PAN, TAN and DSC: choose what your Indian business needs

PAN: the taxpayer’s identity

The Income Tax Department describes PAN as a ten-digit alphanumeric taxpayer identifier. It is relevant to income-tax filings and prescribed financial transactions. A sole proprietor and a separately incorporated company should not be treated as the same applicant merely because one founder operates both. Confirm the legal taxpayer and the identity records before applying or entering a number on an invoice or portal.

Begin by checking whether a PAN is already allotted. A spelling difference, new address or missing card should lead to a correction or document-recovery review, rather than an automatic request for another number. Keep the official PAN record consistent with the name and identity used for your financial and filing records. Explain any change in business constitution before transferring old details into a new application.

TAN: the deductor or collector’s identity

TAN is used for TDS and TCS compliance. Receiving an invoice from which a customer deducted tax does not, by itself, mean that you must obtain TAN. Your own responsibility to deduct or collect tax needs a separate check. Review the payer’s status, nature of payment, amount, recipient and applicable period before reaching a conclusion.

Some specified transaction routes permit PAN-based reporting instead of obtaining TAN. The exact conditions and current forms matter. Do not generalise a property or rent exception to payroll, vendor payments or every business transaction. If TAN is required, identify the existing allotment and the correct deductor details before preparing payment and statement records. An existing PAN does not replace TAN where TAN is required.

The 2026 form change does not cancel existing numbers

The official transition guidance confirms that existing PAN and TAN numbers remain valid under the Income Tax Act, 2025. Fresh applications filed on or after 1 April 2026 use the forms prescribed under the Income Tax Rules, 2026. This distinction matters when an older checklist still instructs every applicant to use the previous form numbers.

The current PAN page lists Forms 93, 94, 95 and 96 for the relevant individual and non-individual applicant categories, and separate correction forms. Choose the category from the live official instructions. An old application that was pending at the transition is not automatically a reason to submit a duplicate fresh application. Check its acknowledgement and status before deciding what action is required.

For TDS, record both the payment and book-credit dates. The official transition guidance uses the earlier triggering event to identify whether the old or new Act applies. Historical corrections can therefore require older reporting formats even when submitted after April 2026. Keep the transaction period with the records instead of choosing a form only from today’s date.

DSC: the authorised person’s signing tool

A DSC authenticates electronic documents and is issued to end users by licensed Certifying Authorities. It is not a tax account number. Obtain a certificate suitable for the intended portal and signer, and complete the issuer’s identity verification. The Income Tax portal requires registration of the DSC before it can be used through that facility.

Check whether DSC is mandatory for your particular filing and user category or whether another verification method is accepted. The Income Tax Department lists mandatory use for certain categories, including company return verification and persons whose accounts require audit. Avoid assuming that every individual taxpayer needs a token. For a business filing, confirm the authorised signatory or principal contact instead of buying a certificate in an unrelated person’s name.

Prepare consistent documents and access

Make a simple record sheet with the legal name, constitution, PAN, TAN if any, address, email, mobile number and authorised person. Compare it with official records. Keep clear scans of the documents required for the selected application route; different applicants and services may require different evidence. Do not submit a personal document pack as though it automatically proves a company’s constitution or authorisation.

Use contact details the applicant controls and keep the acknowledgement safely. For assisted applications, agree who enters the details, who reviews the draft and who authorises submission. Read the form before approving it, particularly the identity, representative and communication fields. A completed payment is not proof that an application was accepted or that the details were correct.

Protect the certificate and check it before deadlines

Treat the signing key and token PIN as sensitive credentials. Keep them under the subscriber’s control and review what is being signed before authorisation. Ask the issuer about the appropriate revocation process if a token or signing access is compromised. Sending a token and PIN indefinitely to an unknown intermediary is a poor way to manage an important business identity.

Before a filing, check certificate validity, signer details, portal registration and the current signing utility. After renewal or replacement, follow the portal’s re-registration instructions where required. Keep submission receipts and signed copies of the final documents. Test the setup ahead of the due date so technical errors can be addressed without rushing the review of the underlying figures.

PAN, TAN and DSC at a glance

Frequently asked questions