"DIR-3 KYC is an annual filing": what the 2026 MCA amendment actually changed

Every June, the same message circulates in founder WhatsApp groups and NRI director circles: "DIR-3 KYC due 30th September, file it or your DIN gets deactivated." Two things are wrong with that sentence in 2026. The deadline is 30 June, not 30 September — that changed years ago. And for most directors, it is no longer an annual filing at all. The Ministry of Corporate Affairs moved Director KYC to a three-year cycle with effect from 31 March 2026, and merged the two old forms into a single web form.

The problem is that the amendment did not remove the Rs.5,000 penalty. It just changed when you are exposed to it — and added a second, much shorter deadline that almost nobody is tracking. If you are an NRI holding a directorship in an Indian private limited company, this is the compliance item most likely to freeze your DIN while you are 4,000 kilometres away and unable to sign anything.

What the law actually says

Director KYC sits under Rule 12A of the Companies (Appointment and Qualification of Directors) Rules, 2014, framed under the Companies Act 2013. It is not an income tax provision — it has no counterpart in the Income Tax Act 1961 or the Income Tax Act 2025 — but it interacts directly with tax compliance, because a deactivated DIN blocks you from signing the financial statements and board resolutions that MCA and income tax filings depend on.

The pre-amendment position under Rule 12A: every individual holding a Director Identification Number as on 31 March of a financial year had to submit KYC by 30 September of that year, every single year. That was later shifted to 30 June. There were two routes — Form DIR-3 KYC (the full eForm, required the first time or whenever your details changed) and DIR-3 KYC-WEB (a simple OTP-based confirmation for directors whose details were unchanged).

What changed with effect from 31 March 2026:

• Frequency. KYC is now required once every three financial years, not annually. The due date within the applicable year remains 30 June.
• Form. The two routes have been consolidated into a single unified web form. You are no longer choosing between the eForm and the web service.
• Change reporting. Any change in your KYC particulars — mobile number, email ID, residential address — must be reported within 30 days of the change. This is the new obligation, and it operates independently of the three-year cycle.
• Transition. If you completed your Director KYC in 2025, your next filing under the new cycle falls due by 30 June 2028. You have nothing to file in 2026 or 2027 on the periodic cycle.

The penalty structure did not soften. Filing after the due date attracts a Rs.5,000 late fee. If your DIN is deactivated for non-filing, reactivation also costs Rs.5,000. There is no first-offence waiver and no proportionality — it is the same Rs.5,000 whether you are one day late or eighteen months late.

Practical implications for NRIs

The three-year cycle sounds like relief. For NRI directors it creates a specific trap, and it is worth being blunt about it.

The 30-day change rule is the real exposure now. NRI directors change addresses, phone numbers and email IDs far more often than resident directors — a move from Dubai to Abu Dhabi, a new UAE mobile number after switching carriers, a change of registered residential address after buying property abroad. Under the old annual regime, all of that got swept up in the next June filing. Under the new regime, each such change starts a 30-day clock. Miss it and you are in breach, even though your periodic KYC is not due until 2028.

Three years is long enough to forget entirely. An annual obligation builds muscle memory. A triennial one does not. A director who filed in June 2025 and next files in June 2028 will have had no MCA touchpoint on KYC for three full years. The most common failure mode from 2028 onward will not be refusal to comply — it will be directors who genuinely did not realise the year had come around.

A deactivated DIN is not a paperwork problem, it is an operational freeze. With a deactivated DIN you cannot sign Form AOC-4 or MGT-7, cannot authenticate board resolutions on MCA21, and cannot be appointed to a new company. For an NRI who visits India twice a year, the practical cost of a frozen DIN is measured in months, not rupees. The Rs.5,000 is the cheapest part of the problem.

The mobile and email on record must be reachable from abroad. The unified web form authenticates by OTP sent to the mobile number and email ID on your DIN record. If that record carries an old Indian mobile number you stopped using when you moved to Singapore, you cannot complete the filing — and you cannot update the number without completing a filing. Directors get stuck in this loop every year. If your registered mobile is a dormant Indian SIM, fix it now, not in June 2028.

Foreign address directors must match documentation exactly. If your residential address on the DIN record is a foreign address, the supporting documents must be apostilled or consularised depending on whether the country is a Hague Convention signatory. A UAE address needs attestation through the Indian consulate; a UK or Singapore address takes the apostille route. This is where NRI filings stall — not on the form, but on the attestation timeline, which can run two to three weeks.

What the amendment did not change

It is worth being precise about the boundaries of this relief, because a good deal of the commentary has overstated it.

