Forensic audit in India: how fraud is traced through the books

Hire Your Detective editorial teamUpdated 21 October 20268 min read

What is a forensic audit?

A forensic audit is an investigation of a business's financial records carried out to answer a specific question: was money diverted, were accounts manipulated, who did it, how much was lost, and can it be proved? The word "forensic" signals that the output is meant to be used as evidence, before a board, a lender, a regulator, an arbitral tribunal or a court.

Forensic accounting is the wider discipline. It includes the audit itself, plus quantifying damages, tracing funds through accounts and entities, and supporting lawyers in litigation. In India this work is done by chartered accountants and firms with forensic specialisation, often with digital forensic and investigation teams. The Institute of Chartered Accountants of India (ICAI) has issued Forensic Accounting and Investigation Standards to guide such engagements.

How is a forensic audit different from a statutory audit?

A clean statutory audit report therefore does not mean there was no fraud. Statutory auditors are not designed to find well-concealed collusion.

When is a forensic audit used in India?

• Bank and lender cases. When a borrower's account shows signs of diversion or siphoning, lenders commonly commission a forensic audit. Its findings feed into whether the account is classified as fraud under the RBI's fraud risk management directions, which also require that the borrower be given a hearing before such a classification.
• Listed companies. Since SEBI's October 2020 amendment to the Listing Obligations and Disclosure Requirements (LODR) Regulations, a listed company must disclose to the stock exchanges the fact that a forensic audit has been initiated and, later, the final report, with management comments. SEBI's FAQs limit this to audits dealing with misstatement of financials or misappropriation, siphoning or diversion of funds.
• Insolvency. Resolution professionals under the Insolvency and Bankruptcy Code use transaction audits to identify preferential, undervalued or fraudulent transactions.
• Internal suspicions. Boards and audit committees order one after a whistleblower complaint, unexplained losses, or a sudden exit of senior finance staff. See workplace and whistleblower investigations.
• Disputes between partners or shareholders, and pre-deal checks where the numbers look too good, as part of financial due diligence.
• Courts and tribunals sometimes appoint forensic auditors in commercial, oppression and mismanagement cases.

What is the forensic audit investigation process?

1. Define the mandate. Who is commissioning it, what is suspected, which entities and period, and what the report will be used for.
2. Secure data. Preserve accounting system data, bank statements, ERP logs, email and devices, with a documented chain of custody, so electronic records can be supported by a certificate under s.63 of the Bharatiya Sakshya Adhiniyam, 2023.
3. Analyse. Run data analytics on ledgers: duplicate payments, round-sum entries, weekend postings, unusual vendors, journal entries by senior staff, related-party flows.
4. Trace funds. Follow money from the company's accounts to vendors, related entities and individuals, mapping ownership through MCA records.
5. Examine documents. Check invoices, contracts and approvals for alteration, backdating or forgery.
6. Interview. Speak with staff, management and sometimes the persons suspected, giving them a chance to explain.
7. Report. Set out facts, evidence, quantification and limitations, without declaring anyone guilty, which is for the authorities and courts.

What can a forensic accountant find?

• Fictitious or inflated vendor invoices and ghost suppliers.
• Payroll fraud: ghost employees, inflated overtime, payments after exit.
• Diversion of loans to related companies or personal use.
• Revenue manipulation: fake sales, channel stuffing, round-tripping.
• Undisclosed related-party transactions.
• Expense claim fraud and personal spending through the company.
• Concealed income or assets moved out of the business before a dispute.

What it cannot do on its own is reach data outside the entity's control. It cannot lawfully pull a third party's bank statements; those come through court orders, regulators or police. Where the trail leaves the books and you need to locate property or businesses held by individuals, that is the work of asset tracing, which complements a forensic audit.

How is forensic accounting used in divorce cases?

In maintenance and alimony disputes, the earning spouse often runs a business or practice. Declared income can be very low while lifestyle says otherwise. Courts in India rely on sworn affidavits of assets and liabilities, a requirement laid down by the Supreme Court in Rajnesh v. Neha (2020), and a forensic accountant can test those affidavits.

Typical work: comparing ITRs and GST turnover with bank credits, spotting personal expenses booked in the business, identifying sudden salary cuts or transfers to relatives just before or after the case was filed, and estimating realistic income. The accountant works on documents your lawyer has, or obtains through court directions for production. This ties closely to our guide on hidden income in maintenance cases and to alimony and maintenance in India.

What warning signs justify a forensic audit?

Boards and owners usually commission a forensic review after one or more of these signals:

• Cash flow consistently weaker than reported profits, or receivables that keep growing without collection.
• A whistleblower complaint naming specific transactions or people.
• Payments to vendors that no one outside one department has met, or to new vendors just below approval limits.
• Large or frequent related-party transactions that were not properly approved.
• Statutory auditors resigning, qualifying their report, or flagging internal control weaknesses.
• A lender or rating agency raising questions about the use of loan funds.
• Senior finance staff leaving suddenly, or resisting handover of records.

None of these proves fraud. They justify a scoped, independent look before the trail goes cold. Start by preserving data, because the first sign that an audit is coming is often when records begin to disappear.

How much does a forensic audit cost in India, and who does it?

There is no standard fee. Cost depends on the number of entities, period covered, volume of transactions, whether digital forensics and interviews are needed, locations, and how urgent the deadline is. A narrow review of one vendor's transactions is a very different exercise from a multi-year audit of a group. Ask for a written scope and fee estimate, and agree what happens if the scope expands.

Forensic audits are done by chartered accountancy firms with forensic practices and by specialised advisory firms. Check the team's qualifications, independence from the people under review, and experience presenting findings to lenders or courts. Private investigators do not audit accounts, but a corporate investigator often supports the forensic team with field verification of vendors, background checks on suspected related parties and discreet enquiries.

Bottom line

A forensic audit is the right tool when you need to prove and quantify financial wrongdoing, not just suspect it. Define a clear mandate, secure the data before anyone is alerted, use qualified independent professionals, and pair the audit with lawful field enquiries where the money has left the books.

This guide is general information, not legal advice. Laws and procedures change, and every case is different — speak to a lawyer about your situation. In an emergency, call 112.