DIN KYC

DIN KYC

Every individual holding a Director Identification Number (DIN) — whether currently serving on a board or not — must complete annual KYC on the MCA V3 portal by 30 September 2026 for FY 2025-26. You file either Form DIR-3 KYC (full eForm, with DSC and professional certification) or the lighter DIR-3 KYC Web (OTP-only, for unchanged details). Miss the deadline and your DIN is deactivated from 1 October: a ₹5,000 statutory fee applies, and you cannot sign or submit a single MCA document until you comply.

The Legal Basis — Why DIN KYC Is Non-Negotiable

DIN KYC is a statutory requirement under Rule 12A of the Companies (Appointment and Qualification of Directors) Rules, 2014, introduced by the MCA in 2018 to cleanse the DIN registry of dormant, duplicate and fraudulent entries. It is not a recommendation or a best-practice; non-compliance has automatic, system-driven consequences.

The rule requires every DIN holder allotted a DIN as on 31 March of a financial year to submit verified KYC details to the Registrar by 30 September of the immediately following financial year. For FY 2025-26, the snapshot date is 31 March 2026 and the filing window closes on 30 September 2026.

Two enforcement mechanisms make this real in 2026. First, MCA runs an automated deactivation batch on 1 October each year — there is no discretion and no advance warning to individual DIN holders. Second, the MCA V3 portal now validates PAN-Aadhaar linkage status in real time against the Income Tax Department's database during the filing process, creating a second hard dependency beyond the filing deadline itself.

Who Must File DIR-3 KYC — The 31 March Snapshot Rule

The obligation is triggered solely by DIN allotment status on 31 March. The following categories must file:

• Active directors in companies registered under the Companies Act 2013, including private limited, public limited and one-person companies.
• Designated partners in LLPs registered under the Limited Liability Partnership Act 2008 — LLP designated partners hold DINs and are equally bound.
• Disqualified directors under Section 164(2) of the Companies Act 2013. Disqualification does not extinguish the KYC obligation; the DIN remains in MCA records and must be kept current.
• Directors who have resigned from all companies but have not formally surrendered their DIN through Form DIR-5. Resignation from a board does not cancel a DIN.
• DINs in "Deactivated due to non-filing" status — these must still be covered by a fresh DIR-3 KYC filing (with the additional ₹5,000 fee).

Who is exempt? DIN holders whose DINs are in "Surrendered", "Cancelled" or "Invalidated" status at the MCA. Once Form DIR-5 is processed and the DIN is marked "Surrendered", the annual obligation ceases entirely.

The practical implication is straightforward: if you were ever allotted a DIN and have not formally surrendered it, budget time every September to file. The obligation does not care whether you attended a single board meeting last year.

DIR-3 KYC vs DIR-3 KYC Web — Choosing the Right Route

MCA provides two distinct routes, and selecting the wrong one is a common time-waster in September.

Form DIR-3 KYC (Full eForm)

You must file the full form if any of the following apply:

• You are filing KYC for the first time after DIN allotment.
• Your personal mobile number or personal email address has changed since your last accepted KYC.
• Your residential address or name on MCA records needs updating.
• Your DIN is currently deactivated and you are reactivating it — the web form cannot reactivate a deactivated DIN.
• You are a foreign national filing KYC in India.

This form requires a valid Class III Digital Signature Certificate (DSC) of the director and a certification by a practising CA, CS or CMA who also attaches their own DSC. Allow at least 2–3 working days to coordinate with your professional.

DIR-3 KYC Web (Web-Based Form)

Use this route only if:

• You have previously filed DIR-3 KYC (full form) at least once, and
• None of your details have changed — same personal mobile, same personal email, same address on MCA records.

The web-based filing requires only your MCA V3 login, OTP confirmation to the registered mobile and the registered email, and a click to submit. No DSC, no professional certification. It takes under 15 minutes and costs nothing in government fees.

