Key takeaways
- Cash conversion over a multi-year window is the most informative single indicator. Cumulative operating cash flow and cumulative EBITDA should converge absent a structural explanation.
- Screening composites such as the Beneish M-score and Benford analysis identify profiles worth questioning. They generate false positives and are never findings in themselves.
- Revenue manipulation clusters around cut-off, channel stuffing, bill and hold, side letters, round-tripping and gross versus net presentation. Each has a distinct analytical footprint.
- Test related-party exposure by reconciling the register to director disclosures and the group structure, and by looking for counterparties sharing an address, director or bank account.
- Escalate through enquiry, independent verification, preliminary assessment and formal investigation. Preserve evidence and control who knows before anyone is interviewed.
Financial statement fraud is rarely discovered by looking at the financial statements. It is discovered because someone noticed that two things which should move together stopped moving together, asked why, and did not accept the first explanation. Board members are unusually well placed to do exactly that. They see the numbers alongside the operational narrative, they hear management explain performance every quarter, and they have the standing to ask a follow-up question that a junior analyst does not.
What follows is a field guide, not a substitute for internal audit or a forensic engagement. Its purpose is to help a non-executive director recognise the patterns that warrant a second question, and to know when questions must become a formal process.
The frame: pressure, opportunity, rationalisation
The fraud triangle remains the most useful lens because it directs attention to context rather than arithmetic. Pressure is an earnings target tied to a large incentive, a covenant test approaching, a fundraise in progress. Opportunity is weak segregation of duties, a dominant chief executive, a finance function with no independent review, related entities outside the audit perimeter. Rationalisation is cultural — “we will earn it back next quarter”.
When a board sees an unusual analytical result, the useful next question is which corner of the triangle is loaded. A margin anomaly in a division with strong controls and no incentive pressure is usually an accounting question. The same anomaly in a division whose head is deep into a stretched earn-out is a different conversation.
Analytical indicators worth running every quarter
None of these prove anything. Each identifies a divergence that requires an explanation, and the quality of the explanation is the actual signal.
| Indicator | What it compares | Why it matters |
|---|---|---|
| Cash conversion | Cumulative operating cash flow against cumulative EBITDA over three years | Over a multi-year window these should converge absent a structural explanation. Persistent divergence is the single most informative summary indicator. |
| Accruals ratio | Net income less operating cash flow, scaled by average total assets | High and rising accruals indicate earnings supported by estimates rather than cash. |
| Days sales in receivables index | Receivable days this year against last year | Rising receivable days with flat terms suggests revenue recognised ahead of collection or against unaccepted arrangements. |
| Gross margin index | Prior-year gross margin divided by current-year gross margin | Deterioration creates pressure to manage earnings; unexplained improvement suggests cost deferral or inventory capitalisation. |
| Asset quality index | Share of total assets that is neither current assets nor property, plant and equipment | Growth here often reflects capitalised costs, intangibles and advances that will not convert to cash. |
| Sales growth index | Revenue growth rate against peer and capacity growth | Growth that outpaces headcount, capacity and working capital investment deserves explanation. |
| Leverage and depreciation indices | Movement in leverage and in depreciation rates year on year | A falling depreciation rate without an asset-mix explanation indicates extended useful lives to support earnings. |
| Beneish M-score | Composite of eight of the above-style indices | A widely used screening composite. A score above the commonly cited threshold of −1.78 flags a profile consistent with manipulation. It is a screen, not a finding, and it generates false positives in fast-growing businesses. |
| Altman Z-score | Composite distress indicator | Measures financial distress rather than fraud, but distress is the pressure that precedes it. |
| Benford analysis | Distribution of leading digits in large transaction populations | Deviation from the expected distribution can indicate fabricated or threshold-avoiding entries. Requires a large, homogeneous population to be meaningful. |
Two practical notes. Run these on segment data as well as consolidated data, because consolidation averages anomalies away. And run them against a peer set: an industry-wide movement is a market event, a company-specific movement is a company question.
Revenue manipulation: the recurring patterns
- Cut-off pushing. Shipments accelerated into the final days of a period. Visible in the daily revenue profile of the last week compared with prior weeks, and in the sales return and credit note rate in the first weeks of the following period.
- Channel stuffing. Distributors loaded beyond their sell-through capacity, usually supported by extended terms or return rights. Look for distributor receivable days rising while end-market data is flat, and for rising distributor inventory where that data exists.
- Bill and hold. Revenue recognised on goods not yet delivered. Legitimate only in narrow circumstances; the tell is a rise in “goods invoiced not despatched” alongside customer-specific storage arrangements.
- Side letters. Undisclosed amendments granting return rights, contingent acceptance or price protection. Not visible in the ledger at all, which is why confirmation procedures and legal-department enquiry matter.
- Round-tripping. Reciprocal arrangements where the company buys from and sells to the same counterparty at similar values, inflating both revenue and cost with no economic substance.
- Percentage-of-completion abuse. Understating estimated costs to complete in order to accelerate revenue on long-term contracts. Watch the pattern of cost-to-complete revisions across contracts and whether they cluster near period ends.
- Gross versus net presentation. Recording agency revenue on a gross basis inflates the top line without touching profit. The principal-versus-agent assessment under Ind AS 115, IFRS 15 or ASC 606 should be documented; if it is not, ask.
- Related-party revenue. Sales to entities connected to management, which may never be collected. Discussed further below.
