Skip to content
PHMG & Associates

Audit & Assurance

Bank Statutory Audit – Appointment, Scope and Reporting

This page explains how a bank statutory audit is carried out in India: who appoints the auditors, what the audit examines, and how findings are reported. PHMG & Associates is empanelled with the Reserve Bank of India in Category-I and with the Comptroller and Auditor General of India.

8 documents
6 steps
Partner review

What is Bank Statutory Audit?

A bank statutory audit is the audit of a bank's financial statements required under the Banking Regulation Act, 1949 and the Companies Act, 2013. Statutory central auditors report on the bank as a whole, while branch auditors examine allotted branches, concentrating on advances, income recognition, asset classification and provisioning.

Who needs it

  • Public sector banks, whose statutory central and branch auditors are appointed with the Reserve Bank's approval.
  • Private sector banks and small finance banks, which appoint statutory auditors with the Reserve Bank's prior approval under the Banking Regulation Act.
  • Regional rural banks, where the sponsor bank and the government have a role in the appointment.
  • Urban co-operative banks, which follow the Reserve Bank's guidelines on appointing statutory auditors.
  • Audit firms allotted individual branches for branch statutory audit after the financial year closes.

Benefits

  • An independent opinion on whether the financial statements give a true and fair view.
  • Examination of whether advances are classified and provided for in line with the Reserve Bank's income recognition and asset classification norms.
  • A Long Form Audit Report that records observations for the bank's management and its regulator.
  • A memorandum of changes setting out adjustments the auditor proposes to the accounts as drawn up.
  • Reporting on the specific matters the Companies Act and the Reserve Bank require the auditor to address.

Key facts

ItemPosition
Who is auditedBanking companies, public sector banks, regional rural banks and co-operative banks
Governing lawBanking Regulation Act, 1949 and the Companies Act, 2013, with the Reserve Bank's directions
Who appointsThe bank, with the Reserve Bank's prior approval or through its allotment process
Main reportsAudit report, Long Form Audit Report, memorandum of changes, tax audit and certificates as applicable
Usual timingApril to May for branch audits, after the 31 March closing
Key prudential normsIncome recognition and asset classification (IRAC) norms and the related provisioning requirements

How are bank statutory auditors appointed?

A bank cannot simply engage an auditor of its choice. A banking company appoints its statutory auditors with the prior approval of the Reserve Bank of India, and the Reserve Bank has issued guidelines setting out the eligibility conditions for statutory central auditors and statutory auditors, including the firm's size, the experience of its partners and limits on how many such assignments one firm may hold at a time. Rotation and a cooling-off period also apply, so a firm cannot hold the same bank's audit indefinitely.

For public sector banks, firms are drawn from the panel maintained for the purpose, and branch audits are allotted from that panel. The practical consequence for a bank is that the appointment has to be planned well before the year end, because an appointment that has not been approved cannot be acted upon. The practical consequence for a firm is that empanelment and the eligibility conditions have to be maintained year after year, not just once.

What does a bank statutory audit cover?

The bulk of the work sits on the advances portfolio, because that is where a bank's risk and its judgement concentrate. Beyond advances, the audit covers the areas below.

  • Advances: sanction and documentation, drawing power, security, end use, and classification under the IRAC norms
  • Income recognition: whether interest and fees have been recognised correctly, and whether income has been reversed where an account has become non-performing
  • Provisioning: whether provisions against standard, sub-standard, doubtful and loss assets meet the prescribed rates
  • Deposits: interest rates applied, maturity classification, and inoperative and unclaimed accounts
  • Balancing and reconciliation: subsidiary ledgers, suspense, sundry and inter-branch accounts
  • Cash, other assets, contingent liabilities and off-balance-sheet items such as guarantees and letters of credit
  • Compliance with the Reserve Bank's directions and the correctness of the returns the branch submits to central office

How does a statutory audit differ from a concurrent or stock audit?

These three assignments are often confused because the same firm may hold more than one of them at different branches. They differ in who the report is for, when the work happens and what it covers.

