GST Identity Theft Leads to Fake Invoices Worth ₹9.32 Crore

Post Views: 18

Company’s GST Identity Stolen, Fake Invoices Worth ₹9.32 Crore Generated

Details of the Fraud

A significant cyber fraud involving the unauthorized acquisition of a company’s Goods and Services Tax Identification Number (GSTIN) has been reported in Gorakhpur. Cybercriminals allegedly accessed the GST portal of a private entity and used its GSTIN to generate fraudulent invoices and record transactions totaling ₹9.32 crore. The company’s director, Sanjeev Kumar Jaiswal, has submitted a formal complaint to the Ministry of Finance, asserting that the organization was not involved in the transactions listed on its GST account.

How the Breach Occurred

According to the report, the company’s GST portal credentials were compromised approximately two months prior to the discovery of the fraud. The attackers reportedly modified the registered mobile number and address associated with the GSTIN. The breach came to light when the company noticed a ₹9.32 crore turnover reflected against its GSTIN, despite no actual goods or services being supplied.

Jaiswal confirmed that the firm did not issue the invoices in question and received no payments linked to the transactions.

Risks and Implications

This incident has raised alarms about the potential exploitation of GST credentials for fraudulent activities, including the misuse of input tax credit (ITC) claims. The complaint has been forwarded to relevant authorities for further investigation. Investigators are expected to scrutinize login records, changes made to the GST account, IP addresses, digital access logs, invoice details, bank transactions, and entities connected to the disputed billing.

Focus of the Probe

The flow of any tax credits claimed based on the fraudulent invoices will also be a focal point of the probe. The case underscores the risks associated with unauthorized access to GST accounts, which are critical to a business’s tax identity. Criminals could leverage such access to fabricate invoices or alter transaction records without the company’s knowledge.

Previous Cyber Incidents

A prior cyber incident in the region involved the hacking of two companies’ servers in June 2025. On that occasion, attackers demanded a cryptocurrency ransom and threatened to destroy data if payment was not made. The breach disrupted operations for two days.

Understanding GST Identity Theft

GST identity theft occurs when malicious actors gain control of a business’s GSTIN, login credentials, or other sensitive information. This enables them to generate fictitious invoices, create false transactions, or exploit ITC mechanisms. In the current case, investigators will need to determine how the company’s GST account was breached, who made the unauthorized changes, and whether other entities are involved in a broader fake-invoice network.

Urgent Need for Vigilance

The incident highlights the urgent need for businesses to monitor GST portal activity closely and report any unauthorized modifications to tax credentials immediately.