Incorporation, Post-Incorporation Compliance and Director KYC: SPICe+, INC-20A, ADT-1, DIR-3 KYC and Section 164(2)

1. Statutory Overview and Legislative Intent

Incorporation law has two goals that pull in different directions. The State wants it to be fast and cheap so that enterprise is encouraged, which is why the MCA built the integrated SPICe+ form that bundles a dozen registrations into one filing. The State also wants to stop shell companies, which is why post-incorporation checks such as the declaration of commencement of business, verification of the registered office and annual director KYC were introduced from 2018 onwards.

• Section 3 and Section 4: formation of a company and the memorandum of association.
• Section 7: incorporation, documents to be filed, declarations by subscribers and the first directors (INC-9), and the certificate of incorporation.
• Section 10A: inserted by the Companies (Amendment) Ordinance, 2018 and later the Companies (Amendment) Act, 2019. A company with share capital cannot commence business or exercise borrowing powers unless a director files a declaration (INC-20A) within 180 days of incorporation that every subscriber has paid the value of the shares agreed to be taken.
• Section 12: registered office capable of receiving communications within 30 days of incorporation, painted or affixed name, and verification (INC-22 where not furnished at incorporation).
• Section 139(6): the first auditor of a non-Government company is appointed by the Board within 30 days of registration, failing which members appoint within 90 days at an extraordinary general meeting.
• Section 152 and Section 153 to 159: appointment of directors and the Director Identification Number system.
• Section 164 and Section 167: disqualification of directors and vacation of office.
• Section 173: first Board meeting within 30 days of incorporation and at least four meetings each year.
• Section 184: disclosure of interest by every director (MBP-1).
• Companies (Appointment and Qualification of Directors) Rules, 2014, Rule 12A: annual KYC of every DIN holder (DIR-3 KYC).

2. Applicability and Threshold Matrix

3. Step-by-Step Compliance and Filing Workflow

Stage 1: Incorporation through SPICe+

1. Obtain DSCs for all proposed directors and subscribers (Class 3, issued by a licensed certifying authority after video verification).
2. Reserve the name. Use SPICe+ Part A on the MCA V3 portal (up to two proposed names, one resubmission) or the standalone RUN web service. Check the Companies (Incorporation) Rules, 2014, Rule 8 and 8A for undesirable names, trademark conflicts and similarity. The approved name is reserved for 20 days from approval.
3. Complete SPICe+ Part B (INC-32). Enter capital structure, registered office (or opt to give the address within 30 days), subscribers, first directors, DIN applications for new directors, and the declaration of compliance by a professional or a director.
4. Prepare linked forms:
   • e-MoA (INC-33) and e-AoA (INC-34), signed by all subscribers with DSC;
   • AGILE-PRO-S (INC-35) for GSTIN (optional), EPFO and ESIC registration, Profession Tax registration where offered by the State, and opening of a current account with a participating bank;
   • INC-9 declarations by subscribers and directors are auto-generated; DIR-2 consent of directors is attached;
   • URC-1 only when an existing firm or LLP converts into a company.
5. Attachments: identity and address proof of subscribers and directors (PAN mandatory for Indian nationals; passport for foreign nationals, apostilled or consularised), proof of registered office (utility bill not older than two months), no-objection certificate from the owner and rent agreement where the premises are not owned.
6. Pay fees and stamp duty electronically, file the forms and track the SRN. On approval the Registrar issues the Certificate of Incorporation with CIN, PAN and TAN, and the DINs are allotted.

Stage 2: The first 30 days

1. Hold the first Board meeting within 30 days. Typical agenda: note the certificate of incorporation, appoint the first auditor, approve bank account operations, take note of MBP-1 and DIR-8, adopt the common seal if any, approve preliminary expenses, issue share certificates or initiate dematerialisation, fix the registered office if not done, and approve the financial year.
2. Appoint the first auditor under Section 139(6). Obtain the auditor's written consent and eligibility certificate under Section 141. The first auditor holds office until the conclusion of the first AGM. Filing of ADT-1 for the first auditor is widely practised and recommended, although the requirement in Section 139(1) to file ADT-1 attaches to appointment at the AGM.
3. Registered office: paint or affix the name and CIN outside the office, and file INC-22 within 30 days if the address was not given in SPICe+.
4. Share certificates: issue within two months of incorporation under Section 56(4). A private company that is not a small company must also comply with the dematerialisation mandate in Rule 9B of the Companies (Prospectus and Allotment of Securities) Rules, 2014, introduced by MCA in October 2023.
5. Beneficial ownership: obtain BEN-1 declarations from significant beneficial owners and file BEN-2 within 30 days of receipt under Section 90.

