Hackers Hijack City Firm’s GST Account, Generate ₹183-Cr Fake Invoices
On checking the GST account, the firm found that the registered mobile number and email ID was changed on July 23 without the knowledge or consent of the partners or the accountant.
Hyderabad:A city-based plywood and hardware firm has approached the Telangana Cyber Security Bureau (TGCSB) after unidentified persons allegedly gained unauthorised access to its GST account, changed its registered mobile number and email ID, and generated 730 fake invoices and unauthorised e-way bills involving transactions worth Rs 183.61 crore.
According to the complaint, the firm’s accountant noticed the breach on August 3 when he was unable to log into the GST portal. The portal displayed a message stating that the login credentials were invalid.
On checking the GST account, the firm found that the registered mobile number and email ID was changed on July 23 without the knowledge or consent of the partners or the accountant. An SMS received on the original mobile number also indicated that the GST account password was changed without authorisation.
Following the discovery, the complainant approached the assistant commissioner of state tax, Nagole Circle, LB Nagar division, at Nampally seeking suspension of the GST account and restoration of the login credentials. The tax authorities verified the account, changed the login credentials and began examining the transactions generated through it.
On August 6, the complainant and his accountant visited the GST office at Nampally and obtained details of the alleged unauthorised activity. They found that unknown persons generated 730 fake invoices and e-way bills amounting to `1,83,61,99,409.21 with the intention of facilitating illicit input tax credit (ITC) and causing loss to government revenue.
During verification, the complainant identified 72 firms and companies that raised invoices through the compromised GST account. The details of the firms, along with their GST identification numbers, were submitted as annexures to the complaint. Based on the complaint received, TGCSB registered a case under the BNS and Information Technology Act stating cheating, impersonation, unauthorised access and computer-related offences.
