Comprehensive Guide to DIR-3 KYC

Comprehensive Guide to DIR-3 KYC

Every individual holding a Director Identification Number (DIN) — active on a board or not — must complete an annual KYC with the Ministry of Corporate Affairs (MCA) by filing either e-Form DIR-3 KYC or its web-based variant on the MCA V3 portal. The deadline is 30 September every financial year. Miss it by even one day, your DIN moves from "Approved" to "Deactivated", every MCA form you sign is rejected, and you pay a flat ₹5,000 reactivation fee before you can do anything. This guide covers who files, which form to pick, what documents you need, and how to get through MCA V3's quirks without last-day panic — for the filing due 30 September 2026 (FY 2026-27 window).

Who Must File DIR-3 KYC — and Who Is Exempt

The obligation comes from Rule 12A of the Companies (Appointment and Qualification of Directors) Rules, 2014, inserted by MCA notification dated 5 July 2018. The rule is wider than most directors realise.

You must file DIR-3 KYC if:

• You have been allotted a DIN on or before 31 March 2026 (the end of FY 2025-26), and
• Your DIN is in "Approved" status at the time of filing

That covers:

• Serving directors of private limited companies, public companies, OPCs, and Section 8 companies
• Designated partners of LLPs (DINs are used for LLP compliance too)
• Directors of companies that are under strike-off proceedings — until the DIN is formally deactivated for a separate reason, KYC is still due
• Dormant directors who hold the title but attend no meetings
• Disqualified directors under Section 164(2) of the Companies Act, 2013 — disqualification does not cancel the KYC obligation
• Directors of foreign subsidiaries incorporated in India

You do NOT file if:

• Your DIN was already in "Deactivated" status because of a prior year's non-filing — in that case, you first pay the ₹5,000 reactivation fee and file DIR-3 KYC, which simultaneously reactivates the DIN
• Your DIN has been surrendered via Form DIR-5 and cancelled by MCA
• You were allotted a DIN after 31 March 2026 (you will be covered next year, with filing due 30 September 2027)

A common misconception: "I've resigned from all boards, so I don't need to file." Wrong. As long as the DIN exists in Approved status, the filing is mandatory. The DIN is yours, not the company's.

DIR-3 KYC vs DIR-3 KYC-Web: Choosing the Right Form

MCA offers two routes. Using the wrong one wastes time and can cause validation errors.

DIR-3 KYC (e-Form) — Use This When:

• You are filing for the first time ever on a newly allotted DIN
• Your mobile number linked to the DIN has changed since last filing
• Your email address linked to the DIN has changed
• Your residential address has changed
• Your passport details have changed (applicable to foreign nationals)
• You are reactivating a deactivated DIN (always use the full e-Form, with ₹5,000 fee)

The e-Form requires document attachments, DSC affixation (director's own DSC + certifying professional's DSC), and OTP verification on the new mobile/email.

DIR-3 KYC-Web — Use This When:

• You have filed DIR-3 KYC in a prior year and nothing has changed — same mobile, same email, same address
• You want a quick annual confirmation without document uploads

The web-based version is just an OTP-verified acknowledgement. Log in, confirm pre-filled details, verify OTP on your registered mobile and email, submit. Done in under five minutes. No DSC required on the director's side (though a professional's DSC may still be needed in some portal configurations — verify on MCA V3 at filing time).

The practical rule: If in doubt, file the full e-Form. An unnecessary e-Form causes no harm. A web filing when details have changed will be rejected or can create mismatches in MCA records that take months to resolve.

Documents Checklist

Indian National Directors

Foreign National Directors

Keep scanned copies under 2 MB per file (MCA V3 rejects larger attachments). PDF format is preferred for address proof; JPG/PNG for photographs.

Step-by-Step Filing Process on MCA V3 (FY 2026-27)

MCA V3 (mca.gov.in) is now the sole portal for DIR-3 KYC. The old MCA21 V2 interface no longer accepts these forms. The filing must be done under the director's individual login, not the company's login.

