GST Registration Biometric Aadhaar Verification 2026: What Changed

If you're about to apply for a fresh GST registration and you've seen headlines about a court "ordering" biometric Aadhaar verification, you're right to want a straight answer before you sit down to file Form GST REG-01. Here's the short version: as of this writing, a Delhi High Court bench is in the middle of an interim direction to make biometric-based Aadhaar authentication compulsory for every new GST registration nationwide — not just the ones the portal's risk engine already flags. That direction isn't final: the matter was listed again on 22 September 2026, and as of this writing no outcome from that hearing has been publicly reported yet. It also sits on top of a biometric-authentication rule that has existed, in a narrower form, since 2023.

This post separates three things that are easy to blur together: what the court has actually directed so far, what the GST portal already does today under the existing rules, and the ordinary step-by-step registration process you'll go through either way.

This reflects Delhi High Court proceedings in Neha v. Union of India, W.P.(C) 12210/2026, as reported by legal and tax press through 23 September 2026, and the existing CGST Rules 8/8(4A) framework for biometric Aadhaar authentication. The matter was listed for further consideration on 22 September 2026 — that hearing has now taken place, but no order or outcome from it had appeared in legal or tax press as of this writing, so the interim direction described below still has not been finalised into a nationwide rule change. Confirm against a CBIC or GSTN advisory, or a report of what was decided at that hearing, before assuming a hard universal mandate applies to your application today.

What the Delhi High Court has directed, and what's still pending

The case is Neha v. Union of India, filed by a petitioner who alleged that her stolen PAN and Aadhaar details were used to obtain two fraudulent GST registrations, which were then used in an attempt to siphon ₹4.46 crore through her bank account. A division bench of Justices Anil Khetarpal and Shail Jain heard the matter in September 2026 against a backdrop of government data showing 2,800 fraudulent GST registrations detected in 2023-24 (₹15,085 crore in tax evasion) and 1,654 more in 2024-25 (₹13,109 crore) — most of them built on misused PAN and Aadhaar details of people who never applied for a registration at all.

The court's pointed observation was that the Government had already told Parliament biometric Aadhaar authentication was mandatory for GST registration — but nearly a year later, it was still only being applied to applications the portal's risk-analytics system separately flagged as "risky," not universally. Counsel for the authorities could not identify a practical difficulty with making it universal, so the bench directed that no new GST registration be granted anywhere in India without biometric-based Aadhaar authentication, while leaving the door open for the government to flag implementation difficulties. The court also asked it to consider additional anti-fraud safeguards raised by senior counsel, including dedicated risk checks for PAN-Aadhaar mismatches and mandatory facial-recognition matching.

What's still open: this is an interim direction in a live writ petition. It was listed for further consideration on 22 September 2026, and while that hearing has happened, no reported order or outcome from it was available as of this writing. It is not, as of this writing, a CBIC notification or an amendment to the CGST Rules — those would need to follow separately if the direction is finalised and the department acts on it. Existing GST registrations are untouched either way; this is only about registrations granted from here on.

When biometric Aadhaar authentication is required today

Before this case, biometric-based Aadhaar authentication for GST registration was already real — just narrower than "every applicant." It was introduced by amending Rule 8(4A) of the CGST Rules, 2017, and rolled out state by state rather than everywhere at once (Gujarat, Puducherry and Andhra Pradesh were early adopters; other states, including Jammu & Kashmir and West Bengal, were added later through GSTN advisories). Under that rule, an applicant is routed to biometric verification when:

They don't complete standard Aadhaar e-KYC (OTP-based) authentication during registration, or
The portal's data-analytics and risk parameters flag the application — regardless of what they chose — as needing in-person biometric verification, or
They fall into a promoter/partner category the jurisdictional rollout has specifically covered.

Separately, and easy to confuse with this: Rule 14A, live since 1 November 2025, gives genuinely low-risk new applicants — whose monthly output tax liability on B2B supplies stays under ₹2.5 lakh — a fast, automated approval in about three working days via Aadhaar e-KYC, with no in-person biometric step at all. That's a speed track for low-risk registrants, not a security check, and it's a different mechanism from Rule 8(4A) biometric verification. Whether or how a "biometric for everyone" mandate would sit alongside Rule 14A's fast-track hasn't been addressed in the reporting on this case — one more reason to treat "mandatory nationwide" as a direction in progress rather than a settled rule until CBIC clarifies it.

Step-by-step: the GST registration process as it stands

Regardless of which authentication track you end up on, the shape of the process is the same:

Part A of Form GST REG-01 — declare PAN, mobile number, email, and State/UT on the GST portal. OTPs go to both mobile and email; once verified, you get a Temporary Reference Number (TRN).
Part B of Form GST REG-01 — log in with the TRN and fill in business details: constitution (proprietorship, partnership, LLP, company, HUF, trust, etc.), trade name, principal place of business, additional places of business, goods/services (HSN/SAC codes), bank account details, and details of every promoter, partner, or authorised signatory.
Authentication step — you either complete Aadhaar e-KYC (OTP-based) for the applicant and each promoter/partner, or, if you're routed to biometric verification (by risk flag, by not completing e-KYC, or — if this direction is finalised — by default), you book an appointment at a GST Suvidha Kendra (GSK) notified by your jurisdictional Commissioner.
At the GSK, if biometric verification applies — bring your appointment confirmation email, original Aadhaar and PAN, and the original documents you uploaded online, for a fingerprint or face scan plus document verification. Every promoter/partner/authorised signatory who needs biometric verification must show up in person; there's no proxy for this step. Miss the 15-day window from submitting Part B, and your ARN won't be generated — you'd need to restart.
ARN and departmental review — once authentication (of whichever kind) is complete, an Application Reference Number is generated and you can track status against it. Officers may order physical verification of your business premises.
GSTIN and certificate — on approval, you get your 15-digit GSTIN and can download the registration certificate (Form REG-06). Aadhaar-authenticated, non-flagged applications are typically approved faster (within about 7 working days); anything routed to physical/biometric verification can take up to 30 days.

