Trusted by 10,000+ Businesses

Statutory Audit for Financial Services Companies in India 2026

Reviewed by CA and CS Team, Patron Accounting LLP ICAI & ICSI Registered| 15+ Years Experience| Last Updated: Verify Credentials →

Documents: Trial balance, loan book with DPD ageing, RBI Certificate of Registration (Form CoR), CRAR computation, NBS quarterly returns, Ind AS 109 ECL model, IRACP Impairment Reserve working

Fees: Starting Rs 1,50,000 for NBFC-Base Layer with AUM under Rs 100 crore; scales by SBR layer, loan book size and product mix

Eligibility: Every Indian NBFC, HFC, fintech lender, MFI, AIF Manager and financial services company under Section 139 - irrespective of profit. RBI Certificate of Registration under Section 45-IA mandatory

Timeline: 5 to 9 weeks fieldwork; loan book sampling; IRACP and ECL parallel computation; Para 9C auditor certificate to RBI

10,000+ Businesses Served | 4.9 Google Rating | 50,000+ Documents Filed | 15+ Years

Call +91 945 945 6700 Email Us WhatsApp Us

15+ YearsIndustry Experience

CA & CSCertified Experts

4.9

Based on 500+ reviews

Get Free Consultation

Talk to a CA/CS expert today

Full Name

Phone Number

City

Service Needed

Our team will get back to you shortly. No spam.

Real Stories from Real People

Hear how teams across industries use Patron to save time, cut costs, & stay in control.

“

The statutory audit was clean and completed well before deadline. No last-minute rush. Patron team handled the IRACP re-classification and Ind AS 109 ECL reconciliation under a single CA partner - we used to have three different advisors for these three workstreams.

NBFC-BL CFO

Non-Deposit NBFC, Mumbai

★★★★★

2 months ago

“

Para 9C auditor certificate to DNBS was filed within the 90-day window with the 50-50 test working that withstood the next supervisory inspection - the inspecting RBI officer specifically commented on the working paper quality.

NBFC-ML Compliance Head

Middle-Layer NBFC, Delhi

★★★★★

3 months ago

“

FLDG and LSP arrangement audit was the deal-breaker for our Series C investor diligence. Patron clarified the FLDG cap compliance, the escrow mechanism, and the LSP commission recognition under Ind AS 115. Investor cleared the round in 60 days.

Fintech Founder CFO

Digital NBFC, Bangalore

★★★★★

1 month ago

“

Patron handled the parallel NHB norms overlay on top of the standard NBFC audit. Risk-weights for housing finance, mortgage testing, and the NHB returns cross-check were delivered in 6 weeks. CRAR computation tied to the basis-point.

HFC Finance Director

Housing Finance Company, Pune

★★★★★

4 months ago

“

INR-USD valuation under SEBI AIF Regulation 23 was always a contentious area. Patron provided a robust valuation working with comparable transactions, DCF, and Ind AS 113 fair value hierarchy. Investor reporting tied through clean.

AIF Manager

SEBI Cat II Fund, Gurugram

★★★★★

5 months ago

“

Multiple-MFI exposure checks under RBI Microfinance Directions 2022 were tested borrower-by-borrower. The household income cap compliance and the multiple-lender exposure limit were verified against actual borrower data. Supervisory rating improved.

NBFC-MFI Finance Head

Microfinance Institution, Chennai

★★★★★

6 months ago

Join 10,000+ Satisfied Businesses

RBI prudential norms, IRACP NPA classification, CARO 3(xvi), CRAR, Ind AS 109 ECL, Para 9C certificate - delivered under one CA partner from Rs 1,50,000.

Talk to an Expert

10,000+Businesses ServedGST compliance and litigation support across India.

15+Years ExperienceDeep expertise in IP registration, GST & business compliance.

50,000+Documents FiledReturns, appeals, and filings handled accurately.

4.9★Client RatingTrusted by entrepreneurs, startups, and growing businesses.

ISO CertifiedProfessional standards and documented processes.

SSL SecureYour financial and business data is fully protected.

Overview What It Covers Who Needs It Patron Services 6-Step Process Documents Common Challenges Fees Timeline Why Patron DIY vs Big-4 vs Patron FAQs

Statutory Audit for Financial Services: A Snapshot

📌 TL;DR - Financial Services Audit Services at a Glance

Statutory audit for financial services companies in India is the annual independent examination of financial statements under Section 143 of the Companies Act, 2013, with six sector-specific risk areas: RBI Master Direction prudential norms compliance, IRACP-based NPA classification with the 90-day overdue trigger, CARO clause 3(xvi)(a) to (d) registration and CIC verification, capital adequacy (CRAR) computation at 15 percent minimum with 10 percent Tier I, Ind AS 109 expected credit loss model with RBI Impairment Reserve overlay, and Para 9C separate auditor certificate to the RBI on the 50-50 test outcome.

Quick-Reference Summary Table

Parameter	Detail
Governing Act	Companies Act, 2013 - Sections 139 to 148; RBI Act, 1934 - Section 45-IA
Applicable To	NBFCs, HFCs, fintech lenders, MFIs, AIF Managers, gold loan companies, vehicle finance companies, NBFC-Factor, NBFC-AA, NBFC-P2P
SBR Framework	NBFC-BL (Base, AUM under Rs 1,000 cr) / NBFC-ML (Middle, Rs 1,000 to 10,000 cr or specified) / NBFC-UL (Upper, top 10 by parametric scoring) / NBFC-TL (Top, currently empty)
NPA Norm	90 days past due for NBFC-ML, UL and TL; glide path applies to NBFC-BL
CRAR Minimum	15 percent (Tier I 10 percent) for NBFC-D and NBFC-ML/UL/TL
NoF for Registration	Rs 2 crore (Rs 10 crore for new NBFC-ICC w.e.f Oct 2022)
Cost Starting From	Rs 1,50,000 (Patron - NBFC-BL, AUM under Rs 100 crore)

Financial services audits operate at a tighter regulatory standard than any other industry in India. The auditor reports not only to shareholders under Section 143 of the Companies Act, but also separately to the Reserve Bank of India under Paragraph 9C of the NBFC Prudential Norms Directions confirming the entity qualifies as an NBFC under the 50-50 test.

