Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Download the notice from the GST common portal for the correct GSTIN, save the PDF and every attachment without changing the originals, and verify its reference number (RFN) through the portal. A defensible record contains the untouched files, the GSTIN, RFN or reference number, issue date, issuing-officer details, verification result, download time, and SHA-256 hashes.
A missing visible signature on a PDF does not by itself make a computer-generated GST notice invalid. GSTN says the underlying system record can carry the issuing officer’s digital signature even when the rendered PDF has no signature block. Verify the RFN, preserve the result, and keep a separate working copy for annotations.
As an Amazon Associate I earn from qualifying purchases.
What a complete GST notice evidence package contains
Treat a GST notice or order as an electronic portal record, not as an isolated PDF. The file you download is one part of the evidence; its attachments, portal reference, verification response, and preservation history establish what was received and whether the document can still be checked later.
- Portal original: the first PDF downloaded for the relevant GSTIN, retained under its original filename.
- Every attachment: spreadsheets, statements, annexures, challans, notices, replies, or other files presented with the notice or order.
- Identity details: GSTIN, reference number or RFN, form number where shown, financial year, issue date, and the notice or order subject.
- Issuer details: the officer’s name, designation, jurisdiction, office, and any visible signature, certificate, or verification information.
- Portal verification record: the RFN lookup result showing the issuer, purpose, and reference information returned by GSTN.
- Acquisition log: UTC download time, user account or staff member, portal path, filenames, and hashes.
- Preservation copies: a write-protected master, an editable working copy, and at least one separate backup.
Keeping these items together prevents a common failure: an auditor or appellate authority can see a PDF but cannot establish which GSTIN it came from, whether an attachment is missing, or whether the file changed after download.
#1 Best Overall
- PORTABLE SCANNER FOR USE ON-THE-GO — The fastest and lightest mobile single-sheet-fed compact document scanner in its class¹
- QUICK DOCUMENT SCANNING ― This Epson ultra-fast scanner scans a single page as quickly as 5.5 seconds²; Windows and Mac compatible
- VERSATILE PAPER HANDLING ― Portable scanner scans documents up to 8.5 x 72 in; Also easily digitizes receipts and ID cards to make accounting, bookkeeping, and organizing simpler
- INTUITIVE, HIGH-SPEED SOFTWARE — Epson ScanSmart Software³ is a smart tool allowing you to easily scan, review, and save; Stay organized easily with the help of this Epson scanner
- EASY SETUP — USB-powered connect to your computer for quick and simple scanning; No batteries or external power supply required to operate portable document scanner; Standard Connectivity: USB 2.0
Before you download
Use the correct GSTIN and an authorised account
Sign in to the GST common portal with the account authorised to access the taxpayer’s records. If an organisation has several registrations, confirm the GSTIN displayed after login before opening notices. A notice for one registration should not be filed under another registration merely because the legal entity name is similar.
Prepare a controlled destination
Download to a folder controlled by the tax, finance, or legal team rather than to a personal downloads folder that is automatically cleaned. Ensure there is enough space for the PDF and all attachments. If your organisation uses endpoint protection or document management, record the system or repository that received the files.
Record the acquisition time in UTC
The issue date printed on a notice is not the same as the date and time at which you obtained it. Record the download timestamp in UTC, along with the local time if your internal policy requires it. This distinction matters when a response deadline, service question, or later migration is disputed.
Free tools Windows power users keep installed
One-click scans. No signup required.
Step-by-step: download the notice and all attachments
- Sign in to the GST common portal for the relevant GSTIN. Confirm the registration shown in the account context.
- Open the notices or orders area. Portal labels can change, so follow the current menu that lists notices, orders, or related communications for that GSTIN.
- Locate the record by its reference. Select the notice or order and note the RFN, reference number, form number, financial year, issue date, and subject before downloading.
- Download the main PDF. Save the first download exactly as supplied, including the original filename. Do not open it in a PDF editor and resave it before making the master copy.
- Download every attachment separately. Expand attachment sections, annexures, statements, and correspondence links. A notice summary can be incomplete without its attached computation or supporting schedule.
- Check the downloaded folder against the portal listing. Count the files and compare names and extensions. If the portal lists an attachment that fails to download, capture the error and retry without deleting the successful files.
- Create an internal filename only for the working inventory. A stable pattern such as
GSTIN-RFN-2024-10-15.pdfmakes sorting easier, but retain the portal filename in the log and never overwrite the untouched download. - Record the intake details immediately. Log the UTC time, GSTIN, portal path, account or staff member, reference or RFN, financial year, issue date, and complete file list.
