assureOfficeCompliance Made Simple
OIDAR Services GST Section 14, NTOR Definition, Form GST REG-10 & Monthly Form GSTR-5A Compliance

OIDAR Services under GST: Section 14, NTOR Amendments, Form GSTR-5A & Foreign Supplier Guide

Comprehensive masterclass on Online Information Database Access and Retrieval (OIDAR) services under Section 14 of the IGST Act, 2017. Analyzes the Finance Act 2023 expansion of OIDAR and NTOR definitions, simplified registration in Form GST REG-10, Section 13(12) location proxies, monthly GSTR-5A filings, RCM on B2B imports, and digital compliance with assureTax.

Reviewed by CA Manoj Mittal · Chartered Accountant | 30+ years in GST & Indirect Taxation

Calculator with tax invoice paperwork

1. Executive Overview & The Borderless Taxation of Digital Services

The rapid globalization of cross-border cloud computing, digital entertainment streaming, mobile application ecosystems, software-as-a-service (SaaS), and social media platforms has decoupled commercial revenue generation from traditional geographic borders. Under legacy indirect tax regimes, foreign digital conglomerates supplied electronic content, cloud servers, and online entertainment directly to Indian individual consumers without paying domestic indirect taxes, placing Indian domestic technology vendors at an extreme 18% competitive disadvantage.

To establish comprehensive tax parity and capture cross-border digital consumption, the Indian Parliament enacted a specialized regulatory regime for Online Information and Database Access or Retrieval (OIDAR) Services under Section 14 of the Integrated Goods and Services Tax (IGST) Act, 2017, read with Rule 14 of the CGST Rules, 2017. Under this framework, whenever an overseas service provider supplies OIDAR services to an unregistered consumer in India—classified statutorily as a Non-Taxable Online Recipient (NTOR)—the statutory tax liability is placed squarely upon the overseas supplier (or digital intermediary). The foreign entity must obtain a specialized Simplified Registration in Form GST REG-10, collect 18% IGST from Indian retail customers, and file monthly tax returns in Form GSTR-5A.

Crucially, the Finance Act, 2023 radically expanded the scope of OIDAR taxation by deleting the legacy requirement that services must be "essentially automated and involving minimal human intervention", bringing online education, live webinars, and remote consulting into the OIDAR net. In parallel, the definition of NTOR was amended to encompass any unregistered person receiving OIDAR services for any purpose (including commercial use). Furthermore, the Directorate General of GST Intelligence (DGGI) has aggressively invoked website-blocking powers through the Ministry of Electronics and Information Technology (MeitY) under Section 69A of the IT Act against non-compliant foreign digital platforms. Deploying specialized multi-currency GST compliance engines like assureTax and international litigation tracking suites like assureNotice is vital for foreign tech companies and Indian B2B enterprises to manage digital compliance and avert catastrophic enforcement shutdowns.

2. Statutory Architecture: Section 14 & The B2B versus B2C Dichotomy

International indirect tax advisors must clearly distinguish between the two parallel statutory taxation mechanisms governing OIDAR services:

Compliance Dimension B2B OIDAR Supplies (Business to Registered Business) B2C OIDAR Supplies (Business to Non-Taxable Online Recipient)
Recipient Profile Any business entity registered under Section 22 or Section 24 possessing an active Indian GSTIN. Non-Taxable Online Recipient (NTOR): Any unregistered person, individual, government body, or trust receiving OIDAR for any purpose.
Person Liable to Pay GST The Indian Registered Recipient under the Reverse Charge Mechanism (RCM) under Section 5(3) of IGST Act. The Offshore OIDAR Supplier (or the digital marketplace/intermediary) under Forward Charge under Section 14(1).
Foreign Supplier Registration Zero Registration Requirement: The foreign supplier is not required to register or file returns in India. Mandatory Simplified Registration: The offshore supplier must obtain registration in Form GST REG-10.
Statutory Return Filing Indian recipient reports import of services under Table 3.1(d) (Inward RCM) and claims ITC in Table 4(A)(1) of Form GSTR-3B. Offshore supplier files Form GSTR-5A electronically on or before the 20th day of the succeeding month.
Place of Supply Location of the recipient in India under default Section 13(2). Location of the recipient in India determined via Section 13(12) Location Proxies (IP address, card issuing bank, etc.).
Input Tax Credit (ITC) Indian registered recipient can claim 100% ITC if utilized for business purposes. NTOR consumers cannot claim ITC; tax represents a final consumer tax collected and remitted to the Government.

