Explainer 7 min read

What Is EVC in GST? EVC vs DSC for Returns and Registration

EVC is an OTP sent to the authorised signatory to sign GST filings; DSC is a digital signature on a token. Who must use DSC, how to register it with emSigner, and fixes for common EVC and DSC errors.

Written and reviewed by the GSTIN API team Last reviewed

Every GST return, registration application and amendment has to be signed before the portal accepts it. There are two ways to sign: EVC, a code sent to the authorised signatory's phone and email, and DSC, a digital signature certificate on a USB token. This guide explains what EVC is in GST, how it compares with DSC, who has no choice but to use DSC, how to register a DSC on the portal, and how to fix the errors that stop either one working on the last day of filing.

What is EVC in GST?

EVC stands for Electronic Verification Code. When you submit a return or form and choose to file with EVC, the GST portal sends a one-time password to the mobile number and email address recorded for the authorised signatory you select. Entering that code verifies that the signatory approved the filing, and the law treats it as a valid way of signing.

It needs no hardware, no software and no renewal. It works from any browser, including a phone. Its only dependency is that the authorised signatory's contact details on the registration are current, because the code goes there and nowhere else.

What is DSC?

A Digital Signature Certificate is an electronic credential issued by a licensed certifying authority, linked to a person's PAN, and stored on a USB token protected by a PIN. For GST you need a Class 3 certificate; Class 2 certificates are no longer issued. Certificates are valid for one to three years and must be renewed.

The GST portal talks to the token through emSigner, a small utility you install on the computer you file from. When you sign, the portal asks emSigner to sign the data with the certificate on the token, and you enter the token PIN.

EVC vs DSC at a glance

EVCDSC
What it isOTP to registered mobile and emailClass 3 certificate on a USB token
Who can use itAll taxpayers except companies and LLPsEveryone; mandatory for companies and LLPs
CostFreePaid, renewed every one to three years
SetupNone beyond correct contact detailsInstall emSigner, register the DSC on the portal
Works onAny device and browserA computer with the token and emSigner
Usual failureOTP to an old number or delayedemSigner not running, expired or unregistered certificate
How EVC and DSC compare for GST filing.

For new registrations there is also Aadhaar-based e-sign, where the OTP comes from the mobile linked to Aadhaar. It applies to the registration application and is separate from the EVC used for returns. See Aadhaar authentication for GST registration.

Who must use DSC

Companies, including foreign companies, and limited liability partnerships must sign GST returns, registration applications and amendments with a DSC. The portal will not offer them EVC for these forms. The certificate must belong to an authorised signatory added on the registration, typically a director or designated partner.

Everyone else, including proprietors, partnership firms, HUFs, trusts and societies, can use EVC or DSC. Most use EVC because it is free and works anywhere. A firm with several people filing from one office sometimes prefers DSC so filing does not depend on one person's phone.

How to register a DSC on the GST portal

Registering is done once per certificate, and again after each renewal.

  1. Install emSigner. Download it from the GST portal's DSC section and install it. On Windows, run it as administrator. It should show as running before you continue.
  2. Install the token driver. Plug in the DSC token; the driver usually installs from the token itself or from the certifying authority's site.
  3. Log in to the GST portal with the taxpayer's username and password.
  4. Go to My Profile → Register / Update DSC.
  5. Select the PAN of the authorised signatory whose certificate is on the token.
  6. Tick the declaration and click Proceed.
  7. Select the certificate from the list emSigner shows, click Sign and enter the token PIN.
  8. A success message confirms the DSC is registered. It can now be used to sign returns.

The authorised signatory must already be on the registration. If they are not, add them first through a non-core amendment, signed by an existing signatory; see GST registration amendment.

Common DSC errors and fixes

Error or symptomUsual causeFix
Failed to establish connection to the server / restart emSigneremSigner not running, or the browser is blocking the local connectionStart emSigner as administrator, open its local address once in the browser and accept the certificate, refresh the portal
No certificate in the listToken not detected or driver missingReinstall the token driver, try another USB port, check the token in its own utility
PAN mismatchThe certificate belongs to someone other than the selected signatory, or has no PAN embeddedSelect the right signatory; get a certificate with PAN from the certifying authority
DSC not registered or expiredNew or renewed certificate not registered on the portalRegister it again under Register / Update DSC
Signing fails at filingWrong token PIN, or token locked after failed attemptsUse the correct PIN; unlock through the certifying authority
Works on one computer, not anotheremSigner or driver not installed on the second machineInstall both on every computer you file from
DSC problems on the GST portal and the usual fix.

If the portal itself is slow or down near a due date, the problem may not be your DSC at all; see GST portal not working.

When EVC fails

  • OTP not received. Check the mobile and email registered for the signatory you selected, not your own. Wait a few minutes before resending; repeated requests can delay it further.
  • OTP goes to an old number. Update the authorised signatory's mobile and email through a non-core amendment. Until that is approved, another signatory with current details can file.
  • Invalid OTP. The code expires quickly and only the latest one is valid. Use the most recent code without refreshing the page.
  • EVC option missing. The taxpayer is a company or LLP, so only DSC is offered.

Once the return is signed, the filing is final, so check the figures before you sign. The GSTR-3B filing guide walks through each table, and how to file a GST return online covers the full flow from login to acknowledgement.

Your returns also depend on suppliers being properly registered. Before booking a purchase, the gstinapi.com GSTIN verification API confirms a supplier's GSTIN is active and returns its legal name, so the credit you claim in the return you are about to sign holds up.

Frequently asked questions

EVC stands for Electronic Verification Code. It is a one-time password the GST portal sends to the registered mobile number and email address of the authorised signatory. Entering it signs a return, registration application or other form electronically, in place of a digital signature. It is available to proprietors, partnerships, HUFs and most other taxpayers, but not to companies and LLPs.
Only for companies (including foreign companies) and limited liability partnerships. They must sign GST returns and registration applications with a Class 3 digital signature certificate of the authorised signatory. Other taxpayers can choose between EVC and DSC.
Install the emSigner utility from the portal and keep it running. Plug in the DSC token, log in to the GST portal, go to My Profile and choose Register or Update DSC. Select the PAN of the authorised signatory, tick the declaration, click Proceed, pick the certificate from the list and sign. The PAN in the certificate must match the PAN of that authorised signatory on the registration.
The browser cannot reach the emSigner utility running on your computer. Start emSigner (run it as administrator on Windows), open the local address it shows once in the browser and accept the certificate if asked, then refresh the portal. Antivirus, firewall or proxy software blocking the local connection is the next most common cause.
The OTP goes only to the mobile number and email registered for the authorised signatory, which may not be the one you are checking. Network delays, DND settings and full inboxes also stop it arriving. Wait a few minutes and resend. If the number has changed, update the authorised signatory contact details through a non-core amendment.
Not under the normal rules. Companies and LLPs are expected to sign with DSC. Relaxations have been allowed for limited periods in the past, but you should not plan on one; keep a valid DSC registered and renew it before it expires.

A note on accuracy. GST rules change often. This article reflects our understanding as of 6 October 2026 and is general information, not tax or legal advice. For the authoritative position, check gst.gov.in and cbic-gst.gov.in, or speak to a qualified tax professional about your specific situation.

Check a GSTIN right now, free

Five lookups a day, no account required. Status, filing history, e-invoicing and jurisdiction.

Free GST search tool

Build it into your product

One REST call, JSON back. Get an API key and 20 free verification credits in under a minute.

Start free