TaxSavvy

CBICFor: Business

2FA made mandatory for ACES-GST logins from June 19th 2026

CBIC will require an OTP on registered mobile and email for every ACES-GST taxpayer login. Central Excise, legacy Service Tax, HSNS CESS and SBS users must keep contact details active.

Summary by TaxSavvy. Read the official notice.

Read the official notice (opens CBIC GST (advisories and what is new) in a new tab)

In short: FPAC

Facts
CBIC is introducing Two-Factor Authentication for taxpayer logins on the ACES-GST application at www.cbic-gst.gov.in, mandatory from June 19th 2026.
Provisions and law
CBIC advisory on Introduction of Two-Factor Authentication (2FA) for ACES-GST portal users, covering ACES CE&ST (Central Excise / Legacy Service Tax / SVLDRS), HSNS CESS and SBS Taxpayer logins.
Analysis
After User ID and Password are validated, a system generated OTP goes to the registered mobile number and e-mail ID, and access is granted only after the OTP is validated.
Conclusion
Update your registered mobile number and e-mail ID in ACES-GST now, else login may fail once 2FA starts.

What to do

  1. InformationCheck the registered mobile number and e-mail ID mapped to your ACES-GST account are current, active and accessible.
  2. DiscussionDecide who in the team will receive the OTPs and handle logins for CE, ST, HSNS CESS or SBS work.
  3. FormsUpdate contact details in the ACES-GST application before June 19th 2026 and refer to the separate 2FA Advisory for ACES-GST Portal Users.
  4. DeliverablesA working ACES-GST login with OTP on SMS or email, tested ahead of the mandatory date.

Steps follow IDFD: Information, Discussion, Forms, Deliverables.

A Savvy can do this for you

Talk to a CA, 15 minutes

₹499 · 15-minute call

See the service
WhatsApp

Official source: CBIC GST (advisories and what is new), “Please Click here for Advisory.”. This summary is general information, not advice for your case. The official notice is the final word.