CARO clause 3(xvi) has four sub-clauses specific to financial-services companies covering registration under Section 45-IA, conduct of business without Certificate of Registration as an offence under Chapter V of the RBI Act, Core Investment Company qualification, and multi-CIC group identification. Add Ind AS 109 expected credit loss modelling with RBI parallel IRACP Impairment Reserve framework introduced 13 March 2020, and the audit becomes a tri-track exercise of Companies Act, RBI Master Directions, and ICAI Standards on Auditing - delivered by Patron under a single CA partner.

Content is reviewed quarterly for accuracy.

What Is Statutory Audit for Financial Services Companies?

Statutory audit for financial services companies is the legally mandated annual examination of financial statements under Section 143 of the Companies Act, 2013, covering six sector-specific risk areas: RBI Master Direction compliance, IRACP-based NPA classification, CARO clause 3(xvi) registration verification, capital adequacy (CRAR), Ind AS 109 expected credit loss with IRACP Impairment Reserve overlay, and Para 9C auditor certificate to the RBI.

It is conducted by an independent practicing Chartered Accountant holding a valid Certificate of Practice from ICAI. The audit applies to every Indian financial services company regardless of size or profit - a Base-Layer NBFC with Rs 50 crore AUM and a Middle-Layer NBFC with Rs 5,000 crore AUM are equally bound. The auditor opinion under SA 700 is filed with the Registrar of Companies in Form AOC-4 within 30 days of the AGM, Form ADT-1 intimates auditor appointment within 15 days of the board resolution, and the Para 9C auditor certificate is filed separately with the Department of Non-Banking Supervision of the RBI for NBFCs. Source: Reserve Bank of India.

What distinguishes financial-services audits is the depth of regulatory testing. The auditor independently re-classifies the entire loan book on a Days-Past-Due (DPD) basis as Standard, Sub-standard, Doubtful (D1, D2, D3) and Loss; re-computes interest income reversal for accounts that crossed the 90-day NPA trigger during the year; validates the CRAR calculation against risk-weighted assets under the RBI risk-weights matrix; reconciles the Ind AS 109 expected credit loss provision with the IRACP provisioning floor; and signs the Para 9C certificate to the RBI confirming the entity continues to qualify as an NBFC under the 50-50 test (financial assets are at least 50 percent of total assets, and income from financial assets is at least 50 percent of total income).

Key Terms for Financial Services Audit:

Section 45-IA Certificate of Registration (CoR): Under Section 45-IA of the RBI Act, 1934, no company can commence or carry on the business of a non-banking financial institution without obtaining a CoR from the RBI and maintaining the Net Owned Fund (Rs 2 crore minimum; Rs 10 crore for new NBFC-Investment and Credit Companies from October 2022).

50-50 Test: RBI Circular 2011-12/446 - a company is treated as an NBFC if (a) financial assets are at least 50 percent of total assets, and (b) income from financial assets is at least 50 percent of total income. The Para 9C auditor certificate confirms this test annually.

DPD (Days Past Due): Number of days for which interest or principal of a loan account remains overdue. The auditor independently calculates DPD on a borrower-wise basis and applies the asset-classification matrix.

NPA (Non-Performing Asset): A loan account where interest or principal remains overdue for 90 days or more (NBFC-ML, UL, TL); glide path applies to NBFC-BL. Categories - Sub-standard (NPA up to 12 months), Doubtful D1 (12 to 24 months), D2 (24 to 48 months), D3 (above 48 months), Loss (identified loss but not written off).

CRAR (Capital to Risk-weighted Asset Ratio): Minimum 15 percent for NBFC-D and NBFC-ML / UL / TL, with Tier I capital at least 10 percent of risk-weighted assets. NBFC-BL with AUM under Rs 500 crore exempt from CRAR but maintain a leverage ratio of 7.

Ind AS 109 ECL: Expected Credit Loss model - 12-month ECL for Stage 1 (performing), Lifetime ECL for Stage 2 (significant credit deterioration) and Stage 3 (credit-impaired / NPA). RBI requires parallel IRACP provisioning computation and creation of an Impairment Reserve where IRACP provision exceeds ECL.

Statutory Framework Sec 143 + RBI Sec 45-IA + CARO 3(xvi)

Who Needs Statutory Audit (Financial Services)

Statutory audit applies to every company incorporated under the Companies Act, 2013 - no asset-size threshold and no exemption based on profitability. For financial services entities the applicability stacks by RBI registration category and SBR layer:

Entity Type / Layer	Examples	Audit Layers
NBFC-Base Layer (BL)	Non-deposit NBFC with AUM under Rs 1,000 cr, NBFC-AA, NBFC-P2P, NOFHC	Sec 143 + CARO 3(xvi) + IRACP + Ind AS 109 ECL + Para 9C cert
NBFC-Middle Layer (ML)	AUM Rs 1,000 to 10,000 cr; NBFC-D, IDF-NBFC, IFC, NBFC-MFI, HFC, NBFC-Factor	All BL + CRAR 15% audit + ALM testing + CRILC reporting
NBFC-Upper Layer (UL)	Top 10 NBFCs by parametric scoring (Bajaj Finance, Shriram Finance etc)	All ML + LCR + Risk-Based Internal Audit + ICAAP review
HFC (Housing Finance Company)	Registered with NHB, follows NHB Master Direction	Sec 143 + NHB norms + Section 45-IA CoR (post Nov 2020 retained)
Fintech lender / digital NBFC	App-based personal loan, BNPL, SME credit lender	All BL + RBI Digital Lending Guidelines + LSP / FLDG audit
AIF Manager (SEBI-regulated)	Category I / II / III AIF management company	Sec 143 + SEBI AIF Regulations 2012 + INR-USD valuation under Reg 23
Microfinance Institution (MFI)	NBFC-MFI under RBI Microfinance Directions 2022	All ML + Microfinance lending limits + multiple-MFI exposure check
Insurance broker / IRDAI-regulated	Direct broker, composite broker, web aggregator	Sec 143 + IRDAI Brokers Regulations + commission TDS Sec 194D / 194DA

Tax audit under Section 44AB applies at Rs 1 crore turnover. CARO 2020 applies in full to all financial-services companies; the 3(xvi) sub-clauses are specifically triggered by RBI registration status. Cost records under Section 148 do not apply (financial services are excluded from Table A and B). Section 138 internal audit is mandatory for all NBFC-ML, UL and TL irrespective of the Companies Act threshold, under RBI Risk-Based Internal Audit framework.

