Maximizing Compliance with GST Audit

Maximizing Compliance with GST Audit

A GST audit in India is not a random inspection — it is a data-comparison exercise. The department already holds your GSTR-1, GSTR-3B, GSTR-2B, e-invoice IRNs and e-way bill logs before Form GST ADT-01 reaches your inbox. Maximising compliance means eliminating the gaps between what you filed, what you claimed and what the GSTN's analytics directorate can already see. For FY 2026-27, that preparation has to start on Day 1 of the financial year, not the day the notice arrives.

Understanding the GST Audit Framework in 2026

Section 65: Departmental Audit

Under Section 65 of the CGST Act 2017, the proper officer can audit any registered person at their principal place of business or where records are held. The audit covers a specified financial year and requires at least 15 days' advance notice in Form GST ADT-01. Once audit starts, it must be completed within three months, extendable to six months by a Commissioner-level authorisation. At conclusion, audit findings are communicated in Form GST ADT-02.

Critically, the officer can audit multiple financial years simultaneously. Businesses that assume a clean GSTR-9 filing for FY 2023-24 shields them in FY 2026-27 are mistaken — earlier years remain open within the limitation period under Section 73 or 74.

Section 66: Special Audit

Where the proper officer believes accounts are complex or that declared value differs materially from fair value, Section 66 empowers the Commissioner to direct a special audit by a chartered accountant or cost accountant nominated by the department. The taxpayer bears the cost of this audit unless the Commissioner directs otherwise. Special audit findings can form the basis for demand proceedings, making early self-correction especially important in complex sectors such as pharmaceuticals, real estate and financial services.

How the GSTN Risk Engine Selects Taxpayers

The GSTN's analytics directorate scores every GSTIN using parameters including:

• GSTR-1 vs GSTR-3B variance — turnover or tax reported differently across returns
• GSTR-2B mismatch — ITC claimed in 3B exceeding ITC auto-populated from supplier filings
• E-invoice IRN density — invoices above the e-invoicing threshold without corresponding IRN
• E-way bill vs GSTR-1 mismatch — value or distance anomalies flagging possible stock suppression
• Sector benchmarks — ITC-to-turnover ratios significantly above industry peers
• Late or non-filing pattern — habitual filing delays increase risk score

Understanding these parameters tells you exactly what your self-audit should focus on first.

Your Month-by-Month Self-Audit Calendar

An annual audit is only as defensible as the monthly hygiene that feeds it. Build the following into your accounting close process for every month of FY 2026-27.

Monthly Tasks (by the 20th of the following month)

1. Reconcile GSTR-1 with the sales ledger — match invoice numbers, taxable value, GST amount and HSN code. Resolve amendments and credit-note postings before filing.
2. Match GSTR-3B output tax with GSTR-1 — any under-reporting in 3B relative to 1 attracts a mismatch notice. Document deliberate deferrals (e.g. disputed invoices) in writing.
3. Compare GSTR-2B with the purchase ledger — flag invoices where supplier has not filed GSTR-1, so ITC is not yet available. Do not claim ITC until it appears in 2B unless you meet the conditions under the second proviso to Section 16(2).
4. Run an RCM register update — record all inward supplies attracting reverse charge: legal counsel fees, director sitting fees, import of services, security services and transportation under GTA. Ensure tax is paid via DRC-03 if missed in 3B.
5. Check e-invoice IRN log — download the IRP reconciliation report. Flag cancelled IRNs and confirm the corresponding credit note is in GSTR-1.

Quarterly Tasks (within 15 days of quarter end)

• Run a Section 17(5) blocked credit sweep — identify any inadvertent ITC claims on motor vehicles, food and beverages, club memberships, health insurance for employees not entitled under law, and gifts exceeding Rs. 50,000 per recipient per year. Reverse immediately via Table 4(B)(2) of GSTR-3B.
• Reconcile e-way bills with delivery challans and FasTag movement data — discrepancies here are the leading trigger for physical verification under Rule 139.
• Conduct a cross-charge and ISD review if your business has multiple GSTINs — confirm that costs incurred centrally are being correctly attributed to consuming states and that ISD credit distributions are documented in Form ISD-01.

ITC Discipline: The Single Largest Audit Risk

Input tax credit accounts for the majority of all GST audit demand in India. The reason is structural: the credit chain is only as strong as the weakest supplier in it.

What Section 16(2)(aa) and Rule 36(4) Mean in Practice

Section 16(2)(aa), inserted by the Finance Act 2021 and operative from 1 January 2022, makes it a legal condition — not merely a matching exercise — that the invoice or debit note on which ITC is claimed must appear in the taxpayer's GSTR-2B. If a supplier files GSTR-1 after your return cycle, the credit simply does not exist yet in law, regardless of whether you hold a valid tax invoice.

Rule 36(4), as amended, restricts provisional ITC to only invoices actually appearing in GSTR-2B. There is no longer a safe-harbour percentage for claiming ITC beyond what 2B shows.

