VPP Scam: Protecting Your Startup from Incorporation Fraud

Fraudsters are increasingly targeting newly incorporated companies and MSMEs with sophisticated scams, and the “VPP Scam” is a prime example. This scheme preys on the uncertainty of first-time founders regarding compliance, leading them to part with amounts typically ranging from ₹1,490 to ₹2,500 for services that are either non-existent or already included in their incorporation process.

The Nature of the VPP Scam

The core of the VPP scam revolves around the misuse of the “Value Payable Post” (VPP) system. Scammers monitor the Ministry of Corporate Affairs (MCA) daily filings to identify newly registered entities. They then dispatch a physical parcel to the registered office address.

These communications typically claim that a mandatory payment is required for:

• Physical delivery of the Certificate of Incorporation (which is actually issued digitally).
• Mandatory “Government Business Kit” or compliance manuals.
• Registration of the company’s name in a fictitious “National Registry.”
• Compliance with a non-existent “VPP Post” mandate.

The scammers use official-looking seals and legalistic language to create a sense of authority. Because the amount requested is often relatively low (under ₹2,500), many founders pay it without a second thought, assuming it is a minor administrative fee.

Why Startups Are Vulnerable

First-time founders are often under pressure to get their business operational. This lack of experience makes them susceptible to:

• Fear of Non-Compliance: The threat of penalties can trigger immediate action.
• Trust in Official-Looking Documents: Scammers mimic the branding of the MCA or the Income Tax Department.
• Urgency: Demands for immediate payment at the time of delivery discourage thorough verification.
• The “Small Fee” Trap: Fraudsters keep the demand low enough to avoid high-level scrutiny but high enough to be profitable.

Identifying Red Flags of the VPP Scam

• COD Demands for Certificates: The MCA issues digital certificates. Any demand for cash payment to a postman for your “official certificate” is a scam.
• The Term “VPP Post”: While VPP is a real postal service, it is never used by the MCA for collecting statutory fees.
• Unofficial Payment Channels: Official government fees are paid through the MCA21 portal or BharatKosh using secure digital gateways.
• Vague Service Descriptions: Terms like “Registration Charges for New Companies” on a postal receipt are red flags.
• Mismatched Addresses: Check if the sender’s address is a private residence or a generic “Compliance Cell” rather than an official RoC office.

Founder’s Protection Checklist: What to Do

If a postman arrives with a VPP parcel or you receive a suspicious demand:

1. [ ] Refuse the Parcel: Simply tell the postal carrier to return it to the sender.
2. [ ] Verify on MCA Portal: Log in to mca.gov.in and check your “Company Master Data.” If your status is “Active,” you are compliant.
3. [ ] Consult Your Professional Advisor: Contact your Chartered Accountant (CA) or Company Secretary (CS). They can confirm if any fees are actually pending.
4. [ ] Check Payment History: Review your SPICe+ filing receipts. All legitimate incorporation fees (Stamp duty, MoA/AoA fees) were already paid during the filing process.
5. [ ] Report to Cyber Crime: File a complaint at cybercrime.gov.in to help the authorities track the bank accounts used by these scammers.

Understanding Related Compliance and Tax Concepts

To avoid being misled, founders must stay updated on genuine 2025-2026 compliance requirements.

Company Incorporation and DIN Verification

When managing directors, the Director Identification Number (DIN) is vital.

• Verify PAN in DIN for filing DIR-6: If you need to change director details, use Form DIR-6. The MCA system verifies the PAN against the Income Tax database. Never share your DIN or PAN with third parties claiming to “validate” them for a fee via post.

Tax Audit and Data Security (2025-2026)

• Tax Audit under Income Tax Act: Physical Location & IP Address: Under the latest MCA guidelines (Companies Accounts Rules), companies must maintain backups of their books of account on servers physically located in India. During a Tax Audit for the 2025-26 period, auditors may verify the IP address and location of your financial data. Scammers may try to sell “IP Registration Services,” but this is a standard part of your accounting software setup and internal compliance, not a separate government fee.
• US Taxation 2026: Tax Credit: For Indian startups with US subsidiaries, understanding how tax credits work is essential to avoid double taxation. Ensure you are claiming legitimate credits under the DTAA (Double Taxation Avoidance Agreement) rather than paying “processing fees” to unverified consultants.

GST and Registration Risks

• Invalid Bank Accounts (Rule 10A): Under GST Rule 10A, you must furnish bank account details within 30 days of registration or before filing your first GSTR-1/IFF. Failure to do so can lead to the suspension of your GSTIN. Scammers often send fake “GST Suspension Notices” to trick you into paying a “reactivation fee.” Always check the GST portal (gst.gov.in) directly.
• Registered Brand Name in GST: In the context of GST, a “registered brand name” refers to a name or trade name registered under the Trade Marks Act, 1999. However, even an unregistered brand where actionable rights are not foregone can impact the taxability of certain goods (like pre-packaged food). Ensure your trademark filings are handled by authorized attorneys, not “VPP” service providers.

The India–EU Trade Deal Context

As the “Mother of All Deals” moves toward reality, Indian MSMEs will find it easier to export. However, this also means international compliance standards will become stricter. Staying clear of local scams like the VPP fraud is the first step in maintaining the “clean” corporate record required for global trade.

Final Advice

Legitimate government processes are increasingly digital and transparent. If a demand for money arrives via a physical parcel or an aggressive phone call, it is almost certainly a scam. When in doubt, always refer to the official portals: mca.gov.in, incometax.gov.in, and gst.gov.in.