- Calculate a SHA-256 hash for each file. Store the hash beside the filename in the intake log. Hashing is an operational integrity control, not a specific CGST Rule 26 requirement.
- Copy the package to preservation storage. Make the first copy read-only or otherwise immutable, then create a separate working copy for notes, highlighting, or redactions.
GST Council instructions specifically describe electronic serving or uploading of FORM GST DRC-01 notice summaries and FORM GST DRC-07 order summaries on the portal. The summary is therefore part of the electronic record; preserve the downloadable document and its associated material rather than relying on a printout.
How to verify that a GST notice is genuine
Use Verify RFN after login
GSTN’s 25 September 2024 advisory gives the post-login route as Dashboard → Services → User Services → Verify RFN. Enter the reference information requested by the page and save the result. The response can identify the issuer, purpose, and reference information associated with the document.
Save the verification page as a PDF or other permitted record, and capture the date and time of the check. If your procedure allows screenshots, keep one as a visual supplement, but do not use a screenshot as the only verification record. The portal’s labels may change; record the exact path you used at the time.
Rank #2
- FAST SPEEDS - Scans color and black and white documents a blazing speed up to 16ppm (1). Color scanning won’t slow you down as the color scan speed is the same as the black and white scan speed.
- ULTRA COMPACT – At less than 1 foot in length and only about 1. 5lbs in weight you can fit this device virtually anywhere (a bag, a purse, even a pocket).
- READY WHENEVER YOU ARE – The DS-640 mobile scanner is powered via an included micro USB 3. 0 cable allowing you to use it even where there is no outlet available. Plug it into you PC or laptop and you are ready to scan.
- WORKS YOUR WAY – Use the Brother free iPrint&Scan desktop app for scanning to multiple “Scan-to” destinations like PC, Network, cloud services, Email and OCR. (2) Supports Windows, Mac and Linux and TWAIN/WIA for PC/ICA for Mac/SANE drivers. (3)
- OPTIMIZE IMAGES AND TEXT – Automatic color detection/adjustment, image rotation (PC only), bleed through prevention/background removal, text enhancement, color drop to enhance scans. Software suite includes document management and OCR software. (4)
Use the pre-login verification page when appropriate
GSTN also identifies a pre-login verification link: https://services.gst.gov.in/services/verifyRfn. This can be useful when the recipient cannot yet sign in or when an independent reviewer needs to check the reference. Save the returned details with the notice package and note whether the check was performed before or after login.
Compare the response with the downloaded notice
Check the RFN or reference number character by character. Then compare the GSTIN, issuer or office, stated purpose, issue date where available, form or order type, and any other identifying field returned by the portal. A mismatch is a stop condition: do not treat the PDF as authenticated until the discrepancy is resolved.
- Matching reference and issuer: retain the verification result and continue preservation.
- Reference not found: confirm that you entered the RFN exactly, including letters and leading zeroes; retry from the current portal; record the date and error if it remains unavailable.
- Different issuer or purpose: recheck the GSTIN and document selection. Contact the relevant GST office or professional adviser before acting on the notice.
- Portal unavailable: preserve the original download, record the outage and attempted verification, and retry before relying on the document for a filing, appeal, or payment decision.
Why a PDF may have no visible digital signature
Computer-generated show-cause notices, assessment orders, refund orders, and similar documents may render without a visible signature on the PDF. GSTN explains that the underlying JSON or order details stored in the GST system carry the issuing officer’s digital signature. Consequently, the absence of a visible signature block is not, by itself, proof that the notice is invalid.
CGST Rule 26 provides for electronic authentication through a digital signature certificate, an e-signature, or another notified verification method. It also provides that notices, certificates, and orders under the relevant chapter are issued electronically by the proper officer or an authorised officer. RFN verification tests the portal record associated with the document; it does not decide whether the tax demand, limitation calculation, service, or legal reasoning is correct.
Preserve any signature text, certificate information, verification code, or other authentication detail that is visible. Do not add a signature image to a PDF, flatten a certificate, or resave the file merely to make a signature appear. Such edits destroy the value of the untouched original.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Preservation architecture: master, working copy, and backup
1. Untouched, read-only master
Place the first portal downloads and the saved RFN result in a directory that ordinary users cannot edit. Write protection, immutable object storage, or a permission-controlled evidence repository can serve this purpose. Preserve original filenames and file metadata where the storage system supports it.
