Forensic Audit & Investigation Assignments

It is a detailed financial investigation conducted when there is a specific suspicion of fraud, diversion of funds, or financial misconduct — designed to establish what actually happened, trace where the money actually went, quantify the loss, and produce findings and evidence that can support a Board decision, a legal case, an insurance claim, or a regulatory referral. It is fundamentally different from a routine annual audit, which forms an opinion on financial statements based on reasonable assurance and test checks rather than investigating a specific allegation.

A statutory audit under Section 143 of the Companies Act 2013 is a mandatory, annual, retrospective examination of financial statements, using test checks and sampling, to form an opinion on whether they present a true and fair view. A forensic audit is investigative, triggered by a specific red flag, and aims to establish facts with evidentiary rigour sufficient for litigation, arbitration, or regulatory action. A statutory auditor who encounters an indication of fraud during the routine audit has a separate obligation under Section 143(12) to report it — but that reporting duty is not itself a forensic investigation; it typically triggers one.

A forensic audit can be commissioned by the company's Board or Audit Committee, promoters or majority shareholders, a lender or consortium of banks (often as part of RBI's fraud classification process), legal counsel on behalf of a client in a dispute, an Insolvency Resolution Professional under the Insolvency and Bankruptcy Code, or occasionally directed by a regulator, tribunal, or court. Anyone with a legitimate interest and the standing to authorise the investigation and grant access to records can commission one.

FAIS are standards issued by the Institute of Chartered Accountants of India, through its Digital Accounting and Assurance Board, specifically to bring consistency and rigour to forensic accounting and investigation engagements undertaken by Chartered Accountants. They cover matters including engagement acceptance, evidence gathering, documentation, and reporting for forensic work — distinct from the Standards on Auditing that govern statutory audits. PNPC's forensic engagements are conducted with reference to these standards.

It depends entirely on scope, transaction volume, number of entities involved, and whether digital forensics or cross-border tracing is required. A narrow investigation — one vendor, one employee, a clearly defined time period — can often be completed in 4–6 weeks. A multi-entity, multi-year, cross-border diversion investigation involving related parties in both India and the UAE can extend to several months. We provide a realistic timeline only after the initial confidential scoping consultation.

Under the Reserve Bank of India's Master Directions on Fraud Risk Management, banks are required to examine accounts showing early warning signals — diversion of funds, discrepancies between stock statements and physical stock, related-party transactions inconsistent with the stated purpose of the facility, or other red flags — and, where warranted, commission a forensic audit by a bank-empanelled forensic auditor before formally classifying the account as fraud. The forensic audit report is a key input into the bank's decision and its subsequent reporting to the RBI.

A forensic audit report itself is an expert opinion, and the Chartered Accountant who prepares it can be called as an expert witness under the Indian Evidence Act framework (now the Bharatiya Sakshya Adhiniyam) to explain findings and be cross-examined. Whether the underlying documents and evidence referenced are independently admissible depends on how they were gathered, preserved, and authenticated — which is precisely why chain-of-custody discipline during the investigation matters so much. A report built on properly preserved, authenticated evidence carries far more weight than one built on unverified internal documents alone.

Fraud requires intent to deceive for gain — a deliberate act, not a mistake. An error is an unintentional misstatement — a wrong entry, a miscalculation, a genuine misunderstanding of an accounting treatment. A genuine business dispute — a disagreement over valuation, contract interpretation, or performance — may involve no wrongdoing at all. A forensic audit's job is precisely to establish which of these it actually is, based on evidence, rather than assume fraud from the outset. Not every forensic audit concludes that fraud occurred — some conclude the variance was error, or that the dispute has a legitimate commercial explanation.

SFIO is a multi-disciplinary investigation agency under the Ministry of Corporate Affairs, empowered under Sections 210 and 212 of the Companies Act 2013 to investigate corporate fraud on the direction of the Central Government — typically for cases of significant public interest, involving listed companies, or where the Registrar or other regulatory bodies refer the matter. SFIO investigation is a distinct and more serious escalation than an internal forensic audit; SFIO has statutory powers of arrest, search, and seizure that a privately commissioned forensic audit does not.

Under the IBC, 2016, once a Corporate Insolvency Resolution Process (CIRP) begins, the Resolution Professional is required to conduct a transaction audit examining the corporate debtor's transactions for preferential transactions (Section 43), undervalued transactions (Section 45), extortionate credit transactions (Section 50), and fraudulent or wrongful trading (Section 66) during the look-back period preceding the CIRP commencement. This transaction audit is fundamentally a forensic exercise — tracing fund flows and testing related-party dealings — often outsourced to a forensic audit firm supporting the Resolution Professional.