For DIR-3 KYC-Web (details unchanged)

1. Go to mca.gov.in → log in with the director's individual Business User credentials
2. Navigate to: MCA Services → DIN Services → DIR-3 KYC-Web
3. Enter the DIN — the portal will auto-fetch name, date of birth, and nationality
4. Verify the pre-filled mobile number and email address
5. Click Send OTP — separate OTPs arrive on mobile and email; enter both within the validity window (typically 10 minutes)
6. Review the declaration and submit
7. Download and save the SRN (Service Request Number) acknowledgement — this is your proof of filing; fee is ₹nil if filed on or before 30 September 2026

For DIR-3 KYC e-Form (first-time, changes, or reactivation)

1. Log in to mca.gov.in under the director's individual Business User ID
2. Navigate to: MCA Services → DIN Services → DIR-3 KYC
3. The DIN field auto-populates name, father's name, date of birth, gender, and nationality from MCA records — verify for accuracy
4. Enter and confirm the mobile number (must be unique across MCA database and Aadhaar-linked for Indian nationals)
5. Enter and confirm the email address (must be unique across MCA database)
6. Click Generate OTP for both mobile and email; enter the OTPs within the validity window
7. Enter residential address in full — pin code, city, state, country
8. Attach scanned documents:
9. PAN card / Passport
10. Aadhaar card / Address proof
11. Photograph
12. Any additional address proof if address has changed
13. The director affixes their Class 3 DSC using the MCA V3 DSC plugin or supported browser extension
14. The certifying professional (CA/CS/CMA) reviews the form and affixes their DSC with membership number and certificate of practice number
15. Preview the form, confirm the declaration, and click Submit
16. Pay the applicable fee:
17. ₹nil if filed on or before 30 September 2026
18. ₹5,000 if filed after 30 September 2026 (flat fee, regardless of delay duration)
19. Download the SRN and the filed form for records; MCA typically processes and approves within 1-3 working days

Worked Example: The Real Cost of Missing the Deadline

Consider a private limited company — Prism Solutions Pvt. Ltd. — with three directors: two resident Indian directors and one NRI director based in Dubai.

All three miss the 30 September 2026 deadline. Here is what happens:

Immediate DIN consequences:

Total reactivation fees: ₹15,000

Cascade effect on company filings:

Between 1 October and 20 October 2026, Prism Solutions' CS attempts to file Form ADT-1 (auditor re-appointment, due within 15 days of AGM held on 30 September 2026). MCA V3 rejects the form because Director A and Director B's DINs are deactivated — the form requires at least one active director's DIN for signature. The ADT-1 is delayed by 20 days.

The company then files ADT-1 on 21 October 2026 with additional late filing fees (as applicable under Schedule of Fees for the delay, based on authorised capital). Even if the late fee is modest, the professional time spent on follow-ups and re-filings is real cost.

The company also cannot file Form DIR-12 for a new independent director appointment during this window — the appointment is held up for three weeks, disrupting board planning.

Total avoidable cost from missing one deadline:

• ₹15,000 in DIN reactivation fees
• Late fees on ADT-1 and any other delayed filings
• Professional fees for re-work
• Management time lost in tracking and following up

The ₹5,000 per director is the headline number, but the downstream disruption is the real penalty.

Common Mistakes and How to Avoid Them

1. Filing DIR-3 KYC-Web When Details Have Changed

If you changed your mobile number since last year and file the web version, the OTP goes to the old mobile on record — which you no longer have. The filing fails. You then need the full e-Form anyway, with document attachments. Always check your MCA-registered mobile and email before choosing the form.

Fix: Before filing, verify current linked details at MCA Services → DIN Services → View DIN details. If they don't match your current details, go straight to the e-Form.

2. DSC Not Registered on MCA V3

Uploading a valid DSC that was registered on the old MCA21 V2 portal and never migrated to V3 causes form rejection at submission. Class 3 DSCs must be registered under the individual's MCA V3 Business User login before they can be used.

Fix: Register your DSC on MCA V3 at least 2 weeks before the filing deadline, under MCA Services → Register DSC. Test it on a dummy filing if possible.

3. Mobile Number Not Linked to Aadhaar

For Indian nationals, OTP is generated using the Aadhaar-linked mobile. If your Aadhaar has an old mobile number, the OTP won't reach you.

Fix: Update your Aadhaar mobile at an Aadhaar Seva Kendra in person (biometric update required). Plan this by July at the latest — Aadhaar update requests can take 7-10 working days to reflect.

4. Treating the Company CS as Responsible for the Director's Login

DIR-3 KYC requires the director's own individual login and the director's own DSC. The company's CS cannot file this on behalf of the director without access to the director's credentials and DSC. Many directors assume the CS handles everything, then discover on 29 September that they don't have an individual MCA V3 login at all.

Fix: Every director should create and test their individual Business User login on MCA V3 at the start of April each year. CSs should send a reminder in April, not September.

5. Assuming a "Deactivated" DIN Still Gets KYC-Web Processed

If your DIN was deactivated last year for non-filing, the KYC-Web option will not reactivate it. You must file the full e-Form and pay ₹5,000. Attempting to use the web version returns an error.