Practical implication: if you discover in March 2027 that Rs. 8 lakh of ITC claimed in April–June 2026 never appeared in 2B because the supplier filed GSTR-1 late, the entire Rs. 8 lakh is subject to reversal with interest at 18% per annum under Section 50, compounded from the date of claim to the date of reversal.

Section 17(5) Blocked Credit — A Checklist

Ensure the following categories are never included in ITC:

• Motor vehicles with seating capacity of five or fewer persons (exceptions for dealers, transport operators, driving schools)
• Food, beverages and outdoor catering
• Beauty treatment, health services and cosmetic surgery
• Club memberships and health club fees
• Rent-a-cab (unless obligatory under law for employees)
• Life insurance and health insurance (unless mandatorily provided to workers under law)
• Works contract services for construction of immovable property intended for own use
• Goods or services used for personal consumption
• Gifts exceeding Rs. 50,000 per employee per financial year in value

Maintain a monthly blocked-credit register with invoice number, vendor GSTIN, amount, ITC category and the specific clause of Section 17(5) under which it is blocked. This register is the first document a GST auditor will request.

Worked Example: The True Cost of ITC Negligence

Consider a mid-sized manufacturing company in Pune with aggregate annual turnover of Rs. 45 crore for FY 2024-25. During a Section 65 audit initiated in September 2026 covering FY 2024-25:

Finding 1 — GSTR-2B mismatch: The auditor finds that the company claimed Rs. 12,50,000 ITC in GSTR-3B across April–September 2024, but only Rs. 10,80,000 appeared in GSTR-2B during the same period. Uncorroborated ITC = Rs. 1,70,000.

• Interest at 18% p.a. for 730 days (2 years from date of claim to audit conclusion): Rs. 1,70,000 × 18% × 730 ÷ 365 = Rs. 61,200
• Penalty under Section 73 (assuming no fraud): 10% of tax or Rs. 10,000, whichever is higher = Rs. 17,000
• Total liability: Rs. 2,48,200

Finding 2 — Section 17(5) blocked credit: Rs. 85,000 ITC claimed on health club memberships for employees (not mandatorily covered under any statute).

• Tax demand: Rs. 85,000
• Interest at 18% for 700 days: Rs. 85,000 × 18% × 700 ÷ 365 = Rs. 29,342
• Penalty: Rs. 10,000 (minimum)
• Total liability: Rs. 1,24,342

Finding 3 — RCM non-payment: Legal counsel fees paid to an advocate firm over the year totalling Rs. 6,00,000 — RCM not paid in GSTR-3B (Table 3.1(d)).

• CGST + SGST (18% total): Rs. 1,08,000
• Interest at 18% for 600 days: Rs. 1,08,000 × 18% × 600 ÷ 365 = Rs. 32,024
• Penalty: Rs. 10,800 (10% of tax)
• Total liability: Rs. 1,50,824

Aggregate demand across three findings: Rs. 5,23,366 — on a company that considered itself broadly compliant.

Had the company run the monthly self-audit described in the previous section, each of these issues would have been identified and resolved within the same return cycle at zero additional cost.

Vendor Compliance Is Now Part of Your Audit Profile

The retrospective GSTIN cancellation problem is real and growing. When the department cancels a supplier's registration with retrospective effect — for example, from 1 April 2023 — every ITC you claimed on invoices from that supplier from that date becomes suspect and can be reversed with interest.

Vendor Scorecard Essentials

Implement a vendor GSTIN health check quarterly for all suppliers contributing more than Rs. 5 lakh annual purchases:

1. Verify active registration on the GST portal (www.gst.gov.in) under the Search Taxpayer module
2. Check GSTR-1 filing regularity — the portal shows the last 12 months' return filing history
3. Flag suppliers whose ITC consistently fails to appear in your GSTR-2B even after their filing due date
4. For new vendors, verify GSTIN validity and legal name match before raising the first purchase order

What to Do When a Supplier's GSTIN Is Cancelled Retrospectively

• Download the Annual Information Statement (AIS) and cross-reference with GSTR-2B mismatch reports
• If ITC is under threat, compute the exact exposure and reverse proactively in Table 4(B)(1) of GSTR-3B with interest, filing a DRC-03 for the interest component
• Engage the supplier in writing to either regularise their registration or provide alternate documentation
• Preserve all purchase orders, goods receipt notes and payment records — physical possession of goods is still relevant to establishing bona fide transactions under the proviso to Section 16(2)

Some businesses now include a GST filing compliance warranty clause in vendor agreements — requiring the vendor to indemnify the buyer for ITC reversal losses caused by their non-compliance. While enforcement is uncertain, it creates a documented paper trail and incentivises supplier behaviour.

GSTR-9 and GSTR-9C: Your Public Audit Statement

GSTR-9 (annual return) and GSTR-9C (reconciliation statement) are the most scrutinised documents in any GST audit. They are the taxpayer's own declaration, which means any inconsistency between GSTR-9 figures and the audited financial statements is a direct trigger for audit action.