Round-tripping refers to funds being moved out of a company — often disguised as a legitimate payment such as an advance, a consultancy fee, or an investment — and then returned to the company or its promoters through a different, disguised route, creating the appearance of fresh capital, revenue, or an unrelated transaction. Detecting it requires tracing fund flows across multiple bank accounts and entities, often including group companies and, in cross-border cases, foreign entities — precisely the transaction-tracing discipline a forensic audit applies, as distinct from the entity-by-entity, period-by-period lens of a statutory audit.

The investigative discipline is the same — document review, transaction tracing, digital evidence, structured interviews — but the practical considerations differ. Employee-level investigations typically involve HR and labour law considerations (natural justice in any subsequent disciplinary action, notice and hearing requirements before termination for cause), and interview protocols must be carefully structured to avoid any suggestion of coercion, which could undermine both the disciplinary process and any subsequent legal action.

Where a scheme involves deleted accounting entries, altered system logs, suspicious email communications, or data on an individual's device, digital forensics recovers and analyses this electronic evidence under a documented chain of custody — imaging devices before any risk of alteration, extracting metadata that shows when documents were actually created or modified, and reconstructing deleted records where technically possible. PNPC coordinates with specialist digital forensics providers as part of the forensic audit engagement where the scope requires it.

Both, with an important distinction: where PNPC is already the statutory auditor of a company and a fraud indication arises during that audit, we have a specific reporting obligation under Section 143(12) of the Companies Act, and typically the forensic investigation itself is conducted by an independent team — either a separate PNPC forensic team operating under appropriate independence safeguards, or, where independence concerns warrant it, we advise the client to engage an entirely separate firm. Independence is not a formality in forensic work — a compromised or conflicted investigator's findings carry little weight.

Forensic audit fees are scope-driven and not comparable to a standard audit fee schedule — they depend on transaction volume, number of entities and individuals in scope, whether digital forensics is required, whether cross-border tracing is involved, and the evidentiary rigour required for the intended downstream use (internal Board decision versus litigation-ready report versus SFIO-referral-grade documentation). PNPC provides a fee estimate only after the initial confidential scoping consultation, once we understand what the investigation actually needs to cover.

Yes, and in most cases this is essential to the investigation's success. Evidence preservation — securing accounting system backups, restricting document access, and gathering third-party confirmations — is typically done before the suspected individual is aware an investigation is underway, precisely because early awareness creates a real risk of evidence being altered, deleted, or destroyed. We advise clients on this sequencing at the very first scoping conversation.

It happens, and it is a legitimate and useful outcome. A forensic audit that thoroughly investigates a red flag and concludes the variance was due to an accounting error, a genuine timing difference, or a legitimate business explanation gives the Board or commissioning party the confidence to close the matter without further action — and, where the allegation was made against an individual, it can be equally important in clearing that person's name with documented, credible evidence.

Most fidelity guarantee or crime insurance policies require the insured to notify the insurer promptly on discovery of a loss and to provide documented proof of the loss amount and circumstances as a condition of the claim. A forensic audit report — with its transaction-level quantification and evidence trail — is typically the core document supporting such a claim. Insurers frequently engage their own forensic accountant to review or challenge the claimed quantum, so the rigour of the original investigation directly affects the claim's success.

It is entirely relevant. In fact, closely-held and family businesses are frequently where forensic audits are most needed — controls are often informal, trust-based, and concentrated in a small number of individuals, which creates exactly the conditions where diversion or misappropriation can continue undetected for years. Disputes between family shareholders over alleged siphoning are among the more common forensic audit engagements we handle, distinct from institutional corporate fraud cases.

A special purpose audit is a broader category — any audit engagement scoped for a specific, defined purpose outside the standard statutory audit, such as an audit for a specific stakeholder, a specific transaction, or a specific compliance requirement. A forensic audit is one particular type of special purpose engagement — specifically investigative, fraud-focused, and evidence-driven. Not every special purpose audit involves any suspicion of wrongdoing; a forensic audit, by definition, does.

It is common practice for banks to require the borrower to bear the cost of a lender-commissioned forensic audit, particularly where it is triggered by irregularities in the borrower's own account. This is typically a condition specified in the loan agreement or communicated as part of the bank's process under RBI's fraud risk management framework. You should still understand the scope of that audit and consider whether an independent parallel review, engaged directly by you, is warranted to represent your interests.

Every forensic engagement begins with signed non-disclosure undertakings from all PNPC team members involved, a defined and limited circle of individuals at the client who are briefed on the investigation's existence, secure and access-controlled document handling, and communication protocols that avoid discussing the investigation over channels that could be intercepted or discovered by the subject. Given that many engagements depend on the subject remaining unaware until evidence is secured, confidentiality discipline is treated as a core deliverable, not an afterthought.

