GST Audit — Section 65 & 66 CGST Act

Section 65 and 66 serve DIFFERENT purposes with different triggers and procedures: SECTION 65 — DEPARTMENTAL AUDIT: WHO CONDUCTS: GST officers (Superintendent/Assistant Commissioner level) designated by Commissioner; TRIGGER: (1) Random selection from risk pool; (2) Computer-generated selection based on anomaly detection; (3) Specific intelligence/tip-off; (4) GSTR-9C discrepancies flagged by system. SCOPE: Complete examination of books, returns, records, documents; TIMELINE: Complete within 3 months from commencement (extendable by Commissioner to 9 months total); FREQUENCY: Same taxpayer cannot be audited for same period more than once; POWERS: Can visit premises, examine records, take statements, verify stock; OUTCOME: Audit report → if discrepancy → SCN under Sec 73/74. SECTION 66 — SPECIAL AUDIT: WHO CONDUCTS: Chartered Accountant or Cost Accountant NOMINATED by Commissioner; TRIGGER: (1) During ongoing scrutiny/investigation, officer finds matter too complex for departmental audit; (2) Value of supply not correctly declared; (3) ITC not correctly claimed; (4) Specialized industry requiring expert opinion (pharma, IT, telecom). SCOPE: Directed by Commissioner — can be narrower (specific aspect like ITC) or broader; TIMELINE: 90 days from commencement (extendable once by 90 days max); COST: Paid by government (not taxpayer) — CA/CMA fees borne by department; OUTCOME: CA/CMA submits findings → Officer uses findings for demand proceedings. KEY DIFFERENCES: (1) Section 65 = ROUTINE, Section 66 = EXCEPTIONAL; (2) Section 65 by department staff, Section 66 by external professional; (3) Section 66 indicates department suspects SERIOUS irregularity; (4) Section 66 findings carry more weight (independent expert opinion); (5) Getting Section 66 notice is MORE SERIOUS — suggests potential fraud/evasion investigation.

Comprehensive audit preparation requires maintaining these documents — organized by CATEGORY: MANDATORY RECORDS (Rule 56 of CGST Rules): (1) PRODUCTION/MANUFACTURE RECORDS: Raw material register; Production/output register; Daily stock register; Wastage/scrap register; Quality control records. (2) PURCHASE/INWARD RECORDS: Purchase register with GST invoice details; Purchase returns (debit notes issued); Import documents (Bill of Entry, customs duty receipts); Freight/transport records (e-way bills). (3) SALES/OUTWARD RECORDS: Sales register with invoice details; Credit notes/debit notes issued; Export documents (shipping bills, FIRC); Branch transfer/stock transfer records. (4) ITC RECORDS: Input tax credit register (GSTR-2B reconciliation); ITC reversal register (Rule 42/43 calculations); Capital goods ITC register; ITC on mixed/exempt supplies apportionment. (5) FINANCIAL RECORDS: Bank statements (all accounts); Cash book/petty cash; Journal entries related to GST adjustments; Trial balance and P&L account. (6) GST-SPECIFIC RECORDS: All GST returns filed (GSTR-1, 3B, 9, 9C); Electronic credit/cash ledger screenshots; E-invoices and IRN confirmations; E-way bills generated and received; Payment challans (PMT-06). (7) ELECTRONIC RECORDS: Accounting software backup (Tally, SAP, etc.); ERP system access credentials for auditor; Email correspondences with GST authorities; Digital signatures used for filing. RETENTION PERIOD: Minimum 6 years from due date of annual return (extended to 8 years if audit initiated or appeal pending). PRACTICAL TIPS: (1) Maintain monthly reconciliation (don't wait for year-end); (2) Keep separate files for each financial year; (3) Flag all GST notices received and responses sent; (4) Reconcile GSTR-2B with purchase register MONTHLY; (5) Document all ITC reversals with calculation working.

The annual audit requirement has been SIGNIFICANTLY SIMPLIFIED since GST launch — here's the evolution: ORIGINAL REQUIREMENT (2017-2020): WHO: Every registered person with turnover >₹2 Cr; WHAT: GSTR-9 (annual return) + GSTR-9C (reconciliation statement); CERTIFICATION: Mandatory CA/CMA audit and certification; CA FEES: ₹30,000-2,00,000 depending on complexity; DEADLINE: Originally December 31, then extended multiple times. FIRST CHANGE — FY 2020-21: Threshold raised: ₹2 Cr → ₹5 Cr for GSTR-9C; Self-certification: CA/CMA audit REMOVED — taxpayer self-certifies; IMPACT: ~15 lakh businesses freed from mandatory CA audit (₹3,000+ Cr in CA fees saved); REASON: Government realized CA audit was DUPLICATE (companies already have income tax audit) and didn't add value proportionate to cost. CURRENT REQUIREMENT (FY 2023-24 onwards): GSTR-9 (Annual Return): Mandatory for ALL registered persons (no threshold) BUT optional for turnover <₹2 Cr; GSTR-9C (Reconciliation): Mandatory for turnover >₹5 Cr, SELF-CERTIFIED; Late fee for non-filing: ₹200/day (₹100 CGST + ₹100 SGST), maximum 0.5% of turnover in state. WHAT GSTR-9C NOW CONTAINS: Part I: Basic details (GSTIN, legal name, FY); Part II: Reconciliation of turnover declared in annual return vs audited financial statements; Part III: Reconciliation of tax paid; Part IV: Reconciliation of ITC (claimed vs available vs utilized); Part V: Auditor's recommendation for additional liability (now self-assessment). WHY SELF-CERTIFICATION IS RISKIER: (1) CA audit provided PROFESSIONAL SHIELD — if CA certified, harder for dept to challenge; (2) Self-certification means TAXPAYER takes FULL RESPONSIBILITY for correctness; (3) Any mismatch in self-certified 9C = automatic trigger for departmental scrutiny; (4) Penalty for wrong self-certification can include Section 122 (₹10,000 or tax evaded — whichever higher). BEST PRACTICE: Even though CA audit isn't mandatory, businesses >₹5 Cr SHOULD get professional review before self-certifying GSTR-9C. The ₹50,000 CA fee is cheap insurance against ₹10L+ demand later.

