India’s income tax system is now almost entirely digital. While e-filing has been available since 2006 and mandatory for most taxpayers since 2013, the Income Tax Act, 2025 and the Draft Income Tax Rules, 2026 formalise and expand the electronic filing mandate to cover virtually every taxpayer category. Rule 164(12) prescribes a clear three-tier framework: who must file electronically, how the return must be verified, and who gets the narrow paper-filing exception.
This guide explains the e-filing mandate under the new rules, the verification modes available to each taxpayer category, the 30-day e-verification requirement, and the practical steps for compliance. For professional help with income tax return filing (https://www.patronaccounting.com/income-tax-return), understanding these requirements ensures your return is not just filed but properly verified.
Key Terms You Should Know
- Rule 164(12): The sub-rule of Rule 164 (Draft Income Tax Rules, 2026) that prescribes the electronic filing and verification framework for all ITR forms. Replaces the scattered e-filing provisions under the old Rules.
- Digital Signature Certificate (DSC): A digital equivalent of a physical signature, issued by a Certifying Authority (CA) licensed by the Controller of Certifying Authorities (CCA), Government of India. Required for companies and available for all taxpayers. Must be valid (not expired or revoked) and registered on the e-filing portal.
- Electronic Verification Code (EVC): A 10-digit alphanumeric code sent to the taxpayer’s registered mobile number and email ID. Generated through the e-filing portal, pre-validated bank account, or pre-validated demat account. Valid for 72 hours from generation.
- Aadhaar OTP: A one-time password sent to the mobile number registered with Aadhaar. Available for taxpayers whose PAN is linked to Aadhaar.
- ITR-V (Verification Form): A physical acknowledgement form that must be signed and sent to CPC Bengaluru within 30 days of filing, if the taxpayer does not use DSC, EVC, or Aadhaar OTP for verification. This is the only mode that involves a physical step.
- Principal DG/DG (Systems): The authority empowered under Rule 164 to prescribe procedures, formats, standards, and security measures for secure electronic transmission, archival, and retrieval of return data.
Who Must File Electronically: The Complete Framework
| Taxpayer Category | Filing Mode | Verification Mode | Paper Filing Allowed? |
|---|---|---|---|
| Companies (all types) | Electronically only | DSC mandatory | No |
| Audit cases (Section 63 / Section 348) | Electronically only | DSC or EVC | No |
| Firms, LLPs, AOPs, BOIs | Electronically | DSC, EVC, Aadhaar OTP, or ITR-V | No |
| Individuals and HUFs (general) | Electronically | DSC, EVC, Aadhaar OTP, or ITR-V | No |
| Individuals claiming DTAA relief (Section 159/160) | Electronically | DSC, EVC, Aadhaar OTP, or ITR-V | No |
| RNPOs / Trusts (ITR-7) | Electronically | DSC, EVC, Aadhaar OTP, or ITR-V | No |
| Super senior citizens (80+ years) filing ITR-1 or ITR-4 | Electronically OR paper | Physical signature (paper) or DSC/EVC/Aadhaar OTP (electronic) | Yes - the only exception |
Key takeaway: The only taxpayers who can file in paper mode are individuals aged 80 years or above filing ITR-1 (Sahaj) or ITR-4 (Sugam). All other taxpayers-including companies, firms, LLPs, trusts, and individuals below 80-must file electronically. For entities structured through company registration (https://www.patronaccounting.com/private-limited-company-registration), DSC is mandatory and non-negotiable.
E-Verification Modes Explained
Filing the return electronically is only the first step. The return must be verified within 30 days of filing to be considered valid. Without verification, the return is treated as not filed. Here are the four verification modes:
1. Digital Signature Certificate (DSC)
The most secure method. The return is signed digitally at the time of filing-no further verification step is needed. Mandatory for companies. Available for all taxpayers. Requires a valid DSC issued by a licensed Certifying Authority (like eMudhra, Sify, or NCode) registered on the e-filing portal. For entities requiring tax audit services (https://www.patronaccounting.com/tax-audit), DSC filing is the most efficient option as it eliminates the post-filing verification step.
2. Electronic Verification Code (EVC)
A 10-digit code sent to the taxpayer’s registered mobile and email. Can be generated through: the e-filing portal directly, a pre-validated and EVC-enabled bank account, a pre-validated and EVC-enabled demat account, or net banking. The EVC is valid for 72 hours from generation. Available for all non-company taxpayers. Companies cannot use EVC-they must use DSC.
3. Aadhaar OTP
A one-time password sent to the mobile number linked to the taxpayer’s Aadhaar. The taxpayer’s PAN must be linked to Aadhaar for this option to be available. This is the most convenient mode for individual taxpayers-instant verification without needing a bank account or DSC. Not available for companies.
4. ITR-V (Physical Verification)
If none of the electronic verification modes are used, the taxpayer must download the ITR-V form from the e-filing portal, print it, sign it, and send it by ordinary post or speed post to CPC Bengaluru within 30 days of filing. This is the only mode involving a physical step and is the fallback option. It is the slowest method and carries the risk of postal delays.