Our Financial Services Audit Deliverables

Service	What We Do
Section 143 Full-Scope Statutory Audit	Companies Act 2013 audit with CARO 2020 21-clause annexure focused on clause 3(xvi)(a) to (d); SA 700 / 705 reporting; Ind AS or AS framework as applicable.
RBI Prudential Norms Audit (IRACP Directions 2025)	Borrower-wise NPA classification on DPD basis under the IRACP Directions, 2025 (effective 28 November 2025); reclassification into Standard, Sub-standard, Doubtful D1 / D2 / D3 and Loss; provisioning at prescribed rates; income reversal for accounts that crossed 90 DPD during the year.
CARO Clause 3(xvi) Verification	(a) Whether Section 45-IA CoR is required and obtained; (b) Whether the company has conducted NBFC activity without a valid CoR (offence under Chapter V of the RBI Act); (c) Whether the company qualifies as a Core Investment Company (CIC); (d) Whether more than one CIC exists in the group. Each sub-clause independently tested.
Capital Adequacy (CRAR) Audit	Independent computation of CRAR; risk-weighting of on-balance-sheet and off-balance-sheet exposures per RBI risk-weights matrix; Tier I (equity + free reserves) and Tier II (subordinated debt, etc) classification; verification of minimum 15 percent CRAR with Tier I at least 10 percent.
Ind AS 109 ECL and IRACP Impairment Reserve	Review of three-stage ECL model (12-month ECL Stage 1; Lifetime ECL Stage 2 and Stage 3); validation of PD, LGD and EAD estimation; SICR trigger testing; parallel IRACP provisioning per RBI Notification 13 March 2020; creation of Impairment Reserve from retained earnings where IRACP exceeds ECL.
Para 9C Auditor Certificate and DNBS Reporting	Separate certificate to DNBS confirming the 50-50 test outcome; review of quarterly NBS-1, NBS-2, NBS-3 and ALM-1 returns; CRILC reporting cross-check for NBFC-ML and above; Fair Practices Code, KYC, AML, and Digital Lending Guidelines compliance.

Our Process

Our 6-Step NBFC Statutory Audit Process

Patron follows a structured 6-step process tailored to the SBR layer of the NBFC, with parallel IRACP and Ind AS 109 ECL workings and a dedicated Para 9C certificate to the RBI.

Step 1

Engagement and SBR-Layer Risk Profiling

Patron issues SA 210 engagement letter, obtains independence and non-disqualification certificate under Section 141 plus RBI eligibility (no overlap with entity borrowing group, three-year cooling-off rule between NBFC audits, RBI empanelment). SBR-layer profile built - BL/ML/UL/TL, AUM bucket, product mix, DPD snapshot, CRAR position, related-party loan exposure.

SA 210 letter RBI eligibility SBR profile

Scoped 01

Step 2

Loan Book Re-Classification on DPD Basis

Patron extracts the entire loan book at year-end into a master file (borrower ID, sanction date, outstanding principal, accrued interest, last paid date, DPD, current asset class). Independent DPD calculation; reclassification against IRACP Directions 2025 matrix - Standard, Sub-standard, Doubtful D1/D2/D3, Loss. Reclassification differences quantified.

Borrower-wise DPD IRACP 2025 matrix Diff table

Re-classified 02

Step 3

Income Recognition Audit and NPA Interest Reversal

Under IRACP, interest income on NPA loans is recognised only on realisation basis. Interest accrued before NPA classification but not realised must be reversed in the year of NPA. Patron tests NPA sample for (a) reversal of pre-NPA accrued interest, (b) cash-basis recognition post-NPA, (c) re-aging if part-payment received. For Ind AS, reconciled with EIR method.

Realisation basis Pre-NPA reversal EIR reconciled

Income Tested 03

Step 4

CRAR Computation Audit

Patron independently computes Capital to Risk-weighted Assets Ratio at year-end. Risk-weighting on on-balance-sheet assets per RBI matrix (cash 0%, govt securities 0%, residential mortgages 50/75%, retail 100/125%, commercial real estate 100%, sub-standard 150%); off-balance-sheet exposures using CCFs. Tier I verified at 10% minimum; total CRAR at 15% minimum.

Risk weights Tier I 10% CRAR 15%

CRAR Verified 04

Step 5

Ind AS 109 ECL and IRACP Impairment Reserve

For Ind AS NBFCs, Patron reviews Stage 1/2/3 classification. Stage 1 (performing - 12-month ECL); Stage 2 (significant credit deterioration - Lifetime ECL); Stage 3 (credit-impaired - Lifetime ECL). PD/LGD/EAD validated against historical data and back-tested. SICR triggers tested. Where IRACP exceeds ECL, differential appropriated to non-distributable Impairment Reserve from retained earnings.

3-stage ECL PD/LGD/EAD Impairment Reserve

ECL Reviewed 05

Step 6

Sign-Off, UDIN, AOC-4 and Para 9C Filing

Patron audit partner signs the report under UDIN generated on the ICAI portal, annexes it to Form AOC-4, files with ROC within 30 days of AGM. MGT-7 within 60 days. Para 9C auditor certificate to RBI DNBS filed separately confirming 50-50 test outcome and IRACP compliance. For NBFC-ML and above, LFAR addresses RBI-specified queries.