Fix: Check DIN status at MCA V3 before attempting any filing. If status is "Deactivated", budget for the ₹5,000 fee, gather documents, and file the full e-Form.

6. Email ID Already Mapped to Another MCA User

MCA V3 enforces uniqueness of email across all registered users. If you used a shared company email for your individual login and the same email is linked to the company's Business User, you'll face a validation error.

Fix: Each director must use a personal, unique email address for their MCA individual login. Migrate to a personal email well before filing time.

Special Situations

Foreign National Directors

Foreign directors face three specific hurdles:

Document apostille: Address proof issued outside India must be apostilled under the Hague Apostille Convention (if the country is a signatory) or notarised and attested by the Indian Embassy/Consulate. This process can take 2-4 weeks. Start in July.

OTP on Indian mobile: MCA V3 technically accepts international mobile numbers, but OTP delivery to foreign numbers is unreliable. Most foreign directors keep an Indian SIM card active solely for MCA and Income Tax compliance. If your Indian SIM has been inactive for over a year, the number may be reassigned — verify it is still active before attempting the filing.

DSC validity: A Class 3 DSC obtained from an Indian Certifying Authority is valid for MCA filings even for foreign nationals. The DSC application requires passport as identity proof and a valid email. Renew it at least 30 days before expiry.

Dormant DINs You No Longer Need

If you were appointed a director years ago on a company that has since been struck off, you may still hold an active DIN you have no practical use for. You have two options:

1. Continue filing DIR-3 KYC annually — simple, costs nothing if filed on time
2. Surrender the DIN via Form DIR-5 — allowed only if you are not associated with any active company or LLP at the time of surrender. Once surrendered, the DIN is cancelled permanently; you cannot recover it

If you have retired from all boards and do not intend to be a director again, surrender saves you the annual compliance obligation. If there is any chance of future directorship, keep the DIN active — a new DIN can take time to allot.

Duplicate DIN Holders

Section 155 of the Companies Act, 2013 expressly prohibits any individual from holding more than one DIN. Duplicate DINs typically arose from multiple applications made before the system cross-checked PAN and Aadhaar. Holding a duplicate DIN is a statutory violation regardless of intent.

What to do:

1. Identify which DIN is your "primary" DIN — the one associated with your current or most recent directorship
2. File Form DIR-5 to surrender the duplicate DIN — do this in the first quarter of the financial year (April-June) so you are not racing against the KYC deadline
3. The surrendered DIN is cancelled; only the primary DIN remains for KYC

Do not file DIR-3 KYC for a duplicate DIN without first resolving the duplication — MCA records will reflect inconsistencies in subsequent board-related filings.

DSC and Portal Readiness: An August Checklist

Rather than troubleshoot on 29 September, run this checklist in August every year:

• [ ] Confirm DIN status is "Approved" at MCA V3 → MCA Services → View DIN details
• [ ] Confirm Aadhaar-linked mobile is active and accessible
• [ ] Confirm Class 3 DSC expiry date — if expiring before 30 November 2026, renew now (renewal from a licensed Certifying Authority typically takes 2-5 working days)
• [ ] Confirm DSC is registered on MCA V3 under the director's individual Business User login
• [ ] Confirm individual MCA V3 login credentials are working — reset password if forgotten before the rush period
• [ ] Check whether mobile number or email has changed since last year's filing — if yes, prepare documents for the full e-Form
• [ ] For foreign directors: confirm apostille documents are ready or initiate the apostille process
• [ ] Engage your CA, CS, or CMA in the first week of September to certify the e-Form — professionals are overloaded in the last week of September every year

Key Takeaways

• Every DIN holder files by 30 September 2026 — resignation from boards, dormancy, or disqualification does not exempt you; only a cancelled or deactivated DIN does
• Choose DIR-3 KYC-Web only if nothing has changed — mobile, email, and address must match MCA records exactly; when in doubt, file the full e-Form
• The late fee is ₹5,000 flat per DIN, not per day — but the cascade on company filings (rejected forms, delayed ADT-1, MGT-7, DIR-12) multiplies the real cost significantly
• MCA V3 is the only portal — DSC must be Class 3 and registered on V3 under the director's individual login, not the company's login
• Foreign directors need at least 4 weeks — apostille of documents and Aadhaar-equivalent OTP logistics mean a June/July start is not premature
• Duplicate DINs must be surrendered first — use Form DIR-5 before the KYC window; do not file KYC on a DIN that violates Section 155
• File in August, not September — DSC issues, Aadhaar OTP problems, and professional availability make last-week filing the single biggest source of preventable penalties