← Back to Blog

How a CA Firm in Ahmedabad Detected a Fake GSTIN Vendor

A CA firm caught a fake GSTIN vendor that had already received Rs 4.2 lakh. See how ScamShield AI flagged the fraud before more damage was done.

Note: This is a representative case study based on real fraud patterns reported by Indian CA firms. Client details are anonymised.


Background


A mid-sized Chartered Accountancy firm in Ahmedabad, managing GST filings for over 60 SME clients, noticed something unusual in March 2026. One of their clients, a textile manufacturer, had made three consecutive payments totalling Rs 4.2 lakh to a new vendor whose GSTIN appeared in multiple invoices that month.


The client had onboarded this vendor quickly after receiving an email introduction from what appeared to be a trusted trade contact.


The Problem


When the CA firm began reconciling the client's GST returns for the quarter, they noticed the vendor's GSTIN could not be found in any previous transaction history. The invoices looked legitimate, the letterhead was professional, and the GSTIN format was correct. But something felt off.


The CA team decided to run a quick verification using ScamShield AI.


What ScamShield AI Found


Within seconds of pasting the vendor's GSTIN into ScamShield AI, the risk assessment returned a HIGH RISK flag with the following signals:


The GSTIN was registered only 11 days before the first invoice was raised

The registered business address matched a known shell company pattern

The GSTIN had no previous e-way bill or filing history despite claiming 3 years of operation

The email domain used to introduce the vendor was a lookalike domain (registered 3 weeks prior) impersonating a legitimate trade association


The Outcome


The CA firm immediately flagged the payments to their client and advised them to stop any further transfers. They filed a complaint with the Cyber Crime portal (cybercrime.gov.in) with the evidence gathered.


The client recovered Rs 1.1 lakh through a bank dispute process and prevented a further Rs 6 lakh in planned payments to the same fake vendor.


Key Takeaway for CA Firms


Fake GSTIN vendors are increasingly sophisticated. They use freshly registered GSTINs, professional-looking invoices, and spoofed email domains to pass basic checks. Manual GSTIN verification on the GST portal alone is not enough.


ScamShield AI cross-references GSTIN data with registration age, filing history, domain intelligence, and known fraud patterns to give CA firms an instant second opinion on any new vendor before payments are approved.


Start screening your vendors at scamshieldai.in today.