How to Avoid Penalties in Year One of Your Startup Journey

How to Avoid Penalties in Year One of Your Startup Journey

First-year penalties are the silent tax on founder distraction. For a Private Limited Company incorporated in India in FY 2026-27, the combined penalty exposure from missed MCA filings, skipped TDS deposits, unfiled GST returns, and ignored notices can comfortably cross Rs. 1,00,000 — for errors that require zero legal skill to avoid. Every penalty listed in this post is preventable with a structured compliance calendar and the discipline to follow it. This guide gives you that calendar, the underlying rules, real Rs. examples, and a step-by-step response plan for when things go wrong.

Why Year One Is the Riskiest Year for Compliance Penalties

New founders are simultaneously building product, raising money, hiring, and selling. Compliance drops to the bottom of the list — until a demand notice or a frozen DIN (Director Identification Number) arrives. The 2026 regulatory environment makes this riskier than ever: MCA V3 portal automation flags overdue filings almost immediately, the Income Tax Department's AIS (Annual Information Statement) and TIS (Taxpayer Information Summary) cross-reference third-party data against your returns, and GST's GSTR-2B auto-populates your suppliers' data into your portal whether you log in or not.

The result: system-generated notices for mismatches you didn't know existed. The remedy: understand the filing obligations before they become defaults.

Build Your Compliance Calendar on Day One

The moment your Certificate of Incorporation arrives from the MCA V3 portal, open a spreadsheet and map every due date for the next 12 months. For a Private Limited Company operating in FY 2026-27 (Assessment Year 2027-28), your compliance universe has five pillars:

1. MCA / Corporate filings

• INC-20A (commencement of business declaration)
• DIR-3 KYC (annual director KYC, due September 30 each year)
• AOC-4 (financial statements, due 30 days after AGM)
• MGT-7A or MGT-7 (annual return, due 60 days after AGM)
• DPT-3 (outstanding loans / deposits return, due June 30)
• MSME-1 (half-yearly outstanding payment to MSMEs — due April 30 and October 31)

2. Income Tax

• Advance tax: four instalments on June 15, September 15, December 15, and March 15
• TDS deposit: 7th of following month (March deposits due April 30)
• TDS returns: Form 26Q / 24Q quarterly — July 31, October 31, January 31, May 31
• Tax audit report (if applicable): September 30 of the assessment year
• ITR-6: October 31, 2027 for AY 2027-28

3. GST

• GSTR-1: 11th of following month (or quarterly under QRMP)
• GSTR-3B: 20th of following month (or quarterly under QRMP)
• GSTR-9 / 9C: Annual return, date as notified (historically December 31)

4. Payroll

• PF ECR (Electronic Challan cum Return): deposit by 15th, return by 25th of following month
• ESIC: deposit by 15th of following month
• Professional tax: monthly or annual depending on state

5. Sector-specific

• FSSAI, RBI (for NBFC or FDI), SEBI, IRDAI as applicable

Pin this calendar to your internal project management tool. Assign each filing to a named owner — founder, CFO, or CA — with a 7-day advance reminder. The cost of the reminder infrastructure is zero. The cost of missing a filing is not.

MCA Filings: The First 180 Days Are Critical

INC-20A: The Commencement Declaration You Cannot Skip

Section 10A of the Companies Act 2013 requires every company incorporated after November 2, 2018 to file Form INC-20A — a declaration that the subscribers to the memorandum have paid their subscribed share capital — within 180 days of incorporation.

What INC-20A requires:

1. Open a current bank account in the company's name
2. Transfer the subscribed share capital from each subscriber into that account
3. Attach the bank statement as proof
4. File on the MCA V3 portal before Day 180

Penalty for default (Section 10A(2)):

• Company: Rs. 50,000 (one-time)
• Every officer in default: Rs. 1,000 per day, subject to a maximum of Rs. 1,00,000

Worked illustration: TechBuild Private Limited is incorporated on April 15, 2026. The 180-day deadline is October 12, 2026. The founders are busy with a seed round and file INC-20A on November 15, 2026 — 34 days late.

That is a Rs. 1,18,000 penalty for a 34-day delay on a form that takes under an hour to prepare.

DIR-3 KYC: Annual Identity Proof for Every DIN Holder

Every person holding an active DIN (Director Identification Number) as on March 31 of a financial year must file DIR-3 KYC (or the web-based DIR-3 KYC-Web) by September 30 of that year. For FY 2025-26, the deadline is September 30, 2026.

Non-filing deactivates the DIN. A deactivated DIN means you cannot digitally sign any MCA form — which means all company filings grind to a halt until you pay a late reactivation fee of Rs. 5,000 per DIN and file the KYC. Two-director company: Rs. 10,000 to fix an error that takes ten minutes to prevent.

First-time KYC after DIN allotment requires a mobile OTP, email OTP, and Aadhaar/PAN verification. Set a calendar reminder for the third week of September every year without exception.

