A major cyber fraud involving the alleged theft of a company’s GST identity has come to light in Gorakhpur, where unidentified cybercriminals reportedly gained unauthorized access to the GST portal of a private company and used its GSTIN to generate fake invoices and show transactions worth ₹9.32 crore. The company’s director, Sanjeev Kumar Jaiswal, has approached the Ministry of Finance, alleging that the company had no involvement in the transactions reflected on its GST account.
The incident has raised concerns over the misuse of GST credentials and the possibility of fraudulent input tax credit (ITC) claims by other entities. The complaint has reportedly been forwarded to the concerned authority for further action.
GST portal credentials allegedly compromised
Sanjeev Kumar Jaiswal, a resident of Bhatat area of Gulriha, is the director of HiVerner Private Limited. According to his complaint, unidentified cybercriminals gained unauthorized access to the company’s GST portal around two months before the fraud was discovered.
The attackers allegedly changed the mobile number and email address registered with the GST account, preventing the company from receiving regular notifications and alerts. The alleged unauthorized activity took place on May 3, when fraudulent billing was also reportedly generated through the company’s GST credentials.
The company became aware of the issue only after its registered mobile number was updated again on May 13, 2026. When Jaiswal checked the GST portal, he was reportedly shocked to find transactions and billing details that had not been generated by the company.
₹9.32 crore turnover shown on GSTIN
According to the complaint, transactions showing a turnover of ₹9,32,08,966 had been reflected against the company’s GSTIN. Jaiswal has stated that the company had neither issued the invoices nor supplied any goods or services against them.
He has also claimed that the company did not receive any payment related to the transactions appearing on the GST portal. This has led to suspicion that the GSTIN may have been misused by a larger network involved in fake invoicing.
The company has described the incident as a serious case of GST identity theft, fraudulent billing and possible misuse of input tax credit. The director has expressed concern that businesses receiving the allegedly fake invoices may have used them to claim ITC, potentially causing financial losses to the government.
Fear of a wider fake-invoice network
The complaint has sought a detailed investigation into the transactions and the entities associated with the invoices. Jaiswal has also raised concerns that similar methods may have been used against other companies.
Investigators are expected to examine the login activity, changes made to the GST account, IP and digital access records, invoice details, bank transactions and the entities linked to the disputed billing. The flow of any tax credit claimed on the basis of the invoices could also become an important part of the investigation.
The case is particularly significant because GSTINs are directly linked to a company’s tax identity. Unauthorized control over a GST account can allow criminals to create invoices or manipulate transaction records without the actual company’s knowledge.
Earlier ransomware attack on two companies
Gorakhpur has previously witnessed another cybercrime involving the hacking of company systems. On June 1, 2025, the servers of Rayraika Marketing and Gauri Trading were allegedly hacked by cybercriminals.
According to the complaint in that case, the attackers demanded a large ransom in cryptocurrency and threatened to destroy the servers if the payment was not made. The cyberattack reportedly disrupted the operations of both companies for two days.
The cyber police registered a case and launched an investigation, but no major breakthrough has reportedly been achieved so far.
What is GST identity theft?
GST identity theft occurs when criminals unlawfully obtain or take control of a business’s GSTIN, login credentials, registered mobile number, email address or other tax-related information and use it for unauthorized transactions.
Such access can be exploited to generate fake invoices, create fictitious transactions or facilitate fraudulent ITC claims. In the Gorakhpur case, investigators will now have to determine how the company’s GST account was accessed, who changed the registered contact details, who generated the disputed invoices and where the financial benefits from the alleged transactions ultimately went.
The case highlights the growing need for businesses to closely monitor GST portal activity and immediately report unauthorized changes to their tax credentials.