UDIN signed AOC-4 filed Para 9C + LFAR

Filed 06

Documents Checklist for Financial Services Audit

Patron requires the following documents to scope and execute a financial services statutory audit. The exact list varies by SBR layer (BL / ML / UL / TL), product mix (secured / unsecured / gold / vehicle / housing / microfinance), and Ind AS adoption status.

Foundation and Regulatory

Trial Balance and General Ledger: Year-end TB plus full ledger scroll; Ind AS or AS framework declared
RBI Certificate of Registration (CoR): Section 45-IA Form B; any subsequent endorsements; deposit-taking authorisation if applicable
Net Owned Fund (NoF) Computation: Paid-up equity capital plus free reserves minus accumulated losses, intangible assets and certain investments

Loan Book and Credit Risk

Loan Book Master File: Borrower ID, sanction date, sanctioned amount, outstanding principal, accrued interest, last paid date, DPD, current asset class
DPD Ageing Report: Borrower-wise ageing in 0 to 30, 31 to 60, 61 to 90, SMA-0, SMA-1, SMA-2, Sub-standard, Doubtful D1 / D2 / D3, Loss buckets
Ind AS 109 ECL Model: Stage 1 / 2 / 3 classification, PD-LGD-EAD parameters, historical loss data, forward-looking macroeconomic overlays, SICR triggers
IRACP Provisioning Working: Standard 0.25 to 2 percent (by sub-category), Sub-standard 10/20 percent, Doubtful escalating by ageing, Loss 100 percent; Impairment Reserve computation

Capital and Regulatory Returns

CRAR Computation: Tier I and Tier II breakup, risk-weighted assets matrix, off-balance-sheet exposures, CCF application
NBS Quarterly Returns: NBS-1 (financial parameters), NBS-2 (prudential norms), NBS-3 (deposit-taking), ALM-1, ALM-2, ALM-3 (asset-liability management)
CRILC Reporting: Central Repository of Information on Large Credits - exposures above Rs 5 crore (NBFC-ML and above)

Conduct and Compliance

Fair Practices Code Compliance: Loan application forms, sanction letters with KFS (Key Facts Statement), penal charges disclosure, grievance redressal logs
KYC / AML Records: CKYC Registry uploads, Customer Due Diligence files, suspicious transaction reporting (STR) logs, PMLA compliance
Digital Lending Guidelines Compliance: LSP (Lending Service Provider) agreements, FLDG (First Loss Default Guarantee) arrangements, cooling-off period, KFS-D format
Para 9C Auditor Certificate Working: Financial assets to total assets ratio; income from financial assets to total income ratio; 50-50 test confirmation

Common Financial Services Audit Challenges and Solutions

Challenge	Impact	How Patron Accounting Solves It
IRACP vs Ind AS 109 ECL Reconciliation	Ind AS 109 ECL is a forward-looking probability-weighted model with three stages; IRACP is a backward-looking days-past-due rule. For most NBFCs, IRACP provisioning exceeds Ind AS 109 ECL because IRACP uses fixed percentages while ECL relies on historical loss rates that may have been low. Under RBI Notification dated 13 March 2020, where IRACP provision exceeds ECL, the differential is appropriated from retained earnings into a non-distributable Impairment Reserve.	Patron audit produces side-by-side IRACP and ECL workings, reconciles the difference, and verifies the Impairment Reserve appropriation is correctly disclosed in the Statement of Changes in Equity. Reconciliation memo becomes a Key Audit Matter under SA 701 for Ind AS NBFCs.
SICR Trigger Calibration Under Ind AS 109	Ind AS 109 paragraph 5.5.9 requires assessment of significant increase in credit risk (SICR) since origination - usually a quantitative trigger of 30 days past due plus qualitative triggers (deterioration in external rating, modification of terms). NBFCs sometimes set the SICR threshold too high (60 or 75 DPD), keeping more loans in Stage 1 with 12-month ECL and lower provisioning.	Patron tests the SICR threshold against the rebuttable presumption of 30 DPD; where the entity rebuts the presumption, the rebuttal documentation is reviewed for sufficiency under SA 540 (auditing estimates). Insufficient rebuttals trigger a reclassification adjustment in the audit observations.
Fintech Lender FLDG and LSP Accounting	Digital lending platforms operating under the RBI Digital Lending Guidelines 2022 typically engage Lending Service Providers (LSPs) for sourcing, collection or both, with a First Loss Default Guarantee (FLDG) arrangement up to 5 percent of the loan portfolio. Mis-accounting of FLDG as a guarantee versus a co-investment changes the regulatory capital position.	Audit verifies (a) FLDG cap is not exceeded, (b) FLDG cash is held in a separate escrow as required, (c) FLDG draw-downs are routed through the contractual mechanism not as ad-hoc top-ups, and (d) LSP commission is correctly recognised under Ind AS 115. Cross-check against the RBI Digital Lending Guidelines September 2022 framework.
NBFC-D Auditor Concurrence Under Section 30A RBI Act	For deposit-taking NBFCs (NBFC-D), the appointment of the statutory auditor requires prior concurrence of the RBI under Section 30A of the RBI Act (read with RBI Master Direction). The audit cannot proceed until the RBI concurrence letter is on file. The three-year cooling-off rule applies between consecutive audits by the same firm.	Patron pre-engagement protocol verifies the RBI concurrence is current, that the audit firm satisfies the three-year cooling-off rule (no audit of the same NBFC for three years after exit), and that the firm empanelment with RBI is active. No audit firm exit risk mid-cycle.
CARO Clause 3(xvi) Four-Proposition Testing	CARO 3(xvi) is often reported as a single composite statement when it is actually four distinct propositions - (a) Section 45-IA registration requirement and obtained, (b) NBFC activity without valid CoR, (c) CIC qualification, (d) multiple CICs in the group. Each requires independent testing and reporting.	Patron tests each sub-clause as a separate proposition with independent workpaper evidence. The four-proposition structure is reflected in the CARO annexure with separate observations for each. Avoids the supervisory observation that the auditor has not adequately considered each sub-clause.
Para 9C 50-50 Test Edge Cases	The 50-50 test (RBI Circular 2011-12/446) requires (a) financial assets at least 50 percent of total assets AND (b) income from financial assets at least 50 percent of total income. Edge cases - revaluation of investment property, treatment of intangibles, classification of CGS investments, treatment of derivative MTM gains - can swing the ratio. A failed 50-50 test means the entity is not an NBFC and the CoR should be surrendered.	Patron computes the 50-50 test on a borrower-wise and income-source-wise basis with all edge cases documented. The Para 9C certificate to RBI DNBS is supported by a 50-50 working that withstands DNBS scrutiny in the next inspection cycle.

