DIR-3 KYC New 3-Year Rule 2026: What Every Indian Startup Director Must Know
The Ministry of Corporate Affairs has overhauled director KYC compliance. Annual filing is gone — but missing your 3-year window will cost you dearly.
The Big Change: DIR-3 KYC Goes From Annual to Once Every 3 Years
Until March 30, 2026, every director had to file DIR-3 KYC by September 30 every year. From April 1, 2026 onwards, this obligation applies only once in three years. The MCA introduced this change under Rule 12A of the Companies (Appointment and Qualification of Directors) Rules, 2014 via notification dated March 31, 2026. The first cycle under the new rule runs for all directors who had an active DIN as of March 31, 2026.
Effective April 1, 2026 — Rule 12A Amended🔍 What is DIR-3 KYC and Why Does it Exist?
Every person who holds a Director Identification Number (DIN) — essentially the ID number required to be a director of any Indian company — must periodically verify their identity and contact details with the Ministry of Corporate Affairs. This process is called the DIR-3 KYC filing.
The rationale is simple: the MCA maintains a national database of directors. Without regular verification, this database gets cluttered with outdated mobile numbers, emails, and addresses — making enforcement, notices, and compliance tracking impossible. The KYC process ensures your DIN remains linked to a verified, reachable person.
There are two ways to file DIR-3 KYC: via the web-based DIR-3 KYC Web form (for directors with no changes in details) or via the e-form DIR-3 KYC (for first-time KYC or where details have changed). Both require a valid mobile number and email, which are verified via OTP. DSC (Digital Signature Certificate) of the director is also mandatory for e-form filing.
📅 Old Rule vs. New Rule — Side by Side
| Parameter | Old Rule (Until March 30, 2026) | New Rule (From April 1, 2026) |
|---|---|---|
| Filing Frequency | Every year | Once every 3 years |
| Annual Deadline | September 30 each year | September 30 of the KYC year |
| First KYC Cycle Start | Applicable from FY of DIN allotment | From the financial year of last KYC filed |
| Penalty for Non-Filing | ₹5,000 (DIN deactivated) | ₹5,000 (DIN deactivated) |
| DIN Status on Non-Filing | Deactivated (“Deactivated due to non-filing of DIR-3 KYC”) | Same — DIN marked deactivated |
| Impact on Company Filings | All MCA filings blocked until KYC reinstated | Same — all MCA filings blocked |
| Web vs. e-Form | Web if no change; e-form if changes | Web if no change; e-form if changes (same) |
📆 Who Needs to File DIR-3 KYC in 2026 — and When?
The new 3-year rule raises an important question: how do you know if this is your KYC year? Here’s the framework:
Your next filing is due in FY 2027-28 (by September 30, 2027). You do NOT need to file in 2026. However, if your details (mobile, email, address) have changed, you should still file voluntarily to keep your records current.
Your next mandatory filing falls in FY 2026-27 (by September 30, 2026). This means you need to file by September 30, 2026 under the new 3-year rule. Mark this date.
You must file DIR-3 KYC immediately via e-form (not web), pay the ₹5,000 penalty, and request DIN reactivation. All MCA filings for your company are blocked until this is resolved — including annual returns, AOC-4, and board resolutions.
You must file DIR-3 KYC by September 30, 2026 — this is your first KYC, and it starts your 3-year cycle. Subsequent filings will be due by September 30, 2029.
Even if it is not your KYC year, you should file DIR-3 KYC via the e-form to update your details. Stale contact details in the MCA system can cause missed notices and compliance gaps that hurt you during investor due diligence.
⚠️ What Happens if You Miss the DIR-3 KYC Deadline?
This is where many founders get caught off-guard. The MCA’s system is automatic — on October 1 (the day after the September 30 deadline), MCA’s backend processes run and deactivate every DIN where KYC is due but not filed. Here’s the chain reaction that follows:
The Reactivation Process After DIN Deactivation
If your DIN is already deactivated, here’s how to fix it. First, file the DIR-3 KYC e-form (not the web form — you must use the full e-form for reactivation). Attach your PAN, Aadhaar, current photo, and get the form certified by a practicing CA or CS. Pay the ₹5,000 late fee on the MCA portal. Once processed (typically 1-3 working days), your DIN status reverts to “Approved” and you can resume all MCA filings.
📋 Step-by-Step: How to File DIR-3 KYC in 2026
Go to mca.gov.in and log in with your registered credentials. Navigate to MCA Services → e-Filing → Company Forms → Director KYC (DIR-3 KYC or DIR-3 KYC Web).
If your DIN is active, no changes in details, and it’s your KYC year — use DIR-3 KYC Web (simpler, no DSC needed). If your details have changed, DIN is deactivated, or it’s your first KYC — use the full e-form DIR-3 KYC (requires DSC).
The MCA system will send OTPs to your registered mobile and email. Both must be verified. Use the mobile and email that you want permanently linked to your DIN — these will be used for all future MCA notices.
Self-attested PAN card, Aadhaar card, recent photograph (passport size), and proof of current address (if changed). The form must be certified by a practicing Chartered Accountant or Company Secretary.
Within the deadline: no fee for DIR-3 KYC Web. After the deadline: ₹5,000 penalty applicable regardless of how many days late. Pay via the MCA payment gateway (net banking, card, NEFT).
After submission, check your DIN status on the MCA portal under “Find DIN” or “Director Details” to confirm it reads “Approved.” Keep the SRN (Service Request Number) for your records.
🏢 Why This Matters More for Startups Than Established Companies
Startup founders often wear multiple hats — you are the CEO, CFO, and director simultaneously. Unlike large corporates with dedicated compliance teams, startups frequently miss compliance deadlines simply because no one is tracking them systematically. Here’s why the DIR-3 KYC rule change matters specifically for early-stage founders:
✅ DIR-3 KYC Compliance Checklist for Startup Founders — 2026
- Identify all DIN holders in your company — including co-founders, nominee directors, and independent directors
- Check the current DIN status of each director on mca.gov.in (“Find DIN” section)
- Determine each director’s last KYC year and calculate their next mandatory filing year under the 3-year rule
- If any DIN is deactivated, file DIR-3 KYC e-form immediately and pay the ₹5,000 penalty
- If any director’s mobile, email, or address has changed, file DIR-3 KYC e-form to update details (even outside the KYC year)
- Directors due for KYC in FY 2026-27 must file by September 30, 2026 — set calendar reminders now
- Ensure your company’s DSC (Digital Signature Certificate) is valid — expired DSC prevents e-form submission
- Keep all KYC acknowledgement SRNs and receipts organised for due diligence readiness
- Ask your Company Secretary to set up a compliance calendar tracking all directors’ KYC years
❓ Frequently Asked Questions — DIR-3 KYC 2026
Need expert support?
BSA supports founders across India with ROC, FEMA, due diligence, fundraising readiness, and company secretarial execution.
