Having conducted statutory bank branch audits across public and private sector banks over several years, one observation stands out consistently: the audit of advances is where most of the real work happens, most of the time is spent, and most of the professional risk lies. Yet it is also the area where the regulatory framework is read selectively - the standard provisions are well-known, but the specific situations buried deeper in the same documents are routinely missed.
This article is grounded in the RBI (Commercial Banks - Income Recognition, Asset Classification and Provisioning) Directions, 2025 (IRACPD) dated November 28, 2025 and the ICAI Guidance Note on Audit of Banks (2026 Edition) . These are the operative references for FY 2025-26 branch audits.
The Regulatory Framework in Brief
For those who need a quick anchor before the situational discussion: a term loan becomes NPA when interest or principal instalment remains overdue beyond 90 days. A CC/OD account is out-of-order - and therefore NPA - when the outstanding continuously exceeds the sanctioned limit or drawing power for 90 days, or interest is not regularly serviced. Agricultural short-duration crop loans become NPA after two crop seasons; long-duration crop loans after one crop season. NPA classification is borrower-wise - if any one facility of a borrower is NPA, all other facilities of the same borrower become NPA. Classification flows from Sub-standard to Doubtful (D1, D2, D3) to Loss based on the period of NPA, with provisioning rates increasing correspondingly.
That is the framework. The rest of this article is about what happens when the standard framework meets specific situations - and what the regulations actually say about those situations.
Can CBS Be Manipulated to Prevent NPA Classification? Yes - and Here Is Exactly How
The assumption that automated NPA identification makes CBS outputs trustworthy is one of the more dangerous assumptions in branch audit. The ICAI Guidance Note on Audit of Banks (2026 Edition) documents manipulation techniques that have actually been observed in banks - and the auditor needs to know these exist.
The most basic mechanism: CBS has an NPA identification flag at account level that can be set to 'No', excluding that account from the daily NPA identification run entirely. The account continues showing Standard in all CBS reports regardless of how many days it has been overdue. Auditors should specifically request the list of accounts where this flag is set to 'No' and verify whether each exclusion is genuinely justified.
More sophisticated manipulations use internal or office accounts as conduits. The documented patterns include: debiting a GL head like 'Other Liabilities' and crediting the overdue loan account, causing CBS to mark the account Standard, then reversing the office account entry a few days later - leaving the account classified Standard with no actual recovery. A variation routes the credit through a 'No Lien' internal account as intermediate. In some cases, a dummy nil-value entry is passed, the IRAC status is manually changed to Standard in the window between debit and credit, and the entry is then reversed - no trace in the account statement, IRAC flag updated.
The ICAI Guidance Note also flags entries passed in 'correction mode' in CBS - one leg appears in the account statement, the correction entry does not, and the account balance remains unchanged while the classification changes. Simpler but equally effective: changing the repayment schedule in CBS without any formal restructuring sanction, backdating the CC/OD renewal date to avoid the 180-day NPA trigger, or granting a temporary overdraft specifically to route funds into an overdue account to show it as serviced before year-end.
Under IRACPD, every manual override of system-based classification requires two-level authorisation, must be logged with date, time, user ID and reason, and logs must be maintained for three years. If the branch cannot produce this log, or it shows overrides without proper authorisation, that is a reportable finding. Also request the list of days when the NPA identification module was not run as part of day-end processing - gaps around quarter-ends and year-end are particularly worth examining.
Accounts Regularised Just Before March 31 - Not All Credits Are What They Appear
One of the most persistent practices in branch banking is the year-end credit. An account irregular through the year receives a credit just before March 31, appears within limits, then goes irregular again in April. The IRACPD is specific on this: where an account shows a solitary credit or a few credits just before the balance sheet date, classification must be handled without subjectivity. If the account shows inherent weakness on available data, it should be classified as NPA regardless of the last-minute credit.
Critically - if the regularising credit is through a cheque that subsequently bounces, it is not to be treated as a credit for NPA classification purposes at all. The account reverts to its pre-credit overdue status.
Related: in CC/OD accounts, some borrowers rotate funds through the account - a debit and credit in quick succession gives the appearance of activity but involves no genuine business transaction. The ICAI Guidance Note flags multiple transfers within group or unrelated accounts for credit turnover as a specific red flag. The auditor should examine the nature of credits - genuine business receipts or internal transfers that reverse quickly.
Death of a Borrower - The Account Still Follows the Record of Recovery
The regulations do not address this situation explicitly, but applying IRAC principles: death alone is not a trigger for NPA classification - the account continues to be governed by the record of recovery. If dues are being serviced by legal heirs or the estate, the account is Standard. If they are not, the 90-day clock runs from when dues became overdue, regardless of the borrower's status.
The practical audit checks in such cases: whether notice has been served on legal heirs, whether any insurance on the loan has been claimed and proceeds received, and whether the account is being kept in a legal grey zone to defer classification. Recovery proceedings are separate from classification - the record of recovery determines NPA status, not the status of succession proceedings.
Consortium Accounts - Standard in Your Branch May Be NPA in Another Bank's Books
NPA classification under consortium is based on the record of recovery in each individual member bank's books - not the lead bank's classification. Where remittances are pooled with the lead bank and the lead bank is not transferring each member's share of recovery, the account is technically unserviced in the member bank's books and should be NPA there - even if the lead bank is showing it as Standard.