Financial Services Audit Fees

Fee Component	Amount
Patron Accounting Professional Fees	Starting from INR 1,50,000 (Exl GST and Govt. Charges)
NBFC-BL with AUM under Rs 100 crore	Rs 1,50,000 to Rs 3,50,000 - 5 weeks fieldwork; CARO 3(xvi); IRACP re-classification; Para 9C certificate
NBFC-BL with AUM Rs 100 to 500 crore	Rs 3,75,000 to Rs 7,50,000 - 5 to 6 weeks; full Ind AS 109 ECL review where applicable; FLDG audit for digital lenders
NBFC-BL with AUM Rs 500 cr to Rs 1,000 crore	Rs 8,00,000 to Rs 14,00,000 - 6 to 7 weeks; CRAR audit; leverage ratio compliance; ALM testing
NBFC-ML (AUM Rs 1,000 to 10,000 cr) - LFAR + CRAR + ALM	From Rs 15,00,000 - 7 to 9 weeks; Long-Form Audit Report; CRILC cross-check; Risk-Based Internal Audit overlay
HFC (NHB-registered) - parallel NHB norms overlay	From Rs 8,00,000 - 6 to 8 weeks; housing finance specific risk weights; NHB returns cross-check
Fintech lender / digital NBFC - LSP + FLDG audit overlay	Add Rs 1,50,000 to Rs 5,00,000 - same window; RBI Digital Lending Guidelines compliance; LSP agreements review
AIF Manager (SEBI Cat I / II / III)	Rs 3,00,000 to Rs 12,00,000 - 5 to 7 weeks; INR-USD valuation under Reg 23; investor reporting cross-check
Ind AS 109 ECL model review for Ind AS NBFC	Add Rs 2,00,000 to Rs 6,00,000 - same window; PD-LGD-EAD validation; SICR testing; macroeconomic overlay review
Government Filing Fees (AOC-4, MGT-7, ADT-1)	ROC filing fees billed at actuals; DNBS Para 9C filing fees billed at actuals

All fees and charges listed are indicative only and do not constitute a binding offer. Final amounts may vary depending on the volume of work and the complexity involved.

Professional service charges for drafting, filing, and representation are separate from the statutory fees. The exact fee depends on the complexity of the case, disputed amount, and number of hearings required. Contact us for a detailed quote.

Get a free Financial Services Audit consultation - Call +91 945 945 6700 or WhatsApp us. No-obligation assessment.

Financial Services Audit Timeline

Stage	Estimated Timeline
Engagement and pre-audit checks	Week 1 - SA 210 engagement letter; Section 141 + RBI eligibility verification; concurrence letter for NBFC-D
Pre-year-end interim audit	Week 2 to 3 - Q4 loan-book DPD walkthrough; CRAR projection review; KYC and Fair Practices Code sample
Loan book IRACP re-classification	Weeks 3 to 5 - borrower-wise DPD re-calculation; reclassification difference quantification
Ind AS 109 ECL and Impairment Reserve audit	Weeks 4 to 6 (parallel) - Stage 1 / 2 / 3 classification; PD-LGD-EAD validation; SICR testing; IRACP overlay
CRAR audit and ALM testing	Weeks 5 to 6 - risk-weighted assets; Tier I / II classification; ALM-1/2/3 returns cross-check
Draft report, LFAR and management response	Week 6 to 7 - SA 700 / 705 review; KAM discussion; LFAR for NBFC-ML and above
UDIN, sign-off and AOC-4 filing	Within 30 days of AGM - Patron files AOC-4 with audit report annexed
Para 9C auditor certificate to RBI DNBS	Post AOC-4 - 50-50 test certification; submitted to Regional Office of DNBS
NBS quarterly returns sign-off	Within 15 days of quarter-end - NBS-1, NBS-2, NBS-3, ALM-1 / 2 / 3 auditor cross-check

IRACP Directions 2025 became effective 28 November 2025 - NBFCs that have not aligned their books to the new classification matrix face supervisory observations in the next inspection cycle. Conducting NBFC activity without a valid Certificate of Registration is an offence under Chapter V of the RBI Act, attracting penalty under Section 58B and potential business shutdown. Delay in Section 143 audit filings attracts Rs 100 per day MCA additional fees plus Section 147 penalty.

Key Benefits

Why Choose Patron for Financial Services Audit

Single CA Partner Across 6 Risk Areas

One engagement covers Section 143 statutory audit, CARO 3(xvi) sub-clauses, IRACP re-classification, CRAR audit, Ind AS 109 ECL review, Para 9C certificate and LFAR (where applicable). No workpaper duplication across multiple advisors.

Independent Borrower-Wise IRACP Re-Run

Borrower-wise DPD re-calculation produces the reclassification difference table - which becomes the management discussion benchmark and the supervisory submission for NBFC-ML and above.

Ind AS 109 ECL with IRACP Overlay

Side-by-side ECL and IRACP working with Impairment Reserve appropriation traced through the Statement of Changes in Equity. SICR trigger testing under SA 540 estimates audit.

CRAR Against Latest RBI Risk-Weights

CRAR computed against the latest RBI risk-weights matrix, with off-balance-sheet exposures correctly converted using credit conversion factors (CCF). Tier I and Tier II classification reviewed line-by-line.

CARO 3(xvi) Four-Proposition Testing

CARO 3(xvi)(a) to (d) tested as four distinct propositions - registration, conduct without CoR, CIC qualification, multi-CIC group - not as a single composite statement.