GST Compliance: Register Early, File Even When Silent

When Registration Becomes Mandatory

Register for GST as soon as your aggregate turnover crosses:

• Rs. 40 lakh for suppliers of goods (Rs. 20 lakh in special category states)
• Rs. 20 lakh for suppliers of services (Rs. 10 lakh in special category states)

You may also need to register voluntarily before crossing these thresholds if you are making inter-state supplies, claiming input tax credit from day one, or your investors expect a GSTIN on tax invoices. Voluntary registration is advisable for most B2B startups regardless of turnover.

The Filing Rhythm and the Nil Return Trap

Once registered, you must file returns whether or not you have any taxable transactions. This is the single most common early mistake: a registered startup with no revenue skips GSTR-3B for several months, assuming there is "nothing to file."

Late fee for GSTR-3B:

• Rs. 50 per day if tax is payable
• Rs. 20 per day for nil returns
• Capped at Rs. 10,000 per return

Miss three nil GSTR-3B returns by 45 days each: Rs. 20 × 45 × 3 = Rs. 2,700. Manageable, but entirely unnecessary.

More seriously: under Section 29(2)(c) of the CGST Act 2017, GST registration can be cancelled suo-motu if a registered person fails to file returns for six consecutive months (monthly filers). Cancellation triggers the reversal of all input tax credit claimed — a penalty with real downstream cash impact.

Monthly reconciliation with GSTR-2B is non-negotiable even in year one. If a supplier has not filed their GSTR-1, your input credit is temporarily unavailable. Chasing suppliers before your monthly return is filed is part of the compliance process, not an optional extra.

TDS: The Penalty That Compounds Before You Notice

What You Must Deduct On

From the first month you pay salaries, professional fees, rent, or contractor invoices above the prescribed thresholds, you are a tax deductor under the Income-tax Act 1961.

Key thresholds for FY 2026-27:

• Section 192 — Salary: deduct at slab rates on all salary payments
• Section 194C — Contractor payments: 1% (individual/HUF) or 2% (others) above Rs. 30,000 per transaction or Rs. 1,00,000 cumulative in the year
• Section 194J — Professional / technical fees: 10% (professional) or 2% (technical services) above Rs. 30,000 per annum
• Section 194I — Rent: 10% above Rs. 2,40,000 per annum on land, building, or furniture

Deadlines and the Penalty Stack

Deposit: TDS deducted in any month must be deposited by the 7th of the following month (exception: March — deposit by April 30).

Return: Quarterly TDS returns (Form 26Q for non-salary, Form 24Q for salary) are due:

Three separate penalties apply when TDS goes wrong:

1. Late deduction interest (Section 201(1A)): 1% per month (or part of month) from the date the amount was deductible to the date it was actually deducted
2. Late deposit interest (Section 201(1A)): 1.5% per month from the date of deduction to the date of payment to the government
3. Late filing fee (Section 234E): Rs. 200 per day from the return due date to the actual filing date, subject to a maximum equal to the TDS amount
4. Penalty (Section 271H): Rs. 10,000 to Rs. 1,00,000 for non-filing or incorrect filing (in addition to 234E, not instead of it)

Worked example: In Q1 FY 2026-27, TechBuild deducts Rs. 50,000 TDS on professional fees. It deposits the TDS 45 days late (1.5 months after the due date) and files Form 26Q 60 days late.

The Rs. 50,000 professional fee that triggered all this TDS: the vendor's expense is entirely legitimate. But the income tax department will also disallow the expense in TechBuild's own assessment under Section 40(a)(ia) if TDS was not deducted or was deducted but not deposited — meaning the company pays more corporate tax on top of the penalties.

Annual MCA Filings: AOC-4, MGT-7, DPT-3, and MSME-1

Most year-one founders focus on the INC-20A and then forget there is an entire annual filing cycle that kicks in for the first financial year.

AOC-4 (financial statements): Must be filed within 30 days of the Annual General Meeting (AGM). The AGM must be held within 6 months of the end of the financial year — so by September 30 for a March 31 year-end. AOC-4 is therefore due by October 30. Late fee: Rs. 100 per day of delay.

MGT-7A (annual return for small companies and OPCs) or MGT-7: Due within 60 days of the AGM — by November 29 for an AGM held September 30. Late fee: Rs. 100 per day.

DPT-3 (outstanding loans and deposits): Even if you have no deposits, if you have director loans, shareholder loans, or any outstanding borrowing, this form must be filed by June 30 every year for the position as at the preceding March 31. Penalty for non-compliance falls under Section 405 of the Companies Act — and can escalate to prosecution for repeat defaults.

MSME-1: If you have outstanding payments to MSME vendors exceeding 45 days, file this half-yearly return. Due October 31 (for April–September) and April 30 (for October–March). Penalty under Section 405 applies here too.

Payroll Compliance: PF, ESIC, and Professional Tax

Employees' Provident Fund (EPF)

Once your company employs 20 or more employees, EPF registration is mandatory under the Employees' Provident Funds and Miscellaneous Provisions Act 1952. Contributions: 12% of basic wages + DA from employee, 12% from employer (3.67% to EPF, 8.33% to EPS). Deposit by the 15th of the following month via the EPFO Unified Portal.

