Skip to content
HRAreceipt.in

Compliance · 10 May 2026

How Does a CA Audit GST Invoices and Section 269ST Cash Limits?

Field auditors verify GST tax invoices, payment receipts, and cash receipts against three primary sources: GSTIN active-status on the GSTN portal, Form 26AS and AIS reconciliation on the Income Tax e-Filing portal, and IRN lookup on the e-invoicing registry. Section 269ST (Rs. 2 lakh single-recipient cash limit) draws a 100% penalty under Section 271DA on the recipient regardless of intent.

In this section

Answers

View all 97 articles →

Myth

Section 269ST only penalises the payer who hands over the cash.

Fact

The penalty under Section 271DA[3] falls on the receiver, equal to the cash received in breach, regardless of intent.

Which three primary sources does every CA audit cross-check?

Short answer

Auditors verify documents against GSTIN active-status[7], Form 26AS and AIS[5], and the IRN registry, each ruling out a different class of fabrication.

  • The GSTIN pull confirms registration on the invoice date, ruling out shell-entity invoices.
  • The Form 26AS and AIS reconciliation checks the transaction against the counter-party's reported income, ruling out unilateral fabrication.
  • The IRN lookup on the e-invoicing registry[6] rules out post-dated insertions for above-threshold B2B suppliers.

What are the 8 fields a CA checks for GST invoice authenticity?

Short answer

A genuine invoice carries the statutory fields under Rule 46 of the CGST Rules, 2017[2], checked in the order they fail.

  • GSTIN format (15 alphanumeric: state code, PAN, entity code, Z, checksum) and the active-status pull, where a Cancelled GSTIN issuing after its cancellation date is fabricated.
  • HSN/SAC code must exist in the CBIC master and match the supply description.
  • IRN for B2B turnover above Rs. 5 crore (from 1 August 2023): a 64-character SHA-256 hash plus QR, else a breach of Rule 48(4)[2].
  • Signed JSON from the IRP, verified against the NIC public key, where tampering fails the signature check.
  • Sequential numbering (no gaps), place-of-supply consistency (IGST inter-state vs CGST+SGST intra-state), and tax-split arithmetic with rounding above Rs. 1 flagged.
See the Rule 46 field anatomy

How do auditors verify payment and cash receipts?

Short answer

CAs match receipts to invoices, cross-check the UTR against the bank statement, and profile the cash ratio; advances need a Receipt Voucher under Rule 50[9].

  • Each receipt references its invoice; advances draw GST and a Rule 50 Receipt Voucher, with amounts unadjusted within 30 days flagged.
  • For NEFT, IMPS, RTGS, and UPI, the UTR must appear in the bank statement on the receipt date in matching amount and payer.
  • A B2B provider at 60-70 percent cash carries Section 269ST and Section 269SS (Rs. 20,000 cash loan limit) exposure.
  • Cash receipts above Rs. 5,000 need a Re. 1 revenue stamp under the Indian Stamp Act 1899[8].

How does the Section 269ST Rs. 2 lakh cash limit work?

Short answer

Section 269ST[3] bars receiving Rs. 2 lakh or more in cash from one person across four triggers, with a 100% penalty on the receiver under Section 271DA.

The checklist sorts the cash register by counter-party PAN, aggregates across the windows, and flags every total touching Rs. 2 lakh. Confirm the audited person was the receiver, and check exemptions (government, banking-company, post office, and cooperative bank receipts are excluded). A freelancer billing one client Rs. 70,000, Rs. 80,000, and Rs. 75,000 over a month aggregates to a Rs. 2.25 lakh penalty.

  • Single transaction: one sale of Rs. 2 lakh or more, even if split into tranches against the same invoice.
  • Single day: multiple cash receipts from one person in a day that aggregate to Rs. 2 lakh or more.
  • Single event or occasion: cash across multiple invoices for one wedding, or a gold or property purchase split across bills, aggregates.
See the 269ST three-prong limit

When is Form 15CB required for cross-border payments?

Short answer

Cross-border remittances trigger Section 195 and Rule 37BB; a CA certifies chargeability via Form 15CB[4] only in defined cases.

