ComplyLocal - Business Registration & Compliance Services
GST

GST Physical Verification and Biometric Aadhaar Authentication Explained

Two different GST checks get confused constantly. Here is what Rule 25 premises verification and Rule 8(4A) biometric authentication each actually involve.

Keshav Sehgal - 13 Aug 2026 - Updated 15 Aug 2026 - 8 min read - 8 views

GST Physical Verification

Two completely different things get called "GST verification", and sellers conflate them constantly. One is a check on your premises. The other is a check on you. They are governed by different rules, triggered by different conditions, happen in different places, and require completely different preparation.

Getting them confused is expensive. Sellers turn up at a GST Suvidha Kendra expecting the officer to inspect their office. Others prepare their premises meticulously and then miss an appointment they did not realise was theirs to attend. This guide separates the two properly.

I am Keshav Sehgal from ComplyLocal Consultants. Verification handling is the part of a registration our clients most often come to us for, usually because something has already gone sideways.

The two checks, side by side

Physical verification of premises

Biometric Aadhaar authentication

Governing rule

Rule 9 read with Rule 25, CGST Rules

Rule 8(4A), CGST Rules

What is being checked

Whether the declared place of business actually exists and business is carried on there

Whether you are who you say you are — fingerprints, iris, photograph, and originals of uploaded documents

Where it happens

At your declared address

At a designated GST Suvidha Kendra, by appointment

Who is involved

The officer visits; you or your representative should be reachable

The authorised signatory and, where applicable, a promoter or partner must attend in person

Output

A verification report with photographs uploaded in FORM GST REG-30

Authentication recorded against your application on the portal

What triggers it

Risk flagging, Aadhaar authentication not completed, or the officer's decision with approval of an officer not below Assistant Commissioner

Identification on the portal based on data analysis and risk parameters, in notified states

Physical verification: what the officer actually does

Rule 25 empowers physical verification of the business premises where the proper officer considers it necessary. CBIC Instruction No. 03/2025-GST, issued on 17 April 2025, sets out what that verification must produce, and it is more specific than most sellers expect.

The officer carrying out physical verification is required to:

  • Give a specific report on the existence or non-existence of the principal place of business declared by the applicant.

  • Where the entity is found non-existing, record in the report the efforts made to locate the premises.

  • Upload a GPS-enabled site photograph, and any other documents obtained during the visit.

The report goes into FORM GST REG-30, and the instruction requires it to be uploaded at least 5 days before the 30-day period from the date of application expires — which is why a verification triggered late in the cycle tends to move quickly.

The GPS-enabled photograph is the detail that matters. It means the standard is not "does a document exist saying you are here". It is "can a photograph be taken at these coordinates showing this business". That is a factual test, and it is the reason a paper-only address arrangement fails. Any virtual place of business arrangement worth paying for is one built to pass that specific test.

When verification is triggered

Under the instruction, physical verification follows where any of these apply:

  1. The applicant has completed Aadhaar authentication but the application is flagged as risky on the common portal based on data analysis and risk parameters.

  2. The applicant fails to complete Aadhaar authentication, or does not opt for it.

  3. The officer considers physical verification appropriate, with the approval of an officer not below the rank of Assistant Commissioner.

Notice what is not on that list: using a shared or serviced address is not itself a trigger. What raises risk is the combination of factors the portal scores — and address-level concentration, PAN history and document quality all feed into that.

Preparing your premises

You cannot prevent a visit. You can make sure it succeeds.

Item

Why it matters

Name board carrying your entity's legal name

The officer must be able to connect the premises to the applicant. An unmarked door is the most common reason for a negative finding

GST certificate displayed once issued

Displaying FORM GST REG-06 at the principal place of business is a standing obligation, not a one-off gesture for the visit

The specific unit, cabin or desk from your agreement identifiable on site

If your agreement says Unit 4B and nothing at the premises says 4B, the address is effectively unverifiable

Someone on site who knows about your arrangement

Reception staff who have never heard of your company will produce a negative report faster than an empty office

A copy of the agreement and NOC available at the location

The officer may ask. Producing it immediately closes the question

Books and records accessible at or from the address

Section 2(85) expressly contemplates a place where books of account are maintained. Electronic accessibility is workable and worth arranging deliberately

Biometric authentication: the part that requires travel

This is where the marketing promise of a fully remote registration breaks down, and very few providers say so.