Once you have a GSTIN, run it through our GSTIN Validator — it's a quick way to confirm the format, state code, and checksum digit are all correct before you start putting the number on invoices or sharing it with vendors.

Documents, PAN/Aadhaar details, and where applications get stuck

The core document list hasn't changed with any of this: PAN of the business/proprietor, Aadhaar of the proprietor/each promoter or partner, photographs, proof of business constitution (partnership deed, incorporation certificate, etc.), proof of the principal place of business (electricity bill, rent agreement plus NOC, or property tax receipt), and bank proof (a cancelled cheque or the first and last page of a passbook/statement).

The verification problems that actually stall applications tend to cluster around a handful of things:

Aadhaar mobile number not linked, or linked to a number you no longer have — OTP-based e-KYC simply can't complete, which routes you to biometric verification even if you'd rather not go that route.
Name mismatch between PAN and Aadhaar — spelling, initials, or date-of-birth mismatches are a common, avoidable rejection reason; fix the mismatch at the source (NSDL/UTIITSL for PAN, UIDAI for Aadhaar) before you apply rather than after.
No nearby GSK, or no appointment slots — availability varies significantly by state and city; book as soon as you're notified rather than waiting, given the 15-day ARN deadline.
Address proof that doesn't match what's declared — a rent agreement without a matching NOC, or a utility bill in a name other than the declared owner/landlord, is a frequent reason for a query or rejection at the departmental review stage.

Fake and fraudulent GST registrations: what to actually check

The fraud pattern behind this entire court case is worth understanding on its own, because it's not about businesses misusing their own registration — it's about someone else's PAN and Aadhaar being used, without their knowledge, to create a registration that then gets used to raise fake invoices or route stolen input tax credit. If your identity documents have ever been lost, shared with an intermediary for an unrelated loan or KYC process, or otherwise compromised, it's worth checking whether a GSTIN has been registered against your PAN without your knowledge:

On the GST portal, use the "Search Taxpayer" → "Search by PAN" option to see every GSTIN ever registered against a given PAN, active or cancelled. If something shows up that you didn't apply for, that's the fraud pattern this court case is about.
Before accepting an invoice or extending credit to a new counterparty, verify their GSTIN through the portal's taxpayer search rather than trusting the number printed on the invoice. A Cancelled or Suspended status means they can't legally charge GST, whatever the invoice says — and if you claim input tax credit against that invoice anyway, the department can deny the credit even though you paid in good faith.
If you find a GSTIN registered fraudulently against your PAN, or spot one being used to defraud you as a counterparty, report it to the GST helpdesk (helpdesk@gst.gov.in) or your jurisdictional officer, in addition to any cybercrime reporting the identity-theft angle warrants separately.

Court direction vs. existing rule vs. what CBIC says next — keep these separate

Three different layers are in play here, and conflating them is the easiest way to over- or under-comply:

The existing rule (in force today): Rule 8(4A) biometric Aadhaar authentication, applied on a risk-flagged, state-rollout basis. This is what actually governs your application unless something has formally changed it.
The court direction (interim, sub judice): Delhi HC's push to make biometric authentication universal for fresh registrations nationwide, not yet finalised. The matter was heard again on 22 September 2026, but no reported outcome from that hearing was available as of this writing. Directions to the executive in an ongoing writ petition are not, by themselves, an amendment to the CGST Rules — the department has to act on them for that to happen.
Whatever CBIC/GSTN issues afterward: if and when the department responds — with a fresh notification, an advisory extending Rule 8(4A) rollout further, or a circular reconciling this with Rule 14A's fast-track — that's the layer that will actually tell you what your specific application needs. Treat news coverage of the court hearing as a signal to watch, not as the compliance instruction itself.

The bottom line

A Delhi High Court bench wants biometric Aadhaar authentication made mandatory for every fresh GST registration in the country, on the view that leaving it to risk-based flagging has left the door open to the kind of PAN/Aadhaar-theft fraud the petitioner in this case experienced firsthand. That direction is still being argued — the matter was heard again on 22 September 2026, but no reported outcome from that hearing was available as of this writing — and it hasn't yet turned into a CBIC notification or a CGST Rules amendment. Until it does, Rule 8(4A)'s risk-based, state-rollout biometric check is what actually applies, alongside Rule 14A's separate fast-track for low-risk small registrants. Either way, the registration steps — Part A, Part B, authentication, ARN, GSTIN — don't change; only who gets routed to a GST Suvidha Kendra does. Watch for an official CBIC or GSTN advisory before assuming the universal mandate is live for your application.

Sources

This post reflects Delhi High Court proceedings in Neha v. Union of India (W.P.(C) 12210/2026) and the CGST Rules 8/8(4A)/14A framework as reported and documented as of 23 September 2026. The matter was listed for further consideration on 22 September 2026; that hearing has taken place, but no order or outcome from it had been publicly reported as of this writing. This is an evolving, sub judice matter — re-check for a CBIC/GSTN advisory or a report of what was decided at that hearing before treating a nationwide biometric mandate as settled for your own application.