Case Study: Identity theft victim faces ₹8.5 Lakh GST demand despite filing complaints
Amit Sharma, a 62-year-old retired government employee in Delhi, discovered his PAN had been fraudulently used to register a fake trading firm in Hyderabad while filing his Income Tax Return in July 2024. He had never registered any business, never applied for GST registration, and certainly never conducted trading operations 1,500 kilometers away in Telangana.
The Discovery:
His chartered accountant noticed unauthorized GST transactions linked to "Sharma Enterprises"—a firm purportedly operating from Hyderabad that Amit had no connection with. Someone had stolen his PAN credentials to create a shell company for generating bogus invoices and claiming fraudulent Input Tax Credit.
Immediate actions taken (July-August 2024):
- Filed cybercrime complaint with Delhi Police Cyber Cell
- Lodged complaint on Income Tax portal about unauthorized PAN usage
- Filed grievance on GST portal against fraudulent registration
Initial Responses:
- Cybercrime complaint: Status "closed" without explanation
- Income Tax complaint: Marked "resolved"
- GST portal complaint: "Issue accepted, action initiated"
January 2025: Fraudulent GST registration cancelled suo moto by authorities
The Problem:
Despite all these actions and registration cancellation, Amit received a GST demand notice in September 2024 for ₹8.5 lakh (tax + interest + penalty) for transactions conducted by the fake firm during April-August 2024. He now faces potential asset attachment, bank account freezing, and prosecution—despite being a victim, not perpetrator.
Summary: Immediate actions you must take
If your PAN has been misused for fake GST registration, follow these critical steps:
Immediate Priority Actions (Within 7 Days)
✅ File FIR in your local jurisdiction (not where fake firm is located)
- Include IT Act Sections 66C, 66D (Identity Theft)
- Include IPC Sections 420 (Cheating), 468, 471 (Forgery)
- File with Economic Offences Wing for better expertise
- Attach all evidence: GST demand notice, previous complaints, documentary proof
✅ Send formal written representation to GST Commissioner (where fake firm registered)
- Request complete exoneration as identity theft victim
- Seek withdrawal of demand notice
- Request no-liability certificate
- Demand investigation against actual perpetrators
- Send via registered post with acknowledgment
- Highlight inaction despite clear fraud evidence
- Request investigation into facilitation of fraudulent registration
- Seek accountability for processing officers
Critical Legal Action (Within 30 Days)
✅ File Writ Petition in your local High Court (most effective remedy)
- Make respondents: Local Police, GST Commissioner (Telangana), Union of India, DGGI
- Seek: Quashing of demand notice, no-liability certificate, investigation completion
- Request interim stay on coercive action
- Claim compensation for harassment
Protective Measures (Ongoing) ✅
- Regular monitoring of all PAN-linked activities
- Secure no-objection certificates from GST, Income Tax, Police
- Document everything comprehensively for legal proceedings
- Engage experienced advocate specializing in GST and cyber law
- Never make partial payments under pressure—it implies liability acceptance
What NOT To Do ❌
- Don't ignore GST demand notices hoping they'll disappear
- Don't pay any amount to "settle"—it accepts liability
- Don't rely only on online portal complaints
- Don't delay legal action—time is critical
- Don't handle complex inter-state matter without legal expert
📖 Read the detailed sections below for:
- Complete legal framework governing PAN misuse and identity theft
- Step-by-step legal procedures with specific formats and templates
- Case law precedents supporting victim protection
- Expected timelines and outcomes for different scenarios
- Preventive measures to protect against future PAN misuse
- Compensation remedies available under various laws
Understanding PAN misuse for fake GST registration: The Legal Framework
How does PAN-Based GST fraud occur?
The Goods and Services Tax system relies heavily on PAN-based identification, creating vulnerability to identity theft and fraudulent registrations. Understanding the mechanics of this fraud is essential for effective legal response.
Section 25(1) of CGST Act 2017 mandates PAN for GST registration:
"Every person who is liable to be registered under this Act shall apply for registration in every such State or Union territory in which he is so liable within thirty days from the date on which he becomes liable to registration."