Decision rule for 2026: If your OTPs reach the same mobile and email you had on record, and nothing else has changed, you are a web filer. If anything has changed — even just a mobile number — file the full eForm. Filing web when details have changed leaves stale information on MCA records and will cause problems in future filings.

Documents and Information You Need Before You Start

For DIR-3 KYC Web (returning filer, no changes)

• MCA V3 login credentials
• Live access to your registered mobile (for OTP)
• Live access to your registered email (for OTP)

For DIR-3 KYC Full eForm

Critical 2026 dependency: The MCA V3 portal validates PAN-Aadhaar linkage in real time. If your PAN is tagged "inoperative" in the Income Tax Department's systems, DIR-3 KYC will be rejected at the validation stage regardless of how well-prepared everything else is. Verify your PAN-Aadhaar status at incometaxindia.gov.in in August — resolution of a name mismatch with UIDAI or the IT department can take 2–4 weeks.

Step-by-Step Filing on the MCA V3 Portal

The following sequence applies to the full DIR-3 KYC eForm. DIR-3 KYC Web follows Steps 1–4 and 9–10 only, replacing DSC steps with OTP confirmation.

1. Log in to MCA V3 at www.mca.gov.in using your individual director login — not the company's CIN-based login.
2. Navigate to the form: MCA Services → E-filing → Director / Designated Partner → DIR-3 KYC.
3. Download a fresh form: MCA updates form versions periodically. Always download from the portal on the day of filing. A cached version from the prior year may be rejected.
4. Pre-fill and validate DIN: Enter your DIN. The system pulls your name, father's name, date of birth and current DIN status from the registry. Verify these match your PAN exactly — a name mismatch between the DIN record and PAN is a common cause of validation failure.
5. Enter personal mobile and email: These must be yours alone. OTPs are dispatched live; you must enter them in real time during the session.
6. Upload supporting documents: Attach identity proof and address proof within the prescribed file size limits (typically 2 MB per document, 10 MB total). Scanned files must be legible.
7. Affix your Class III DSC: Use the DSC mechanism on MCA V3. Your DSC must correspond to the PAN used in the form.
8. Professional certification: Your CA, CS or CMA reviews the form, certifies the accuracy of details and attaches their own valid DSC. Co-ordinate this step in advance — it cannot happen in the last few minutes.
9. Submit and note the SRN: On successful submission, the portal generates a Service Request Number (SRN). Download and store the acknowledgement immediately. This is your compliance proof.
10. Verify DIN status post-filing: Within 24–48 hours, go to MCA V3 → Master Data → Director Master Data and confirm DIN status shows "Approved" with the KYC year updated. Do not assume the filing succeeded without this final check.

Portal congestion warning: The MCA V3 portal is routinely overloaded in the last five working days of September. File by 20 September at the latest. The portal timing out at 11:45 pm on 30 September is not recognised as a valid reason for condonation of delay.

Penalty for Non-Filing and the Cascade Effect

If you miss 30 September, MCA's automated system deactivates your DIN with effect from 1 October. The consequences are immediate and binary — there is no partial deactivation, no warning email, and no grace period.

Direct consequences:

• Reactivation fee: ₹5,000 — payable as an additional fee when you eventually file the belated DIR-3 KYC. The fee is the same whether you file one day late or one year late. There is currently no waiver or condonation mechanism.
• DIN unusable for any MCA form: A deactivated DIN cannot be used to sign, certify or file any document on the MCA portal. This covers DIR-2, DIR-8, AOC-4, MGT-7, MGT-14, INC-22A, Form 11 (LLP Annual Return), and every other form requiring a director's or designated partner's DIN.

Cascade consequences on company compliance:

Every pending MCA filing for every company on whose board you serve freezes until your DIN is reactivated. The companies are not at fault, but they bear the late fees on their own filings. Board resolutions, charges, annual returns and financial statement filings — all of them require active DINs from signing directors.

