What is a forensic audit?

A forensic audit is an evidence-led examination of books, transactions and documents carried out to answer a specific question: did a fraud or irregularity happen, how was it done, who was involved and what did it cost? Unlike a routine audit, it starts from an allegation or suspicion and works towards findings that can stand up before a tribunal, regulator or court.

What does a forensic audit involve?

A typical engagement moves through a predictable sequence, although the scope is set by the allegation rather than by a standard checklist.

• Scoping and preservation: agreeing the questions, period and entities in scope, and securing ledgers, emails and devices before they can be altered.
• Data analysis: testing the general ledger, payments, vendor and customer masters and bank statements for anomalies, duplicates, unusual journal entries and related-party links.
• Document examination: tracing selected transactions to invoices, contracts, approvals and delivery records to see whether they are genuine.
• Fund-flow tracing: following money out of the organisation to identify where it went and who benefited.
• Interviews: speaking to process owners and, at the end, the people whose conduct is in question.
• Reporting: a factual report that separates evidence from opinion and quantifies the loss.

Because the output may be relied upon in proceedings, electronic evidence is handled with a documented chain of custody, and records intended for court are produced with a certificate under s. 63 of the Bharatiya Sakshya Adhiniyam 2023.

When is a forensic audit commissioned in India?

Common triggers include a complaint through the company's vigil mechanism, a statutory auditor's concern that could lead to fraud reporting under s. 143(12) of the Companies Act 2013, and suspected financial statement fraud or diversion of funds.

Lenders are another major source. Under the RBI (Commercial Banks – Fraud Risk Management) Directions, 2026, which replaced the 2024 Master Directions, a bank may have a red-flagged account investigated by an external or internal audit under its Board-approved policy. In insolvency, resolution professionals commonly appoint transaction auditors to support their review of avoidance transactions; see forensic audit in CIRP.

How does SEBI define a forensic audit?

For listed entities, the initiation of a forensic audit is a deemed-material event under Schedule III of the SEBI (LODR) Regulations 2015. The entity must disclose that the audit has begun, who initiated it and the reasons if known, and later the final report with management comments (except for audits initiated by regulatory or enforcement agencies).

The Explanation describes a forensic audit as one aimed at detecting misstatement in financial statements, misappropriation, or siphoning or diversion of funds. It excludes reviews of matters such as quality, manufacturing, recruitment or procurement processes that would not require the financial statements to be revised.

What red flags typically lead to one?

• Payments to vendors that cannot be matched to deliveries or contracts.
• Unexplained gaps between reported profit and operating cash flow.
• Round-sum or period-end journal entries posted by senior staff.
• Loans or advances to entities with undisclosed links to promoters.
• A sudden change in the behaviour or lifestyle of a key employee.

How is it different from related terms?

A statutory audit gives an opinion on whether financial statements are true and fair, using sampling and materiality; it is not designed to find every fraud. The practical differences are explored in forensic audit vs statutory audit.

Forensic accounting is the wider discipline. It includes forensic audits, but also loss quantification, damages computation and expert work in disputes where no fraud is alleged. A forensic audit is therefore one engagement type within forensic accounting, focused on investigating suspected wrongdoing in the records.

Spectra Forensics' forensic accounting and data analytics service covers this kind of engagement, from scoping and data review to an evidence-backed report.