Mr. R's GSTIN is registered for "manufacture of base metals". His invoice book says he sold ₹47 crore of copper scrap to twelve buyers last year. His warehouse is the size of two parking spaces. There's no machinery. No raw material. No electricity meter. The single chair in the office is broken.
What Mr. R does have: a laptop, a stack of pre-signed cheque books, and one accountant who knows GSTR-1 inside out.
What he is selling — and this is the punchline — isn't copper. It's input tax credit.
- GST lets every business offset the tax it paid on inputs against the tax it owes on outputs. That's "input tax credit" or ITC.
- If you can buy a fake invoice showing GST paid — and your supplier really did upload it to the portal — you can claim that ITC and reduce your own GST liability. Cash saving = the GST on the fake invoice.
- Whole rings emerged: shell companies issuing only invoices, no goods. The "discount" for buyers was 60–80% of the GST amount.
- Three legal walls now stand in the way: Sec 16(2)(aa) (only ITC matching GSTR-2B), e-invoicing (above ₹5cr turnover), and Sec 132 (criminal — non-bailable above ₹5cr).
- If you're a buyer, the dangerous bit isn't getting caught running a fraud — it's getting caught having bought from one. That's where most SMEs trip.
The mechanics — how the scam actually worked
Forget jargon. Here's the trick on one page.
Register a Pvt Ltd or proprietor in someone else's PAN (a relative, a bribed Aadhaar holder, a labourer's documents). Get a GSTIN. The address is a real one — a shed, a tea-shop back room, a deserted flat in Surat or Karol Bagh.
Both are yours. Invoice flows from B to A for, say, ₹10cr + 18% GST = ₹11.8cr. Cash flows on paper. GSTR-1 from B uploads the invoice. A's GSTR-2B picks it up automatically.
C is a genuine manufacturer or trader. C "buys" ₹10cr from A at 18% GST. C's GSTR-2B shows ITC of ₹1.8cr available. C pockets ₹1.8cr of GST savings.
C transfers ₹11.8cr to A by NEFT. A withdraws the ₹10cr (the "principal") in cash through layered transfers. C gets ₹10cr back in cash, plus the ₹1.8cr ITC benefit. A keeps a "commission" of, typically, 4–6% of GST value.
A doesn't file GSTR-3B. The tax it "collected" from C is never deposited. By the time tax officers track A down, the GSTIN is cancelled, the address is a shuttered shop, and the "director" is an auto driver who signed papers for ₹50,000.
For every ₹100 of fake invoice raised, the exchequer loses ₹18 (or whatever the rate is). DGGI estimates suggest ₹35,000–60,000 crore of ITC fraud is detected every year. That's the detected part. Most of the cycle through 2019–2022 went undetected for the first 12–18 months.
Who actually loses money?
Government
Direct loss
The full GST that should have been deposited but wasn't. ₹1.8cr in the example above. Across thousands of such transactions, this is real public money.
Buyer C — the SME
Where this hurts most
When A is caught, A's GSTIN gets retrospectively cancelled. C's claimed ITC is reversed. C pays the ₹1.8cr again + interest + penalty up to 100%. Plus 18% interest from the original date. Plus possible Sec 132 prosecution if C "knowingly" availed.
Mr. R himself
If caught
Sec 132(1)(b) — issuing invoice without supply of goods, GST evasion above ₹5cr is non-bailable, up to 5 years imprisonment, attachment of property, ED parallel case for money laundering (PMLA predicate offence).
The four walls now in the way
Each wall closes one part of the cycle. Together, they make the scam structurally much harder, and far less profitable, than it was in 2018–2020.
Wall 1 — Sec 16(2)(aa): no entry in GSTR-2B, no ITC
Before 2022, buyers could claim ITC based on their own invoice book. If the supplier later didn't file — too bad, but the buyer's credit was already taken.
From 1 Jan 2022, Sec 16(2)(aa) says: ITC is available only if the supplier has reported the invoice and it appears in your auto-generated GSTR-2B. No GSTR-2B entry → no ITC. The buyer's risk became immediate, not delayed.
Wall 2 — e-invoicing for >₹5cr turnover
Since 1 Aug 2023, businesses with turnover above ₹5cr must generate an Invoice Reference Number (IRN) on the government's e-invoice portal before issuing the invoice. The IRN gets pushed into the buyer's GSTR-2B automatically. Issuing invoices in a Word document is no longer enough to claim ITC.
For a fake-invoice ring to work at scale today, the shell company has to also upload to the IRP portal — making the audit trail much more visible.
Wall 3 — Rule 86A: blocked credit
The Commissioner has the power to provisionally block ITC sitting in a buyer's electronic credit ledger if there's reason to believe the credit was fraudulently availed. The buyer learns about it when they try to use the credit and the GST portal refuses. The block can last a year while investigation continues.