Worked Example — The True Cost of a Missed Deadline

Scenario: Arjun Mehta (DIN 07XXXXXX) is a director in two companies — Buildright Construction Pvt Ltd and Nexgen Solutions Pvt Ltd. He filed DIR-3 KYC Web on time for FY 2024-25 but overlooked the FY 2025-26 deadline. On 1 October 2026, his DIN is automatically deactivated.

Arjun's direct cost:

Cascade — Buildright Construction Pvt Ltd: AOC-4 (annual financial statements filing) was due 29 October 2026. Arjun is the only authorised signatory for the board certification. His DIN is deactivated, no other director can be added quickly without board meetings and ROC filings. Arjun files his belated KYC on 20 October; AOC-4 is eventually submitted on 18 November 2026 — a 20-day delay.

• AOC-4 additional fee: ₹100 × 20 days = ₹2,000

Cascade — Nexgen Solutions Pvt Ltd: Nexgen passed a special resolution on 5 October requiring MGT-14 within 30 days (deadline: 4 November 2026). Filed on 18 November — 14-day delay.

• MGT-14 additional fee: ₹100 × 14 days = ₹1,400

Grand total:

The DIR-3 KYC Web filing, had Arjun filed on time, would have cost ₹0 in government fees and approximately 15 minutes. The ₹5,000 headline penalty is only about a third of the real bill once you factor in cascade fees and professional engagement costs.

Reactivating a Deactivated DIN

If you have missed the deadline, follow this sequence without shortcuts:

1. Confirm the deactivation reason: Log in to MCA V3 → Master Data → Director Master Data. Confirm the status reads "Deactivated due to non-filing of DIR-3 KYC" specifically. A DIN deactivated for other reasons (court orders, MCA investigation) requires different remediation and legal advice.
2. Gather fresh documents: Address proof must not be older than 2 months from the date of filing. If your address has changed since the last KYC, prepare updated proof.
3. Renew DSC if needed: If your DSC lapsed while the DIN was deactivated, renew it first with your certifying authority (eMudhra, n-Code, Sify, CDAC, etc.). Renewal typically takes 1–3 working days; do not assume same-day turnaround.
4. File DIR-3 KYC full eForm: The DIR-3 KYC Web form cannot reactivate a deactivated DIN. Only the full eForm triggers reactivation.
5. Pay ₹5,000 at submission: The additional fee is collected online during form submission on MCA V3. Keep the fee payment receipt separately.
6. Obtain professional certification: Your CA, CS or CMA certifies and attaches their DSC before you submit.
7. Submit and download confirmation: Archive the SRN and acknowledgement immediately.
8. Re-verify DIN status within 48 hours: Check Director Master Data again to confirm status is back to "Approved" before signing any company form.

Special Scenarios

NRI and Foreign National Directors

NRI directors file the same DIR-3 KYC framework with these differences:

• Use a passport as the primary identity document. Aadhaar-based OTP e-KYC may not be available for all NRIs depending on residency and biometric enrolment status.
• The personal mobile number provided must be capable of receiving OTP in real time. Foreign SIMs work, but confirm international SMS delivery before the session — a failed OTP on 29 September is an avoidable emergency.
• Address proof issued abroad (bank statement, utility bill) should be in English. If in another language, a certified translation must accompany it.

Foreign national directors (non-Indian citizens) must additionally comply with apostille or consular attestation requirements for documents executed abroad. If the director's country is a signatory to the Hague Apostille Convention, an apostille from the competent authority of that country suffices. For countries that are not signatories, consular attestation from the Indian embassy or high commission in that country is required. Build in at least 3–4 weeks for this process.

Directors Who Have Resigned from All Companies

Resignation from a company removes you from that company's board but does not cancel your DIN. The DIN stays "Approved" in MCA's registry until you formally surrender it through Form DIR-5.