Rank #3
- STAY ORGANIZED – Easily convert your paper documents into digital formats like searchable PDF files, JPEGs, and more.Power Consumption : 2.5W or less (Energy Saving Mode: 0.7W). Suggested Daily Volume : 500 scans..Does it contain liquid: no
- CONVENIENT AND PORTABLE –lightweight and small in size, you can take the scanner anywhere from home offices, classrooms, remote offices, and anywhere in between
- HANDLES VARIOUS MEDIA TYPES – Digitize receipts, business cards, plastic or embossed cards, reports, legal documents, and more
- FAST AND EFFICIENT – No technical hurdles or complicated setups here; easily scan both sides of a document at the same time, in color or black-and-white, at up to 12 pages-per-minute, and with a 20 sheet automatic feeder
- BROAD COMPATIBILITY – Works with both Windows and Mac devices, be it laptop or computer
2. Working copy
Make a copy for highlighting, comments, page extraction, redaction, or bundling material for an adviser. Mark it clearly as a working copy. Never replace the master with an annotated version, even if the visual content appears unchanged.
3. Separate backup
Keep at least one backup in a different storage location. Encrypt the backup when it contains taxpayer information, restrict access to people who need it, and log copying or migration events. A backup on the same laptop or the same failing disk is not a meaningful second copy.
Keep the package together
Store the notice, every attachment, the portal verification result, and relevant downloaded correspondence in one evidence package. If your system stores files separately, maintain an index that lists the package members and their hashes. Periodically open PDFs and attachments to confirm that they remain readable; a hash alone cannot tell you whether a file format is still usable.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallHashing and transfer checks
A SHA-256 hash is a fingerprint of a particular byte sequence. Calculate it when the files enter custody and again after copying, migrating, or exporting them. Matching values support a claim that the bytes did not change between those points; a mismatch requires investigation and preservation of both versions.
Windows PowerShell
Run Get-FileHash filename.pdf -Algorithm SHA256 for each file. Record the resulting hash string exactly, together with the filename and the time of calculation.
Linux or macOS
Run sha256sum filename.pdf on Linux or a compatible macOS installation. If your macOS environment does not provide that command, use an approved hashing utility and document its name and version in the log.
Rank #4
- IRIScan Express, portable scanner : scans color and black and white documents a blazing speed up to 8ppm simplex. Color scanning won’t slow you down as the color scan speed is the same as the black and white scan speed.
- IRIScan Express mobile scanner is powered via an included micro USB 2. 0 cable allowing you to use it even where there is no outlet available. Plug it into you PC or laptop and you are ready to scan. USB cable provided. AC Adapter not provided and not needed.
- IRIScan flatbed scanner uses a simplex scanning mode allows for quick and straightforward scanning of single-sided documents. IRIScan with its full portable features is the ideal document scanners for computers.
- IRIScan document scanner : Versatile scanning capabilities, including scanning to Word, PDF, and Excel formats with companion software provided Readiris OCR
- Receipt scanner and card scanner with Additional features include scanning business cards directly to Outlook, photo scanning, and receipt scanning for efficient document management
What a hash does and does not prove
- It shows whether the saved bytes match the earlier copy for which the hash was recorded.
- It does not prove that the issuer is genuine, that the notice is legally valid, or that its contents are accurate.
- It does not replace RFN verification or the portal record.
- It does not justify editing the master; an edited file should receive a new hash and a working-copy label.
What to record in the intake and custody log
A concise log makes the package understandable to someone who was not present at download. Use one row per file and a separate event log for verification and transfers.
| Field | What to record | Why it matters |
|---|---|---|
| GSTIN | The registration used to access the record | Prevents mixing registrations of the same entity |
| Reference or RFN | Exact characters as shown on the portal and PDF | Connects the file to the portal verification |
| Form or record type | For example, DRC-01 summary or DRC-07 order summary, if shown | Identifies the procedural record |
| Issue date | Date printed or returned by the portal | Separates issuance from retrieval time |
| Issuer | Name, designation, jurisdiction, and office where visible | Enables comparison with Verify RFN |
| Portal path | Menu sequence used, including Verify RFN path | Documents how the record was obtained |
| Download time | UTC timestamp, plus local time if required | Establishes acquisition chronology |
| Filename and size | Original filename, extension, and file size | Shows the complete download set |
| SHA-256 | Hash at intake and after each controlled transfer | Detects byte-level changes |
| Verification outcome | Match, mismatch, not found, or unavailable, with date | Preserves the authentication history |
| Custody events | Copy, migration, access, or export and the responsible person | Explains who handled the evidence |
Keep the log itself protected from casual editing. If a correction is needed, append a new dated entry rather than silently changing the original event.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Portal original, verification result, or screenshot?
