Fraud Reporting

Fraud Reporting: The Auditor's Statutory Duty to Sound the Alarm

The traditional relationship between a company and its auditor was one of confidence: the auditor, engaged by the company, examined its books and reported to the members, and matters discovered in the course of the audit were generally treated as confidential. The modern regulatory framework has qualified this tradition in one significant respect: where the auditor, in the course of the audit, detects a fraud being committed against the company by its officers or employees, of a magnitude specified by the statute, the auditor is under a statutory duty to report the fraud to the Central Government. The duty overrides the auditor's general confidentiality and reflects the legislative judgment that corporate fraud is a matter of public concern, not merely a private matter between the company and its shareholders.

The Statutory Framework: Section 143(12)

Section 143(12) of the Companies Act, 2013 provides the statutory basis: 'If any auditor of a company in the course of the performance of his duties as auditor, has reason to believe that an offence of fraud involving such amount or amounts as may be prescribed, is being or has been committed against the company by its officers or employees, the auditor shall report the matter to the Central Government within such time and in such manner as may be prescribed.' The Companies (Audit and Auditors) Rules, 2014 (Rule 13) prescribes the threshold and procedure. The current threshold is ₹1 crore or above: where the auditor detects or has reason to believe that a fraud of ₹1 crore or more is being or has been committed against the company by its officers or employees, the auditor must report to the Central Government within 60 days of the auditor's knowledge, by way of a report in the prescribed form.

The Reporting Mechanism and Safeguards

The reporting mechanism operates through a multi-stage procedure. First, the auditor who detects or has reason to believe a fraud has occurred must report the matter immediately to the audit committee or to the board, seeking their response or direction within a stipulated time. Second, where the matter is reported to the audit committee or board and the company does not respond, or the response is unsatisfactory, or the fraud meets the threshold, the auditor must forward the report to the Central Government within the prescribed time. The report is made to the Secretary, Ministry of Corporate Affairs, in the prescribed form (Form ADT-4), by registered post with acknowledgement due. The framework includes several safeguards. The auditor is protected from liability for the report made in good faith, even if the fraud is ultimately not established. The auditor's report is treated as confidential by the Central Government, used for the purposes of investigation and enforcement. The reporting duty does not extend to frauds below the threshold (which the auditor addresses through the company's internal mechanisms and through the audit report's qualifications), nor to frauds by third parties against the company (which are crimes to be reported to the police). The duty is specific to frauds by the company's own officers or employees, reflecting the concern that insider fraud is the most damaging and the most likely to be concealed. Section 143(12), together with the related provisions on auditor's duties and the broader enforcement architecture of the Companies Act and the SEBI framework, equips the auditor with a quasi-regulatory function — the function of the independent professional who, having seen something, is required to say something. The duty is onerous and the consequences of non-compliance (penalties under the Companies Act) are significant, but the function is essential to the integrity of corporate reporting and the protection of investors and creditors.

“An auditor who uncovers fraud and remains silent becomes its accomplice. The law, recognising this, has imposed on the auditor a duty that overrides the comfort of confidentiality: the duty to report fraud, to carry the news to the government, to sound the alarm. The role of the auditor, in this respect, is no longer merely to verify accounts but to safeguard the integrity of the system — and the duty to report is the instrument of that safeguard.”