DIR-3 KYC New 3-Year Rule 2026: What Every Indian Startup Director Must Know
The Ministry of Corporate Affairs has overhauled director KYC compliance. Annual filing is gone — but missing your 3-year window will cost you dearly.
If you are a director of an Indian company — whether a founder, co-founder, nominee director, or independent director — the rules around your Director Identification Number (DIN) KYC have just changed significantly. The MCA’s notification effective March 31, 2026 replaces the annual DIR-3 KYC requirement with a 3-year filing cycle. Sounds like good news? It is — but only if you understand the new rules completely. Miss the new deadline and your DIN gets deactivated, locking you out of all MCA filings until you pay a ₹5,000 penalty and complete the process.
The Big Change: DIR-3 KYC Goes From Annual to Once Every 3 Years
Until March 30, 2026, every director had to file DIR-3 KYC by September 30 every year. From April 1, 2026 onwards, this obligation applies only once in three years. The MCA introduced this change under Rule 12A of the Companies (Appointment and Qualification of Directors) Rules, 2014 via notification dated March 31, 2026. The first cycle under the new rule runs for all directors who had an active DIN as of March 31, 2026.
Effective April 1, 2026 — Rule 12A Amended
🔍 What is DIR-3 KYC and Why Does it Exist?
Every person who holds a Director Identification Number (DIN) — essentially the ID number required to be a director of any Indian company — must periodically verify their identity and contact details with the Ministry of Corporate Affairs. This process is called the DIR-3 KYC filing.
The rationale is simple: the MCA maintains a national database of directors. Without regular verification, this database gets cluttered with outdated mobile numbers, emails, and addresses — making enforcement, notices, and compliance tracking impossible. The KYC process ensures your DIN remains linked to a verified, reachable person.
There are two ways to file DIR-3 KYC: via the web-based DIR-3 KYC Web form (for directors with no changes in details) or via the e-form DIR-3 KYC (for first-time KYC or where details have changed). Both require a valid mobile number and email, which are verified via OTP. DSC (Digital Signature Certificate) of the director is also mandatory for e-form filing.
📅 Old Rule vs. New Rule — Side by Side
| Parameter | Old Rule (Until March 30, 2026) | New Rule (From April 1, 2026) |
|---|---|---|
| Filing Frequency | Every year | Once every 3 years |
| Annual Deadline | September 30 each year | September 30 of the KYC year |
| First KYC Cycle Start | Applicable from FY of DIN allotment | From the financial year of last KYC filed |
| Penalty for Non-Filing | ₹5,000 (DIN deactivated) | ₹5,000 (DIN deactivated) |
| DIN Status on Non-Filing | Deactivated (“Deactivated due to non-filing of DIR-3 KYC”) | Same — DIN marked deactivated |
| Impact on Company Filings | All MCA filings blocked until KYC reinstated | Same — all MCA filings blocked |
| Web vs. e-Form | Web if no change; e-form if changes | Web if no change; e-form if changes (same) |
📆 Who Needs to File DIR-3 KYC in 2026 — and When?
The new 3-year rule raises an important question: how do you know if this is your KYC year? Here’s the framework:
Your next filing is due in FY 2027-28 (by September 30, 2027). You do NOT need to file in 2026. However, if your details (mobile, email, address) have changed, you should still file voluntarily to keep your records current.
Your next mandatory filing falls in FY 2026-27 (by September 30, 2026). This means you need to file by September 30, 2026 under the new 3-year rule. Mark this date.
You must file DIR-3 KYC immediately via e-form (not web), pay the ₹5,000 penalty, and request DIN reactivation. All MCA filings for your company are blocked until this is resolved — including annual returns, AOC-4, and board resolutions.
You must file DIR-3 KYC by September 30, 2026 — this is your first KYC, and it starts your 3-year cycle. Subsequent filings will be due by September 30, 2029.
Even if it is not your KYC year, you should file DIR-3 KYC via the e-form to update your details. Stale contact details in the MCA system can cause missed notices and compliance gaps that hurt you during investor due diligence.
⚠️ What Happens if You Miss the DIR-3 KYC Deadline?
This is where many founders get caught off-guard. The MCA’s system is automatic — on October 1 (the day after the September 30 deadline), MCA’s backend processes run and deactivate every DIN where KYC is due but not filed. Here’s the chain reaction that follows:
Imagine you are raising a Series A round and your investor’s legal team is doing due diligence. They pull up the MCA database and find that your DIN status shows “Deactivated due to non-filing of DIR-3 KYC.” Here’s what they see — and what it costs you:
- Your company cannot file any form with the ROC until your DIN is reactivated
- Pending forms (annual returns, board resolutions, share allotments) go unfiledm creating a compliance gap
- The due diligence report flags this as a red flag — deal timelines slip by weeks
- You pay ₹5,000 in late fees plus your CS’s professional fees for rectification
- In extreme cases, the ROC can initiate disqualification proceedings against directors with repeated non-compliance
The Reactivation Process After DIN Deactivation
If your DIN is already deactivated, here’s how to fix it. First, file the DIR-3 KYC e-form (not the web form — you must use the full e-form for reactivation). Attach your PAN, Aadhaar, current photo, and get the form certified by a practicing CA or CS. Pay the ₹5,000 late fee on the MCA portal. Once processed (typically 1-3 working days), your DIN status reverts to “Approved” and you can resume all MCA filings.