RBI Eligibility Pre-Verified

RBI eligibility verification before engagement - no audit firm exit risk mid-cycle from concurrence withdrawal or cooling-off non-compliance. Empanelment status checked on engagement letter date.

4-Office Pan-India Network

Pune, Mumbai, Delhi and Gurugram offices service NBFC and fintech finance teams across BKC, Lower Parel, Connaught Place, Cyber City Gurugram, Hinjewadi and Andheri SEEPZ.

LFAR Calibrated to RBI Query Template

For NBFC-ML and above, the Long-Form Audit Report is calibrated to the RBI-specified query template. Withstands DNBS inspection scrutiny in the supervisory cycle.

Trusted by NBFC CFOs, Fintech Founders and AIF Managers

10,000+ Businesses Served | 4.9 Google Rating | 50,000+ Documents Filed | 15+ Years of Practice

"The statutory audit was clean and completed well before deadline. No last-minute rush. Patron team handled the IRACP re-classification and Ind AS 109 ECL reconciliation under a single CA partner - we used to have three different advisors for these three workstreams."
- CFO, NBFC-Base Layer, Mumbai

"Para 9C auditor certificate to DNBS was filed within the 90-day window with the 50-50 test working that withstood the next supervisory inspection - the inspecting RBI officer specifically commented on the working paper quality."
- Compliance Head, NBFC-Middle Layer, Delhi

Client roster: Trusted by Hyundai, Asian Paints, Bridgestone and a growing roster of NBFCs (Base and Middle Layer), fintech lenders (digital personal loan, BNPL, SME credit), AIF managers (Category I, II, III), HFCs (NHB-registered housing finance), NBFC-MFIs, NBFC-Factor, and AIF Category II venture / private equity funds.

4-Office Signal: With offices in Pune, Mumbai, Delhi and Gurugram, Patron services NBFC and fintech finance teams across BKC, Lower Parel, Connaught Place, Cyber City Gurugram, Hinjewadi and Andheri SEEPZ.

DIY / Big-Four / Patron-Led NBFC Audit

Factor	DIY / In-House	Big-Four (BSR / Deloitte / SRBC / Walker)	Patron-Led
Independence under Section 141 and RBI rules	Disqualified	Qualified + RBI-empanelled	Qualified + RBI-empanelled
CARO 3(xvi) sub-clause testing	Not signable	Heavy procedure	Four-proposition test
IRACP re-classification depth	N/A	Centralised, slower turnaround	Borrower-wise re-run with difference table
Ind AS 109 ECL model review	Cannot review own model	Heavy modelling team	PD-LGD-EAD validation + SICR testing
Para 9C certificate to RBI	Not signable	Bundled	Bundled
LFAR for NBFC-ML	Not applicable in-house	Heavy	Calibrated to RBI query template
NBFC-D auditor concurrence (Section 30A)	Not applicable	Pre-cleared	Pre-cleared with cooling-off compliance
Cost (NBFC-BL with AUM Rs 100 cr)	Apparent zero - unsignable	Rs 12 to 25 lakh	Rs 3.75 to 7.5 lakh

Related Patron Services

Financial services statutory audit pairs naturally with the parent statutory audit hub, NBFC and AIF registration, tax audit, and internal audit (under RBI RBIA framework for NBFC-ML and above).

Statutory Audit (Parent Hub): National framework for Section 139 Companies Act audit with full methodology, applicability matrix, and Patron vs commodity provider comparison
Tax Audit (Section 44AB): Tax audit bundled for NBFCs above Rs 1 crore turnover; coordinated with statutory audit to share workpapers
Internal Audit (Section 138 + RBI RBIA): Mandatory for all NBFC-ML, UL, TL under RBI Risk-Based Internal Audit framework irrespective of Companies Act threshold
Private Limited Company Compliance: ROC annual filings - ADT-1, AOC-4, MGT-7 for NBFC corporate entities
NBFC Registration: Section 45-IA CoR application; Form CRA-1 to CRA-6 RBI Companies Act overlay for new NBFCs
AIF Registration: SEBI Alternative Investment Fund Regulations 2012 - Category I / II / III registration
Accounting Services for Service Sector: Peer industry vertical for ongoing accounting and reconciliation work
GST Audit: GST exemption review for financial services (interest income exempt; fee income taxable); GSTR-9C reconciliation
Appointment of Auditor: First auditor and AGM appointment with ADT-1 filing; RBI concurrence for NBFC-D under Section 30A
Change of Auditor: Section 140 resignation and replacement with RBI cooling-off rule (three-year between NBFC audits)

Legal and Compliance Framework

Financial services audits draw legal authority from a tightly layered statutory framework - Companies Act 2013 for the basic audit duty, RBI Act 1934 for NBFC registration and prudential directions, RBI Master Directions for SBR and IRACP, and ICAI Standards on Auditing for the audit conduct.