Statutory auditConcurrent auditStock audit
What is examinedThe bank's financial statementsThe branch's transactions as they occurA borrower's stock and receivables
WhenAfter the year endContinuously through the yearPeriodically, as the sanction requires
Reports toShareholders, with the regulator receiving prescribed reportsThe bank's management and audit committeeThe lending bank
Main outputAudit opinion, LFAR, memorandum of changesPeriodic concurrent audit reportStock audit report with drawing power observations
Who is the subjectThe bankThe branchThe borrower

What is the Long Form Audit Report?

The Long Form Audit Report, usually shortened to LFAR, is a structured report that bank auditors complete alongside the audit opinion. The Reserve Bank prescribes its format. Where the audit report gives a short opinion on the financial statements, the LFAR answers detailed questions about how the branch or the bank actually operates: how advances are monitored, whether the branch follows up on overdue accounts, how well the books are balanced, and whether internal controls over areas such as cash and credit work in practice.

Because the LFAR is read by the bank's management and, in aggregate, by its regulator, the observations in it tend to have a longer life than the audit opinion itself. Branches are usually asked to respond to each observation and to report what they have corrected.

What is a memorandum of changes?

A memorandum of changes is the auditor's list of adjustments to the accounts as the branch or the bank originally drew them up. In a bank audit it most often arises from the classification of advances: the auditor concludes that an account should move from standard to non-performing, that a higher provision is needed, or that interest recognised as income should be reversed. The memorandum records each proposed change and its effect, and the figures are taken into account when the final accounts are compiled.

Example: how one advance is reviewed

The figures below are illustrative and are used only to show the sequence of the review. A branch has sanctioned a working-capital limit of ₹2 crore against stock and book debts. The auditor traces the sanction letter and confirms the limit and its renewal date, then checks whether the charge over the security is registered. The borrower's stock statements are compared with the drawing power the branch allowed in the account: if the statement for a month was not received, the auditor looks at whether the branch restricted the drawing power as the sanction requires. The account's record of recovery is then tested against the IRAC norms to see whether the amount has remained overdue beyond the prescribed period. If it has, the auditor considers whether classification, provisioning and the reversal of recognised interest were dealt with correctly, and records any proposed change in the memorandum of changes.

Official sources

Documents required

  1. 01Trial balance and the branch or bank returns for the year
  2. 02Advance files: sanction letters, security documents, limit and renewal records
  3. 03Statements of non-performing assets, provisioning and restructured accounts
  4. 04Income recognition records and details of interest applied or reversed
  5. 05Credit monitoring reports, stock statements and drawing power calculations
  6. 06Previous year's audit report, Long Form Audit Report and memorandum of changes
  7. 07Concurrent audit, internal audit and inspection reports covering the period
  8. 08Balancing position of subsidiary ledgers, suspense and inter-branch accounts

Due dates and penalties

ItemDue dateIf missed
Branch statutory auditUsually April and May, after the 31 March closingDelays the bank's own reporting timetable
Statutory central audit and adoption of accountsAs fixed by the bank's board calendar for the yearRegulatory and listing reporting delays
Auditor appointment and regulatory approvalBefore the audit period begins, as the Reserve Bank's guidelines requireThe appointment cannot be acted upon until approved

Each bank fixes its own closing calendar and the Reserve Bank issues the timetable for approvals and appointments for the year. We confirm the applicable dates with the bank before fieldwork begins.

Mistakes to avoid

  • An account kept as standard when its record of recovery shows it should have been classified as non-performing.
  • Interest applied to accounts on which income recognition should have stopped.
  • Security documents incomplete, unstamped or charges not registered in advance files.
  • Drawing power computed from stock statements that are out of date or were never received.
  • Subsidiary ledgers, suspense and inter-branch accounts left unbalanced at the year end.
  • Observations from earlier statutory, concurrent or inspection reports not acted upon.