Legal Framework: Old Provisions vs New Provisions
| Aspect | Old Framework (IT Act 1961 / Rules 1962) | New Framework (IT Act 2025 / Rules 2026) |
|---|---|---|
| E-Filing Mandate | Scattered across multiple notifications and rules; mandatory for most but with evolving exceptions | Rule 164(12) - single consolidated provision covering all taxpayer categories with clear verification modes |
| Company Filing | Electronically with DSC (mandatory since 2007) | Same - electronically with DSC mandatory |
| Audit Cases | Electronically with DSC (mandatory under Section 44AB audit cases) | Electronically with DSC or EVC (expanded to include EVC option under Section 63 audit cases) |
| Paper Filing Exception | Super senior citizens (80+) filing ITR-1/ITR-4 | Same - super senior citizens (80+) filing ITR-1/ITR-4 |
| E-Verification Timeline | 30 days from filing (w.e.f. 1 August 2022; previously 120 days) | 30 days (carried forward under the new Act) |
| Physical Attachments | Not required with electronically filed returns | Same - no physical attachments; all documents retained by taxpayer |
| Systems Authority | DG (Systems) prescribed electronic standards | Principal DG/DG (Systems) empowered under Rule 164 to prescribe procedures, formats, and security standards |
The new framework consolidates what was previously scattered across multiple notifications into a single, clear rule. The key expansion is that audit cases (previously DSC-only) now have the option of using EVC as well-a practical convenience for smaller firms and professionals.
How to File Your ITR Electronically: Step-by-Step
- Gather documents. Collect Form 16 (salary), Form 16A (TDS on non-salary), Form 26AS/AIS/TIS, bank statements, investment proofs, and audit reports (if applicable). For entities using trust registration (https://www.patronaccounting.com/trust-registration) and RNPO status, ensure Form 112 (audit report) is filed before the ITR.
- Log in to the e-filing portal. Access https://www.incometax.gov.in using your PAN and password. Ensure your profile, bank accounts, and contact details are updated.
- Select the correct ITR form. Based on Rule 164 eligibility criteria (ITR-1 to ITR-7). Using the wrong form makes the return defective under Rule 166.
- Fill in all details. Complete all required schedules: personal information, income under various heads, deductions, tax computation, tax payments, and verification. Pre-fill data from AIS/TIS is available on the portal. Reconcile before filing.
- Pay any outstanding tax. If tax is payable after TDS/advance tax credits, pay through the e-filing portal and enter the challan details in the ITR before submission.
- Submit the return. Click submit. The portal generates an acknowledgement receipt with a unique number. This confirms the return has been received by the system.
- E-verify within 30 days. Choose your verification mode: DSC (instant, no further action needed), EVC (enter code sent to mobile/email), Aadhaar OTP (enter OTP from Aadhaar-linked mobile), or download and send ITR-V to CPC Bengaluru. If not verified within 30 days, the return is treated as not filed.
Common Mistakes to Avoid
Mistake 1: Not e-verifying within 30 days. This is the single most common compliance failure. Many taxpayers file the return and assume the job is done. Without verification within 30 days, the return is invalid-equivalent to not filing. Consequences include late filing fees, interest, and loss of carry-forward losses. Set a calendar reminder immediately after filing.
Mistake 2: Company filing without DSC. Companies must use DSC-EVC, Aadhaar OTP, and ITR-V are not available for company returns. If the company’s DSC has expired or the signatory has changed, the return cannot be submitted. Renew or register the DSC well before the filing deadline.
Mistake 3: Sending ITR-V after 30 days. If you choose the ITR-V method, the signed form must reach CPC Bengaluru within 30 days. Postal delays can cause it to arrive late, making the return invalid. Use speed post with tracking and file within the first week of the 30-day window. For entities using professional accounting services (https://www.patronaccounting.com/accounting-services), electronic verification (EVC or Aadhaar OTP) is always preferred over ITR-V.
Mistake 4: Filing the audit report after the ITR. Under the new rules, the audit report (Form 26 for Section 63 audits, Form 112 for RNPO audits under Section 348) must be on the portal before the ITR is submitted. Filing the ITR first creates a defective return under Rule 166.
Mistake 5: Aadhaar not linked to PAN. Aadhaar OTP verification requires PAN-Aadhaar linkage. If your PAN is not linked to Aadhaar, this verification mode is unavailable. As PAN becomes inoperative without Aadhaar linkage, this is a broader compliance requirement beyond just e-verification.
Key Takeaways
Rule 164(12) of the Draft Income Tax Rules, 2026 establishes a clear, consolidated electronic filing mandate for all taxpayer categories under the Income Tax Act, 2025. Companies must file with DSC. Audit cases can use DSC or EVC. All other taxpayers have four verification options: DSC, EVC, Aadhaar OTP, or ITR-V. Paper filing is restricted to super senior citizens (80+) filing ITR-1 or ITR-4 only.
The 30-day e-verification window is critical-failure to verify within this period makes the return invalid, with all consequences of non-filing. Electronic verification (DSC, EVC, or Aadhaar OTP) is instant and eliminates postal risk, making it the preferred method for all taxpayers.
No physical attachments are required with electronically filed returns. Audit reports, deduction proofs, and supporting documents must be retained by the taxpayer and produced only during scrutiny or assessment. The Principal DG/DG (Systems) is empowered to prescribe technical standards for secure data transmission, ensuring the integrity of the electronic filing ecosystem.
Need Help with E-Filing Your Income Tax Return?
Whether you need DSC registration, help with Aadhaar-PAN linkage, audit report filing before the ITR, or complete return preparation and e-verification, professional assistance ensures your return is filed correctly and verified within the 30-day window.
Explore our professional accounting services (https://www.patronaccounting.com/accounting-services) for end-to-end e-filing support-including form selection, AIS reconciliation, audit report coordination, tax payment, and e-verification under the new Act.
For queries, reach out at +91 945 945 6700 or WhatsApp us directly.