Reference	Detail
Governing Acts	Companies Act 2013 - Sections 139 to 148; RBI Act 1934 - Chapter IIIB (Sections 45-I to 45-QB)
Section 139 Companies Act	First auditor within 30 days; AGM appointment for 5 / 10 years; NBFC-D additionally needs RBI concurrence
Section 143 Companies Act	Powers and duties; SA 700 / 705 reporting; CARO 2020 annexure; IFC reporting
Section 147 Companies Act	Penalty - company Rs 25,000 to Rs 5,00,000; auditor Rs 25,000 to Rs 5,00,000 (Rs 1 lakh to Rs 25 lakh fraudulent); officer in default Rs 10,000 to Rs 1,00,000
Section 45-IA RBI Act 1934	Certificate of Registration mandatory for NBFC commencement / continuation; Net Owned Fund minimum Rs 2 crore (Rs 10 crore for new NBFC-ICC from October 2022)
Section 45-IB RBI Act 1934	Maintenance of percentage of assets in unencumbered approved securities for deposit-taking NBFCs
Section 45-IC RBI Act 1934	Reserve Fund - transfer of 20 percent of profits annually
Section 45JA RBI Act 1934	RBI power to issue prudential directions
Chapter V RBI Act 1934	Penalty provisions - conducting NBFC activity without CoR is an offence; Section 58B penalty
RBI Master Direction NBFC SBR (Oct 2023)	Scale-Based Regulation - NBFC-BL / ML / UL / TL classification with differentiated prudential norms; UL parametric scoring by RBI
RBI IRACP Directions 2025	Effective 28 November 2025 - replaces all earlier IRACP norms; uniform NPA classification; 90-day NPA with glide path for BL; income on NPA only on realisation; pre-NPA accrued interest reversal
RBI Notification 13 March 2020	Implementation of Ind AS - Impairment Reserve framework where IRACP provisioning exceeds Ind AS 109 ECL
RBI Master Direction CIC	Core Investment Companies (Reserve Bank) Directions, 2020 - 90 percent investments in group companies test
RBI Digital Lending Guidelines (Sept 2022)	Lending Service Provider (LSP) accountability; First Loss Default Guarantee (FLDG) framework with 5 percent cap; KFS-D; cooling-off period
CARO 2020 Clause 3(xvi)	(a) Whether company required to be registered under Section 45-IA and if so whether obtained; (b) Whether NBFC activity conducted without valid CoR (Chapter V offence); (c) Whether company qualifies as CIC; (d) Whether more than one CIC in the group
Para 9C NBFC Prudential Norms Directions	Separate auditor certificate to RBI DNBS confirming 50-50 test - financial assets at least 50 percent of total assets AND income from financial assets at least 50 percent of total income
Section 30A RBI Act 1934	RBI concurrence required for appointment of statutory auditor of deposit-taking NBFC (NBFC-D) - three-year cooling-off rule applies
Ind AS Standards	Ind AS 109 (Financial Instruments - three-stage ECL); Ind AS 32 (Equity Classification - critical for Tier II hybrid instruments); Ind AS 107 (Disclosures); Ind AS 113 (Fair Value Measurement)
Standards on Auditing (ICAI)	SA 200, SA 500, SA 540 (Auditing Accounting Estimates - applies to ECL PD-LGD-EAD), SA 550 (Related Parties - critical for NBFC promoter loans), SA 570 (Going Concern), SA 600 (Group Audit), SA 700 / 701 / 705 / 706
Forms and Returns	ADT-1 (auditor), AOC-4 (financials), MGT-7 (annual return); NBS-1 / 2 / 3 (RBI financial returns), ALM-1 / 2 / 3 (asset-liability); DNBS-10 (auditor certificate); CRILC (large exposures); 3CD (tax audit if applicable)

External references: Reserve Bank of India (RBI Master Directions and DNBS) | Securities and Exchange Board of India (SEBI - AIF Regulations) | Ministry of Corporate Affairs (MCA21 V3)

Is statutory audit mandatory for NBFCs in India?

Yes. Section 139 of the Companies Act, 2013 makes statutory audit mandatory for every Indian company - including every NBFC, HFC, fintech lender, AIF Manager and Core Investment Company - irrespective of asset size or profitability. The first auditor must be appointed by the Board within 30 days of incorporation, and Form ADT-1 must be filed with the Registrar of Companies within 15 days of appointment. For deposit-taking NBFCs, the appointment additionally requires prior concurrence of the Reserve Bank of India under Section 30A of the RBI Act, with a three-year cooling-off rule between consecutive audits.

What is the 90-day NPA classification norm?

Under the RBI IRACP Directions, 2025 (effective 28 November 2025), a loan account is classified as a Non-Performing Asset when interest or principal remains overdue for 90 days or more. The 90-day norm applies to NBFC-Middle Layer, Upper Layer and Top Layer with immediate effect; a phased glide path applies to NBFC-Base Layer. Once classified as NPA, the account moves through Sub-standard, Doubtful D1 / D2 / D3, and Loss categories. Upgrade to Standard requires full payment of all arrears of interest and principal.

What is CARO clause 3(xvi)?

CARO 2020 clause 3(xvi) is a financial-services-specific reporting requirement with four sub-clauses. (a) Whether the company is required to be registered under Section 45-IA of the RBI Act and if so, whether the registration has been obtained. (b) Whether the company has conducted any NBFC activity without holding a valid Certificate of Registration - an offence under Chapter V of the RBI Act. (c) Whether the company qualifies as a Core Investment Company. (d) Whether more than one CIC exists in the group. Each sub-clause is independently tested and reported by the statutory auditor.

What is the minimum CRAR for NBFCs?

Under the RBI Master Direction NBFC Scale-Based Regulation (October 2023), the minimum Capital to Risk-weighted Assets Ratio is 15 percent for all NBFC-Deposit-taking entities, NBFC-Middle Layer, NBFC-Upper Layer and NBFC-Top Layer. Tier I capital must be at least 10 percent of risk-weighted assets. NBFC-Base Layer with AUM under Rs 500 crore is exempt from CRAR but must maintain a leverage ratio (Total Outside Liabilities to Owned Funds) not exceeding 7. The auditor independently computes the CRAR against the RBI risk-weights matrix.

How is interest income on NPAs recognised?

Under the IRACP Directions, 2025, interest, processing fees and any other charges on Non-Performing Assets can be recognised in income only on a realisation basis - not on accrual. Additionally, any income that was recognised on an accrual basis before the loan account became an NPA must be reversed in the financial year in which the account is classified as NPA. The statutory auditor tests a sample of NPA accounts to confirm both the realisation-basis recognition post-NPA and the reversal of pre-NPA accrued income. For Ind AS reporters, this interacts with the effective interest rate method under Ind AS 109.

What is the 50-50 test for NBFC classification?

The 50-50 test, established by RBI Circular 2011-12/446, determines whether a company qualifies as an NBFC. A company is treated as an NBFC if its financial assets are at least 50 percent of total assets, and its income from financial assets is at least 50 percent of total income. Both conditions must be satisfied. The statutory auditor signs a separate certificate to the RBI Department of Non-Banking Supervision under Paragraph 9C of the NBFC Prudential Norms Directions confirming the 50-50 test outcome and whether the company continues to qualify for registration under Section 45-IA.