Why PHMG

  • Partner-led: a chartered accountant reviews your work, not only a junior team.
  • Clear fee and scope in writing before we start.
  • Deadlines tracked for you, with reminders well before the due date.
  • Your documents and data are handled confidentially.
  • Online service across India, with a single point of contact.

Fees depend on your case. Request a quote for a clear scope and fee.

How we handle your bank statutory audit

Step 01

Appointment and communication

The bank makes the appointment and the incoming auditor communicates with the previous auditor, as the Institute's guidelines require.

Before fieldwork

Step 02

Planning and risk assessment

We review the portfolio, the branch profile and earlier observations to set the sample of advances and the areas to test.

2–3 days

Step 03

Advances and asset classification

We examine borrower files, test classification against the IRAC norms, and check provisioning and interest application.

Most of the audit

Step 04

Other audit areas

Balancing of books, cash and other assets, deposits, contingent liabilities, tax matters and the correctness of branch returns.

2–4 days

Step 05

LFAR and memorandum of changes

We prepare the Long Form Audit Report and list the changes we propose to the accounts for the branch or central management.

1–2 days

Step 06

Report and clearance

We issue the audit report and respond to queries raised by the statutory central auditors.

Before the bank's reporting date

Frequently asked questions

Quick answers to the questions we hear most often.

Still have a question?

A chartered accountant will look at your case and reply within one business day.

Ask a CA
Who appoints the statutory auditors of a bank?

It depends on the type of bank. Banking companies appoint their statutory auditors with the prior approval of the Reserve Bank of India under the Banking Regulation Act, 1949, and the appointment is placed before the shareholders. For public sector banks the allotment of statutory central auditors and branch auditors follows the Reserve Bank's process and the empanelment list maintained for the purpose. Regional rural banks and co-operative banks follow their own governing provisions.

What is the difference between a statutory audit, a concurrent audit and a stock audit?

A statutory audit is an annual audit of the bank's own financial statements and ends in an audit opinion. A concurrent audit is an ongoing check of a branch's transactions during the year, reporting to the bank's management rather than to shareholders. A stock audit is a verification of a borrower's stock and receivables held as security, done for the lending bank. The three are separate assignments with different objectives.

What is LFAR?

LFAR stands for Long Form Audit Report. It is a detailed questionnaire-style report that bank auditors complete in addition to the audit opinion, covering areas such as advances, deposits, profitability, internal controls and the balancing of books. The Reserve Bank prescribes its format, and the bank's management and its regulator use it to follow up on specific weaknesses.

What is a memorandum of changes?

A memorandum of changes is the list of adjustments the auditor proposes to the accounts as they were drawn up by the branch or the bank. It typically covers reclassification of advances, additional provisioning, reversal of income or correction of balances. The changes it records are considered when the final accounts are compiled.

How long does a bank branch audit take?

It depends on the size of the branch, the number and size of advances, and how well prepared the records are. A small branch may take a few days and a large branch with a substantial credit portfolio considerably longer. Branch audits are concentrated in the weeks after 31 March because banks work to a fixed closing calendar.

What are the IRAC norms?

IRAC stands for income recognition and asset classification. These are the Reserve Bank's prudential norms that decide when a loan account becomes non-performing, how it is classified between sub-standard, doubtful and loss categories, how much provision must be made against it, and when interest may no longer be recognised as income. Testing advances against these norms is a central part of a bank statutory audit.

Does an audit firm need to be empanelled to take bank audit work?

For public sector bank assignments, firms are selected from the panel maintained for the purpose, and the eligibility conditions cover matters such as the number of partners, their experience and the firm's standing. Private banks apply the Reserve Bank's eligibility criteria for appointing statutory auditors. PHMG & Associates holds Reserve Bank of India Category-I and Comptroller and Auditor General of India empanelment.

Last reviewed: October 2026

This content is for general information and does not constitute professional advice. Laws, rates and due dates change; please confirm the current position for your case before acting.

Speak to a chartered accountant

Ready to get started?

Tell us what you need. A qualified CA will review it and reply with next steps and a clear fee.

Reply within one business day · Your data stays confidential

CallWhatsAppEnquire