OIDAR GST Compliance India 2026: Who Must Register, GSTR-5A Filing, and Penalties

OIDAR GST Compliance India 2026

The OIDAR (Online Information and Database Access or Retrieval) framework in India is how the government collects GST on digital services bought by Indians from foreign suppliers. It applies to two very different audiences:

• Foreign suppliers of digital services (streaming platforms, SaaS, cloud, online courses, advertising platforms, app marketplaces) selling to Indian individuals.
• Indian businesses receiving those same services from foreign suppliers, where the buyer pays GST under the reverse charge mechanism instead.

The framework has existed since 2016 and was substantially revised under the Finance Act 2023 (which removed the "essentially automated" loophole many providers used to escape registration). Under GST 2.0, effective April 1, 2026, the operating procedure has been further aligned with the regular GST framework: refunds are routed through the same Aadhaar-mandate process, the same hard ITC validation rules apply, and demand notices follow the standard Section 73 / 74 timelines.

This guide covers what OIDAR means in 2026, who must register, how GSTR-5A works, and how the reverse charge applies to Indian companies importing digital services.

What Counts as an OIDAR Service

Section 2(17) of the IGST Act defines OIDAR as services "whose delivery is mediated by information technology over the internet or an electronic network and the nature of which renders their supply essentially automated and involving minimal human intervention".

Common examples that fall squarely inside OIDAR:

• SaaS subscriptions (Microsoft 365, Google Workspace, Adobe Creative Cloud, Notion, Slack, Zoom, Atlassian Jira / Confluence, Salesforce, HubSpot)
• Cloud computing and storage (AWS, Microsoft Azure, Google Cloud Platform, Dropbox, iCloud)
• Streaming and content (Netflix, Spotify, YouTube Premium, Apple Music, Audible, Kindle e-books, Coursera, Udemy)
• Online advertising (Google Ads, Meta Ads, LinkedIn Ads, X/Twitter Ads)
• App and digital goods marketplaces (Apple App Store, Google Play purchases, Steam, in-app purchases)
• Domain and hosting (GoDaddy, Namecheap, Cloudflare, DigitalOcean)
• Online databases and information services (Bloomberg Terminal, Reuters, Statista, Crunchbase Pro, Ahrefs, SEMrush)

Services that look digital but are not OIDAR because they have substantial human input:

• A custom software development engagement billed by the hour
• Online tutoring with a live human teacher (live one-on-one classes)
• A consulting or legal opinion delivered over email
• A bespoke design or video produced by a human team

These non-OIDAR services are still cross-border services subject to the regular import-of-services framework under Section 13 of the IGST Act, not the OIDAR rules.

For the place-of-supply principle that decides where the service is taxed, see the GST place of supply rules guide. For the reverse charge mechanism that operates on the importer side, see the RCM under GST guide.

Two Tracks: B2C (Provider Registers) vs B2B (Indian Importer Pays RCM)

OIDAR splits into two operating tracks based on the recipient:

B2C: Foreign Provider Must Register and Collect GST

If the recipient is an unregistered Indian individual (B2C), the foreign supplier must:

1. Register under GST in India through the simplified registration window for non-resident OIDAR suppliers (a single all-India GSTIN, no need to register state by state).
2. Charge 18% IGST on every invoice issued to the Indian consumer.
3. File GSTR-5A every month, listing all B2C supplies made to Indian recipients.
4. Pay the IGST collected to the Government of India.

The simplified registration is granted to the foreign entity itself; no Indian permanent establishment, place of business, or director is required.

B2B: Indian Recipient Pays GST under Reverse Charge

If the recipient is a GST-registered Indian business (B2B), the foreign provider does not collect GST. Instead the Indian buyer:

1. Pays the foreign provider's invoice in full (without Indian GST).
2. Self-assesses 18% IGST under reverse charge under Section 5(3) and 5(4) of the IGST Act.
3. Pays this IGST to the government via cash ledger when filing GSTR-3B.
4. Claims the same IGST as Input Tax Credit in the same GSTR-3B (subject to ITC eligibility rules).

For the recipient, the cash-flow effect is neutral because the IGST paid is immediately claimed back as ITC. The administrative obligation, however, is mandatory: the IGST must be self-assessed and reported in GSTR-3B Table 3.1(d) (inward supplies liable to reverse charge) and ITC claimed in Table 4(A)(3).

