GST Audit Services — Departmental Audit Defence & Health Checks
ADT-01 received? CA-led defence for Section 65 departmental GST audits, DGGI investigations, plus pre-emptive GST health checks and GSTR-9/9C support. Chennai, Bangalore, Mumbai — pan-India representation.
Quick answer: A departmental GST audit under Section 65 begins with notice in Form ADT-01 and examines ITC claims, reverse charge, classification and GSTR-9/9C reconciliations, typically across multiple years. A structured defence — reconciliation working papers, documented legal positions and timely replies — is what prevents observations from escalating into Section 73/74 demands.
GST audits changed character after the statutory GSTR-9C audit was made self-certified in 2021: the compliance burden shifted from your auditor's certificate to the department's own audit machinery. Central and state authorities now run structured audit programmes under Section 65, selecting taxpayers through risk analytics — ITC-heavy sectors, refund claimants, loss filers, high RCM exposure, and GSTR-1 vs 3B divergence.
Virtual Auditor works both sides of the audit: defence when the department serves ADT-01, and prevention through pre-emptive health checks that find and fix the exact issues auditors are trained to find — before they do.
The Three Kinds of GST "Audit" You May Face
| Type | Legal basis | What happens |
|---|---|---|
| Departmental audit | Section 65, Rule 101 | Notice in ADT-01 ≥15 working days before start; audit of records at your premises or the office; to be completed in 3 months (Commissioner can extend to 6); findings in ADT-02 |
| Special audit | Section 66 | Ordered during scrutiny/investigation where valuation or ITC complexity warrants; conducted by a CA/CMA nominated by the Commissioner; report in 90 days |
| Investigation | Section 67 (DGGI / anti-evasion) | Inspection, search, seizure; summons under Section 70; statements recorded — a different intensity altogether, needs immediate professional presence |
What Departmental Auditors Actually Check — Our 40-Point Matrix
Audit teams work from a standard desk-review kit. The recurring high-yield areas:
- ITC integrity: GSTR-2B vs 3B vs books three-way match; Section 16(4) time-barred claims; blocked credits under 17(5) (works contract, motor vehicles, employee benefits); Rule 42/43 common-credit reversal for exempt supplies; 180-day payment rule reversals.
- Output-side: GSTR-1 vs 3B vs books turnover reconciliation; e-invoice IRN coverage; credit notes netted correctly; classification and rate on top SKUs; discounts and Section 15 valuation (related-party pricing, reimbursements, subsidies).
- RCM: GTA, legal services, security services, import of services, director remuneration analysis — unpaid RCM found in audit carries interest even though ITC would have been available.
- Cross-statute mismatches: GST turnover vs ITR/26AS/AIS vs financial statements — the single largest source of audit paras now that data-sharing between CBIC and CBDT is systematic.
- Job work, stock transfers, cross-charge: ISD vs cross-charge positions, branch valuations, unreturned job-work goods beyond 1/3 years.
Defending a Section 65 Audit — Our Protocol
- Day 1 (ADT-01 received): scope review — periods covered, records demanded, officer jurisdiction. We calendar every statutory timeline.
- Pre-audit scrub (the 15-day window): we run the auditor's own checks first. Genuine short-payments are paid via DRC-03 before the audit commences — payment before the SCN caps penalty at nil (Section 73) or 15% (Section 74).
- Data room discipline: reconciled, indexed submissions — never raw dumps. Every schedule ties to books and returns; every ITC claim carries its invoice, payment proof and 2B reference.
- Query management: written responses to audit enquiries with legal positions cited; contentious oral discussions converted to written record.
- ADT-02 stage: findings are negotiable before finalisation — we respond para-by-para, conceding what is truly payable and contesting the rest with case law, so weak paras die before they become SCNs.
- Post-audit: if an SCN follows, our notice reply and demand order defence teams continue seamlessly — no re-briefing.
Why the pre-audit scrub pays for itself: in our engagements, the majority of eventual audit paras were visible in a two-day desk review beforehand. Paying a genuine ₹3 lakh shortfall via DRC-03 before commencement costs ₹3 lakh + interest. The same shortfall found by the auditor becomes tax + 18% interest + penalty + a fraud allegation risk + three years of appeals.
Pre-emptive GST Health Check (No Notice Required)
The same 40-point matrix, run annually or before a due-diligence event. Deliverables: exception report quantifying exposure by issue, DRC-03 recommendations with cost-benefit, SOP fixes for the root causes, and a management letter you can show investors, lenders or acquirers. Most useful for businesses with ₹5 crore+ turnover, refund claims, multi-state operations or upcoming fundraising.
GSTR-9 / 9C Annual Return Support
Though GSTR-9C is self-certified, it remains the department's primary desk-audit input — every reconciliation gap you disclose (or fail to explain) becomes a potential audit para. We prepare or review GSTR-9/9C with audit-defence in mind: Table 8 ITC reconciliation logic documented, Table 15 refund/demand disclosures consistent with portal data, and working papers retained for the Section 65 horizon (audits typically arrive 2–3 years later).
Your Rights and Obligations During a Departmental Audit
Obligations (Section 65(5)): provide the facility to verify books, furnish the information sought, and render assistance for timely completion. Non-cooperation invites summons under Section 70 and converts a routine audit into an adversarial one.