3. Deep-Dive Technical Mechanics: The Finance Act 2023 Amendments & Location Proxies

3.1 Expanded Definition of OIDAR Services: Section 2(17)

Prior to the Finance Act, 2023, Section 2(17) of the IGST Act defined OIDAR services as services whose delivery is mediated by information technology over the internet or an electronic network and the nature of which renders their supply essentially automated and involving minimal human intervention and impossible to ensure in the absence of information technology. This restrictive phrasing allowed foreign providers of live online tutoring, remote technical diagnostics, and interactive webinars to claim that significant human intervention took them outside the OIDAR net.

The 2023 Amendment: The Finance Act, 2023, completely removed the phrase "essentially automated and involving minimal human intervention". Consequently, any service delivered over the internet or an electronic network that is impossible to ensure in the absence of information technology is now an OIDAR service. Core covered categories include:

  1. Advertising on the internet (banner ads, search ads, social media sponsored content);
  2. Providing cloud services (SaaS, PaaS, IaaS compute and storage);
  3. Provision of e-books, movie streaming, music downloads, digital software, and mobile applications;
  4. Digital data storage, online database search services, and stock market feeds;
  5. Online gaming (real-money gaming and casual digital games);
  6. Online distance learning, interactive webinars, and digital coaching platforms.

3.2 Amended Definition of Non-Taxable Online Recipient (NTOR): Section 2(16)

The Finance Act, 2023, also structurally overhauled the definition of "Non-Taxable Online Recipient" (NTOR) under Section 2(16):

  • Old Definition: Covered any government, local authority, or individual receiving OIDAR services exclusively for non-business, personal purposes. Unregistered proprietary firms or unregistered startups using cloud hosting for business argued they were not NTORs.
  • New Substituted Definition: NTOR means any unregistered person to whom OIDAR services are provided, located in the taxable territory.
  • The Legal Impact: The purpose of use (personal or commercial) is now completely irrelevant. If an unregistered small lawyer, doctor, freelancer, or micro-enterprise in India buys cloud storage or subscription software from an overseas vendor, the foreign vendor must collect and remit 18% IGST under forward charge!

3.3 The Intermediary Deeming Fiction: Section 14(1) Proviso

When digital services are sold through an online platform, app store, or digital marketplace (e.g., Apple App Store, Google Play Store, Steam), Section 14(1) establishes that the intermediary shall be deemed to be the supplier of the service, UNLESS the intermediary satisfies three cumulative conditions:

  1. The invoice issued by the intermediary clearly identifies the service and its overseas underlying supplier;
  2. The intermediary does not authorize the charge to the customer or take part in billing; and
  3. The intermediary does not set the terms and conditions of the supply.

In standard app stores, because the marketplace controls payment processing and terms of service, the marketplace is legally deemed to be the OIDAR supplier and must register, collect 18% IGST, and file Form GSTR-5A on behalf of thousands of third-party global app developers.

3.4 Determining Recipient Location: Section 13(12) Non-Contradictory Proxies

Under Section 13(12) of the IGST Act, the place of supply of OIDAR services is deemed to be in the taxable territory (India) if the recipient is located in India. The recipient shall be deemed to be located in India if any two of the following non-contradictory conditions are satisfied:

  • (a) The location of address presented by the recipient of services through internet is in India;
  • (b) The credit card or debit card or other card by which the recipient settles payment has been issued in India;
  • (c) The billing address of the recipient of services is in India;
  • (d) The Internet Protocol (IP) address of the device used by the recipient is in India;
  • (e) The bank of the recipient of services in which the account used for payment is maintained is in India;
  • (f) The country code of the subscriber identity module (SIM) card used by the recipient is of India;
  • (g) The location of the fixed landline through which the service is received by the recipient is in India.

