GST / Vendor Controls

Vendor GST Scorecard

CA Nikhil Gupta·May 2026·4 min readGST / Vendor Controls

Vendor selection is an ITC control. A low-price supplier can become expensive when invoices remain unmatched or the supplier disappears during a notice.

Quick View

Decision

Link vendor onboarding, invoice approval and payment release to measurable GST-risk indicators.

First action

Verify GSTIN and legal name.

Core evidence

GST registration verification.

Main warning

One-time onboarding only.

Why It Matters

A scorecard should assess legal identity, GSTIN status, filing behaviour, invoice quality, actual supply evidence and responsiveness to corrections.

The buyer must still establish receipt and business use. Vendor compliance is necessary but does not replace the buyer’s own section 16 and section 17 review.

Registration thresholds vary between goods and services and across notified states, while compulsory-registration rules can override thresholds; do not use a single turnover number as a universal test.

Control Framework

AreaWhat to establishOperating rule
IdentityPAN, GSTIN, address and bank.Verify before onboarding.
FilingGSTR-1 and return behaviour.Monitor monthly.
InvoiceIRN, tax rate and place of supply.Reject errors.
SupplyGRN, service acceptance and payment.Prove substance.

Action Checklist

  1. Verify GSTIN and legal name.
  2. Capture e-invoice applicability.
  3. Track 2B match rate.
  4. Age unresolved corrections.
  5. Link score to payment holds.
  6. Review high-risk vendors quarterly.

Practical Example

A vendor has 20% lower prices but only 65% invoice visibility in 2B and repeatedly changes bank accounts. The commercial saving does not justify the tax and fraud exposure without remediation.

Evidence to Keep

  • GST registration verification.
  • PAN and bank proof.
  • Vendor master approval.
  • Invoice and IRN checks.
  • 2B match history.
  • Correction correspondence.

Warning Signs

  • One-time onboarding only.
  • Using screenshots as filing proof.
  • No bank-change verification.
  • Ignoring cancelled GSTIN.
  • Paying disputed tax before correction.

Detailed Review

GST control should connect five records: commercial contract, tax invoice, movement or service evidence, accounting entry and portal return. A filing that cannot be traced back to all five records is difficult to defend.

Every reconciliation should have a clear opening balance, current-period additions, corrections, reversals, payments and closing balance. Avoid unexplained plugs that make the total match but do not identify the invoice or legal reason.

Portal data is important but not conclusive by itself. GSTR-2B, e-invoice, e-way bill and ledger data should be read with the statute, rules, notifications, contracts and actual supply evidence.

Keep original source files and final filed versions. Screenshots help explain a portal event but should not replace downloaded returns, JSON, signed invoices, acknowledgements or bank records.

For material exposure, prepare a written position memo stating facts, issue, law, alternatives, conclusion, amount and approval. The memo should record uncertainty rather than hide it.

ITC review must establish supplier, invoice, receipt, business use, tax reporting and absence of a statutory block. A purchase-register match is only one layer.

Vendor remediation should have an ageing rule: request correction, escalate commercially, defer or reverse credit where required and preserve later re-availment evidence.

Escalation Route

Start with the GST portal record, responsible business owner and tax working. Where the issue is operational, correct the source system and retain the acknowledgement. Where it is legal or disputed, obtain a reasoned professional position before payment, reply, refund or appeal.

Track the statutory or portal deadline separately from internal approval. Preserve helpdesk tickets, ARN, hearing requests, orders and payment records so a later reviewer can reproduce the entire path.

Transaction Test

Before filing or replying, prepare a one-page issue sheet showing GSTIN, tax period, transaction type, amount, applicable provision, portal form, evidence owner and due date. This prevents different teams from solving different versions of the same problem.

Reconcile tax by CGST, SGST, IGST and cess rather than only by total. A total can match even when the wrong tax head, state or period has been used, which can still create interest, cash-flow and customer-credit consequences.

Build an exception register with five statuses: identified, evidence pending, vendor or customer action, tax treatment approved and closed. Every exception should retain its original amount even after correction so the audit trail remains visible.

Test the position against the counterparty’s records. Customer ITC, vendor GSTR-1, transporter data, marketplace statements and bank receipts can expose differences that are invisible in the taxpayer’s own ledger.

The final approval should record who reviewed the legal position and who approved the return, reply, payment, refund or appeal. Material GST decisions should not remain buried in informal email chains.

Use an invoice ageing report that distinguishes missing in 2B, wrong GSTIN, duplicate, ineligible, blocked, received-not-booked and booked-not-received. Each category requires a different action.

Re-availment should link back to the original reversal month and document. Without that link, the business can claim the same credit twice or fail to reclaim it.

Frequently Asked Questions

Can a buyer rely only on active GSTIN? â–¼
No. Identity, actual supply and return behaviour also matter.
Should payment be withheld? â–¼
Use contractually documented controls and commercial judgement.
Does a low score prove fraud? â–¼
No. It identifies risk requiring review.
How often should the score update? â–¼
Monthly for filing data and periodically for full due diligence.