Troubleshooting
Lost or Stolen DSC Token? What to Do Right Away
Published September 30, 2026 · By DSCKart
A missing or unusable DSC token needs different action depending on whether it was lost, stolen, locked or damaged. Start by securing your certificate and checking with the Certifying Authority that issued it before applying for a replacement.
What should I do first if my DSC token is lost or stolen?
Contact your Certifying Authority (the provider that issued the DSC) immediately and request revocation of the certificate, so that nobody can sign documents in your name. Then change any passwords on portals where the DSC is registered.
- Request revocation from the issuing CA using your identity details.
- Check recent filings on MCA, GST, Income Tax, DGFT, ICEGATE and e-tender portals for anything you did not sign.
- Update or deregister the DSC on portals where it is registered.
- Apply for a fresh DSC on a new token.
Can someone misuse a lost DSC token without the PIN?
A token is protected by a PIN, and repeated wrong PIN attempts lock it, so misuse is difficult but not impossible if the PIN is weak or was written down. Revoke the certificate as a precaution.
Never keep the PIN on a sticky note or stored with the token. If someone may know your PIN, tell the issuing CA when you report the loss.
What is the difference between a lost token, a forgotten PIN and a blocked token?
A lost or stolen token calls for revocation and a new DSC. If the token is still with you, the next step depends on whether the PIN is forgotten, blocked or the device is not detected.
- Lost or stolen: Request revocation and apply for a fresh DSC on a new token.
- Forgotten PIN: Try any PIN you may have set without repeatedly guessing. The token manufacturer or CA support may be able to guide you, depending on the token model and CA policy.
- Blocked after wrong attempts: The token may need to be re-initialised, which generally removes the certificate from it. A reissue from the CA is usually required, depending on the token model and CA policy.
- Damaged or not detected: Check the driver, USB port and another computer first. See our common DSC errors guide before assuming the token needs replacement.
Can I get a replacement DSC without buying a new one?
Rules and any fee for a reissue depend on the Certifying Authority and the certificate's remaining validity, so confirm with the CA that issued it.
Under the CCA FIPS 140-3 advisory, new issuances after 21 September 2026 go on FIPS 140-3 compliant tokens. Read the FIPS 140-3 token guide for the rules, including the limited exception for a qualifying reissue.
How do I protect my DSC token in future?
Keep the token and its PIN separate, and check regularly that you can still use it when a filing is due. A few simple habits reduce the risk of loss and unauthorised use.
- Keep your PIN private and memorable; do not store it with the token.
- Keep a note of your token model and DSC expiry date so you can plan your renewal.
- Do not share the token with staff or consultants without appropriate controls.
- Keep the token in a safe place and remove it when you are not signing.
- Consider a cloud DSC where appropriate and supported by your filing portal.
Frequently Asked Questions
What should I do if my DSC token is stolen?
Contact the Certifying Authority that issued your DSC immediately to request revocation. Check recent filings for unauthorised activity, change relevant portal passwords and arrange a fresh DSC on a new token.
Do I need to revoke my DSC if I only lost the token?
Yes, request revocation from the issuing Certifying Authority even if you think the token was simply misplaced. This helps prevent someone else from using your certificate if they find it.
What happens if I enter the wrong PIN too many times?
The token may lock after repeated incorrect PIN attempts. Contact the token manufacturer or issuing CA for model-specific help; resetting the token generally removes the certificate and may require a reissue.
Can I recover a certificate from a formatted or reset token?
Generally no. The private key is generated on and stored in the token and cannot be exported, so a reissue from the Certifying Authority is usually needed.
Will my past filings become invalid after revocation?
Revocation applies from the time it takes effect; it does not automatically invalidate earlier filings. For specifics about a disputed filing, consult the relevant portal and your Certifying Authority.
How long does it take to get a replacement DSC?
It depends on the Certifying Authority and verification method. DSCKart approvals are typically about 15 minutes with Video KYC, plus delivery time if a new token is needed.
Need a replacement DSC?
Confirm your certificate's status with the issuing CA before choosing a fresh DSC or renewal.
This article is general guidance. Your issuing Certifying Authority and the relevant filing portal can confirm the steps and reissue terms that apply to your certificate.