How does Ind AS 109 ECL interact with RBI IRACP?

Ind AS 109 prescribes a three-stage Expected Credit Loss model - Stage 1 (12-month ECL for performing assets), Stage 2 (Lifetime ECL for assets with significant credit deterioration), Stage 3 (Lifetime ECL for credit-impaired assets / NPAs). RBI IRACP prescribes fixed provisioning percentages by asset class. For NBFCs reporting under Ind AS, RBI Notification dated 13 March 2020 requires parallel computation of both - where IRACP provisioning exceeds Ind AS 109 ECL, the differential is appropriated from retained earnings into a non-distributable Impairment Reserve, disclosed in the Statement of Changes in Equity.

What is the Para 9C auditor certificate to RBI?

Paragraph 9C of the NBFC Prudential Norms Directions, inserted by RBI under Section 45JA of the RBI Act, 1934, requires the statutory auditor of every NBFC to submit a separate certificate to the Reserve Bank of India confirming that the entity is engaged in the business of a non-banking financial institution requiring it to hold a Certificate of Registration under Section 45-IA. The certificate references the position as at end of the financial year, is filed with the Regional Office of the Department of Non-Banking Supervision, and effectively serves as the annual confirmation of the 50-50 test outcome.

Quick Answers

NBFC ka audit kaise hota hai? Companies Act Section 143 ke under practicing CA dwara annual examination - RBI Master Direction compliance, IRACP NPA classification, CRAR, Ind AS 109 ECL, CARO 3(xvi), Para 9C certificate.

90-day NPA norm kya hai? IRACP Directions 2025 ke under loan 90 days se zyada overdue ho toh NPA. Sub-standard se shuru hota hai, fir Doubtful D1/D2/D3, fir Loss. Upgrade tabhi when full payment of arrears.

CRAR kitna chahiye? Minimum 15 percent NBFC-D aur ML/UL/TL ke liye, Tier I at least 10 percent. NBFC-BL with AUM under Rs 500 crore exempt - leverage ratio 7 maintain karna padta hai.

CARO 3(xvi) kya hai? 4 sub-clauses - (a) Section 45-IA CoR required and obtained, (b) NBFC activity without valid CoR (offence), (c) CIC qualification, (d) multiple CICs in group.

50-50 test kya hai? Financial assets >= 50 percent of total assets AND income from financial assets >= 50 percent of total income. Dono conditions satisfied honi chahiye NBFC qualify karne ke liye.

Para 9C certificate kya hai? Auditor ki separate certificate RBI DNBS ko, 50-50 test ka confirmation, har financial year ke end position pe. Section 45JA ke under issued.

IRACP Directions 2025 Effective 28 November 2025

AOC-4 with audit report must be filed within 30 days of the AGM and MGT-7 within 60 days. NBS-1 / NBS-2 / NBS-3 returns are filed quarterly with the RBI Department of Non-Banking Supervision. ALM-1 / ALM-2 / ALM-3 are also quarterly. The Para 9C auditor certificate to RBI is typically filed within 90 days of year-end. CRILC reporting (NBFC-ML and above) is monthly.

IRACP Directions 2025 became effective 28 November 2025 - NBFCs that have not aligned their books to the new classification matrix face supervisory observations in the next inspection cycle.

Conducting NBFC activity without a valid Certificate of Registration is an offence under Chapter V of the RBI Act, attracting penalty under Section 58B and potential business shutdown. Call +91 945 945 6700 or WhatsApp us. Partner CA scoping call and fixed-fee quote within 24 hours.

Six Risk Areas. RBI-Empanelled. One CA Partner.

Statutory audit for financial services companies is the most regulation-intensive audit category in India - dual reporting to shareholders under Section 143 and to the RBI under Para 9C, borrower-wise IRACP NPA reclassification on a Days-Past-Due basis, four-proposition CARO clause 3(xvi) testing, independent CRAR computation against the RBI risk-weights matrix, three-stage Ind AS 109 ECL modelling with Impairment Reserve reconciliation, and Long-Form Audit Report for NBFC-Middle Layer and above. An audit that gets any one of these wrong surfaces in the next RBI inspection cycle, a CARO qualification, or a supervisory action notice.

Patron Accounting handles the full scope under a single CA partner with RBI-aware risk assessment, independent loan-book IRACP re-run, Ind AS 109 ECL model review, CRAR audit, CARO 3(xvi) four-sub-clause testing, Para 9C certificate, and LFAR preparation where applicable. Our 15+ years of practice, peer-reviewed ICAI workpapers, RBI-empanelment compliance and four-office network across Pune, Mumbai, Delhi and Gurugram bring depth from Base Layer NBFCs to Middle Layer entities and HFCs.

📞 Call +91 945 945 6700 💬 WhatsApp Us ✉️ Email Us

Book a Free Consultation - No Obligation.

NBFC Audit Across India

Patron four-office network services NBFC and fintech finance teams across BKC, Lower Parel, Connaught Place, Cyber City Gurugram, Hinjewadi and Andheri SEEPZ - in-person from four offices, remote everywhere else.

Our Offices Across India

In-person NBFC audit fieldwork from our four offices; remote coverage everywhere else with site visits to NBFC head offices on demand.

Related Services

Parent audit hub plus NBFC / AIF registration and complementary compliance services

Statutory Audit (Hub)

India

Tax Audit (Sec 44AB)

India

Internal Audit (RBI RBIA)

Content Created: 13 May 2026 | Last Updated: 13 May 2026 | Next Review: 13 August 2026 | Reviewed By: CA & CS Team, Patron Accounting LLP

This page is reviewed every 3 months (Freshness Tier 1 - IRACP Directions 2025 effective 28 Nov 2025; RBI Master Direction updates; Digital Lending Guidelines revisions; SBR layer parametric scoring). Triggers for earlier review include RBI Master Direction NBFC SBR amendment, IRACP Directions revision, CARO 2020 clause 3(xvi) amendment, RBI Notification on Ind AS Impairment Reserve revision, Digital Lending Guidelines update, and Section 45-IA NoF threshold change.