Yes. PNPC operates from Chennai, Bangalore, Hyderabad, and Dubai, which allows a single engagement team to trace fund flows and examine records across an Indian entity and a related UAE entity without the loss of context that occurs when two separate, unconnected firms handle each jurisdiction independently. Cross-border investigations also require awareness of FEMA reporting obligations on the India side and UAE regulatory and banking-secrecy considerations on the other, which our combined presence is structured to handle coherently.

A forensic audit is fundamentally a detection and investigation exercise — it examines what has already happened. Fraud prevention is a forward-looking discipline — designing and strengthening internal controls, segregation of duties, approval workflows, and internal audit coverage to reduce the likelihood of fraud occurring or going undetected in future. PNPC provides both: the forensic investigation itself, and — as a distinct, follow-on engagement — control redesign and internal audit strengthening informed directly by what the forensic audit revealed about how the specific scheme was possible.

The Prevention of Money Laundering Act, 2002 (PMLA) criminalises dealing with 'proceeds of crime' derived from specified 'predicate offences' — which include several offences under the Companies Act, the Indian Penal Code/Bharatiya Nyaya Sanhita, and other statutes. Where a forensic audit uncovers fund diversion or fraud that constitutes a predicate offence under PMLA's schedule, the matter can attract the attention of the Enforcement Directorate (ED), independent of any parallel Companies Act or criminal proceedings. This is a specialised area, and PNPC works alongside legal counsel where PMLA exposure is identified during an investigation.

This is among the more delicate scenarios in forensic practice. We prioritise independent, third-party sources of evidence — bank confirmations obtained directly, GST portal data, vendor confirmations sent independently — precisely because records held or controlled by the suspected individual may not be reliable or complete. Where the individual also controls IT system access, evidence preservation steps (backups, access log capture) need to happen before the individual is aware of the investigation, often requiring the Board or an independent director to authorise access outside the suspected individual's control.

No. The forensic audit produces findings and evidence; what the commissioning party does with those findings is a separate decision, usually made in consultation with legal counsel. Options range from no further action (where findings do not support the original suspicion), to internal disciplinary action, to civil recovery proceedings, to a criminal complaint, to a regulatory referral (SFIO, RBI, ED) — and the choice depends on the strength of evidence, the amounts involved, the relationship considerations (particularly in family businesses), and the client's objectives.

Look for Chartered Accountants with specific forensic accounting and investigation experience — not general audit experience alone — ideally with exposure to ICAI's FAIS framework, experience working alongside legal counsel on evidentiary matters, and access to digital forensics specialists where the engagement may require them. Ask specifically how many forensic investigations the proposed team has led (as distinct from statutory audits), and whether any of that work has been tested in litigation, arbitration, or a regulatory referral.

Large forensic-only firms bring scale for very large, complex investigations, but they typically have no ongoing relationship with your business before or after the engagement, and their fee structures reflect that scale. PNPC brings four decades of practising CA experience across India and the UAE, a genuine India-UAE cross-border capability from our own offices rather than a correspondent-firm arrangement, and — where you are already or become a PNPC client for statutory audit, tax, or compliance — continuity of context that a one-time specialist engagement cannot replicate. For most mid-market and closely-held business investigations, this combination delivers the evidentiary rigour required without the overhead of a large forensic-only mandate.

Due diligence is a forward-looking risk and value assessment conducted before a transaction — evaluating the target's financial position, contingent liabilities, and business risk to inform pricing and deal structure, generally without any presumption of wrongdoing. A forensic audit is retrospective and investigative, triggered by an actual suspicion of fraud or misconduct, and aimed at establishing what happened with evidentiary rigour. That said, if due diligence uncovers a red flag — an unexplained related-party transaction, inconsistent financial records, or a pattern suggesting manipulation — it can and often does escalate into a forensic audit before the transaction proceeds.

By anchoring every finding to independently verifiable evidence rather than internal company records alone, documenting the methodology used for sampling and tracing so it can be explained and defended, distinguishing clearly between what is proven, what is probable, and what remains unresolved, and having the engagement team available to depose or testify on the findings if the matter proceeds to litigation or arbitration. A report that overstates its certainty, or that cannot explain its own methodology under questioning, is the single most common weakness opposing experts exploit.

Yes. Where a court, the National Company Law Tribunal, or an arbitral tribunal requires an independent forensic accounting expert — whether appointed jointly by consent of the parties or directly by the tribunal — PNPC's forensic team can act in that capacity, applying the same evidentiary discipline as in a privately commissioned engagement, but with the added independence obligations that a court-appointed expert role carries.