Complete GST Aadhaar Authentication explained: this guide covers what it means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.
During GST registration, the primary authorised signatory and one promoter/partner complete Aadhaar authentication via an OTP link; in notified States, flagged applicants undergo biometric authentication at a GST Suvidha Kendra, and if authentication is skipped or fails, the officer physically verifies the premises and files a report in Form REG-30.
Overview
To curb fake registrations, GST links registration to Aadhaar authentication and, where risk is flagged, to biometric verification and physical inspection of the business premises. Completing these steps correctly is what turns a submitted REG-01 into an active GSTIN quickly.
When It Is Required & Legal Basis
Aadhaar authentication is prescribed under Rule 8 and Rule 9 of the CGST Rules, 2017, biometric authentication under Rule 8(4A), and physical verification under Rule 25 with the report in Form GST REG-30. Section 25(6A) to (6D) of the CGST Act, 2017 empower the Aadhaar-based process.
Step-by-Step Process
- Opt for authentication. While filing REG-01, choose to authenticate via Aadhaar for the primary authorised signatory and one promoter/partner.
- Complete the OTP link. The portal sends an authentication link to the registered mobile/email; the individuals validate their Aadhaar OTP.
- Biometric visit (if flagged). In notified States, if the system flags the application, visit the designated GST Suvidha Kendra for biometric authentication and document verification under Rule 8(4A).
- Physical verification (if triggered). If Aadhaar is opted out or authentication fails, the officer inspects the place of business and uploads a GPS-tagged report in Form GST REG-30 within 15 working days.
- Grant of registration. On successful authentication with no query, the GSTIN is granted in Form REG-06 — generally within seven working days.
Forms, Attachments & Fees
| Form / Step | Purpose | Timeline |
|---|---|---|
| Aadhaar OTP link | Authenticate signatory/promoter | At filing of REG-01 |
| Biometric at GSK | Fingerprint/photo verification | On system flag (notified States) |
| REG-30 | Physical verification report | Within 15 working days |
| REG-06 | Registration certificate | On approval |
No fee is charged for authentication or verification.
Timeline & Due Dates
With successful Aadhaar authentication and no deficiency, registration is granted in 7 working days. Where authentication is skipped/failed or biometric/physical verification is required, the process can extend up to 30 days, with the REG-30 report due within 15 working days of the inspection.
Penalty for Delay / Non-compliance
There is no penalty for undergoing authentication, but failure or refusal to authenticate delays or blocks registration, and can lead to rejection in Form REG-05. A registration obtained by suppressing verification can later be cancelled under Section 29 with consequences under Section 122.
Practical Tips
- Ensure the signatory's mobile number is Aadhaar-linked so the OTP reaches the right phone.
- In biometric States, book the GSK slot promptly to avoid the 15-day clock lapsing.
- Keep the premises signboard, electricity bill and rent agreement ready for physical verification.
- Match the address in REG-01 exactly with the ownership/rent proof to avoid an adverse REG-30.