📋 Step-by-Step: How to File DIR-3 KYC in 2026
Go to mca.gov.in and log in with your registered credentials. Navigate to MCA Services → e-Filing → Company Forms → Director KYC (DIR-3 KYC or DIR-3 KYC Web).
If your DIN is active, no changes in details, and it’s your KYC year — use DIR-3 KYC Web (simpler, no DSC needed). If your details have changed, DIN is deactivated, or it’s your first KYC — use the full e-form DIR-3 KYC (requires DSC).
The MCA system will send OTPs to your registered mobile and email. Both must be verified. Use the mobile and email that you want permanently linked to your DIN — these will be used for all future MCA notices.
Self-attested PAN card, Aadhaar card, recent photograph (passport size), and proof of current address (if changed). The form must be certified by a practicing Chartered Accountant or Company Secretary.
Within the deadline: no fee for DIR-3 KYC Web. After the deadline: ₹5,000 penalty applicable regardless of how many days late. Pay via the MCA payment gateway (net banking, card, NEFT).
After submission, check your DIN status on the MCA portal under “Find DIN” or “Director Details” to confirm it reads “Approved.” Keep the SRN (Service Request Number) for your records.
🏢 Why This Matters More for Startups Than Established Companies
Startup founders often wear multiple hats — you are the CEO, CFO, and director simultaneously. Unlike large corporates with dedicated compliance teams, startups frequently miss compliance deadlines simply because no one is tracking them systematically. Here’s why the DIR-3 KYC rule change matters specifically for early-stage founders:
Investor Due Diligence: Every Series A, B, and later-stage investor runs an MCA check. A deactivated DIN is a hard red flag that can delay or kill deals. Investors interpret it as a signal of poor governance.
Multiple Directorships: Many founders are directors in multiple entities — holding companies, subsidiaries, SPVs. A single deactivated DIN blocks filings across ALL companies where you are a director.
CCFS 2026 Interaction: The MCA’s Companies Compliance Facilitation Scheme (CCFS 2026) runs until July 15, 2026. If your DIN is deactivated, you cannot even use this amnesty window to file pending annual returns — making DIR-3 KYC the most urgent filing to resolve first.
Bank Account & Regulatory Linkages: Many banks and regulatory bodies (SEBI, RBI) cross-reference DIN for KYC of company officials. A deactivated DIN can trigger additional scrutiny during banking reviews or regulatory inspections.
Nominee Directors: Investor-nominee directors (common after Series A onwards) also have DINs. If your investor’s nominee director misses their KYC, your company’s filings get blocked too — even if your own DIN is active.
✅ DIR-3 KYC Compliance Checklist for Startup Founders — 2026
- Identify all DIN holders in your company — including co-founders, nominee directors, and independent directors
- Check the current DIN status of each director on mca.gov.in (“Find DIN” section)
- Determine each director’s last KYC year and calculate their next mandatory filing year under the 3-year rule
- If any DIN is deactivated, file DIR-3 KYC e-form immediately and pay the ₹5,000 penalty
- If any director’s mobile, email, or address has changed, file DIR-3 KYC e-form to update details (even outside the KYC year)
- Directors due for KYC in FY 2026-27 must file by September 30, 2026 — set calendar reminders now
- Ensure your company’s DSC (Digital Signature Certificate) is valid — expired DSC prevents e-form submission
- Keep all KYC acknowledgement SRNs and receipts organised for due diligence readiness
- Ask your Company Secretary to set up a compliance calendar tracking all directors’ KYC years
Even though the new rule says once every 3 years, we recommend every startup director updates their DIR-3 KYC web form whenever their contact details change — even mid-cycle. An outdated mobile number means you cannot receive OTPs for MCA filings, which can block urgent filings like PAS-3 (share allotment) or MGT-14 (board resolutions) at the worst possible moment — such as right after closing a funding round.
If your company has pending ROC filings AND your DIN is deactivated, you are in double trouble. The MCA’s CCFS 2026 amnesty scheme (90% penalty waiver on late fees) runs only until July 15, 2026. Reactivate your DIN first, then use CCFS 2026 to clear all pending filings at 10% of the normal late fees. After July 15, full penalties resume.
❓ Frequently Asked Questions — DIR-3 KYC 2026
Never Miss a Director KYC Deadline Again
Our Company Secretary team tracks DIR-3 KYC cycles for all your directors, sends timely reminders, and files on your behalf — so your DIN stays active and your company’s MCA filings stay unblocked, always.