Penalty structure depends on WHETHER FRAUD IS INVOLVED — this is the CRITICAL distinction: NON-FRAUD CASES (Section 73 — 'Reason to believe'): WHEN: Tax not paid or short paid due to reasons OTHER than fraud/suppression/misstatement; LIMITATION: 3 years from due date of annual return for the relevant year; PENALTY: NIL if tax + interest paid within 30 days of SCN; INTEREST: 18% per annum from due date to payment date; MAXIMUM PENALTY: 10% of tax due (if demand confirmed after adjudication); PRACTICAL: Most audit findings (ITC mismatch, rate error, RCM miss) fall here. FRAUD CASES (Section 74 — 'Fraud, suppression, or willful misstatement'): WHEN: Tax not paid due to FRAUD, willful misstatement, or suppression of facts; LIMITATION: 5 years from due date of annual return; PENALTY: 100% of tax due (DOUBLE the non-fraud penalty); INTEREST: 24% per annum (higher rate for fraud); REDUCED PENALTY: 15% if paid within 30 days of SCN; 25% if paid within 30 days of order. SECTION 122 — GENERAL PENALTY: For specific offences (fake invoices, non-registration, etc.); ₹10,000 OR tax amount involved — WHICHEVER IS HIGHER; Can be imposed ALONGSIDE Section 73/74 demand. SECTION 132 — CRIMINAL PROSECUTION: For tax evasion >₹5 Cr: imprisonment up to 5 years; For tax evasion >₹2 Cr: imprisonment up to 3 years; For tax evasion >₹1 Cr: imprisonment up to 1 year; These are COGNIZABLE and NON-BAILABLE offences. PRACTICAL PENALTY CALCULATION EXAMPLE: Audit finds ₹50L ITC wrongly claimed (genuine error, not fraud): Tax demand: ₹50,00,000; Interest (18% × 2 years): ₹18,00,000; Penalty (if paid within 30 days of SCN): NIL; Total if paid quickly: ₹68,00,000; Total if fought and lost: ₹68,00,000 + 10% penalty (₹5L) = ₹73,00,000. Same ₹50L if FRAUD established: Tax: ₹50,00,000; Interest (24% × 3 years): ₹36,00,000; Penalty: ₹50,00,000 (100% of tax); Total: ₹1,36,00,000 — nearly 3X the non-fraud amount!

Proactive audit readiness can PREVENT findings and reduce risk by 80%: MONTHLY COMPLIANCE HABITS: (1) GSTR-2B RECONCILIATION: Every month, match ITC in 3B with GSTR-2B. Any excess claim → reverse immediately (don't wait for audit to find it); (2) GSTR-1 vs BOOKS: Match outward supply in GSTR-1 with sales register. Every invoice must be reported — no missing invoices; (3) RCM CHECK: Review all inward supplies — identify RCM-applicable items (legal services, GTA, import of services); (4) E-INVOICE COMPLIANCE: If turnover >₹5 Cr — EVERY B2B invoice needs IRN. Missing IRN = ITC denial to buyer = they'll complain = you get audited; (5) BANK RECONCILIATION: GST paid via Electronic Cash Ledger must match bank debits. Any mismatch = red flag. QUARTERLY REVIEWS: (1) TURNOVER RECONCILIATION: Compare P&L revenue with GSTR-3B reported turnover quarterly — identify gaps early; (2) ITC REVERSAL (Rule 42/43): If you make both taxable and exempt supplies — proportionate ITC reversal must be calculated quarterly; (3) CREDIT NOTE RECONCILIATION: All credit notes issued must be reported in GSTR-1 within September of next FY (Section 34 deadline); (4) EXPORT/REFUND TRACKING: If claiming refund on exports — ensure shipping bills match GSTR-1 reported exports exactly. ANNUAL ACTIONS: (1) Pre-file GSTR-9: Reconcile entire year BEFORE filing annual return — don't file and discover mismatches later; (2) GSTR-9C Prep (if >₹5 Cr): Get CA to review even though self-certified — professional review catches 90% of issues; (3) AUDIT READINESS FILE: Maintain a ready-reference file with all documents (see previous FAQ) — if audit notice comes, you're ready in 48 hours; (4) VOLUNTARY DISCLOSURE: If you discover underpaid tax — pay it with interest BEFORE audit. Section 73/74 penalties are NIL if paid before SCN. TECHNOLOGY-AIDED COMPLIANCE: (1) Use GST software with auto-reconciliation (Laabam.One matches GSTR-2B with books automatically); (2) Set up alerts for e-invoice generation, return due dates, ITC discrepancies; (3) Maintain digital audit trail — every adjustment must be documented with reason; (4) Regular backup of accounting data (if data lost = deemed non-compliance). RED FLAGS THAT TRIGGER AUDIT: (1) ITC-to-turnover ratio >15% (input-heavy but output-light = suspicious); (2) Zero-rated supplies >50% but no refund claimed (possible domestic diversion); (3) Frequent amendments in GSTR-1 (sign of correction after detection); (4) Large cash ledger balance (paid but not utilized = possible fake registration); (5) GSTR-1 vs E-way bill mismatch (goods moved but not invoiced).