Is a GST Number Public Information?

Someone hands you an invoice with a GSTIN printed on it, or a vendor sends theirs in an onboarding form, and you want to look it up before you pay. Is that allowed? Does checking a GST number expose something you shouldn't be able to see, or tell the other party you looked? The short version: a GSTIN is one of the more openly published business identifiers in India, and the government built a public search specifically so you don't need permission. What that search shows, and what it deliberately withholds, is worth knowing precisely before you rely on it.

The short answer

Yes. A GST number is public information in the sense that matters practically: you can search any valid GSTIN on the government's own portal without an account, without OTP verification, and without the business's knowledge or consent. This is not a loophole or a data leak — it is the intended purpose of the Search Taxpayer feature, which exists so that anyone transacting with a business can confirm it is genuinely registered before money or goods change hands.

What "public" does not mean is "everything about the taxpayer is visible." The portal draws a clear line between registration and compliance-status data, which is open, and financial data, which is not. The rest of this post walks that line field by field.

What is public on the GST portal

Search a GSTIN on the GST portal's Search Taxpayer tool, or through a verification API that reads the same source, and the response typically includes:

• Legal name and trade name of the business.
• Constitution of business — proprietorship, partnership, private limited, and so on.
• Registration status — active, cancelled, suspended — and the relevant status dates.
• Taxpayer type — regular, composition, casual, or non-resident.
• Principal place of business address, and any additional places registered.
• Centre and state jurisdiction details.
• Nature of core business activity, and for many taxpayers the associated HSN codes.
• Return filing history — which return types were filed, for which periods, and on what date.

That last field is easy to underestimate. Filing history does not show what was filed, but it does show whether a supplier is current on their returns, which is often the single most useful signal for deciding whether input tax credit on their invoices is at risk. See checking a supplier's GST return filing status for how to read that history.

What stays private

The line the portal draws is roughly: registration and compliance facts are public, financial substance is not. Turnover, the actual tax paid or input tax credit claimed in a period, and bank account details never appear in a taxpayer search or a standard verification response, whether you use the government portal or a third-party API built on the same data.

The authorised signatory's mobile number and email address are also withheld, which is deliberate — the portal wants you to be able to confirm a business exists without handing you a direct line to contact them outside their own published channels. If someone offers to "verify" a GSTIN and also hands you a phone number or bank account as part of the same lookup, that data did not come from the public GST record and should be treated with more scepticism, not less.

Why the GSTIN is designed to be shared

This openness is not an oversight. A GSTIN must be printed on every tax invoice a registered business issues, and it must be displayed at the principal place of business. Both requirements only make sense if the number is meant to be looked up by whoever receives an invoice or walks into the premises. A supplier who wanted to keep their GSTIN confidential could not legally operate that way.

Practically, this is what lets an accounts payable team check a new vendor before onboarding, lets a landlord confirm a tenant business is genuinely registered, and lets a buyer confirm the supplier on an invoice is not fabricated. None of that requires the supplier's consent, because the record was published precisely to make those checks possible without it.

You do not need to ask a business for permission to look up its GSTIN, any more than you need permission to read the number off an invoice it already issued you. That said, permission and courtesy are different things — telling a new supplier you verify every vendor before onboarding is normal due diligence, not an accusation.

The privacy angle: proprietor names and the DPDP Act

The one place this gets genuinely nuanced is sole proprietorships. A proprietorship is not a separate legal person, so its "legal name" on the GST record is the proprietor's own name — a natural person's personal data, not a corporate fact. The government publishing that name as part of a registration record is lawful and intentional. What you do with it afterward is a separate question.

If you look up a GSTIN once to confirm a supplier before paying an invoice, you have not created a compliance obligation for yourself. If you store that lookup result — name, address, filing history — in your own vendor database, you are now holding personal data about an identifiable individual, and India's Digital Personal Data Protection Act, 2023 applies to how you retain, secure and eventually delete it. The Act does not stop you from storing it, and it does not make the lookup itself a problem; it means ordinary data-handling hygiene — collecting only what you need, securing it, not keeping it indefinitely — is your responsibility once the record lives in your systems rather than the government's. The mechanics of that are covered in storing GSTIN data and DPDP compliance.

How to check a GSTIN yourself

You have three practical routes, in increasing order of how much of the record you get back and how well it fits into an automated workflow:

• The GST portal's own Search Taxpayer page — free, no login, good for a one-off manual check on a single GSTIN.
• Our free search tool at GST number search — five free lookups a day, no signup, useful when you want a faster interface than the government portal without committing to an account.
• A verification API — the right choice once you are checking more than a handful of GSTINs a day, or need the result inside your own onboarding or invoicing flow rather than read off a web page.

Our GSTIN verification API returns registration details and GSTR filing history in a single call, at ₹0.50 per verification pay-as-you-go, dropping to ₹0.40 once a single credit purchase crosses 2,500 credits, with no subscription and no minimum spend. Purchased credits do not expire. You get 20 free credits on email verification (valid for 30 days) to test it against real GSTINs before deciding whether it fits your workflow. It is a verification tool only — it confirms registration and filing status, and it does not file returns, generate e-invoices, or reconcile your books.

If you're trying to find a GSTIN when you only have a business name, or the reverse — every GSTIN registered against a given PAN — those are different lookups from a single-GSTIN check; see searching a GST number by business name and searching a GST number by PAN. And if you want to confirm a number without an OTP step interrupting the check, that's covered in checking a GST number without OTP.

Frequently asked questions