Rule 8(1) of CGST Rules 2017 requires PAN as primary identifier:
"Every person, other than a non-resident taxable person, a person required to deduct tax at source under section 51, a person required to collect tax at source under section 52 and a person supplying online information and database access or retrieval services from a place outside India to a person in India, other than a registered person, shall apply for registration in every State in which he is liable to be registered."
Common Fraud Methodology:
- Fraudsters obtain PAN details through data breaches, phishing, or document theft
- Fake documents created including address proof and identity documents
- GST registration application filed online using victim's PAN but fraudulent address
- Aadhaar authentication bypassed or manipulated using technical methods
- Fake firm used to generate bogus invoices for ITC fraud schemes
- Victim discovers fraud months later through IT notices or GST demands
Related Blog: What to do if you have received notice for input tax reversal?
Supplier GST registration cancellation must not attract input tax reversal for buyer. Read more in this blog: How to respond to GST notices for ITC reversal when supplier’s GST registration is cancelled
Legal Provisions governing identity theft in GST
Multiple legal frameworks apply to PAN misuse for GST fraud:
- Information Technology Act, 2000
Section 66C (Identity Theft):"Whoever, fraudulently or dishonestly make use of the electronic signature, password or any other unique identification feature of any other person, shall be punished with imprisonment of either description for a term which may extend to three years and shall also be liable to fine which may extend to rupees one lakh."
Section 66D (Cheating by Personation Using Computer Resource):"Whoever, by means of any communication device or computer resource cheats by personation, shall be punished with imprisonment of either description for a term which may extend to three years and shall also be liable to fine which may extend to one lakh rupees."
- Indian Penal Code, 1860
Section 420 (Cheating): Applicable when fraudsters deceive GST authorities using stolen identity.
Section 468 (Forgery for Purpose of Cheating): Covers forged documents used in fraudulent GST applications.
Section 471 (Using Forged Document as Genuine): Applicable when fake documents are used for registration. - CGST Act, 2017
Section 132(1)(b) (Offences and Penalties):"Whoever takes or utilizes input tax credit without actual receipt of goods or services or both either fully or partially, in contravention of the provisions of this Act or the rules made thereunder."
This provision can be invoked against perpetrators of fake firm schemes.
Why standard complaint channels often fail?
Understanding Systemic Limitations
Victims like Amit face frustrating experiences because current systems have significant gaps:
Cybercrime Cell Limitations:
- Overloaded with thousands of complaints daily
- Limited resources for investigation of economic offenses
- Jurisdictional challenges in inter-state fraud cases
- Technical expertise gaps in GST-related fraud
- Low priority for cases without immediate financial loss to complainant
GST Portal Grievance System:
- Automated responses without substantive investigation
- No mechanism for victim verification and protection
- Focus on registration cancellation, not victim exoneration
- Limited coordination with law enforcement agencies
- Status updates don't reflect actual ground-level action
Income Tax Complaint System:
- Resolves technical mismatches in tax records
- Doesn't address underlying criminal fraud
- No power to provide legal protection from GST demands
- Operates independently of GST administration
The Critical Gap: No automatic victim protection
Even when fraudulent registration is cancelled suo moto (by authorities), past liabilities and notices continue to haunt victims. Sectionmemory 29 of CGST Act provides for registration cancellation, but doesn't automatically absolve the registered person from past period liabilities.
This creates the paradox where:
- Registration is cancelled confirming it was fraudulent
- Yet, demands are raised against the person whose PAN was misused
- Victim must prove innocence rather than fraudster proving guilt
- Administrative processes don't automatically protect identified victims
Comprehensive Legal Strategy: Your Action Plan
Immediate Actions (Within 7 Days of Notice Receipt)
Step 1: File FIR in your local jurisdiction
Contrary to common advice, file FIR in your city (Delhi), not where fake firm is registered (Telangana). Recent judicial developments support this approach.