Stage 3: Within 180 days, the declaration of commencement of business

1. Ensure every subscriber has paid the full subscription amount into the company's bank account.
2. File INC-20A on the MCA V3 portal with a declaration by a director, attaching the bank statement or proof of receipt of subscription money. Where the company's business requires registration with a sectoral regulator (for example RBI for an NBFC), attach that approval.
3. Until INC-20A is filed, the company must not commence business or borrow.

Stage 4: Recurring director-level compliances

1. MBP-1 under Section 184(1): every director discloses concerns or interests (shareholding, directorships, partnerships) at the first Board meeting in which he or she participates as director, at the first Board meeting of every financial year, and whenever there is a change.
2. DIR-8 under Section 164: every director gives an intimation that he or she is not disqualified, before appointment or reappointment, and in practice annually at the first Board meeting of the year.
3. DIR-3 KYC under Rule 12A:
   • Use the e-form DIR-3 KYC when filing KYC for the first time, or when personal mobile number or email address has changed. It requires PAN, Aadhaar (where held), passport for foreign nationals, OTP verification of personal mobile and email, and the director's own DSC, certified by a practising CA, CS or CMA.
   • Use DIR-3 KYC-Web when a complete e-form KYC has been filed earlier and no details have changed. It is OTP based and needs no professional certification.
   • The statutory due date in Rule 12A is 30 September of the following financial year. After this date the DIN is marked "Deactivated due to non-filing of DIR-3 KYC". Reactivation requires filing the form with a fee of Rs. 5,000.

4. Statutory Due Dates and Frequency Table

5. Interest, Late Fees and Penal Consequences

Section 164(2): the disqualification regime explained

Section 164(2) disqualifies a person from being reappointed as a director of a company, or appointed in any other company, for five years from the date of default, if he or she is or has been a director of a company that:

1. has not filed financial statements or annual returns for any continuous period of three financial years; or
2. has failed to repay deposits, or interest on them, or to redeem debentures on the due date, or to pay interest due on debentures, or to pay any declared dividend, and the failure continues for one year or more.

Under Section 167(1)(a), the director vacates office in all other companies on incurring the disqualification, but not in the defaulting company itself, so that the defaulting company is not left without directors to cure the default. A newly appointed director of a defaulting company is not disqualified for the first six months from appointment. Section 164(1) separately disqualifies individuals who are of unsound mind, undischarged insolvents, convicted of offences with imprisonment of six months or more (and seven years or more permanently), convicted for related party offences under Section 188 in the last five years, or who have not obtained a DIN.

6. Practical Audit Pitfalls and Best Practices

• Subscription money must actually arrive. INC-20A attachments are tested against bank statements. Cash deposits or payments routed through a director's personal account are frequent reasons for queries, and they create Section 68 risk under income tax law.
• Check registered office documents for consistency. The owner name on the utility bill, the NOC and the rent agreement must match, and the address must be the same everywhere, including the GST registration.
• Keep the statutory registers from day one: register of members (MGT-1), register of directors and KMP and their shareholding, register of contracts (MBP-4), register of charges (CHG-7), and the minutes books. Auditors and ROC inspectors ask for these before anything else.
• Calendar the 182-day resident director test and maintain travel records, especially where the promoters are non-residents.
• Diarise DIR-3 KYC for every director in July. A single deactivated DIN can stop a filing at the AOC-4 or MGT-7 stage in October and November.
• Update personal mobile numbers and emails carefully. The same mobile number or email cannot be used for two DIN holders; this check is built into the KYC form.
• Remember the first financial year rule. A company incorporated on or after 1 January may choose a first financial year ending on 31 March of the next year, which can be up to 15 months long.
• Record everything in minutes. The MBP-1 and DIR-8 noting, the auditor's appointment and the INC-20A approval should all appear in signed Board minutes.
• Post-incorporation registrations: complete Shops and Establishments registration, Professional Tax enrolment, GST (if threshold or compulsory), Udyam registration and Import Export Code as relevant within the first month, and record them in a compliance tracker.

7. Statutory References and Official Sources