Vendor onboarding checks that actually prevent ITC loss

Onboarding is the one point in a vendor relationship where you have complete leverage and almost no cost of walking away. Once purchase orders are live and delivery schedules depend on the supplier, every control becomes a negotiation. This is why the marginal value of a check performed at onboarding is far higher than the same check performed six months later — and why so many organisations get the sequencing exactly backwards.

Most onboarding processes validate that a GSTIN exists and is well-formed. That is a data-quality check, not a risk check.

Six checks worth performing

1. Legal name match. Compare the legal name registered against the GSTIN with the name on the vendor's invoice, bank account and PAN. Mismatches are usually clerical, occasionally structural (a group entity invoicing under a different registration), and sometimes deliberate. All three matter. This is the single cheapest fraud control available and it takes seconds.

2. Registration status and vintage. Active is necessary but not sufficient. A registration created four weeks ago, for a supplier proposing large-value supplies, deserves a second conversation. Vintage is not disqualifying — it is a reason to look at the rest of the profile more carefully.

3. Filing history for the last six periods. You are looking for two things: whether returns were filed, and whether GSTR-3B kept pace with GSTR-1. A supplier who cannot show six clean periods before you start buying is unlikely to produce them after.

4. State code against the delivery address. The first two digits of the GSTIN encode the state. A supply pattern that does not fit the registered state is not necessarily wrong, but it changes the place-of-supply analysis and should be understood before the first invoice, not after.

5. Taxpayer type and filing frequency. Composition dealers cannot pass on credit at all. QRMP filers deliver data to your 2B quarterly, which changes when you can claim. Both facts should be recorded in the vendor master, because both will otherwise be discovered as reconciliation anomalies.

6. Registered address and additional places of business. Confirm the place you are dealing with appears on the registration. A supply from an unlisted location is a documentation problem waiting to happen.

Making the checks stick

The failure mode is not that teams disagree with these checks. It is that the checks live in a document nobody opens. Three things make them durable:

• Put them in the vendor master as fields, not as attachments. A field can be reported on; a PDF cannot.
• Record the check date. A verification with no date is a verification with no shelf life.
• Define one hard stop. Everything else can be a warning, but at least one condition — typically a cancelled registration — must block onboarding without a manual override. A process with no hard stops trains everyone to click through.

Re-verification, not just verification

Onboarding checks age. A supplier verified in April can be suspended by September, and nothing in the onboarding file will tell you. The practical answer is a two-tier approach: full checks at onboarding, and continuous monitoring of the two signals that change most — registration status and filing compliance — for as long as the vendor is active.

That split matters commercially. Full re-verification of every vendor every quarter is expensive and will be abandoned. Monitoring two fields continuously is cheap and can run indefinitely.

What to do with the vendors you already have

Most organisations reading this have several hundred vendors who were onboarded before any of these checks existed. Do not attempt a full retrospective review. Rank the existing base by annual spend, run the six checks on the top decile, and put the entire base on continuous status monitoring. The top decile typically accounts for the overwhelming majority of credit at risk, and the monitoring catches deterioration in the long tail without a project.

The commercial framing

Presented as compliance, these checks feel like friction. Presented accurately, they are counterparty due diligence — the same thing a credit team does before extending payment terms. The tax component of an invoice is money you have advanced to a supplier on the expectation that they will pass it to the government. Treat it as credit exposure, and the case for checking before you extend it makes itself.

Indicative GST compliance and ITC risk information based on GSTN-reported data. Not a government portal, credit rating, legal opinion, professional advice or guarantee of ITC availability.