Legal Basis:
Section 154 CrPC allows FIR filing where offence committed OR where consequences felt:
- Identity theft occurred at your location (where your documents were)
- You suffered harm at your place of residence
- Supreme Court in Kusum Ingots & Alloys Ltd. v. Union of India (2004) held that economic offences can be registered where victim resides
FIR Should Include:
- Identity theft under IT Act Sections 66C and 66D
- Cheating under IPC Section 420
- Forgery under IPC Sections 468, 471
- Complete chronology of fraud discovery and actions taken
- Copies of all previous complaints and their responses
- GST demand notice as evidence of ongoing harm
Delhi Police Economic Offences Wing:
Specialized unit for financial crimes with better expertise than cybercrime cell.
Step 2: File formal representation with GST Commissioner (Telangana)
Despite being in another state, formal written representation to the jurisdictional Commissioner is essential.
Format for Representation (As per established legal practice):
To,
The Commissioner of State Tax/Central Tax
[Jurisdiction where fake firm registered]Subject: Request for Complete Exoneration from Fraudulent GST Registration - Identity Theft Case
Respected Sir/Madam,
I am writing to bring to your notice a serious case of identity theft where my PAN [Number] has been fraudulently misused to create a fake GST registration [GSTIN] without my knowledge or consent. I am a bona fide resident of Delhi and have never conducted any business in Telangana.
Facts of the Case:
[Detailed chronology with dates]Actions Taken:
[List all complaints filed with reference numbers]Current Status:
The fraudulent registration has been cancelled suo moto vide Order No. [if available] dated [date]. However, I have received a demand notice No. [number] dated [date] which is completely unjust.Relief Sought:
- Formal declaration that I am a victim of identity theft
- Complete exoneration from all liabilities of fraudulent GSTIN
- Withdrawal of demand notice No. [number]
- No coercive action against me or my assets
- Investigation against actual perpetrators
- Issuance of no-liability certificate
Legal Basis:
- Identity theft under IT Act, 2000
- Victim protection under principles of natural justice
- Registration cancelled confirming fraudulent nature
I request your urgent intervention to protect an innocent citizen from consequences of criminal actions by unknown fraudsters.
Enclosures: [List all supporting documents]
Step 3: File complaint with central vigilance commission (CVC)
If local GST authorities are unresponsive, CVC provides oversight mechanism.
CVC Complaint Process:
- Online complaint at https://cvc.nic.in
- Category: Corruption/Misconduct in tax administration
- Highlight inaction despite clear evidence of fraud
- Request investigation into facilitation of fraudulent registration
- Seek accountability for officers who processed fake application
Medium-Term Legal Actions (Within 30 Days)
Step 4: File writ petition in Delhi High Court
As advised in the discussion, High Court writ jurisdiction is the most effective remedy for such cases.
Legal basis under article 226 of constitution:
Delhi High Court has territorial jurisdiction as:
- Petitioner resides in Delhi
- Identity theft harm occurred in Delhi
- Multiple respondent authorities including Delhi Police
Parties to be made respondents:
- Commissioner of Police, Delhi (Cybercrime investigation)
- Commissioner of GST, Telangana (Demand notice issuer)
- Union of India through Secretary, Ministry of Finance (Policy implementation)
- Director General of GST Intelligence (Investigation coordination)
Relief to be sought:
- Writ of Mandamus directing FIR investigation and completion
- Writ of Certiorari quashing the GST demand notice
- Direction to GST authorities to issue no-liability certificate
- Compensation for mental harassment and legal expenses
- Framework directions for victim protection in identity theft cases
Supporting Legal Cases:
- Surat Singh v. State of Bihar AIR 2000 SC 1850:
Supreme Court held that victims of identity theft cannot be held liable for consequences of fraudulent acts committed using stolen credentials. - K.S. Puttaswamy v. Union of India (2017) 10 SCC 1:
Right to privacy includes right to control use of personal information. Unauthorized use of PAN violates constitutional rights. - Bharti Airtel Limited v. Union of India (Delhi HC, 2024):
High Court provided relief to company whose details were misused for fake GST registrations, establishing precedent for victim protection.