These artifacts serve different purposes. Use them together rather than substituting one for another.
| Artifact | Independent verifiability | Resistance to alteration | Completeness | Audit, appeal, or litigation use |
|---|---|---|---|---|
| Portal-original PDF package | Can be checked against its RFN and GSTIN | Strong when kept untouched and hash-logged | Includes attachments and original filenames if downloaded completely | Core evidence |
| Portal Verify RFN result | Directly ties the reference to issuer and purpose at the time of checking | Strongest when saved with date, path, and hash | May not contain the full notice text or attachments | Authentication support for the core evidence |
| Screenshot or printout | Weak without the underlying portal record | Easily cropped, edited, or separated from context | May omit attachments, metadata, and the complete response | Useful as a visual supplement, not a sole record |
The portal-original package plus a recorded RFN verification normally offers the strongest chain of proof available to the taxpayer. A screenshot can show what an operator saw, but it cannot replace the downloadable record, its attachments, or a repeatable reference check.
Preparing the package for an audit or appeal
Use a readable index
Create an index document in the working copy that lists the GSTIN, RFN, issue date, issuer, portal path, verification date, and every file with its SHA-256 hash. The index should point to filenames, not rely on page numbers that may change after a reviewer prints the material.
Recommended Free Tools
Separate evidence from analysis
Keep factual portal files in the master package. Put legal arguments, calculations, annotations, and draft replies in a separate working folder. This separation lets you provide the original evidence without exposing internal comments or accidentally presenting a redacted copy as the source document.
Best Value
- Scanner type: Document
- Connectivity technology: USB
- With Auto Scan Mode, the scanner automatically detects what you're scanning
- Digitize documents and images
Preserve the context of missing items
If an attachment was listed but could not be downloaded, retain the error message or screenshot, note the retry times, and record which files were successfully obtained. Do not fill a gap with a recreated spreadsheet or a scan and label it as the portal original.
Give reviewers the verification trail
Supply the RFN result, the date and path of the check, and the comparison notes. If the portal later changes its labels or no longer returns the same result, the contemporaneous record explains what was checked and when.
Troubleshooting common problems
The PDF opens but the signature area is blank
Do not infer invalidity from the blank area. Confirm the RFN through Verify RFN, compare the returned issuer and purpose, and preserve the result. The underlying GST system record can contain the officer’s digital signature even where the rendered PDF does not display one.
The RFN result does not match the notice
Stop processing the document as authenticated. Recheck the GSTIN, transposed characters, leading zeroes, and whether you selected a notice summary instead of an order summary. Preserve both the notice and the mismatch record, then seek clarification from the relevant GST office or qualified adviser.
An attachment downloads with a different name
Keep the portal filename in the evidence directory and add your stable internal name only in the index. Never rename in a way that hides the original extension or makes an attachment appear to be the main notice.
A file changes after transfer
Compare the new hash with the intake hash, identify the transfer or software step that caused the difference, and quarantine the changed copy. Restore from the untouched master or verified backup; do not overwrite the file merely to make the hash match.
The portal is temporarily unavailable
Keep the files already downloaded, record the outage and attempted verification time, and retry when service returns. If a response deadline is approaching, give the adviser or authorised representative the preserved package and the documented verification limitation rather than deleting or altering the files.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsRetention and legal limits
There is no single safe retention period for every GST notice. The period depends on the applicable record, the proceeding, limitation and appeal requirements, organisational policy, and any litigation hold. Confirm the specific rule and case context before deleting a package. When a dispute, audit, or appeal is open or reasonably anticipated, suspend routine deletion and preserve the master, logs, backups, and related correspondence.
Authentication is only one issue. A successful RFN check does not establish that the demand is correct, that service was timely, that the proper officer had jurisdiction, or that a reply or appeal is unnecessary. Use the verified record as the foundation for those separate procedural and substantive reviews.
Quick Recap
A practical final checklist
- Correct GSTIN confirmed after login.
- Notice or order selected by its portal reference.
- Main PDF and every listed attachment downloaded.
- Original filenames retained and an internal index created.
- GSTIN, RFN or reference, issue date, financial year, and issuer recorded.
- Visible signature or verification information preserved.
- Verify RFN completed after login or through the pre-login page, with the result saved.
- Issuer, purpose, reference, and document compared with the portal response.
- UTC download time, portal path, account, and file list logged.
- SHA-256 hashes calculated at intake and after controlled transfers.
- Read-only master, separate working copy, and separate backup created.
- Access, migration, and any mismatch or outage documented.
- Retention period confirmed for the specific record and proceeding.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