  • The CA evaluates chargeability, the relevant DTAA, and the withholding rate before issuing Form 15CB online.
  • Late or missing filings attract penalty under Section 271-I at Rs. 1 lakh per default.
FormWhen it appliesCA needed
Part ASingle remittance up to Rs. 5 lakh, no FY aggregate above Rs. 5 lakhNo
Part BCovered by an AO order under Section 195(2), 195(3), or 197No
Part C + 15CBAbove Rs. 5 lakh aggregate, off Specified List, chargeableYes
Part DSpecified List item (LRS, education, medical treatment)No

Form 15CA/15CB applicability. Source: Form 15CA and 15CB instructions, Income Tax e-Filing Portal.

What does the AIS reveal in an audit?

Short answer

The Annual Information Statement is the PAN-linked record of counter-party-reported Specified Financial Transactions (SFT) above threshold, on the e-Filing portal[5].

  • SFT triggers: Rs. 10 lakh cash deposits in a savings account, Rs. 50 lakh in a current account, Rs. 30 lakh property purchase or sale.
  • Rs. 10 lakh aggregate in bonds, shares, mutual fund units, foreign currency proceeds, or time deposits, plus credit card payments of Rs. 1 lakh cash or Rs. 10 lakh by any mode.
  • The CA reconciles each entry against the books, catching unilateral fabrication and material omission.

What changed for GST e-invoicing in FY 2026-27?

Short answer

The e-invoicing threshold dropped to Rs. 5 crore aggregate turnover (was Rs. 10 crore), pulling many mid-sized B2B suppliers into the IRN-mandatory regime.

  • Faceless assessment now covers tax audits where the document is the only record, with no in-person follow-up.
  • AIS coverage expanded to digital wallet and UPI receipt aggregates that previously sat outside the SFT net.
  • Input-credit reform under Section 16(2)(c)[10] ties recipient input credit to the supplier's tax payment, so supplier audits now affect recipient credit positions.
Verify an inbound invoice or receipt QR

What document stack does a CA firm run?

Short answer

A firm runs inbound verification and outbound issuance of Section 31-compliant invoices and Rule 50 receipts in parallel.

  • Inbound: scanning a QR via the verifier endpoint returns issuer, type, fields, and timestamp; documents without one fall back to the eight-field check, UTR match, and AIS cross-check.
  • Outbound: the pakka bill generator issues Rule 46 fields and the IRN; the misc receipt generator handles the UTR, revenue stamp, and Rule 50 format.
  • The corporate bundle is from Rs. 499 for 100 credits on a 45-day wallet; solo CAs under 50 documents pay less on Rs. 4 to Rs. 49 per-PDF pricing.
Generate a Rule 46-compliant pakka bill

References

  1. 1.Section 31, Central Goods and Services Tax Act 2017 — CBIC — Tax invoice issuance requirements for registered persons
  2. 2.Rule 46 and Rule 48, CGST Rules 2017 — CBIC — Mandatory invoice fields and the e-invoicing scheme
  3. 3.Section 269ST and 271DA, Income Tax Act 1961 — Income Tax Department — Rs. 2 lakh cash receipt limit and 100% penalty regime
  4. 4.Form 15CA and 15CB instructions — Income Tax e-Filing Portal — Cross-border remittance reporting and CA certification
  5. 5.Form 26AS and AIS — Income Tax e-Filing Portal — PAN-linked SFT and counter-party reporting
  6. 6.e-Invoice System — National Informatics Centre — IRN generation and lookup for B2B supplies above threshold
  7. 7.GSTN Portal — Search Taxpayer — GSTIN active-status verification and registration history
  8. 8.Indian Stamp Act 1899 — India Code — Re. 1 revenue stamp on cash receipts above Rs. 5,000
  9. 9.Rule 50, CGST Rules 2017 — CBIC — Receipt voucher for advance payments
  10. 10.Section 16(2)(c), CGST Act 2017 — CBIC — Input tax credit conditioned on supplier tax payment

References & related

Primary sources

Related guides