Who Must Register for OIDAR in India

Foreign digital service suppliers must register if:

• They make any B2C supply (to an unregistered Indian individual) of OIDAR services where the recipient is in India.
• There is no minimum threshold. Even one Rs 100 sale to an Indian consumer requires registration.

Indian businesses do not register for OIDAR. They register under the regular GST framework and pay reverse-charge IGST on imports of services.

A foreign supplier who sells only to Indian businesses (and not to consumers) is not required to register under the OIDAR framework. The Indian business handles the IGST through reverse charge, and the foreign supplier remains outside Indian GST. This works only if the foreign supplier can confirm the recipient's GSTIN at the time of supply. Many large platforms (Google Ads, Meta Ads, Adobe) ask for GSTIN at sign-up specifically to operate this way and avoid OIDAR registration.

How a Recipient Is Identified as "Located in India"

The IGST Act uses a multi-factor test to identify an Indian recipient. Two of the following indicators are sufficient to treat the recipient as located in India:

• The address on record is in India.
• The credit or debit card used for payment was issued by a bank in India.
• The billing address is in India.
• The IP address of the device used at the time of the transaction is in India.
• The bank account used for payment is in India.
• The country code of the SIM card on the device is +91.
• The fixed land-line through which the service is received is in India.

The provider must store this evidence and produce it on demand. Most large platforms automate this by capturing IP, billing address, and payment-method country at checkout.

GSTR-5A: The OIDAR Monthly Return

Non-resident OIDAR registrants file GSTR-5A every month.

The return reports B2C supplies made to Indian recipients during the month, the IGST charged, and the tax payable. Because the supplier serves only B2C customers, there is no ITC claim and no GSTR-2B reconciliation. The return is therefore short and operationally simple.

For a comparison with the regular GSTR-3B return that Indian businesses file, see the GSTR-3B filing guide.

Penalties for Non-Compliance

The Indian government has been actively enforcing OIDAR compliance against large foreign platforms since 2018. Multiple high-profile demand cases against streaming and SaaS providers have established that registration is non-negotiable for B2C supplies, and that the "essentially automated" defence (commonly used before 2023) is no longer accepted after the Finance Act 2023 amendment.

What Changed Under GST 2.0 (April 2026)

GST 2.0 did not rewrite the OIDAR framework but tightened the operational rules around it:

1. Aadhaar authentication for refunds: Non-resident OIDAR registrants seeking a refund must now have an Indian authorised representative complete Aadhaar authentication, the same as a regular registrant. See the GST 2.0 April 2026 guide for the broader change.
2. Hard validation on invoice data: The OIDAR portal cross-checks the volume of B2C supplies declared in GSTR-5A against payment data exchanges with major payment gateways and card networks. Material mismatches now trigger automated demand notices.
3. Aligned demand timelines: Section 73 (non-fraud) and Section 74 (fraud) timelines, which apply to regular registrants, now apply to OIDAR demands too. The earlier separate timeline framework has been collapsed into the standard one.
4. Updated e-invoicing exemption: OIDAR continues to be exempt from the e-invoice mandate because the underlying invoice is issued from outside India to an Indian consumer. This was clarified after some confusion in 2025.

Practical Steps for Indian Businesses Importing Digital Services

Most Indian SMEs and startups are on the B2B side of OIDAR. The compliance steps are:

1. Confirm your GSTIN is on file with every foreign vendor. Google Ads, Meta Ads, Adobe, AWS, Microsoft, Atlassian, and similar vendors keep a "tax registration number" field in your billing settings. If GSTIN is missing, the vendor will treat you as B2C and may add 18% IGST to your invoice (which you cannot recover as ITC because the vendor is not Indian-registered for that supply).
2. Self-assess 18% IGST under reverse charge for every foreign service invoice received in the month. The reverse-charge tax is on the rupee equivalent of the foreign currency at the date of payment.
3. Pay the IGST in cash (not from electronic credit ledger) while filing GSTR-3B. Section 49(4) prohibits ITC use for reverse-charge cash payment.
4. Claim the same IGST as ITC in GSTR-3B Table 4(A)(3) in the same period, subject to:
   • The service is used for business purposes (Section 16).
   • You hold a valid foreign invoice with the vendor's name, the recipient's name (your business), the amount, and the description.
   • The ITC is not blocked under Section 17(5) (e.g. it is not a personal-use service).
5. Reconcile annually in GSTR-9 under Table 4(G) (inward supplies liable to RCM) and Table 6(C) (ITC on RCM).

