Hyderabad police have registered a case after a woman alleged that GSTIN was misused for transactions worth Rs 38 crore.
The Central Crime Station (CCS) registered the case against unidentified persons following a complaint by a 31-year-old businesswoman. She alleged that her registered email address and mobile number were changed without her authorisation, allowing transactions to be recorded under her Goods and Services Tax Identification Number (GSTIN).
FCRF Launches CP-FRM to Build India’s Next Generation of Fraud Risk Professionals
How Did the Woman Register Her Business?
The complainant registered for GST in May 2025 to establish a business but initially could not begin regular operations because of financial difficulties.
She engaged a consultant, identified as Mohit Shukla, who filed monthly nil GST returns on her behalf. Later, her husband obtained a personal loan of approximately ₹3 lakh, enabling her to start a coconut sugar business selling products through Amazon.
According to her complaint, Shukla subsequently stopped filing returns because his consultancy charges remained unpaid.
How Did Another Consultant Become Involved?
The woman later found another person, identified as Priyanshi Sharma, through Google to handle her GST filings. Between November 2025 and June 2026, Sharma filed returns for ₹149 each.
The complainant said she shared the required one-time passwords through WhatsApp, believing they were necessary for filing her returns. However, Sharma allegedly stopped responding to her calls and messages in July 2026.
How Was the ₹38 Crore Discrepancy Discovered?
The alleged irregularities came to light when GST officials visited the woman’s residence to inquire about transactions associated with her registration. Officials informed her that business activities worth approximately ₹38 crore had been recorded under her GSTIN.
The woman maintained that she had neither conducted nor authorised those transactions. She also denied issuing invoices or participating in business dealings involving the amount.
What Action Have Police Taken?
Based on her complaint, CCS police registered a case against unidentified persons under Sections 318(4), 336(3), 338 and 340(2), read with Section 61(2), of the Bharatiya Nyaya Sanhita (BNS). The allegations concern unauthorised changes to registered contact details and the subsequent use of the complainant’s GSTIN.
The case raises questions about how GST credentials and verification codes were accessed and used. The complaint identifies the consultants involved in filing returns, but the available information does not establish who carried out the alleged unauthorised transactions.
The420 Insight: The case highlights the importance of safeguarding GST login credentials, independently checking filed returns and verifying changes to registered contact information.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
