Bank Branch Audit

Beyond the LFAR template, the branch auditor independently tests the largest advances (generally 5-10 accounts covering 70%+ of branch credit exposure) against RBI Master Circular on Prudential Norms (IRACP) — verifying correct asset classification (Standard/Sub-Standard/Doubtful/Loss per 90-day overdue norms), adequacy of provisions (15% for Sub-Standard, 25-100% for Doubtful, 100% for Loss), and whether the account should have been reported under SMA-0, SMA-1, or SMA-2 on the CRILC platform. Evergreening arrangements (fresh loans to repay overdue instalments) are a specific red flag the auditor scrutinises.

Yes. The LFAR has a dedicated section on KYC/AML, requiring comment on whether accounts were opened with complete KYC documentation per the RBI Master Direction on KYC (updated through 2023), whether periodic re-KYC has been completed for high-risk customers (every 2 years), medium-risk (every 8 years), and low-risk (every 10 years), and whether STR/CTR reporting obligations under the Prevention of Money Laundering Act 2002 (Section 12) are being met by the branch. Inoperative accounts not flagged for re-KYC are a common LFAR adverse finding.

A bank branch is a deductor under multiple provisions: Section 194A of ITA 1961 (TDS on interest paid to non-senior-citizen depositors above Rs 40,000 per year at 10%), Section 194N (TDS on cash withdrawals above Rs 1 crore at 2%), and Section 206AB (higher TDS at twice the rate for persons who have not filed returns for two preceding years). For TY 2026-27 ongoing compliance, these map to Sections 393 and 397(2) of ITA 2025. The branch auditor verifies Form 26Q filings and checks whether TDS has been deducted and remitted to the Central Government within 7 days of the following month (Rule 30 of Income Tax Rules 1962).

Inter-branch accounts (IBAs) represent amounts payable/receivable between branches through the bank's internal settlement system. Unreconciled IBA entries are a high-risk area because they can mask misappropriation or suppress NPA recognition — a branch can park an NPA amount in an IBA entry to avoid classification. The LFAR requires the branch auditor to report all entries outstanding beyond 6 months and comment on whether old entries have been investigated or written off. RBI Circular DBR.No.Leg.BC.45/09.07.005/2018-19 specifically flags manipulation of IBA entries as a fraud typology.

The branch auditor's primary obligation under SA 240 is to report fraud to management and, if management is implicated, to those charged with governance (the bank's Audit Committee). The RBI Master Direction on Frauds 2016 (updated 2024) requires banks to report frauds above Rs 1 lakh via FMR-1 to RBI within 3 weeks; a branch auditor who identifies a fraud the branch management has concealed must document findings in the LFAR and the Independent Audit Report. Under the Chartered Accountants Act 1949, failure to report a known fraud constitutes professional misconduct under the First Schedule, Part I.