Harun Raaj & AssociatesHarun Raaj & Associates
Audit & Assurance

Bank Branch Audit

Bank Branch Audit

Start — upload documents, pay when ready →Talk to a CAWhatsApp usRead case study →
SCOPEConfirmed in writing

Regulatory Framework

RBI regulates bank branch audit differently for commercial banks versus cooperative and regional rural banks. For scheduled commercial banks (excluding RRBs), the "Guidelines for Appointment of Statutory Central Auditors (SCAs)/Statutory Auditors (SAs) of Commercial Banks, UCBs and NBFCs" circular dated 27 April 2021 governs appointment, applicable from FY 2021-22 onward. Public sector banks must allot their Top 20 branches (selected strictly by outstanding advances) to Statutory Central Auditors so as to cover a minimum of 15% of the bank's total gross advances; the remaining branches are covered by Statutory Branch Auditors empanelled through the ICAI/RBI process. Auditor tenure is capped at a continuous term with a mandatory 6-year cooling-off period before re-appointment at the same bank, and SCA firms rotate every 3 years under RBI's tenure norms.

For cooperative banks (including Regional Rural Banks and Urban Cooperative Banks) and other NABARD-linked institutions, statutory auditors are drawn from a panel NABARD compiles: NABARD obtains the eligible firm list from ICAI, applies its own eligibility filters (partner strength, experience, exposure norms), and shares the shortlisted panel with individual banks, which then submit their auditor proposals for RBI/NABARD approval before appointment. Firm eligibility for both tracks is assessed annually through ICAI's Multipurpose Empanelment Form (MEF), whose draft panel is typically published in October-November, feeding into appointment cycles that run through the January-March empanelment window ahead of the new financial year's branch audits.

Engagement letters, reporting formats (Long Form Audit Report), and audit scope are prescribed by RBI's Master Circular on Inspection & Audit Systems and the applicable appointment guidelines, and vary by whether the auditee is a public sector bank, private/foreign bank, cooperative bank, or RRB.

Overview

Bank branch audit is the audit of a bank branch's accounts conducted under the Banking Regulation Act 1949. Under Section 29 of the Act, banking companies must prepare accounts in the prescribed form, and Section 30 requires the accounts to be audited — with Section 30(1A) extending the audit to the branches. A chartered accountant audits the branch's transactions, verifies its advances and deposits, checks statutory compliance — including the cash reserve ratio and statutory liquidity ratio requirements — and reports in the prescribed formats, including the long-form audit report (LFAR).

Branch audit is where the central bank's supervision actually touches the ground. Every branch transaction — every deposit, every advance, every cash movement — must reconcile to the branch's books and to the head office. The auditor checks adherence to the RBI's prudential norms on classification of advances and income recognition, verifies statutory compliance with the banking laws, and reports deviations in the prescribed format. The LFAR is a direct input into the RBI's assessment of the bank.

The consequences of a poorly conducted branch audit are not abstract. Audit findings feed into the RBI's supervisory review; unverified assets, misclassified advances and unreported statutory deviations become regulatory findings that can carry penalties and capital implications for the bank. For the auditor, the branch audit carries the same professional liability as any statutory audit — the report is relied upon by the bank, the RBI and depositors.

This service is for banks appointing auditors for their branches and for individual auditors seeking experienced audit teams. We plan the branch audit to the banking audit framework, verify deposits, advances, cash and inter-branch accounts, test compliance with the Banking Regulation Act 1949 and the RBI's prudential norms, and deliver the audit report and LFAR within the bank's timelines.

How It Works

  1. 1

    Branch Audit Planning

    We plan the audit from the branch's portfolio, the bank's audit instructions and the statutory framework.

    Harun Raaj & Associates does this2-3 days
  2. 2

    Records & System Access

    The branch provides ledger systems, sanction files, cash and security records for examination.

    You do thisDuring audit
  3. 3

    Verification & Testing

    We verify deposits, advances, cash, inter-branch accounts and income recognition against the RBI's prudential norms.

    Harun Raaj & Associates does this1-2 weeks
  4. 4

    Statutory Compliance Check

    We test compliance with the Banking Regulation Act 1949 and the bank's internal instructions.

    Harun Raaj & Associates does thisDuring audit
  5. 5

    Report & LFAR Issuance

    We issue the branch audit report and the long-form audit report within the bank's reporting timeline.

    Harun Raaj & Associates does this3-5 days

Frequently Asked Questions

What specific advances does a branch auditor verify beyond the LFAR checklist?
Beyond the LFAR template, the branch auditor independently tests the largest advances (generally 5-10 accounts covering 70%+ of branch credit exposure) against RBI Master Circular on Prudential Norms (IRACP) — verifying correct asset classification (Standard/Sub-Standard/Doubtful/Loss per 90-day overdue norms), adequacy of provisions (15% for Sub-Standard, 25-100% for Doubtful, 100% for Loss), and whether the account should have been reported under SMA-0, SMA-1, or SMA-2 on the CRILC platform. Evergreening arrangements (fresh loans to repay overdue instalments) are a specific red flag the auditor scrutinises.
Is a branch auditor required to comment on KYC and AML compliance?
Yes. The LFAR has a dedicated section on KYC/AML, requiring comment on whether accounts were opened with complete KYC documentation per the RBI Master Direction on KYC (updated through 2023), whether periodic re-KYC has been completed for high-risk customers (every 2 years), medium-risk (every 8 years), and low-risk (every 10 years), and whether STR/CTR reporting obligations under the Prevention of Money Laundering Act 2002 (Section 12) are being met by the branch. Inoperative accounts not flagged for re-KYC are a common LFAR adverse finding.
What TDS obligations does a bank branch have that fall within the audit scope?
A bank branch is a deductor under multiple provisions: Section 194A of ITA 1961 (TDS on interest paid to non-senior-citizen depositors above Rs 40,000 per year at 10%), Section 194N (TDS on cash withdrawals above Rs 1 crore at 2%), and Section 206AB (higher TDS at twice the rate for persons who have not filed returns for two preceding years). For TY 2026-27 ongoing compliance, these map to Sections 393 and 397(2) of ITA 2025. The branch auditor verifies Form 26Q filings and checks whether TDS has been deducted and remitted to the Central Government within 7 days of the following month (Rule 30 of Income Tax Rules 1962).
What is the significance of inter-branch reconciliation in a bank branch audit?
Inter-branch accounts (IBAs) represent amounts payable/receivable between branches through the bank's internal settlement system. Unreconciled IBA entries are a high-risk area because they can mask misappropriation or suppress NPA recognition — a branch can park an NPA amount in an IBA entry to avoid classification. The LFAR requires the branch auditor to report all entries outstanding beyond 6 months and comment on whether old entries have been investigated or written off. RBI Circular DBR.No.Leg.BC.45/09.07.005/2018-19 specifically flags manipulation of IBA entries as a fraud typology.
What is an auditor's liability if a fraud is detected during a bank branch audit?
The branch auditor's primary obligation under SA 240 is to report fraud to management and, if management is implicated, to those charged with governance (the bank's Audit Committee). The RBI Master Direction on Frauds 2016 (updated 2024) requires banks to report frauds above Rs 1 lakh via FMR-1 to RBI within 3 weeks; a branch auditor who identifies a fraud the branch management has concealed must document findings in the LFAR and the Independent Audit Report. Under the Chartered Accountants Act 1949, failure to report a known fraud constitutes professional misconduct under the First Schedule, Part I.

Ready to get Bank Branch Audit?

File a request in under 2 minutes. Our team contacts you within 24 hours.

Start — upload documents, pay when ready →