GST Shell Company ITC Input Fraud
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict Summary
GST Shell Company ITC Input Fraud shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.
Risk score: 7/10 · Severity: High · Verdict: Suspicious
Scam Intelligence: GST Shell Company ITC Input Fraud
Proprietary signals from BharatSecure's scam-tracking database.
| Top affected regions | India, small_business, professionals, general |
| Last reported | May 06, 2026 |
How GST Shell Company ITC Input Fraud Works
Overview: GST shell company fraud preys on Indian businesses and the government by using fake companies to generate bogus invoices and claim wrongful Input Tax Credit (ITC). Both individual businesses and the broader economy lose out as tax revenues drain away and unsuspecting companies face legal liabilities. How It Works: Fraudsters set up shell companies using forged documents—sometimes with the help of professional tax intermediaries. They register a GSTIN with fake PAN/Aadhaar and address. Using these shells, they generate invoices for non-existent transactions, selling them to other businesses aiming to wrongfully claim ITC and reduce tax liabilities. Often, a web of such companies creates a complex chain, with money moved across layered UPI and NEFT transactions to mask origins. India Angle: This scam particularly impacts small manufacturers, trading businesses, and even restaurants in states like Gujarat, Rajasthan, and remote parts of north India. Many fake entities are shown as operating from village[ADDRESS_REDACTED]. Recent government IT drives have uncovered mass GST fraud, with thousands of crores lost across 2024–2025. Real Examples: A Delhi wholesaler receives an invoice for "electronic goods supply" with GSTIN and all details. On closer inspection, GSTIN search on the GSTN portal shows 'inactive as of June 2025.' Investigating further, the registered address [ADDRESS_REDACTED]. Red Flags: - New vendor GSTINs with recent registration dates or mismatched addresses - Unusually high ITC claims on company returns - Unknown supplier location (onboarding from remote towns not previously dealt with) - Vendors hesitant to disclose director/promoter info Protective Measures: Run GSTIN and company KYC checks through official portals before onboarding suppliers. Audit returns for suspicious ITC spikes. Limit vendor onboarding to known and physically verified businesses. Report any suspected GST frauds to tax authorities immediately. If Victimised: Consult your CA and immediately revise your most recent tax filings. Report the fraud on cybercrime.gov.in and the GST portal. Be prepared for potential ITC reversal and penalties. Related Scams: This scam is closely related to fake purchase order frauds and forged compliance document rackets aimed at exploiting company audit gaps.
How This Scam Works — Detailed Explanation
GST Shell Company ITC Input Fraud is a sophisticated scam that mainly targets businesses in India by manipulating the Goods and Services Tax (GST) system. Fraudsters typically create shell companies that exist only on paper using forged documents, often with the assistance of professional tax intermediaries. They use platforms like WhatsApp and social media to reach out to potential victims, advertising services to help them maximize their Input Tax Credit (ITC). This often involves enticing business owners with promises of larger tax refunds or lower tax liabilities, making the scheme appear legitimate. The initial contact may happen via calls or messages assuring quick financial benefits, luring businesses into a false sense of security.
Once the fraudsters establish contact, they employ various deceptive tactics designed to exploit the psychological vulnerabilities of the victims. These include simplified narratives about tax laws and legal compliance, which make it sound straightforward and risk-free to participate in their schemes. Victims are often assured of minimal paperwork and are told not to worry about the legitimacy of the shell company, as they will handle all compliance issues. The promise of a bigger tax refund can lead companies to overlook the red flags, such as a lack of verifiable business history or strange business addresses. This psychological play amplifies trust in the scammer’s setup, focusing their attention on the short-term financial gain instead of the long-term legal risks involved.
Eventually, victims begin to interact with these fraudulent companies, often without realizing their criminal nature. They may fall prey to schemes that encourage them to create or engage with bogus invoices and offer their GST numbers without understanding the implications. Once a fraudulent transaction takes place, the scam does not remain hidden for long, especially when authorities catch wind of the fraudulent activities. Real-life examples demonstrate that businesses have lost crores; a notable instance included an HDFC customer who reported a fraudulent refund claim, leading to an investigation revealing over ₹100 crore lost within a year from similar scams across various states in India. Such losses drain crucial tax revenues needed for the country’s economy and expose legitimate businesses to potential audits and legal complications from the Goods and Services Tax Network (GSTN).