Expected Timeline:
- Petition filing: 1-2 weeks for preparation
- First hearing: 2-4 weeks after filing
- Interim relief: Possible at first hearing staying demand
- Final disposal: 3-6 months depending on court schedule
Approximate Legal Costs:
- Court fees: ₹500-₹2,000
- Advocate fees: ₹50,000-₹2,00,000 (depending on counsel seniority)
- Documentation and miscellaneous: ₹10,000-₹20,000
Long-Term Protective Measures
Step 5: Obtain court-mandated investigation completion
Ensure FIR leads to actual investigation, not mere filing:
- Regular follow-up with investigating officer
- Application under Section 173(8) CrPC if investigation delayed
- Complaint to Police Commissioner if no progress
- Court direction through writ petition for investigation completion
Step 6: Secure No-Objection certificate from all agencies
After investigation confirms fraud, obtain formal clearances:
- GST Department: No-liability certificate or cancellation order clearly stating fraudulent registration
- Income Tax Department: Formal dissociation of fake firm transactions from your PAN
- Police: Closure report confirming you as victim, not accused
- CIBIL/Credit Bureaus: Ensure no adverse impact on credit score
Step 7: Criminal complaint against perpetrators
If investigation identifies fraudsters:
- File additional private criminal complaint
- Seek compensation through court for harassment
- Pursue civil damages for defamation and mental agony
- Report to bar councils if professionals were involved
Preventive measures to protect against future PAN misuse
Personal Security Measures
- Regular PAN-linked activity monitoring:
Check Income Tax portal quarterly for unauthorized registrations
GST portal search using your PAN to identify registrations
EPFO, NPS portals for any unauthorized linkages
Credit information reports for suspicious activities - Document security:
Never share PAN or Aadhaar photocopies unnecessarily
Use watermarked copies when submission is unavoidable
Avoid uploading documents on untrusted websites
Secure physical and digital document storage - Enable alerts and notifications:
Income Tax department SMS alerts for PAN usage
GST registration alerts if implemented by department
Bank account transaction alerts for unusual activities
Email notifications from government portals
Systemic reforms needed by the Government
Current gaps requiring government attention:
- Aadhaar-based biometric verification: Mandatory for GST registration to prevent identity theft
- Real-time victim alerts: SMS/email when PAN used for GST registration
- Simplified exoneration process: One-window clearance for identity theft victims
- Inter-agency coordination: Unified platform for fraud reporting and resolution
- Victim protection framework: Automatic stay on demands when fraud is reported
- Faster digital FIRs: Acceptance of online FIRs for inter-state economic offences
What not to do: Common mistakes to avoid
Mistake 1: Ignoring the demand notice
- Never ignore official GST notices hoping they'll go away
- Ignoring can lead to ex-parte orders and coercive recovery
- Time limits for response must be respected
Mistake 2: Making partial payments under pressure
- Don't pay any amount to "settle" the matter
- Payment implies acceptance of liability
- Difficult to recover once paid
Mistake 3: Only relying on online complaints
- Portal complaints alone insufficient for legal protection
- Must pursue FIR and legal proceedings simultaneously
- Physical representation to authorities necessary
Mistake 4: Delaying legal action
- Time is critical in establishing your innocence
- Delayed action appears suspicious
- Statute of limitations applies to various remedies
Mistake 5: Handling complex matter without legal expert
- Inter-state jurisdiction issues require legal expertise
- GST law complexities need professional guidance
- Court proceedings impossible without advocate
Expected Outcomes and Realistic Timelines
Best Case Scenario (6-9 months)
With prompt legal action:
- FIR investigation confirms identity theft
- High Court grants interim stay on GST demand
- GST department issues no-liability certificate
- Income Tax records corrected
- Full exoneration achieved
Moderate Scenario (12-18 months)
With proper legal pursuit:
- Legal proceedings protect from coercive action
- Fraud confirmed through investigation
- Demand notice eventually withdrawn
- Some ongoing monitoring required
Challenging Scenario (18-24 months)
If authorities are uncooperative:
- Extended litigation necessary
- Multiple court appearances required
- Persistent follow-up with various agencies
- Ultimately successful but time-consuming
Compensation and Remedies Available
Legal remedies under various laws
- Under IT Act, 2000:
Compensation for identity theft up to ₹5 crore under Section 43 read with Section 43A
Adjudication by IT authorities for corporate negligence if data breach caused theft - Under Consumer Protection Act, 2019:
Complaint against GST department for deficiency in service
Compensation for mental harassment and deficiency
Recent precedents award ₹1-5 lakh for similar cases - Through Civil Suit:
Damages for defamation and mental agony
Loss of reputation and business opportunity costs
Legal expenses incurred for establishing innocence - Through Criminal Courts:
Compensation under Section 357 CrPC
Courts can order compensation from convicted fraudsters
Victim compensation schemes in some states
Conclusion: Your legal rights and path to justice
PAN misuse for fake GST registration represents a serious violation of your constitutional rights to privacy, dignity, and property. While the current system has gaps in victim protection, the Indian legal framework provides robust remedies if pursued strategically through proper channels.
