Investigating Employee–Vendor Conflicts of Interest: A Practical Guide

Investigating an employee–vendor conflict of interest means establishing three things: whether the employee (or a director) has an undisclosed personal interest in a vendor, whether they influenced decisions involving that vendor, and whether the company suffered loss as a result. The work combines matching internal records, searching corporate and ownership registries, analysing awards and payments, and interviewing the people involved. In India, the legal framework differs for directors, who have statutory disclosure duties under the Companies Act 2013, and for other employees, who are governed mainly by company policy and employment terms.

Why do conflicts of interest matter?

Undisclosed conflicts are the engine of many corruption schemes. An employee who secretly owns or benefits from a supplier can steer contracts, accept inflated prices, approve poor-quality deliveries and release payments early, without any outside party having to pay a kickback.

The ACFE's Occupational Fraud 2026: A Report to the Nations found corruption, a category that includes conflicts of interest, in 45% of cases, with a median loss of USD 150,000. Conflicts often surface through procurement fraud red flags; see our post on procurement fraud red flags.

What does the law require of directors?

Section 166(4): the duty to avoid conflicts

Section 166(4) of the Companies Act 2013 provides that a director shall not involve themselves in a situation in which they may have a direct or indirect interest that conflicts, or possibly may conflict, with the interest of the company.

Section 184: disclosure of interest

Section 184(1) requires every director to disclose their concern or interest in any company, body corporate, firm or other association of individuals, including shareholding. The disclosure is made at the first Board meeting the director attends, at the first Board meeting in every financial year, and at the first meeting after any change.

Section 184(2) applies to specific contracts. A director who is directly or indirectly concerned or interested in a contract or arrangement with:

• a body corporate in which the director, alone or with another director, holds more than 2% of the shareholding, or is a promoter, manager or Chief Executive Officer; or
• a firm or other entity in which the director is a partner, owner or member,

must disclose the nature of the interest at the Board meeting where the contract is discussed and must not participate in that meeting.

Under s. 184(3), a contract entered into without the required disclosure, or with the participation of an interested director, is voidable at the option of the company. Contravention also attracts penal consequences under s. 184(4).

Section 188: related party transactions

Section 188 requires Board consent, and shareholder approval above prescribed thresholds, for contracts with related parties covering sale or purchase of goods or property, leasing, services, appointment of agents, a related party's appointment to an office or place of profit, and underwriting. Transactions in the ordinary course of business and at arm's length are exempt, and related-party members cannot vote on the resolution.

"Related party" under s. 2(76) includes directors, KMP and their relatives, firms in which a director, manager or relative is a partner, private companies in which they are members or directors, and certain public companies and group entities.

SEBI LODR for listed entities

• Regulation 23(2) requires prior approval of the Audit Committee for all related party transactions and subsequent material modifications, and only independent directors on the committee may approve them.
• Regulation 23(4) requires prior shareholder approval for material related party transactions, and no related party may vote to approve them.
• Regulation 26(5) requires senior management to disclose to the Board all material financial and commercial transactions where they have a personal interest that may conflict with the interest of the listed entity. The Explanation refers to dealings in the entity's shares and commercial dealings with bodies in which management and their relatives hold shares.

Regulation 26(5) is significant because it reaches senior management, not just directors and KMP.

How are employees below senior management covered?

For most employees there is no statutory disclosure duty. Controls rest on:

• A conflict of interest policy defining interests (ownership, directorships, employment, family relationships, loans, gifts) and requiring disclosure and recusal.
• Annual declarations by all staff in procurement, finance, sales and other sensitive roles.
• Transaction-specific declarations by members of tender and evaluation committees before each evaluation.
• Vendor onboarding declarations requiring vendors to disclose relationships with employees.
• Gifts and hospitality registers.
• Disciplinary rules treating non-disclosure as misconduct.

Declarations are only as reliable as the checks behind them. Most undisclosed conflicts are found through data, not self-declaration.

How do you investigate a suspected conflict?

1. Define the allegation and preserve evidence

Write down what is alleged: which employee, which vendor, which contracts and period. Preserve mailboxes, devices, procurement files, vendor master history and payment data before anyone is approached. If the matter came through the vigil mechanism, follow the steps in our guide on how to investigate a whistleblower complaint.

2. Match internal data

Compare the vendor master with the employee master and, where available, declared relatives:

Check vendor creation and change logs: who created the vendor, who approved it, and who changed its bank details. Our post on data analytics for fraud detection explains matching techniques.

3. Establish ownership and control

Search Ministry of Corporate Affairs records for directors and shareholders of corporate vendors. Significant beneficial owner filings under s. 90 of the Companies Act and the Companies (Significant Beneficial Owners) Rules 2018, which apply a 10% threshold, can show who stands behind a company. For partnerships, LLPs and proprietorships, GST registration details, trade licences and bank records help. Beneficial ownership analysis is often where nominee arrangements unravel.

Open-source intelligence adds context: social media connections, shared addresses in public records, news reports and litigation databases. Background verification of the vendor's principals may reveal family links to employees.

4. Test influence and loss

A conflict matters most where the employee influenced decisions. Analyse:

• the employee's role in specifications, shortlisting, evaluation, approval, receipt and payment for the vendor;
• the vendor's share of spend before and after the employee joined or changed role;
• prices paid compared with other vendors and market rates;
• exceptions such as single-source awards, change orders and urgent payments.

Quantify any overpayment or loss with a clear method that can withstand challenge.

5. Interview

Interview procurement colleagues and approvers first, then the subject. Put the documents to them: declarations, ownership records, payment trails. Give the subject a fair chance to explain, for example that the interest was disclosed orally or that they took no part in the decision. Record the interview in writing.

6. Handle personal data carefully

Conflict investigations process employee and family data. Under the Digital Personal Data Protection Act 2023, processing for employment purposes, including safeguarding the employer from loss, is a legitimate use, and most Data Fiduciary obligations under the DPDP Rules 2025 apply from about 13 May 2027. Use only the data needed, restrict access and document the purpose.

What happens after the investigation?

Findings typically lead to disciplinary action, contract review or termination, and recovery of losses. For directors, a contract entered without s. 184 disclosure is voidable at the company's option, and related-party approvals may need to be revisited. Where there is evidence of dishonest intent, offences such as criminal breach of trust by a clerk or servant (s. 316(4)) or cheating (s. 318) under the Bharatiya Nyaya Sanhita 2023 may be relevant. Each route needs specific legal advice.

Prevention closes the loop: risk-based vendor due diligence at onboarding and periodically thereafter, routine vendor-employee matching, and rotation of staff in sensitive roles. For third-party checks before signing, see our guide to business partner due diligence in India.

How Spectra Forensics can help

Our fraud and whistleblower investigation service covers conflict of interest investigations, from data matching and evidence preservation to interviews and reporting to the Audit Committee. Our integrity due diligence team traces ownership and links behind vendors using registry and open-source research. With 1,250+ investigations over 19+ years across 10+ countries, we work from our Pune office. To discuss a suspected conflict, contact us.