3.5 Form GST REG-10 & Form GSTR-5A Compliance Mechanics

The compliance architecture for offshore OIDAR suppliers follows strict administrative steps:

  • Simplified Registration in Form GST REG-10: Submitted online on the GST portal under Rule 14. The foreign entity does not require a physical office or permanent establishment in India. It appoints an authorized signatory holding an Indian PAN. Registration is granted by the Principal Commissioner of Central Tax, Bengaluru West (the centralized nodal authority for all OIDAR entities).
  • Monthly Filing in Form GSTR-5A: Due on or before the 20th day of each calendar month. The return captures state-wise taxable value of B2C supplies, the applicable IGST rate (18%), total tax payable, and tax paid.
  • Tax Payment: Discharged in Indian Rupees or through international foreign currency wire transfers credited directly to the Reserve Bank of India. Input Tax Credit cannot be claimed by the foreign OIDAR supplier; gross tax must be paid.

4. Practical Examples, Case Studies & Numerical Illustrations

The following real-world case studies illustrate the procedural workflows, tax calculations, and defense strategies under Section 14 and Section 13(12).

Case Study 1: Global SaaS Enterprise Launching B2C Operations in India

Context & Facts: PixelCraft Inc., a graphic design cloud software company incorporated in California, USA, offers monthly individual subscriptions ($20 / ₹1,680 per month) to consumers worldwide. In October 2024, its Indian retail subscriber base reaches 50,000 users, generating monthly revenue of ₹8,40,00,000. None of these consumers possess a GSTIN.

Compliance & Tax Execution:

  1. Recipient Classification: Indian individual subscribers are unregistered persons, qualifying as Non-Taxable Online Recipients (NTOR) under Section 2(16).
  2. Registration: PixelCraft Inc. submits Form GST REG-10 on the common portal, appointing an authorized representative in India, and obtains an OIDAR GSTIN (9924USA...).
  3. Invoicing & Tax Collection: On every $20 subscription, PixelCraft adds 18% IGST (₹302.40). Gross billed to consumer = ₹1,982.40.
  4. Monthly Filing in Form GSTR-5A: For October 2024, PixelCraft compiles the state-wise subscriber breakdown using billing postal codes (e.g., Maharashtra: ₹2 Cr, Karnataka: ₹1.5 Cr, Delhi: ₹1.2 Cr, etc.).
  5. Tax Remittance: Total IGST collected @ 18% on ₹8,40,00,000 = ₹1,51,20,000. The amount is remitted via international wire transfer and Form GSTR-5A is filed on or before November 20, 2024. Automating state-wise geo-IP tax calculations via assureTax eliminates multi-state allocation errors.

Case Study 2: Digital App Marketplace Acting as Deemed Supplier

Context & Facts: GameZone LLC operates a mobile app store in Ireland. An independent game developer based in South Korea lists a gaming app on GameZone for ₹500. An Indian student downloads the game. GameZone processes the credit card payment, retains a 30% platform fee (₹150), and remits 70% (₹350) to the Korean developer.

Deemed Supplier Liability under Section 14(1) Proviso:

  • Under the Proviso to Section 14(1), an intermediary that authorizes the credit card charge, controls platform access, and sets terms of use is deemed to be the supplier of the OIDAR service.
  • GameZone LLC (the marketplace), NOT the Korean developer, is legally liable to pay GST in India.
  • GameZone must collect 18% IGST on the gross purchase price of ₹500 (₹90 GST), report the sale in its Form GSTR-5A, and remit ₹90 to the Indian Government. The Korean developer has zero Indian GST obligations. Marketplace platform compliance is verified via assurePractice.

Case Study 3: B2B Enterprise Import Inadvertently Billed with B2C OIDAR Tax

Context & Facts: M/s Apex Tech Solutions Ltd (an Indian IT firm with active GSTIN 27AAACA1234A1Z5) purchases 100 enterprise software user seats from a European cloud vendor for ₹20,00,000. During online checkout, the accountant forgot to enter Apex's GSTIN. The European vendor's automated billing system treated Apex as an NTOR, added 18% IGST (₹3,60,000), and reported it in Form GSTR-5A.

