A forensic audit report is the written record of an inquiry into suspected fraud or misstatement. It states what was asked, what was done, what was found and what was not. It is usable when every finding is tied to evidence, the limits are plain, and a reader who was not there can follow it. India has no single format that we could confirm, so the structure below is practice, not law.
Last reviewed: 17 October 2026. Facts checked. We ran one search on ICAI's Forensic Accounting and Investigation Standards. It showed that ICAI has issued such standards, but it returned only secondary pages and the cover of an exposure draft. We did not open ICAI's final standards, so we state no required report contents, effective dates or standard numbers. We also opened ACFE's 2026 Report to the Nations page for the definition of occupational fraud. The structure here is our own working suggestion.
Why the report matters
The report is often what the board, a lender, a regulator or a court sees. The inquiry may be sound, but a weak report makes it useless. Common problems are claims without evidence, opinions mixed with facts, and a scope that is unclear.
ACFE defines occupational fraud as fraud committed by a person against the organisation for which they work. Many forensic reports deal with that, but others deal with financial statement misstatement or fraud by outsiders. State clearly which one you examined.
A section-by-section structure
| Section | What it holds |
|---|---|
| 1. Cover and distribution | Title, date, to whom addressed, confidentiality marking |
| 2. Executive summary | One page: question, main findings, amount, key recommendations |
| 3. Background and mandate | Why the inquiry began, who engaged you, the terms of reference |
| 4. Scope and limitations | Period, entities, what was excluded, what you could not access |
| 5. Approach | Procedures performed, tools, sources of data, interviews held |
| 6. Findings | Each finding in turn, with facts, amounts and evidence references |
| 7. Quantification | How amounts were worked out, with assumptions |
| 8. Control and process gaps | How the weakness allowed it |
| 9. Conclusions | What the evidence does and does not support |
| 10. Recommendations | Action by owner and timing |
| 11. Annexures | Evidence index, schedules, interview notes, data extracts |
Write the executive summary last. Put it first.
What goes in each finding
Keep every finding in the same shape.
- What happened, in one or two sentences
- Evidence, with exhibit numbers
- Amount, with the working
- People or parties involved, as far as the evidence goes
- Control gap that let it happen
- Status, such as established, probable or not established
A reader can then challenge each link in the chain.
What makes a report usable
| Habit | Why it helps |
|---|---|
| Fact and opinion kept apart | Readers can see what the evidence shows |
| Every claim has an exhibit reference | The report can be tested |
| Limitations stated | You are not blamed for what you could not see |
| Plain language | Boards and lawyers can follow it |
| Amounts with workings | Numbers can be recomputed |
| Tight scope | You answer the question asked |
| Neutral tone | The report reads as fair |
| Version control | Everyone cites the same text |
Language that protects the report
- Say "the records show" and not "he stole".
- State what is proven, what is probable and what is not established.
- Do not name guilt. That is for the decision-maker or the court.
- Give the person concerned a chance to respond where fairness or the law needs it, and record the response.
Evidence in the annexures
Keep an index of exhibits. For each, record the source, date obtained, who obtained it and where it is stored. This ties to the habits in our fraud investigation guide. Data tests, such as a Benford's law check, belong in the annexures with settings and results, and they should be described as leads, not proof. Our article on Benford subset divergence analysis explains the method and its limits.
Common weaknesses
- The scope changes during the work but the report keeps the old one
- Findings with no source
- Totals that do not agree to schedules
- Recommendations nobody owns
- A draft that was shared too widely before it was final
Who reads it, and what each needs
| Reader | Needs |
|---|---|
| Board or audit committee | Summary, amounts, actions |
| Lender or investor | Findings, quantification, limits |
| Lawyer | Evidence trail, chain of custody |
| Regulator | Facts and the basis |
| Management | Control fixes |
Consider a short version for the board, and the full report for counsel.
For background on the discipline, read what a forensic audit is. For the risk assessment that often precedes it, see our fraud risk assessment template.
Frequently Asked Questions
Is there a prescribed format for a forensic audit report in India?
We could not confirm one. ICAI has issued forensic accounting standards, which we did not open. Check them for any report requirements that apply to you.
How long should a forensic audit report be?
As long as the evidence needs. A short executive summary up front lets readers stop early.
Can the report say someone committed fraud?
Best practice is to state what the evidence shows and leave findings of guilt to the decision-maker or the court. Take legal advice.
Who owns the report?
Whoever engaged you, under the terms of reference. Settle distribution and confidentiality before you start.
What makes a report fail in court?
We have no verified data. Weak evidence handling, unclear scope and unsupported claims are the usual causes of doubt.
Related Articles
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error