Your key legal protections include:
- Constitutional Right to Privacy: Misuse of PAN violates fundamental rights
- IT Act Protections: Specific provisions against identity theft
- Criminal Law Remedies: IPC provisions for cheating and forgery
- High Court Jurisdiction: Writ petition for comprehensive relief
- Right to Compensation: Various legal provisions for damages
Critical success factors:
- Immediate action: Don't wait for situation to deteriorate
- Multi-pronged approach: Pursue criminal, administrative, and civil remedies simultaneously
- Professional legal help: Engage experienced GST and cyber law advocates
- Persistent follow-up: Regularly monitor progress with all authorities
- Comprehensive documentation: Maintain detailed records of all actions and responses
Remember that you are a victim, not a perpetrator, and the law provides mechanisms to establish your innocence and obtain justice. While the process may be time-consuming and require legal expenses, protecting your PAN identity and credit record is essential for your financial security and peace of mind.
The path may be challenging, but numerous precedents demonstrate that courts and authorities ultimately recognize and protect identity theft victims when proper legal procedures are followed. Your persistent pursuit of justice through appropriate legal channels will eventually result in exoneration and protection from fraudulent consequences.
Related Blog: Most frequently asked questions related to GST compliance
Read more in this blog: Ultimate Guide to GST Compliance in India: Comprehensive FAQ with Latest Updates
References
- Section 25(1), Central Goods and Services Tax Act, 2017
- Rule 8(1), Central Goods and Services Tax Rules, 2017
- Sections 66C & 66D, Information Technology Act, 2000
- Sections 420, 468, 471, Indian Penal Code, 1860
- Section 132(1)(b), Central Goods and Services Tax Act, 2017
- Section 29, Central Goods and Services Tax Act, 2017
- Section 154, Code of Criminal Procedure, 1973
- Kusum Ingots & Alloys Ltd. v. Union of India (2004) 6 SCC 254
- Delhi Police official website - Economic Offences Wing
- Standard legal practice for representations to tax authorities
- Central Vigilance Commission Act, 2003
- Practice and procedure of Delhi High Court
- Article 226, Constitution of India
- Surat Singh v. State of Bihar AIR 2000 SC 1850
- K.S. Puttaswamy v. Union of India (2017) 10 SCC 1
- Bharti Airtel Limited v. Union of India, Delhi High Court (2024)
- Section 173(8), Code of Criminal Procedure, 1973
- Sections 43 & 43A, Information Technology Act, 2000
- Consumer Protection Act, 2019 - Recent precedents
- Section 357, Code of Criminal Procedure, 1973
Important Disclaimer: This article provides general legal guidance and should not be considered specific legal advice for your particular situation. Always consult qualified legal professionals for case-specific advice and representation.
Essential Resources:
- GST Portal: https://www.gst.gov.in
- Income Tax Portal: https://www.incometax.gov.in
- Cybercrime Portal: https://cybercrime.gov.in
- Central Vigilance Commission: https://cvc.nic.in
- Delhi High Court: https://delhihighcourt.nic.in
Based on Indian laws and legal precedents as of October 2025. Laws continue to evolve; always verify current legal provisions.