Why India’s Shop Act licence cannot carry merchant verification alone

The document is often a small business’s first formal record, but lenders and payment firms must verify it against state portals, tax records and evidence that the business genuinely operates.

A Shop Act licence may look like a routine piece of paperwork, but for many small Indian businesses it is the first formal record of their existence. Kirana shops, salons, small trading offices and other neighbourhood merchants often receive it before they obtain a broader tax or corporate footprint, which is why it appears so often in merchant onboarding. Yet its value is often overstated: a certificate can be old, altered, issued under an earlier law, or simply belong to a different business at the same address, so it should never be treated as a stand-alone proof of legitimacy. According to BeFiSc’s guide, the real task is to verify the document against independent records rather than assume the paper itself settles the question.

The underlying reason is structural. India does not have a single national registry for Shops and Establishments registrations, and the rules vary by state. The document may be called a registration certificate in one jurisdiction and an intimation receipt in another, depending on local law and the size of the workforce. BeFiSc notes that Maharashtra and Gujarat both draw a distinction between establishments with ten or more workers, which must register, and smaller units, which only need to file an intimation. That makes the certificate useful, but also limited: it proves the business has interacted with a state labour authority, not that every detail on the document is still current or consistent with other records.

That distinction matters in onboarding and compliance. BeFiSc says Reserve Bank of India KYC rules have treated a Shops and Establishments certificate as one acceptable proof of business existence for sole proprietorships, usually alongside another document. For payment aggregators, the practical standard is even stricter: the merchant’s declared business activity, tax footprint and ownership details should line up across multiple sources. The guide warns that common risk patterns include edited PDFs, expired registrations, borrowed premises, and licences used for an activity that does not match the merchant’s actual line of business. A certificate for a general store, for example, may not sit comfortably beside a merchant profile that is trying to process payments for high-value electronics or gaming.

The most reliable approach is therefore layered. BeFiSc recommends checking the certificate at source where the state portal allows it, then cross-verifying the merchant against GST registration, Udyam data, and, where relevant, Ministry of Corporate Affairs records. That means matching the business name, address, proprietor or director details, and the stated activity against independent evidence such as an active website, marketplace listing or other digital footprint. Where those records conflict, the guide says contact point verification becomes important. Recent state-specific guidance from Maharashtra also shows how the process can work in practice: applicants can check status online, see whether an application is submitted, under review, approved or rejected, and later download the approved certificate from the portal. That makes state portals the best place to confirm whether a document is genuine, current and issued under the right authority.

For lenders, payment companies and marketplaces, the larger lesson is that a Shop Act licence should be treated as a starting point, not a conclusion. It is often the first official document a small merchant can produce, which is precisely why it is so widely used and so often misread. A strong onboarding process does not ask the certificate to do more than it can. It checks the state record, compares it with GST and Udyam, and looks for signs that the business actually exists in the real world. In practice, that approach is faster, safer and more accurate than relying on a single document that was never designed to carry the whole burden of identity verification.