For a deeper view of ITC eligibility and the most commonly missed credits on SaaS and digital marketing spend, see the GST ITC for startups guide.

Tax Garden's compliance subscriptions include monthly RCM identification on imported services, the IGST cash payment, and ITC claim. For non-resident OIDAR providers, we offer a stand-alone GSTR-5A filing service with simplified registration support.

Frequently Asked Questions

What is OIDAR under GST?

OIDAR stands for Online Information and Database Access or Retrieval services. Section 2(17) of the IGST Act defines it as services whose delivery is mediated by information technology over the internet or an electronic network and the nature of which renders their supply essentially automated with minimal human intervention. Common examples include SaaS subscriptions, cloud storage, streaming, online advertising, and digital marketplace purchases.

Who must register for OIDAR in India?

A non-resident foreign supplier of OIDAR services must register if they make any B2C supply (to an unregistered Indian individual) where the recipient is in India. There is no minimum threshold. Even a single Rs 100 sale to an Indian consumer triggers the registration obligation. Indian businesses do not register for OIDAR; they pay reverse-charge IGST on imports of digital services under the regular GST framework.

What is GSTR-5A?

GSTR-5A is the monthly GST return filed by non-resident OIDAR registrants. It reports B2C supplies made to Indian recipients during the month, the IGST charged at 18%, and the tax payable. The due date is the 20th of the following month. There is no annual OIDAR return; GSTR-5A is the only filing.

Do I need to pay GST on Google Ads, Microsoft 365, AWS, or other foreign SaaS?

Yes. As a GST-registered Indian business you self-assess 18% IGST under reverse charge on every foreign SaaS or advertising invoice. Pay this IGST in cash through GSTR-3B Table 3.1(d) and claim it back as Input Tax Credit in Table 4(A)(3) the same month. The cash-flow impact is neutral, but the reporting is mandatory. Always confirm your GSTIN is on file with the vendor so they do not add Indian GST themselves.

How is an Indian recipient identified by a foreign OIDAR provider?

The IGST Act uses a multi-factor test. The recipient is treated as located in India if any two of the following indicators apply: address on record in India, payment card issued by an Indian bank, billing address in India, IP address in India at the time of transaction, payment bank account in India, +91 country code on the SIM card, or a fixed Indian land-line. Most platforms capture this evidence automatically at checkout.

What is the penalty for not registering for OIDAR when required?

Section 122 of the CGST Act applies through the IGST framework. The penalty is the higher of Rs 10,000 or 10% of the tax due. Wilful evasion attracts up to 100% of the tax plus prosecution under Section 132. The Indian tax authority has actively pursued large foreign platforms since 2018, and the 'essentially automated' loophole used before the Finance Act 2023 amendment is no longer accepted.

What changed for OIDAR under GST 2.0 from April 2026?

GST 2.0 did not rewrite OIDAR but tightened operational rules. Aadhaar authentication is now required for refunds via an Indian authorised representative; the OIDAR portal cross-checks declared B2C volume against payment-gateway data; and demand timelines under Section 73 and 74 now apply to OIDAR cases the same as regular registrants. OIDAR remains exempt from the e-invoice mandate because the invoice is issued from outside India.

Sources

This guide is verified against the IGST Act Sections 2(17), 5, 13, and 14, CBIC Circular 159/15/2021-GST on OIDAR scope, the Finance Act 2023 amendment that removed the "essentially automated" exception, and the GSTR-5A return format notified under Rule 64 of the CGST Rules. GST 2.0 changes are based on CBIC notifications effective April 1, 2026 covering the Aadhaar mandate, hard ITC validation, and aligned demand timelines. Cross-checked against ClearTax, IndiaFilings, and India Briefing's OIDAR coverage as of May 2026. For non-resident OIDAR providers, always confirm registration steps and GSTR-5A filing requirements directly on the GST portal at gst.gov.in.