DIR-3 KYC: what it is, who must file and how to complete it before the deadline

Every year, a number of directors in Indian companies miss a simple annual filing called DIR-3 KYC. It doesn't feel urgent — it's a short form, there's no complex paperwork, and the deadline (30 September) is months after the financial year ends. But the consequence of missing it is immediate and disruptive: the director's DIN is flagged as "deactivated" by the MCA system, and until the DIN is reactivated, the company cannot file any other ROC form — AOC-4, MGT-7, share allotments, director appointments, or anything else.

This guide explains what DIR-3 KYC is, who must file it, and how to complete it on the MCA portal — so it stays off the list of things that quietly derail your ROC compliance. For a team that tracks this automatically for your directors, our startup compliance service handles it as part of annual ROC support.

What DIR-3 KYC is and why it exists

The Ministry of Corporate Affairs introduced DIR-3 KYC to keep the DIN database current. Before it was introduced, a significant number of DINs were held by people who had ceased to be directors, or whose contact details were outdated. The annual KYC process ensures the MCA knows the current Aadhaar-linked identity, email and mobile number of every DIN holder.

Importantly, this obligation applies to every person holding a DIN, regardless of whether they are currently an active director in any company. If you were once a director, resigned years ago, and still hold a DIN, you must complete KYC every year or your DIN deactivates.

Two routes: web-based KYC vs eKYC

There are two ways to complete DIR-3 KYC:

• DIR-3 KYC (web-based): For directors filing KYC for the first time or updating details. Filled and submitted on the MCA portal with a DSC. Requires entering PAN, Aadhaar, email and mobile, each verified by OTP.
• DIR-3 KYC-WEB (eKYC): For directors who have already completed web-based KYC in a prior year and have no changes to their details. A simpler, quicker process — just verify OTP on the pre-filled form. No DSC required.

Most returning directors who haven't changed their contact details use the KYC-WEB route, which takes under five minutes.

Step-by-step: completing DIR-3 KYC

• Step 1: Log in to the MCA21 portal (mca.gov.in) using the director's credentials.
• Step 2: Navigate to MCA Services → e-Filing → Company Forms → DIR-3 KYC or DIR-3 KYC-WEB.
• Step 3: The form pre-fills with DIN details. Verify your PAN and Aadhaar number.
• Step 4: Enter your current personal email and mobile number. Both receive an OTP for verification.
• Step 5: For web-based KYC, attach a copy of your Aadhaar and sign the form with your DSC. For KYC-WEB, just submit after OTP verification.
• Step 6: Submit. The system confirms KYC completion and updates the DIN status to active.

Deadline and consequences of missing it

The annual deadline is 30 September. For FY 2026–27, this means 30 September 2026.

If a director misses the deadline:

• The MCA deactivates the DIN
• A late fee of ₹5,000 becomes payable to reactivate it
• The company cannot file any ROC form until the DIN is active again — which blocks your AOC-4, MGT-7, and any event-based filings that fall due in the interim

The ₹5,000 is a flat fee, not a percentage-based penalty — so it's the same whether you're a day late or a year late. File on time and it costs nothing.

Frequently asked questions

I resigned as director two years ago. Do I still need to file DIR-3 KYC?

Yes. The obligation attaches to the DIN, not to active directorship. As long as you hold a DIN (even with no current directorships), annual KYC is required.

Can a CA or CS file DIR-3 KYC on behalf of a director?

The form requires OTP verification on the director's personal mobile and email — so the director must personally receive and enter these OTPs. A CA/CS can fill and prepare the form, but the OTP steps require the director's active participation.

What's the difference between a DIN and a DPIN?

A DIN (Director Identification Number) is for directors of companies under the Companies Act. A DPIN (Designated Partner Identification Number) is its equivalent for LLP designated partners. Both require separate KYC processes.