The overall impact of GST Shell Company ITC Input Fraud is devastating, not only for individual business owners but also on a national scale. According to reports from the Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI), as many as ₹12,000 crore were lost in fraudulent claims during a single fiscal year, a number that continues to grow as more sophisticated methods are employed by scammers. Furthermore, this systemic issue puts pressure on regulatory bodies like the National Payments Corporation of India (NPCI) and raises alarms through advisories issued by authorities such as the Computer Emergency Response Team-India (CERT-In), leading to renewed calls for robust corporate governance.
To spot a GST Shell Company ITC Input Fraud, there are specific indicators that can help differentiate this from legitimate transactions. For instance, if a GSTIN (Goods and Services Tax Identification Number) shows as inactive or was registered only recently, this should raise an immediate red flag. Other warning signs include unverifiable business addresses or vendors who decline to share company compliance details. Large ITC claims on tax returns that appear disproportionate to genuinely incurred business expenses and are not corroborated by valid invoices should always be scrutinized. If any of these factors come into play, it’s prudent to reassess the legitimacy of the companies involved before proceeding with financial dealings, safeguarding oneself against falling victim to these scams.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does GST Shell Company ITC Input Fraud Target?
General public across India
Red Flags — How to Identify GST Shell Company ITC Input Fraud
- GSTIN shows inactive or recent registration
- Fake or unverifiable business addresses
- Large ITC claims in tax returns
- Vendor declines to share company compliance details
What To Do If You Encounter GST Shell Company ITC Input Fraud
- Report suspicious GST claims immediately at 1930 or cybercrime.gov.in to initiate an investigation.
- Contact your bank’s fraud department to alert them about the situation; call the SBI helpline at 1800-11-1109 or HDFC's at 1800-202-6161.
- Preserve all documentation related to transactions and communications for potential legal action.
- Consult a tax professional to assess any unintended involvement in fraudulent activities and to understand your liabilities.
- Inform your business network about the scam to raise awareness and prevent further victimization.
- Monitor your GST account for any unrecognized transactions or changes that could indicate fraud.
How to Report GST Shell Company ITC Input Fraud in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I found that my PAN has been used in a GST fraud without my consent?
- Immediately report the incident to your local police and file a complaint with the cybercrime helpline 1930. You can also report through cybercrime.gov.in.
- How can I identify if a company is a shell company engaging in GST fraud?
- Look for signs such as recently registered GSTIN, unverifiable business addresses, and vendors unwilling to share compliance details. Large ITC claims without genuine transactions are major indicators.
- How should I report GST Shell Company fraud in India?
- You can report directly to the GST department or the cybercrime helpline at 1930. Visit cybercrime.gov.in for online reporting and further assistance.
- What steps can I take to protect my business after falling victim to a GST scam?
- Contact your bank immediately to freeze transactions, consult with a legal expert for recovery options, and monitor your tax accounts closely for any unusual activities.
How This Scam Works — BharatSecure AI
Spreading fastA plain-language breakdown based on 100 real reported scams of this type.
| How they reach you | Observed primary contact occurs via unsolicited phone calls, WhatsApp/SMS messages, and social media/dating platforms, where fraudsters impersonate bank officials, customer support, government agents, |
| How they gain your trust | Trust is reportedly established through impersonation of authority (banks, RBI, PM-Kisan, army officers) or emotional bonding (love-bombing, family/friend impersonation), often reinforced by AI deepfa |
| How they take your money | UPI is the dominant rail across all records, primarily via disguised 'collect/request money' notifications tricking victims into entering their PIN, d |
| Who they target | Documented targets span the general population but concentrate on the elderly and digitally inexperienced (often via caregiver dependency), urban professionals, students, homemakers, small business ow |
- authority bias (impersonating banks/government/officials)
- urgency and scarcity (account frozen, limited-time offer, emergency)
- trust/reciprocity exploitation (familiar voices, love-bombing, small initial payouts)
- Receiving a UPI 'collect/request money' notification and being asked to enter your PIN to 'receive' funds (PIN is never needed to receive money)
- Unsolicited calls/messages claiming account freeze, KYC expiry, or suspicious transaction, pressuring you to share OTP, UPI PIN, or click a link
- Requests to install remote-access/screen-sharing apps (AnyDesk, TeamViewer) for 'support' or 'refund' assistance
- Mismatched or misleading recipient names/VPAs (e.g., 'Verified Merchant', 'Bank Refund Dept') or slightly altered UPI IDs
- Pressure via emotional urgency, deepfake voice/video of familiar people, forged payment screenshots, or too-good-to-be-true offers (free recharge, prizes, grants, loans, high-return investments)
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.