Rights that protect you:
- 15 working days' notice before commencement — an audit sprung without ADT-01 lead time is procedurally infirm.
- Defined scope: the audit covers the periods and records stated; open-ended fishing expeditions can be respectfully resisted in writing.
- Time-bound completion: three months from commencement (date on which records are made available), extendable to six only by the Commissioner with recorded reasons.
- Findings must be communicated (ADT-02) within 30 days, with reasons — you are entitled to respond before any SCN issues.
- No spot recovery: officers cannot compel payment during the audit visit. Any DRC-03 you file should be a considered decision, not a pressured one — CBIC's own instructions (following the Bhumi Associate line of cases) prohibit coerced recovery during search/inspection hours.
We brief your finance team on exactly these boundaries before the first audit meeting, so requests stay within scope and every concession is deliberate.
Fees
| Service | Fee (from) |
|---|---|
| GST health check (single GSTIN, one FY) | ₹25,000 |
| Section 65 audit defence (end-to-end) | ₹50,000 |
| GSTR-9 + 9C preparation/review | ₹15,000 |
| DGGI summons representation | ₹25,000 per appearance |
Frequently Asked Questions
What is Form ADT-01 in GST?
ADT-01 is the statutory notice initiating a departmental audit under Section 65, and must be issued at least 15 working days before the audit begins. It specifies the audit period (which can span multiple financial years) and the records required. The audit must conclude within three months of commencement, extendable to six by the Commissioner. Treat the 15-day window as your pre-audit remediation opportunity — it is the cheapest time to fix genuine issues.
Is GST audit by a CA still mandatory?
The statutory GST audit certificate (old GSTR-9C attestation) was abolished from FY 2020-21 — GSTR-9C is now self-certified by the taxpayer (mandatory above ₹5 crore turnover). What replaced it in practice is departmental audit under Section 65, where the tax office audits you directly. A voluntary CA-led health check now serves the preventive role the statutory audit used to play.
How are taxpayers selected for departmental GST audit?
Selection is risk-based analytics: ITC utilisation ratios, refund history, GSTR-1 vs 3B divergence, loss-making filers with high ITC, RCM-heavy sectors, e-way bill vs turnover gaps, and mismatches between GST turnover and income-tax data (26AS/AIS). Multi-year non-audited taxpayers also get picked in routine coverage cycles. High refund claimants and exporters see the highest audit frequency.
What should I do in the 15 days between ADT-01 and the audit?
Run the auditor's checks on yourself: three-way ITC match (books vs 3B vs 2B), turnover reconciliation (books vs GSTR-1 vs 3B vs 26AS), RCM completeness, blocked-credit review, and Rule 42/43 computations. Pay any genuine shortfall through DRC-03 before the audit commences — pre-notice payment means zero penalty in Section 73 cases. Then index and reconcile every record demanded, so the audit starts on your terms.
What happens after the audit findings in ADT-02?
ADT-02 must be issued within 30 days of concluding the audit, informing you of findings, your rights and obligations. It is not a demand — but unresolved paras convert into show-cause notices under Section 73/74. The window between ADT-02 and the SCN is a genuine negotiation space: para-wise written responses with legal authority can kill weak findings before adjudication hardens positions.
Can the department audit periods already covered by my GSTR-9C?
Yes. Self-certified GSTR-9C does not immunise any period. Section 65 audits routinely cover 2–4 financial years at once, and the limitation for issuing demands (3 years non-fraud / 5 years fraud, from the annual return due date) defines the practical outer boundary. Working papers behind your GSTR-9/9C are your first line of defence — we build them audit-ready.
What is the difference between a Section 65 audit and a DGGI investigation?
Section 65 is a scheduled compliance audit with notice, defined scope and statutory timelines. A DGGI (Directorate General of GST Intelligence) action under Section 67 is an investigation — it can begin with unannounced inspection or search, includes summons and recorded statements under Section 70, and targets suspected evasion, fake invoicing or fraudulent ITC. Investigations need immediate professional representation; statements recorded early shape the entire case.
Can I pay disputed amounts during the audit to stop penalty?
Yes, strategically. Payment through DRC-03 before the show-cause notice caps penalty at nil in Section 73 cases and 15% in Section 74 cases — the audit window is exactly when this option is most valuable. But payment is an admission for that issue, so it should follow a merits analysis, not auditor pressure. CBIC instructions expressly prohibit coerced recovery during audit or search; any payment must be voluntary and considered.
How many years can one GST audit cover?
Section 65 sets no limit on the number of periods — audits commonly cover two to four financial years in one exercise. The practical boundary is demand limitation: three years from the annual-return due date for non-fraud demands and five years for fraud cases. Records must be retained for 72 months from the annual return due date under Section 36, so the audit-exposure horizon is effectively six years.
Does the audit happen at my premises or the department's office?
Section 65(2) permits either — audit at your place of business or at the departmental office based on records you produce. In practice most audits now run as desk audits: you submit reconciliations and documents electronically or physically, with one or two premises visits for verification. Premises audits are more common for manufacturers with stock and capital-goods verification issues. Either way, the discipline is identical: indexed, reconciled submissions and a single point of contact for the audit team.