The ITC Blockade & Remediation:

  1. The Problem: Form GSTR-5A does NOT capture recipient GSTINs. Taxes paid under GSTR-5A do not flow into Form GSTR-2B of the Indian recipient. Consequently, Apex Tech cannot claim Input Tax Credit of the ₹3,60,000 IGST shown on the foreign vendor's invoice!
  2. The Dual Tax Risk: Under Section 5(3), as a registered entity importing services, Apex Tech is statutorily required to discharge 18% IGST under the Reverse Charge Mechanism (RCM) in its own GSTR-3B. Apex Tech faces double taxation!
  3. Corrective Workflow:
    • Apex Tech immediately requests the European vendor to cancel the B2C invoice and issue a B2B commercial invoice mentioning Apex's verified GSTIN.
    • The European vendor adjusts the B2C turnover in its next Form GSTR-5A and refunds the ₹3,60,000 to Apex.
    • Apex Tech discharges ₹3,60,000 under RCM in Table 3.1(d) of GSTR-3B and simultaneously claims full ITC in Table 4(A)(1). Managing vendor master GSTIN verifications in assureTax prevents uncreditable OIDAR tax leakages.

Case Study 4: Post-2023 NTOR Expansion Covering Unregistered Freelancers

Context & Facts: Rohit, an unregistered freelance software developer in Jaipur (turnover ₹12 Lakhs), subscribes to GitHub Enterprise and Jira cloud project management software from an Australian software vendor for ₹80,000 per annum for commercial client work.

Statutory Impact of Finance Act 2023:

  • Under the legacy pre-2023 definition, Rohit would have argued that because he uses the software for business purposes, he was not an NTOR, and the Australian vendor had no obligation to charge tax.
  • Under the amended Section 2(16), Rohit is an "unregistered person", which makes him an NTOR regardless of commercial or business purpose.
  • The Australian vendor must charge 18% IGST (₹14,400) on Rohit's subscription, report the receipt in Form GSTR-5A, and pay the tax to India. Because Rohit is unregistered, the ₹14,400 is an uncreditable commercial expense. Tracking NTOR threshold boundaries in assureFinancials ensures compliance.

Case Study 5: Conflict of Location Proxies under Section 13(12)

Context & Facts: An Indian executive employed in Mumbai travels to Dubai for a temporary 10-day business trip. While in Dubai, using a Dubai hotel Wi-Fi connection (UAE IP address), the executive renews an annual cloud streaming subscription on a US streaming platform for ₹10,000, paying with an HDFC Bank credit card issued in Mumbai.

Applying the Two-Proxy Rule:

  • Condition (d) IP Address: Located in UAE (Non-India).
  • Condition (b) Credit Card Issuing Bank: HDFC Bank in India (Proxy 1 met).
  • Condition (c) Billing Address: Mumbai, India (Proxy 2 met).
  • Condition (a) Account Profile Address: India (Proxy 3 met).
  • Outcome: Because three non-contradictory conditions point to India, the statutory test of any two conditions under Section 13(12) is satisfied. The place of supply is legally deemed to be in India. The US streaming platform must charge 18% IGST. Location tracking algorithms in assureTax automate multi-proxy evaluation.

Case Study 6: Online Live Tutoring Platform under Post-2023 Rules

Context & Facts: GlobalTutor Inc., incorporated in the UK, offers live interactive math coaching to Indian high school students. Classes are conducted live over Zoom by teachers located in the UK, with interactive digital whiteboards and automated quizzes.

Classification Post-2023:

  • Prior to 2023, GlobalTutor claimed exemption from OIDAR on the grounds of substantial human teacher intervention.
  • With the deletion of the "minimal human intervention" clause by the Finance Act, 2023, online distance education delivered over the internet is an OIDAR service.
  • Because students are unregistered consumers (NTORs), GlobalTutor Inc. must obtain Form GST REG-10 registration, collect 18% IGST on tuition fees, and file Form GSTR-5A monthly. Education tax compliance is organized in assurePractice.

Case Study 7: Non-Filing of Form GSTR-5A & Website Blocking under Section 69A

Context & Facts: BetOnline Gaming Ltd, an offshore online casino and sports betting platform based in Curacao, offered real-money gaming to Indian consumers, collecting over ₹50 Crore in deposits without obtaining OIDAR registration or paying GST.