Expense, provision and balance sheet patterns
- Capitalisation of operating costs. Internal salaries, marketing or maintenance moved into intangible assets or capital work in progress. A capital work in progress balance that grows for several periods without assets being commissioned is a standing question.
- Under-provisioning. Bad debt, warranty, inventory obsolescence and litigation provisions that fall as a percentage of the relevant base without a documented change in experience.
- Cookie-jar reserves. Over-provisioning in strong periods and releasing in weak ones, producing suspiciously stable earnings. Ask for the movement schedule of every material provision, showing opening, charge, utilisation, release and closing.
- Goodwill and intangibles carried without rigorous impairment testing. Where the impairment model’s assumptions consistently just clear the carrying value, the model is being fitted to the answer.
- Inventory build without a demand explanation. Rising inventory days alongside flat or falling sales frequently precedes a write-off, and sometimes conceals cost deferral.
- Unusual “loans and advances” or “other current assets”. These captions absorb balances that do not belong anywhere else. Request the composition of anything material.
- Weak audit trail discipline. Manual journals concentrated at period end, posted by a few senior users, to unusual account combinations, at unusual hours. Indian companies must maintain accounting software with an edit log that cannot be disabled; whether it is enabled, and reviewed, is a legitimate board question.
Related-party exposure
Related-party transactions are not improper in themselves, and in family-controlled and group structures they are unavoidable. The risk lies in transactions that are undisclosed, non-arm’s-length, or designed to move value out of the reporting entity.
The disclosure and approval framework in India rests on Ind AS 24 or AS 18 for disclosure, Section 188 of the Companies Act 2013 for approval of specified transactions, Section 177 for audit committee approval, and the SEBI Listing Regulations for listed entities, which impose materiality thresholds and, for material transactions, shareholder approval. The equivalents internationally are IAS 24 and ASC 850.
Board-level enquiries that reliably surface problems: does the related-party register reconcile to the KMP and director disclosures under Section 184, and to the group structure chart. Are there balances with related parties that never settle. Have any related-party arrangements been entered into just below an approval threshold. Is there a counterparty that is not formally a related party but shares an address, a director, a bank account or a domain name with one. Are commission agents, consultants and logistics providers concentrated in a small number of entities with limited independent presence.
Behavioural and governance signals
- Resignation of the chief financial officer, the auditor or an audit committee member without a convincing explanation, particularly close to a reporting date.
- Repeated late filings, restatements, or a change of auditor following a disagreement.
- Reluctance to provide underlying schedules; answers that stay at the level of narrative.
- A dominant individual who controls both the commercial relationships and the accounting for them.
- Whistleblower complaints closed quickly, or a vigil mechanism that has never received a complaint in a large organisation.
- Aggressive but technically permissible accounting choices adopted consistently in the direction that flatters results.
- Auditor communications reporting significant deficiencies that recur year after year without remediation.
When to escalate, and how
Escalation is a ladder, and boards err in both directions — commissioning a full investigation over an explainable variance, or letting serious indicators be absorbed into routine management follow-up for several quarters.
- Enquiry. Ask management for the analysis and the supporting schedules. Record the question and the answer in the minutes.
- Independent verification. If the explanation is unconvincing or unsupported, ask internal audit or the statutory auditor to perform specific procedures. Still not an investigation.
- Preliminary assessment. Where indicators point to intentional misstatement or misappropriation, the audit committee commissions a scoped, confidential fact-finding exercise, usually with external forensic support and, where the exposure is significant, under legal privilege through counsel.
- Formal investigation. Full scope, defined terms of reference, evidence preservation, forensic data analytics over the ledger and communications, interviews, and a written report to the audit committee.
The trigger for moving from step two to step three is qualitative rather than numerical: evidence of intent, evidence of concealment, involvement of senior management, or an inability of management to explain a material item with documentation.
The first days matter disproportionately
- Preserve evidence immediately. Suspend routine deletion policies, issue a hold, and secure forensic images of relevant devices and mailboxes before anyone is interviewed.
- Control who knows. Scope the informed group narrowly. Tipping off is the most common cause of destroyed evidence.
- Do not let implicated management run the review. The audit committee, not the executive, must own the mandate and the reporting line.
- Take advice on privilege and employment law before interviews. A poorly conducted interview can prejudice both the investigation and any later action.
- Consider disclosure obligations early. Listed companies, regulated entities and companies in the middle of a transaction have obligations that arise on knowledge, not on conclusion.
Statutory reporting duties in India
Directors should be aware of the auditor’s obligation under Section 143(12) of the Companies Act 2013. Where an auditor has reason to believe that an offence involving fraud is being or has been committed against the company by officers or employees, the matter must be reported — to the Central Government where the amount involved meets the prescribed threshold, and to the audit committee or board below it, within the timelines set out in the associated rules. Reporting obligations also arise under the auditing standard on the auditor’s responsibilities relating to fraud, and under the auditor’s reporting requirements on fraud in CARO. the monetary threshold and reporting timelines under Section 143(12) of the Companies Act, 2013 and Rule 13 of the Companies (Audit and Auditors) Rules, 2014 in force on the reporting date
The practical implication is that once an auditor is formally aware, the matter is no longer within the board’s discretion to manage quietly. That argues for the audit committee taking control early rather than late.
Artham Fintech supports audit committees and boards with forensic advisory and investigation work, including analytical reviews of financial statements, related-party mapping, ledger and journal analytics, and scoped investigations run under audit committee mandate. If a specific indicator is troubling you and you would prefer a preliminary view before deciding what to commission, that conversation can be held in confidence.