Key points for FY 2026-27:

• GSTR-9 is due by 31 December 2027 for FY 2026-27 (subject to any extension notified by CBIC)
• GSTR-9C remains mandatory for taxpayers with aggregate annual turnover exceeding the CBIC-notified threshold (Rs. 5 crore as per the last notification; verify for FY 2026-27 on the CBIC circular tracker)
• GSTR-9C is now self-certified by the taxpayer — there is no separate CA certification box, but the reconciliation figures directly expose any gap between books and returns
• Late fee for GSTR-9: Rs. 200 per day (Rs. 100 CGST + Rs. 100 SGST), capped at 0.25% of state turnover

Fill Table 6 of GSTR-9 with precision — ITC availed, reversed and ineligible amounts must reconcile to GSTR-3B filings. Table 8 reconciles GSTR-2B auto-populated ITC with what you actually claimed. Any negative figure in Table 8D (ITC available but not availed) is a signal to check whether ITC was missed and whether a belated claim is still possible.

Building an Audit-Proof Documentation Architecture

Physical and digital records must survive for six years from the due date of the annual return for the relevant financial year under Section 36 of the CGST Act. Practically, structure your archive as follows:

Tier 1 — Return Filings (mandatory digital)

• GSTR-1, GSTR-3B, GSTR-2B, GSTR-9 and GSTR-9C PDFs with acknowledgement numbers, stored by month and year
• E-invoice IRN master file (JSON or Excel) downloadable from the IRP dashboard
• All DRC-03 payment challans and their purpose notings

Tier 2 — Transaction Records

• Tax invoices, credit notes and debit notes (supplier + recipient both directions)
• Delivery challans and e-way bills linked to invoice numbers
• Goods receipt notes and inspection reports for high-value purchases

Tier 3 — Legal and Structural Documents

• Letter of Undertaking (LUT) filed in Form RFD-11 on the GST portal for exports without payment of tax — valid for the entire financial year, file fresh for FY 2026-27 before the first export
• Refund applications (RFD-01) and their order copies for at least six years
• Board resolutions and internal policy notes on major positions: cross-charge methodology between branches, ISD distribution rationale, distinction between supply and reimbursement for related-party transactions
• Legal opinions relied upon for any position taken on complex transactions (e.g. slump sale GST treatment, treatment of employee secondment)

A single GST Audit Master Folder in your ERP or document management system, structured by financial year, prevents the frantic file-gathering that typically occurs in the 15-day window between ADT-01 and the first audit meeting.

Common Audit Observations and How to Pre-empt Them

These eight observations appear repeatedly across departmental audits in India. Document your response to each of these before any notice arrives.

For the Rule 42/43 calculation (common ITC reversal for partly exempt businesses), the formula is prescribed by the CGST Rules and must be applied monthly in proportion and trued-up annually. Errors here are computable by the auditor directly from your GSTR-3B, so any shortfall is immediately quantifiable.

Responding to Form ADT-01: A Step-by-Step Protocol

When the audit notice arrives, follow this sequence:

1. Acknowledge within the stated timeline — typically you have 15 working days to respond to ADT-01 with confirmation of readiness. Request a written extension if needed; reasonable extensions are generally granted for the first inquiry.
2. Constitute an internal response team — assign one point of contact who handles all communication with the audit officer. Avoid multiple team members giving inconsistent verbal responses.
3. Prepare a structured reconciliation pack — do not submit raw ledger dumps. Prepare a single document showing: GSTR-9 → GSTR-3B aggregate → GSTR-2B → books reconciliation, with quantified differences and explanations.
4. Walk the auditor through voluntarily disclosed positions first — if your GSTR-9 contains any additional payments made at the time of annual return filing, highlight these prominently. They demonstrate good faith and typically narrow the audit scope.
5. If a leakage is identified during audit — consider voluntary payment under Section 73(5) before any notice is formally served. Payment of tax plus interest plus a penalty equivalent to 15% of such tax closes the demand without a formal notice. This is structurally far cheaper than a contested demand.
6. Respond to ADT-02 in writing — Form ADT-02 records audit findings. Any agreement or disagreement must be formally documented. Do not rely on verbal assurances.
7. If disagreement persists — the proper channel is an appeal after the demand order is issued, not resistance during the audit. Maintain a professional, cooperative tone throughout.

Key Takeaways

• GST audit is a data comparison exercise — the department already holds most of your data before serving ADT-01. Preparation means eliminating mismatches before they are discovered, not explaining them afterward.
• Monthly GSTR-1/3B/2B reconciliation is non-negotiable — a single month of unchecked ITC compounds into a multi-year interest liability if discovered during audit.
• Section 17(5) and RCM together account for a disproportionate share of audit demands — a blocked-credit register and quarterly RCM review will eliminate most of this exposure.
• GSTR-9 and GSTR-9C are your public audit statement — every figure in these returns must be reconcilable to your audited financial statements and to your monthly 3B filings.
• Vendor GSTIN health checks are a credit-protection measure — retrospective cancellations can unwind ITC claimed in good faith; active monitoring is your only defence.
• Voluntary payment under Section 73(5) before notice issuance reduces the effective penalty significantly — the cost of proactive disclosure is always lower than the cost of a contested demand.
• A single GST Audit Master Folder, maintained throughout the year by financial year and return type, converts a potentially stressful audit into a structured document production exercise.