filing Form 3CA without clearly referencing the companion statutory audit report ā both cause the system to treat the filing as defective.
Skipping the GST-book reconciliation before sign-off
The department's back-end now systematically matches Clause 44 figures in Form 3CD against GSTR-9 and GSTR-9C data. Prepare this reconciliation as a signed working paper before uploading. A verbal explanation after the fact does not satisfy scrutiny.
Assuming zero Section 43B(h) disallowance without verification
Reporting nil under Section 43B(h) for a firm with large trade payables, without actually collecting Udyam Registration certificates from vendors, is among the highest-risk omissions for AY 2026-27. MSME-related scrutiny has escalated sharply in this cycle.
UDIN generated after the signing date
If the audit report is dated 12 September 2026 but the UDIN was generated on 16 September 2026, the filing is vulnerable to an ICAI ethics inquiry and a departmental defect notice. The UDIN timestamp on the ICAI portal is public and verifiable.
Underreporting TDS defaults in Clause 34
AIS data is available to assessing officers in near real-time. A Clause 34 entry showing "no defaults" when AIS shows late deposits is a direct inconsistency. Disclose all technical defaults ā even those regularised before the audit date ā and explain the correction in the report.
Incorrect handling of presumptive scheme opt-outs
When a taxpayer opts out of Section 44AD after declaring income under it in previous years, the CA must verify and disclose the prior-year declarations accurately. An error here can lead to demand notices with interest under Section 234B stretching back multiple years.
Not archiving the post-acceptance acknowledgement
The portal acknowledgement generated after the taxpayer accepts the audit report is your proof of timely filing. Download it immediately. Clients who switch their CA in a subsequent year ā or who face legacy scrutiny ā will need this document and it is not always retrievable months later.
Key Takeaways
- Form 3CA is for assessees already subject to a statutory audit (companies, co-operatives); Form 3CB is for all others. Filing the wrong form risks treatment as non-filing and attracts the Section 271B penalty.
- The Section 44AB threshold for AY 2026-27 is ā¹1 crore for most businesses; the ā¹10 crore limit applies only when both cash receipts and cash payments are each below 5% of their respective totals ā one exception collapses the limit.
- Section 43B(h) requires active MSME vendor verification ā obtain Udyam Registration certificates; do not assume nil disallowance for clients with large creditor balances.
- The e-filing sequence is fixed: taxpayer assigns authority ā CA prepares report and generates UDIN ā CA uploads with Class-3 DSC ā taxpayer accepts. A break at any step means the report is not filed.
- UDIN must be generated on or before the signing date and linked on the portal within 15 days of upload. An invalid or revoked UDIN can make an otherwise complete filing defective, with no automatic extension of the due date.
- Clause 44 GST expenditure figures will be cross-checked against GSTR-9/9C; reconcile book purchases to GSTR-2B and document the working paper before signing.
- The Section 271B penalty for late or non-filing is capped at ā¹1,50,000 ā but the real costs are interest, scrutiny, and loss of credibility with the assessing officer. Target submission well before 30 September 2026.