Rule 8(4A) provides for biometric-based Aadhaar authentication, photograph capture and verification of the original copies of documents uploaded with the application, for applicants identified on the common portal based on data analysis and risk parameters. In practice that means an appointment at a designated GST Suvidha Kendra, attended in person, with originals in hand.

CBIC first piloted biometric authentication in Gujarat and then Andhra Pradesh, and has extended it to further states through successive notifications since. The list has been expanding steadily. Because it changes, do not plan around a state list you read in an article — including this one. Verify the current position for your state on the GST portal or against the latest CBIC notification before you file, particularly if travel is involved.

What to carry to the appointment

  • The appointment confirmation received by email.

  • Aadhaar and PAN of the person attending.

  • Original copies of the documents uploaded with the application, including the premises agreement, NOC and ownership document.

  • The ARN of your application.

The originals point catches people out. The rule contemplates verification of the original copies of documents uploaded along with the application, so arriving with only photocopies or a phone gallery can waste the appointment.

The timing problem for multi-state sellers

If you live in Haryana and are registering in Karnataka, and your application is routed to biometric authentication, someone has to attend an appointment. That is a real logistical and cost consideration that should be factored into your expansion timeline before you file, not discovered after the appointment is allotted.

Two practical consequences. First, build slack into your timeline — an appointment that has to be scheduled around travel adds days. Second, complete Aadhaar OTP authentication properly at the application stage wherever you can, because failing or declining it is itself one of the conditions that routes you towards mandatory site verification. Where you are planning several states at once, sequencing them rather than filing all at once keeps the travel manageable, which is something we work through case by case on multi-state GST registration.

What happens if verification goes badly

A negative verification report does not automatically end the application, but it puts you on the back foot. The realistic sequence is a REG-03 notice raising the address issue, a 7 working day window to reply in FORM GST REG-04, and rejection in REG-05 if the reply does not satisfy the officer.

If you receive a notice after a visit:

  1. Read the ground actually stated. The instruction limits REG-03 to four grounds, and address mismatch or invalid address proof is the one most likely to appear here.

  2. Fix the underlying issue before replying — arrange the name board, get the unit marked, brief the site staff.

  3. Attach fresh evidence with the reply. Photographs of the signage, a copy of the agreement and the NOC, and anything establishing the premises connection.

  4. File within 7 working days. Silence is treated as failure to reply and permits rejection. If the notice is complex or the address issue is contested, professional notice handling is worth engaging immediately rather than at day six.

If a registration has already been rejected or cancelled following an adverse verification, the route back is a revocation or fresh application, depending on which stage it failed at. Both are considerably harder than getting it right first time, which is the entire argument for preparing the premises before filing rather than after a visit.

Verification after you are already registered

Sellers assume verification is a registration-stage event. It is not. Section 29 permits cancellation of registration where a person does not conduct business from the declared place of business, and that exposure runs for as long as the registration exists.

In practice this means the address has to stay real:

  • Keep the provider agreement renewed. A lapsed agreement leaves a certificate pointing at premises you no longer have rights to.

  • Amend your registration when the address changes rather than letting a stale one sit on the certificate — that is a core-field GST amendment, not a housekeeping matter.

  • Keep filing. Non-filing is a far more common route to suspension than any address issue, which is why return filing across every GSTIN you hold should be set up at the point of registration.

  • Keep your additional places current as fulfilment centres change, using the additional place of business process.

Frequently Asked Questions

K

Written by

Keshav Sehgal

Business Registration & Compliance Specialist

Keshav Sehgal is a Business Registration & Compliance Specialist at ComplyLocal Consultants with expertise in business registrations, GST compliance, FSSAI licensing, trademark services, PAN/TAN applications, VPOB, APOB, and regulatory documentation for businesses across India.

Related posts

Get the compliance calendar + new rules in your inbox.

Monthly digest, written by CAs. Unsubscribe anytime.