Form DIR-5 (Application for Surrender of DIN) can only be filed if you are not currently a director in any company and the DIN was never used for directorship, or all the companies in which you were a director have been closed. Where you have genuinely exited all directorships, file DIR-5 promptly — the day the MCA processes it, your annual KYC obligation ends.

Until that happens, you must file DIR-3 KYC annually. Directors who discover years of accumulated deactivations — and face multiple stacked ₹5,000 fees — typically did not know this rule applied post-resignation. There is currently no MCA amnesty or bulk-reactivation scheme; each deactivated year must be remediated individually.

PAN-Aadhaar Linkage — A 2026-Specific Hard Dependency

In FY 2025-26, MCA V3 added a real-time call to the Income Tax Department's database during DIR-3 KYC processing. If your PAN is tagged "inoperative" because Aadhaar has not been linked, the form fails at the validation stage — it does not matter that everything else is in order.

Resolve this before August:

1. Check status at incometaxindia.gov.in → Quick Links → Link Aadhaar Status.
2. If there is a name or date-of-birth mismatch between PAN and Aadhaar, raise a correction request with UIDAI (for Aadhaar) or the NSDL/UTIITSL portal (for PAN). Resolution can take 2–4 weeks.
3. Once linked and operative, the status typically reflects on MCA V3 within 24–72 hours.

Common Pitfalls to Avoid

Using a company email or shared mobile number. Rule 12A explicitly requires a personal mobile and email unique to the director. If you use your company's admin email, the contact details on your DIN record belong to an entity, not to you — which creates problems in every future official correspondence and OTP-based filing.

Discovering a lapsed DSC on 29 September. This is the single most common cause of last-minute failure. DSC renewal with certifying authorities typically takes 1–3 working days. If there is any name mismatch or documentation issue, it can take longer. Renew by 31 August every year, without exception.

Assuming the company's CS is tracking your personal KYC. Your DIN is personal. A company secretary looks after the company's filings, not each director's individual compliance. If you sit on multiple boards, no single CS has a complete picture of your personal obligations. Own this calendar item yourself.

Not downloading and archiving the acknowledgement. The SRN-based acknowledgement is your proof that KYC was filed for a particular year. MCA's own records are occasionally inconsistent after portal migrations. Store the acknowledgement in a personal compliance folder, not just in the company's records.

Filing DIR-3 KYC Web when details have actually changed. If your mobile changed but the old number still receives SMS, the OTP-based web filing will technically complete — but your DIN record will carry stale contact information. Future OTPs, notices and DIN-linked correspondence from MCA will go to a number you no longer use.

Treating resigned-director status as end of obligation. As discussed, resignation without DIR-5 surrender leaves the annual KYC obligation alive. Check your DIN status every September regardless of your current board involvement.

Key Takeaways

• The deadline is 30 September each year — for FY 2025-26, that is 30 September 2026. MCA's deactivation batch runs automatically on 1 October; there is no grace period and no partial penalty for being just one day late.
• Every DIN holder must file, including resigned directors, disqualified directors and LLP designated partners, until the DIN is formally surrendered via Form DIR-5.
• Two routes exist: DIR-3 KYC Web (OTP only, for returning filers with no changes) and DIR-3 KYC full eForm (first-time filers, changed details, or reactivation). Reactivation of a deactivated DIN always requires the full eForm.
• The ₹5,000 reactivation fee is the floor, not the ceiling. Cascade delays on company filings — AOC-4, MGT-7, MGT-14 — pile on additional fees of ₹100 per day per form, plus professional engagement costs. The real bill in a two-company scenario can easily exceed ₹13,000–15,000.
• PAN-Aadhaar linkage is now a hard technical dependency on MCA V3 during KYC filing. Verify and resolve any inoperative PAN status before the end of August.
• Renew your Class III DSC by 31 August — never on the same day as KYC filing. DSC issues in the last week of September cannot always be resolved before the deadline.
• File by 20 September: MCA V3 portal congestion in the final days of September is predictable and annual. Earlier filing is the only reliable mitigation.