Compliance & Trust

Why registering your company here is safe.

Before we sold a single virtual office, we studied 30 Indian cases — GST raids on shared addresses, landlords dragged into fraud inquiries, fires that put building owners in custody. Then we built our process around what actually went wrong in each one.

This page is for two readers: the company that wants to register at this address, and the owner of the building we operate in. Twelve of those cases are below, with what we do about each.

30cases studied — courts, raids, news records
12that shaped the WorkMax process
10controls in the protection kit
01 Fraud at shared addresses 02 Keeping the owner out of it 03 Safety in the building 04 Why the agreement reads this way 05 The protection kit
01

What goes wrong at shared addresses.

India's biggest GST frauds ran on rented and virtual addresses. These five cases are why our KYC is strict, why our NOC expires, and why officers who visit us find a file waiting.

Case 12023 · Noida, UP

The ₹16,000-crore fake-GST gang

A gang used stolen PAN and Aadhaar details to float about 4,000 fake companies from rented premises and passed on bogus input tax credit estimated above ₹16,000 crore. More than 45 people were arrested. The rented office was just the front.

A fraudster will happily pay three months of virtual-office fees to get one GSTIN. Collecting PDFs is not verification.

What we do: we verify the person, not the paperwork. Video KYC with the signatory, live photo, Aadhaar–PAN match — before any NOC is issued.

Source: the420.in
Case 22025 · Chennai

95 bogus entities in our own jurisdiction

CGST Chennai North traced an interstate racket that floated 95+ bogus entities on stolen identities across Tamil Nadu and Karnataka. Twelve entities in Chennai North alone showed ₹50.85 crore of fake input credit. Officers found them by correlating the IP addresses used to file returns.

Chennai GST officers run digital analytics on multi-firm addresses right now. A building with 50 GSTINs is exactly what their queries flag.

What we do: we expect physical-verification visits and treat them as routine. Staff attend every visit with the occupant register and your compliance file in hand.

Source: businesstoday.in
Case 32023–24 · Nationwide

10,000 fake registrations found in one week

CBIC's all-India special drive against fake registrations found about 10,000 bogus GSTINs in its first week; estimated fraudulent credit crossed ₹25,000 crore. Officers kept finding forged electricity bills, rent agreements and NOCs used as address proof.

Someone, somewhere, will forge your NOC. The question is whether you can disown it in one minute.

What we do: every NOC we issue is serial-numbered and logged in a register, with a verification phone and email printed on it. An officer can confirm authenticity with one call.

Source: taxguru.in
Case 42024–25 · Pune

Rent, register, abandon — ₹1,196 crore

DGGI Pune unearthed a web of bogus companies created with dummy directors at temporary rented premises obtained on fabricated documents — then abandoned once the registrations came through. The fraud ran to ₹1,196 crore.

An open-ended NOC keeps working for a fraudster long after he stops paying.

What we do: our NOC is time-bound. It is valid only while your service agreement is live and expires automatically on non-payment. Stop paying, and the address proof dies with the agreement.

Source: a2ztaxcorp.net
Case 52024–25 · Multiple states

Coworking registrations under the scanner

After the fraud wave, GST departments began treating multi-firm addresses as suspect by default. Applications from coworking and virtual-office addresses now draw REG-03 queries and physical verification. Genuine clients get rejected where the provider can't produce a demarcated-space letter, floor plan and owner-chain NOC.

At a shared address, the provider's paperwork decides whether your registration is approved in a week or rejected.

What we do: every VO client gets a compliance pack — a desk or cabin-specific allotment letter, a floor-plan annexure marking your space, an occupant-register entry, the utility bill, and the full owner-to-operator-to-client consent chain.

Source: saginfotech.com
02

Keeping the building owner out of it.

When a registered company turns out to be fake, investigators start with the address. These four cases show what separates an owner who is a witness from one who stays under inquiry.

Case 62023 · Delhi

30 fake firms at one address — the owner had to prove he didn't know

CGST Delhi West found more than 30 fake firms registered at a single address. The premises owner told officers he had no idea they existed — and had to prove that while they stood in his building. The fraudster had harvested KYC credentials and used Aadhaar authentication to dodge physical verification. He was arrested; the owner's address went on the department's watch list.

"I didn't know" is a defence you prove during a raid, not before it. Absence of complicity saved the owner; absence of records made him look negligent.

What we do: we keep a live register of every entity using this address, with signed agreements — and a register of the applications we rejected. The first thing an officer sees here is a file, not confusion.

Source: taxtmi.com
Case 72024–26 · Nationwide

The GST rent scam on landlords

Fraudsters sign a genuine-looking rent agreement, pay the deposit, register a fake GSTIN at the address and vanish. Months later the landlord gets the tax demand notices. In the reported cases, landlords with a written agreement, tenant KYC and a prompt complaint were treated as victims and released. Landlords with nothing in writing stayed under inquiry for years.

The owner's protection is a paper trail that exists before anything goes wrong.

What we do: the building owner never contracts with end clients — WorkMax does, under a licence that puts all client-related compliance on us, backed by client indemnities and a KYC file for every entity.

Source: theprint.in
Case 82017–18 · Nationwide

2.26 lakh companies struck off for dead registered offices

Registrars of Companies struck off over 2.26 lakh companies that were defunct or didn't maintain a registered office, and disqualified around 3 lakh directors for five years. The ROC acts on complaints that a company is no longer available at its registered address; the default itself carries a fine of ₹1,000 a day.

A client who stops paying but keeps your address on MCA records is a live liability — with a legal remedy, if you use it fast.