Late deposit attracts interest and damages under Section 14B — calculated at steeply progressive rates the longer the delay extends.

ESIC

Mandatory for establishments with 10 or more employees (in most states) where wages do not exceed Rs. 21,000 per month. Contribution: 3.25% employer + 0.75% employee. Deposit by the 15th of the following month. File the half-yearly return on the ESIC portal.

Professional Tax

State-specific. In Maharashtra, Karnataka, Telangana, and West Bengal it is applicable on salary-earning employees. Rates and due dates vary by state. Check your state's professional tax schedule on the state commercial tax department website and register before you pay the first salary.

How to Respond to Notices in 2026: A Practical Playbook

The Income Tax Department's faceless assessment infrastructure, GST's return-mismatch flagging, and MCA V3's automated compliance monitoring mean even a company with Rs. 5 lakh turnover can receive multiple system-generated notices in its first year.

Step 1: Build a notice registry. Designate one email address (your CA's, or a dedicated compliance inbox) for all government portals — MCA V3, GST portal, Income Tax e-filing, TRACES, EPFO. Check it weekly.

Step 2: Read the notice before panicking. Classify it: is it a deficiency notice (missing attachment), a clarification notice (explain this transaction), a demand notice (pay this amount), or a show-cause notice (SCN) initiating an adjudication? Each requires a different response.

Step 3: Note the response deadline. Most notices allow 15–30 days. GST show-cause notices typically give 30 days. Income Tax 143(1)(a) intimations often give 30 days from issue date. Miss the deadline and the department proceeds ex-parte — which usually means an addition to income or a confirmed demand.

Step 4: Respond in writing on the portal. Never respond by email unless specifically instructed. GST responses go on the GST portal under "Additional Notices and Orders." Income Tax responses go on the e-filing portal under "Pending Actions." Keep a timestamped PDF of every submission.

Step 5: For substantive notices (Section 148A, SCN with demand above Rs. 5 lakh, or any notice that alleges fraud), escalate immediately to a qualified CA or tax advocate. The cost of professional advice on a complex notice is always less than the cost of an incorrect self-filed response.

Common Pitfalls to Avoid

• Not opening a company bank account before filing INC-20A. Without the bank statement, the form cannot be filed. Banks sometimes take 2–3 weeks to open a current account for a new company. Apply on Day 1.
• Treating the registered office as a formality. DIR-3 KYC requires a valid, reachable address. Communications sent to an inactive registered office address go unanswered, and notice timelines still run.
• Filing GSTR-1 but forgetting GSTR-3B. They are separate returns. One does not substitute for the other. The late fee applies independently to each.
• Ignoring TDS on director remuneration. Sitting fees and commission to directors are subject to TDS under Section 194J. Many startups treat director salary as an exempt payment. It is not.
• Assuming the first AGM can be skipped. A company incorporated before the end of September 2026 must hold its first AGM by September 30, 2027 (within 18 months of incorporation or 9 months of financial year-end, whichever is earlier). Missing the AGM triggers penalties and cascades into late AOC-4 and MGT-7 filings.
• Claiming input tax credit before reconciling GSTR-2B. Credit claimed in excess of GSTR-2B is subject to reversal with interest at 18% per annum from the date of the wrong credit.

Worked Example: One Founder's Year-One Penalty Bill

TechBuild Private Limited — incorporated April 15, 2026, two directors, SaaS product, B2B clients, seed-funded.

TechBuild also received a 143(1)(a) intimation in March 2027 for a TDS mismatch between what was deposited in TRACES and what was claimed as credit in Form 26AS — because the Q1 return was filed late and TRACES did not update before the vendor filed their ITR. Resolving the mismatch required a revised 26Q return, a rectification request under Section 154, and three months of follow-up. None of that is counted in the Rs. 1,43,825 above.

The entire scenario was preventable with a properly set compliance calendar and a Rs. 0 investment of founder time per month beyond the first few weeks of setup.

Key Takeaways

• File INC-20A within 180 days — open the company bank account and transfer subscribed capital in the first week of incorporation. Do not leave this to Month 5.
• Set DIR-3 KYC in your calendar for mid-September every year — deactivated DINs freeze all MCA filings and cost Rs. 5,000 per director to fix.
• GST nil returns are mandatory — file GSTR-1 and GSTR-3B every month even with zero turnover; six missed months trigger suo-motu cancellation.
• TDS has three separate penalty layers — late deduction interest, late deposit interest, and 234E late filing fee; all three can stack on a single oversight.
• The annual MCA cycle (AOC-4, MGT-7A, DPT-3) begins in your very first financial year — plan the AGM by August so you are not scrambling in October.
• Every notice has a hard deadline — build a compliance inbox, log every communication within 24 hours, and respond on the correct government portal before the deadline elapses.
• The full cost of non-compliance includes disallowance, interest, and management time — the Rs. numbers in penalty schedules understate the real cost; the founder hours spent resolving avoidable defaults are never recovered.