Enforcement Action:

  • The Directorate General of GST Intelligence (DGGI) issued statutory summons. Upon failure to comply, the DGGI issued an order under Section 14A of the IGST Act (Special provision for specified actionable claims).
  • The Ministry of Electronics and Information Technology (MeitY), acting on the request of the GST Council, issued an emergency blocking order under Section 69A of the Information Technology Act, 2000, directing all Indian Telecom Service Providers and DNS hosts to block the website, mobile apps, and payment gateway APIs of the foreign operator.
  • Managing notice compliance through assureNotice protects global digital enterprises from domain blacklisting.

5. 10-Step Practitioner Audit Verification Program for OIDAR Services

Digital tax managers, corporate legal counsels, and statutory auditors should execute this 10-step verification audit across all cross-border digital platforms:

Step # Audit Verification Domain Key Verification Actions & Evidentiary Records Statutory Reference
Step 1 OIDAR Scope Evaluation Review digital service catalog against amended Section 2(17). Confirm whether delivery is mediated over internet without human intervention test. IGST Act Section 2(17)
Step 2 Recipient Classification (B2B vs B2C) Validate customer GSTINs via automated API. Segregate registered businesses (B2B RCM) from unregistered consumers (B2C NTOR). Section 2(16) & Rule 14
Step 3 Location Proxy Mapping (Section 13(12)) Audit checkout telemetry data. Verify logging of IP address, card issuing bank, billing address, and country code to prove Indian nexus. IGST Act Section 13(12)
Step 4 Form GST REG-10 Verification Verify active OIDAR registration granted by Principal Commissioner of Central Tax, Bengaluru West. Confirm active Indian authorized agent. Rule 14(1) & Form GST REG-10
Step 5 Intermediary Deemed Supplier Audit For marketplaces and app stores, review developer agreements. Determine whether platform controls billing, charge authorization, or terms. Section 14(1) Proviso
Step 6 Monthly Form GSTR-5A Compilation Extract transaction logs. Prepare state-wise Place of Supply (POS) taxable turnover and 18% IGST schedules for monthly return upload. Rule 14(2) & Form GSTR-5A
Step 7 Tax Remittance & Foreign Wire Audit Verify that tax is discharged on or before the 20th of the following month via authorized AD Bank wire transfer in convertible currency or INR. Section 14(2)
Step 8 B2B Invoicing & GSTIN Capture Controls Ensure checkout engine captures and validates client GSTINs, suppresses 18% forward charge, and issues compliant B2B reverse charge invoices. Section 31 & Section 5(3)
Step 9 Zero Input Tax Credit Verification Confirm that the offshore OIDAR entity does not claim or offset any Input Tax Credit against its Form GSTR-5A tax liabilities. Rule 14 & GSTR-5A
Step 10 DGGI Scrutiny & Section 69A Protection Maintain comprehensive audit trails of tax receipts, GSTR-5A acknowledgments, and bank wire challans to defend against website blocking threats. IT Act Section 69A & Section 14A

6. Transforming Digital Cross-Border Tax with the AssureOffice Suite

Managing high-volume micro-transactions across global consumer networks, validating Indian recipient GSTINs in real time, and automating monthly Form GSTR-5A filings demands integrated enterprise software:

  • assureTax: Houses an intelligent Cross-Border OIDAR Engine. Automatically filters real-time transaction data, evaluates Section 13(12) location proxies, validates B2B customer GSTINs via live portal APIs, computes state-wise Place of Supply liabilities, and auto-generates pre-validated JSON files for Form GSTR-5A monthly filing.
  • assureFinancials: Manages multi-currency payment gateway reconciliations, tracks international wire transfers, and automates domestic RCM liability accounting for Indian B2B technology importers.
  • assureNotice: Organizes international tax correspondence, tracks DGGI inquiry notices, and structures legal defense dossiers citing CBIC circulars to prevent domain-blocking enforcement actions.
  • assurePractice: Empowers chartered accountancy firms and global compliance desks to manage Form GST REG-10 registration dockets, track 20th-of-the-month GSTR-5A filing clocks, and act as authorized compliance representatives in India.

7. Comprehensive Practitioner FAQs on OIDAR Services & Form GSTR-5A

Q1: What does OIDAR stand for under GST law?