What we do: the default clock is written into the agreement. Notice on day 0 of non-payment; NOC revoked in writing by day 30; then template letters to the jurisdictional GST officer and the ROC. Clients sign knowing the path.

Source: taxguru.in
Case 92021–23 · Cardiff, UK

12,000 companies registered at one man's flat

Around 12,000 mostly overseas companies registered a private flat in Cardiff as their address — without the owner's consent or knowledge. Dylan Davies spent two years disputing tax bills and debt-collector letters one by one. The scandal forced a change in UK company law.

Address misuse doesn't need an agreement. Anyone can type your address into a registration form.

What we do: every quarter we sweep the MCA and GST portals for entities claiming this address that we never onboarded, dispute them in writing immediately, and log the sweep.

Source: irishnews.com
₹5,000refundable

Why the compliance deposit exists.

Every registration-address client places a ₹5,000 refundable deposit. It comes back in full when your registration is moved off the address after you leave. It exists because the cases above all start the same way — a company exits, its registration lingers, and the address carries the risk. The deposit makes sure the exit paperwork actually happens.

03

Safety of the people in the building.

Courts have been blunt: when someone is hurt on a premises, the operator and the owner both answer for it. These two cases set the bar for how we run the floor.

Case 102017 · Mumbai

Kamala Mills fire — the licence clause didn't stop the arrests

A fire in a rooftop pub at Kamala Mills killed 14 people. The compound owners argued the premises were on leave & licence and permissions were the licensee's job. The judicial panel recommended criminal action against the premises owners as well; they were arrested and the trial ran for years.

A clause shifting "all permissions" to the operator does not stop an arrest if the building itself is non-compliant.

What we do: we verified the building's sanctioned use, fire compliance and exits before launch, and keep the safety file current — fire NOC, electrical audit, evacuation drill log. Public-liability insurance sits on top.

Source: Kamala Mills fire — inquiry record
Case 112024 · Delhi

Rau's IAS basement — landlords arrested for a use the building didn't permit

Three UPSC aspirants drowned in a flooded basement library in Old Rajinder Nagar. The basement was sanctioned only for parking and storage. The coaching-centre owner and the basement's four landlords were all arrested; culpable-homicide charges followed, and the landlords spent months in custody before bail.

Letting space for a use the occupancy certificate doesn't permit makes the landlord criminally liable when people die.

What we do: the building's sanctioned-use documents are annexed to our licence, and every use on the floor matches them. CCTV covers common areas with no blind spots, every entry is logged — day-pass visitors included — and guards and housekeeping are police-verified in writing.

Source: theweek.in
04

Why your agreement reads the way it does.

Our membership is a service agreement, not a lease. That isn't fine print — it's a 65-year-old Supreme Court test, and it protects every member's registration.

Case 121959 · Supreme Court of India

Associated Hotels of India v. R.N. Kapoor

A hotel gave a hairdresser space in its Delhi premises under a document titled "licence." He claimed protected tenancy — and won. The Supreme Court held that the label means nothing: substance governs, and exclusive possession looks like tenancy no matter what the paper says. Sixty-five years on, this is still the test every Indian court applies.

A membership that behaves like a lease becomes one. Then the space, and everyone registered at it, inherits a tenancy dispute.

What we do: your agreement is a genuine service agreement — a seat or cabin allotment with a right to relocate you to an equivalent space, services bundled in, WorkMax holding master keys and access. In practice and on paper. That keeps the floor, and every registration on it, clean.

Source: legalserviceindia.com
The protection kit

Ten controls, running from day one.

Each control below answers specific cases from the thirty we studied. This is the standing checklist we operate on — for our clients, and for the owner of the building.

1
Client KYC fileVideo KYC of the signatory, live photo, Aadhaar–PAN match — per entity, before any NOC. Bulk signups from one introducer get flagged.
2
Serial-numbered, time-bound NOCValid only while the agreement is live, auto-expiring on non-payment, logged in a register, with a verification line printed on it.
3
True service agreementNo exclusive possession, right to relocate, services bundled — plus client indemnity for misuse of the address.
4
Owner-chain paperworkA properly stamped licence with the building's sanctioned-use documents annexed, and the owner indemnified for client acts.
5
GST compliance pack per clientAllotment letter, floor-plan annexure, occupant register, consent chain — and a staff SOP for physical-verification visits.
6
30-day default clockNotice on day 0, NOC revoked in writing by day 30, letters to the GST officer and ROC — every step logged.
7
CCTV and access logsNo blind spots in common areas, 90-day retention, every entry logged including day passes, staff police-verified.
8
Building safety fileFire NOC current, exits clear, electrical audit, floor use matching the occupancy certificate — verified before launch.
9
InsurancePublic liability sized to real footfall, fire and perils on the fit-out.
10
Quarterly address sweepMCA and GST portals checked for entities claiming this address that we never onboarded — disputed in writing, sweep logged.

In every case above where the address provider walked away clean, they could produce a file — KYC, agreement, dated NOC, revocation letter, CCTV, safety certificate. Where they suffered, the file didn't exist. We keep the file.

Virtual office at WorkMax

Register your company at an address that holds up.

Annual virtual-office plans from ₹9,999 a year, with the compliance pack included. Tell us what you're registering and we'll walk you through the KYC and NOC steps.

See VO plans Talk to us

Case summaries compiled from public news reports, court records and practitioner commentary; sources linked on each card. This page describes WorkMax's operating process and is not legal advice. GST / company registration NOCs are issued on annual plans only, against completed KYC and the ₹5,000 refundable compliance deposit.