Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
A Digital Signature Certificate (DSC) carries the same legal weight as your physical signature on electronic documents — company filings, GST returns, tenders, and legal agreements — which makes its misuse a particularly serious form of identity fraud. If your DSC has been compromised, lost, or used without your authorization, here’s exactly how to get it revoked and report the misuse.
Revocation of a DSC must be carried out through the specific CA that issued it — identify your CA from your DSC documentation and contact them without delay.
Report the compromise, loss, or misuse in writing, clearly stating the reason for revocation — your CA is legally obligated to suspend a certificate once notified of compromise or misuse.
Don’t assume your request has been processed — request explicit written confirmation that the specific DSC has been revoked and is no longer valid.
If the DSC was used to sign fraudulent filings, agreements, or documents, file at cybercrime.gov.in or call 1930.
Check MCA filings, GST returns, tenders, and any other documents signed during the period of compromise, and formally dispute anything you didn’t authorize.
If your CA reports a security breach or irregularity of its own to the Controller of Certifying Authorities (CCA), and your DSC was affected as part of that broader incident, you may be notified separately — but don’t wait for this; if you suspect any compromise on your end, initiate revocation yourself immediately rather than waiting to be told.
| What Happened | Legal Provision |
|---|---|
| Someone fabricated, published, or provided a false DSC for fraudulent purposes | Section 74, IT Act, 2000 — up to 2 years imprisonment or a fine of ₹1 lakh |
| Someone dishonestly used your electronic signature/password fraudulently | Section 66C, IT Act, 2000 — up to 3 years imprisonment and a fine of up to ₹1 lakh |
No. Revocation requests to your CA and reporting on cybercrime.gov.in are both free.
Yes, for the immediate revocation and reporting steps. A lawyer becomes strongly advisable if fraudulent filings or agreements signed with your DSC created legal or financial liability that needs to be formally disputed.
Need professional legal help with this?
Find a Lawyer on VidyodayDSC misuse often accompanies other forms of corporate identity fraud — see our guide on PAN card linked to an unknown company and fake GST registration in your name if either also applies to your situation.
This is specified in your original DSC issuance documentation and USB token packaging — check these first, or contact the vendor you purchased it through.
No — revocation is carried out by the issuing Certifying Authority, though you initiate the process by submitting your request to them.
Report it as lost/compromised and request revocation as a precaution regardless — waiting for confirmed misuse before acting increases your risk unnecessarily.
Revocation itself is typically free; you would separately need to purchase a new DSC if you require one going forward.
Check MCA company filings, GST returns, tender submissions, and any contracts or agreements — audit broadly rather than assuming only one type of document was affected.
Until you formally dispute and correct the record with each affected institution, there’s real exposure — this is exactly why prompt, thorough action matters.
Section 74 covers fraudulently creating or publishing a false DSC itself; Section 66C covers the broader act of dishonestly using someone’s electronic signature or identity feature — both can apply depending on exactly what occurred.
This article is for general information only and does not constitute legal advice. Certifying Authority processes can vary — consult your specific CA and a lawyer for guidance specific to your situation.