Everyone with a DIN is still covered. Rule 12A has never had a carve-out for directors of dormant companies, for directors who hold a DIN but no current directorship, or for foreign nationals. The three-year cycle changed the frequency, not the scope. If a DIN exists in your name and has not been formally surrendered, the obligation is yours.

The disqualification regime is separate and untouched. Directors routinely conflate two different consequences. Non-filing of KYC deactivates your DIN under Rule 12A — it is administrative, and it reverses the moment you file and pay. Disqualification under Section 164(2) of the Companies Act 2013, which follows from a company failing to file its annual returns or financial statements for three continuous financial years, is a five-year bar on holding any directorship. Curing your KYC does nothing for a Section 164(2) disqualification. If MCA21 shows you as Disqualified rather than Deactivated, this article is not your problem and you need a different remedy.

Professional certification is still mandatory. The move to a single web form has been read in some quarters as removing the need for a practising professional to certify the filing. It has not. The certification requirement by a CA, CS or Cost Accountant in practice remains, as does the Digital Signature Certificate.

Nothing about this changes the company own calendar. Director KYC is a personal obligation attaching to the individual. The company annual filings — AOC-4 and MGT-7 — run on their own deadlines under Sections 137 and 92 respectively, and those remain annual. A director who correctly concludes they have no KYC due in 2026 should not extend that conclusion to the company filings.

Step-by-step: what to do

• Check your DIN status today. Go to mca.gov.in, open the MCA Services menu, select "Verify DIN Status of Director" or view your DIN details after logging in. It will show Active, Deactivated due to non-filing of DIR-3 KYC, or Disqualified. These are three different problems with three different fixes — do not assume a deactivated DIN means disqualification under Section 164(2).
• Confirm which year you are in. If your last Director KYC was filed in calendar year 2025, your next periodic filing is due 30 June 2028. If you last filed in 2024 and missed 2025, you are already in default and should file immediately with the Rs.5,000 late fee rather than waiting for the cycle.
• Verify the mobile number and email on your DIN record are currently reachable. This is the single highest-value check in this list. Both must receive OTP. A number you cannot access means you cannot file, and the fix requires lead time.
• If anything has changed in the last 30 days, file now. New address, new phone, new email — the 30-day clock runs from the date of change, not from when you noticed.
• Assemble documents before you start the form. You will need PAN (for Indian nationals), passport (mandatory for foreign nationals and effectively mandatory for NRIs), proof of present residential address, and a photograph. Foreign-issued documents need apostille or consular attestation. Start the attestation process at least three weeks before you intend to file.
• Have the form digitally signed and professionally certified. The filing requires your Digital Signature Certificate and certification by a practising Chartered Accountant, Company Secretary or Cost Accountant. If your DSC has expired — they typically run two years — renew it first. An expired DSC is the second most common reason NRI directors miss the deadline.
• Set a calendar reminder for 1 April 2028. Not 30 June. Give yourself a full quarter, because the attestation and DSC renewal path for an overseas director genuinely takes that long.

FAQ

I filed DIR-3 KYC in June 2025. Do I need to file anything in 2026?
No, provided none of your particulars have changed. Your next periodic Director KYC is due by 30 June 2028. But if your mobile number, email ID or residential address changed at any point, you must report that within 30 days of the change — that obligation is separate from the three-year cycle and applies right now.

My DIN is already deactivated. What is the total cost to fix it?
Rs.5,000 as the late filing fee plus Rs.5,000 for reactivation, and the DIN becomes active again once the filing is processed. There is no additional per-day penalty. The real cost is the intervening period — while deactivated, you cannot sign any MCA filing, which can cascade into further late fees on AOC-4 and MGT-7 for the company itself.

I hold a DIN but resigned from the company two years ago. Do I still file?
Yes. The obligation attaches to the individual holding the DIN, not to any active directorship. As long as the DIN exists and has not been surrendered, Rule 12A applies. If you have no intention of holding a directorship again, surrender the DIN using Form DIR-5 instead of carrying a perpetual compliance obligation.

Does a deactivated DIN affect my income tax filings or my NRI status?
Not directly. DIN deactivation is a Companies Act consequence and has no effect on your residential status under Section 6 or on your personal income tax return. But it does block you from signing the company financial statements, which delays the company ITR and can trigger interest under Sections 234A and 234B on the company own tax liability. The knock-on cost usually exceeds the Rs.5,000.

---

For your specific situation, book a consultation at harunraaj.com

---

See Also

• "A Power of Attorney lets me sell my Indian property tax-free from abroad": What the law actually says
• "Gifts to family in India are always tax-free": What ITA 2025 actually says about NRI gift tax
• "A will alone transfers my parent's Indian assets": What the law actually says for NRI heirs

Need help with this?

Our team handles the paperwork. You focus on your business.