Wall 4 — Sec 132: criminal, non-bailable
Issuing or using fake invoices to evade tax above ₹5cr is non-bailable. Above ₹2cr — bailable but prosecutable. Real estate, jewellery, scrap-metal, real-estate developers, and certain commodities are flagged sectors. DGGI runs "Special Drives" twice a year — most recent: May to August 2024, where 30,000+ taxpayers were physically verified at their registered addresses.
How an SME accidentally ends up holding the bag
This is the part everyone underestimates. Most "victims" of fake invoice rings aren't masterminds. They're medium-sized buyers who bought from a vendor that looked legitimate — GSTIN active, GSTR-1 filed, invoices arriving on time. The collapse happens later.
- Your vendor's GSTIN gets cancelled retrospectively. Their address turned out to be a phantom. The cancellation effective date is backdated.
- Your ITC gets reversed in your next GSTR-3B, or you receive Form ASMT-10 / DRC-01A asking you to reverse it.
- You have to pay the GST again, plus 18% interest from the original claim date, plus penalty under Sec 74 (up to 100% of tax) if "fraud" is established against you, or Sec 73 (up to 10%) if "no fraud" is accepted.
- If the amount is above ₹5cr, a Sec 132 prosecution may be initiated. Practically, this is rare for genuine buyers — but the threat is real, and the paperwork to defend yourself is exhausting.
The five-minute vendor diligence that saves your year
Most buyers don't do any of this. Doing all of it costs less than ₹500 and 20 minutes per new vendor.
- Check GSTIN status on the GST portal (Search Taxpayer). Look for: registration date, status (Active), date of cancellation if any, taxpayer type, address.
- Pull their last 12 months of GSTR-3B filing status. A genuine supplier files. A shell company often skips after the first few months.
- Look at the address on Google Maps Street View. Surat industrial estate? Plausible. A 1BHK in Karol Bagh registered for "manufacture of base metals"? Not plausible.
- Confirm the invoice number you receive matches their GSTR-1 filing. Wait for GSTR-2B before you claim ITC. If it doesn't show up in 2B, follow up before paying.
- For high-value vendors (₹50L+ a year): visit physically. If they refuse a meeting at their factory, that itself is the signal.
- Pay only by banking channels and only against valid invoices. Cash settlements above ₹10,000 per day per person are disallowed expense under Sec 40A(3) of income tax law anyway.
The funny historical wrinkle
GST was sold to Indian businesses as a system that would reward compliance — clean books and timely filing would unlock ITC, reducing tax cost. That promise was real. What nobody mentioned was that the promise had a flip side: your tax cost is now hostage to your vendor's filing discipline. A clean buyer with a dodgy vendor is a clean buyer with a tax problem.
Pre-GST, your CENVAT credit lived in your own books. If your vendor was a fraud, your problem was commercial. Today the same problem is also a tax problem. The system that punishes the cheat also punishes the cheat's customer until proven otherwise.
Quick answers
Technically the invoice shows up in your GSTR-2B (because it was reported in GSTR-1). You can claim under Sec 16(2)(aa). But if the supplier doesn't deposit the tax, expect a notice. You may have to reverse and recover from the supplier. The litigation tilt is in your favour if you can show payment was made.
2A is dynamic — updates as suppliers file. 2B is a static snapshot generated on the 14th of each month, used for ITC eligibility. Always reconcile against 2B, not 2A. Read our GSTR-1, 3B, 9 guide for the full picture.
Sec 132: ₹5cr+ evasion is non-bailable, up to 5 years jail. ₹2–5cr is bailable, up to 3 years. ₹1–2cr is bailable, up to 1 year. Below ₹1cr is generally only civil.
Practically, no — the prosecutions reported are against organisers, not innocent buyers. But you may have to repay ITC + interest + penalty. The defence is "good faith + payment proof + diligence record". Document everything before there's a problem.
Yes, but proportionately. Smaller vendors are not automatically dodgy — most are real businesses. But absence of e-invoice means GSTR-2B is your only signal. Be stricter on payment timing: don't pay before 2B confirms.
When you might want help
Two situations matter. (1) You've received an ASMT-10 / DRC-01A asking you to reverse ITC for a "non-existent supplier" — you have 30 days to respond and the response decides whether penalty stops at 10% or runs to 100%. (2) You're a high-volume buyer (₹50cr+ annual purchases) and want a monthly vendor-health dashboard so this doesn't surprise you.
Got an ITC reversal notice?
We respond to Sec 73 / 74 / 122 / Rule 86A notices. Documented defence, escalation path, and audit-grade vendor-due-diligence going forward.
"Mr. R" and the transactions described are composite illustrations drawn from publicly available DGGI investigation reports and tribunal orders. No specific business or individual is intended.