OIDAR stands for Online Information and Database Access or Retrieval services, defined under Section 2(17) of the IGST Act, 2017.

Q2: Does an overseas company providing OIDAR services need a physical office in India to register?

No. Under Rule 14, an offshore OIDAR supplier registers under the Simplified Registration Scheme in Form GST REG-10 without having a physical place of business in India, by appointing an authorized representative holding an Indian PAN.

Q3: What is the due date for filing Form GSTR-5A?

Form GSTR-5A must be filed electronically on the common portal on or before the 20th day of the month succeeding the calendar month in which services were supplied.

Q4: What is the rate of GST applicable on OIDAR services?

OIDAR services are uniformly taxed at the standard integrated tax rate of 18% IGST (SAC 998315 or 9984).

Q5: Can an offshore OIDAR supplier claim Input Tax Credit (ITC) to pay tax in Form GSTR-5A?

No. Form GSTR-5A does not permit any input tax credit claims. The offshore supplier must deposit 100% of the tax collected in cash or international foreign currency wire transfers.

Q6: Does an Indian registered business (B2B) pay GST to the foreign OIDAR vendor?

No. In B2B supplies where the Indian recipient provides an active GSTIN, the supply is governed by the Reverse Charge Mechanism (RCM) under Section 5(3). The foreign vendor does not charge tax; the Indian business pays 18% IGST in its own GSTR-3B and claims full ITC.

Q7: What changed in the definition of Non-Taxable Online Recipient (NTOR) in 2023?

The Finance Act, 2023 removed the condition that services must be received "for purpose other than commerce, industry or any other business". Today, any unregistered person receiving OIDAR services for any purpose (personal or commercial) is an NTOR.

Q8: Can a foreign cloud gaming company have its website blocked in India for failing to pay GST?

Yes. Under Section 14A of the IGST Act and Section 69A of the Information Technology Act, the Central Government has powers to block public access to websites, apps, and payment gateways of offshore digital platforms that default on GST payments.

Q9: How is the Place of Supply determined if a user's IP address and credit card location contradict each other?

Under Section 13(12), the location is deemed to be in India if any two non-contradictory proxies point to India (e.g., Indian credit card + Indian billing address, even if using an overseas VPN IP address).

Q10: Are live online educational classes with teachers covered under OIDAR post-2023?

Yes. With the removal of the "minimal human intervention" clause from Section 2(17) by the Finance Act 2023, live online distance teaching delivered over the internet qualifies as an OIDAR service.

Q11: Can an Indian registered company claim ITC on a B2C invoice issued by an OIDAR vendor?

No. Form GSTR-5A does not upload recipient GSTINs into GSTR-2B. An Indian company cannot claim ITC unless the foreign vendor issues a B2B invoice with the company's GSTIN and zero tax (for RCM discharge).

Q12: Who administers the registration of all foreign OIDAR entities in India?

All offshore OIDAR registrations are centralized under the jurisdiction of the Principal Commissioner of Central Tax, Bengaluru West Commissionerate, Karnataka.

Q13: Does downloading a free mobile app attract OIDAR tax?

No. GST applies only to transactions made for a "consideration". Downloading free apps or accessing free content with zero monetary payment does not trigger GST.

Q14: What is the liability of an app store acting as an intermediary for third-party developers?

Under the Proviso to Section 14(1), an intermediary platform that authorizes billing, manages collections, or sets terms is deemed to be the supplier, liable to register, collect 18% IGST, and file Form GSTR-5A.

Q15: What is the late fee for delayed filing of Form GSTR-5A?

Under Section 47, late filing of Form GSTR-5A attracts a statutory late fee of ₹50 per day (₹20 per day for NIL returns) subject to statutory caps, along with interest at 18% per annum under Section 50(1) on delayed tax remittances.

Q16: How does assureTax simplify OIDAR compliance for multinational digital enterprises?

assureTax provides automated real-time GSTIN validation APIs, evaluates Section 13(12) location proxies across millions of checkout events, computes state-wise Place of Supply liabilities, auto-formats Form GSTR-5A returns, and archives bank wire payment acknowledgments with complete audit trails.