The practical audit question is whether the branch has independently verified that its share of recovery was actually received and credited - or whether it is relying entirely on lead bank MIS. If the recovery is not flowing into the branch's books, the Standard classification is wrong regardless of what the lead bank reports.
Additionally, banks are required to obtain a certificate from a professional regarding compliance of statutory prescriptions for multiple banking arrangement borrowers. If that certificate contains adverse remarks, the auditor cannot ignore them.
Security Erosion Above 50% or Below 10% - These Accounts Skip the NPA Age Queue
Most auditors track the period of NPA to determine classification - Sub-standard to D1, D2, D3 and Loss. But IRACPD prescribes a parallel track that bypasses this progression entirely based on security erosion.
Where the realisable value of security has eroded by more than 50% of the value assessed at the time of last RBI inspection or bank valuation, the account must be classified as Doubtful straightaway - regardless of how long it has been NPA. Where the realisable value has fallen below 10% of the outstanding, the existence of security is to be ignored and the account classified as Loss straightaway, with 100% provision.
In practice, CBS does not automatically track security value erosion and trigger reclassification. The auditor needs to cross-reference latest security valuations - particularly in real estate and stock-hypothecation accounts - against the outstanding balance and the previously assessed value.
There is a further complication the ICAI Guidance Note specifically flags: CBS may not preserve the historical value of security. If the bank overwrites the previous valuation when updating with a new one, the erosion percentage cannot be computed from CBS records. The auditor should verify whether the system maintains valuation history, and if not, obtain this from branch records manually.
LC Devolvement Parked in a Separate Account - Part of the Borrower's Exposure
When an LC is devolved or a bank guarantee is invoked, many branches park the amount in a separate internal account rather than debiting the borrower's operating account directly. This is operationally common - but what is frequently missed is that the outstanding in that separate account must be treated as part of the borrower's principal operating account for IRAC purposes.
So a borrower whose CC account appears Standard but who has an LC devolvement of significant value sitting in a separate internal account beyond 90 days - both must be assessed together. The devolved amount alone may make the borrower NPA.
On bills discounted under LC - there is a specific exception: when the borrower's other facilities are NPA, the LC-backed bill discounted need not automatically be classified NPA, as long as the LC-issuing bank is honouring the LC on due date. However, the moment the LC-issuing bank fails to make payment on due date for any reason and the borrower does not immediately make it good, the discounted bills become NPA with effect from the date the other facilities were first classified NPA - not from the date of the LC failure. This retrospective application is frequently missed.
Central Government Guaranteed Accounts - Standard for Classification, Cash Basis for Income
This is perhaps the single most universally missed distinction in branch audit. Central Government guaranteed advances, though overdue, are not classified NPA - most auditors know this. What most do not check: this exemption applies only to asset classification. It explicitly does not apply to income recognition. Even though the account is Standard, interest must be recognised on cash basis only - not accrual. Interest accrued but not received cannot be taken to income on these accounts.
In practice, since CBS treats these accounts as Standard, it continues accruing interest income automatically. The branch reports it as income. This is an overstatement that needs to be identified and reversed. The regulatory position is clear in both IRACPD and the ICAI Guidance Note - yet it is rarely actioned at branch level.
Upgradation From NPA - 'No Overdue' Is Not the Same as 'Overdue Brought Within 90 Days'
The condition for upgrading a NPA to Standard is that the entire arrears of interest and principal are paid - the account must reach 'no overdue' status. This is frequently misunderstood as meaning the overdue outstanding must be brought within the 90-day threshold.
These are not the same thing. If a term loan has accumulated 18 months of overdue EMIs, paying 3 months of EMIs does not make it Standard even though the remaining overdue is now under 90 days. All accumulated arrears must be cleared. CBSes sometimes upgrade automatically when an account comes within the 90-day window - this is a CBS configuration issue that produces incorrect upgradation, and auditors must verify upgraded accounts specifically for this.
In CC/OD accounts, some borrowers rotate funds to show a momentary within-limit position on the date of the CBS report without genuinely clearing the irregularity. The auditor should review whether the account remained within limits for a sustained period or merely touched the limit briefly.
Two additional points the ICAI Guidance Note specifically highlights: once classified as Doubtful, an account cannot be reclassified as Sub-standard even if overdues reduce to below 12 months - upgradation within NPA categories is not permitted. And for restructured accounts being upgraded, one full year of satisfactory performance under restructured terms must have elapsed - satisfactory performance meaning no payment overdue for more than 30 days - before the upgrade is valid.
Quick Mortality - A Classification Finding With Institutional Consequences
Any advance slipping to NPA within 12 months of sanction is a 'quick mortality' case. This triggers staff accountability proceedings for the sanctioning authority - which means branches have a strong institutional incentive to keep such accounts showing Standard on technically untenable grounds, specifically to push them past the 12-month mark.
The auditor should obtain the list of accounts sanctioned in the 12 months prior to audit and verify their current classification status with particular care. Quick mortality cases artificially kept Standard are not just an audit finding - they represent a systematic control failure worth highlighting in LFAR.
PACS/FSS On-Lending Accounts - An Explicit Exception to the Borrower-wise Rule
For advances to Primary Agricultural Credit Societies (PACS) and Farmers Service Societies (FSS) under the on-lending arrangement, only the specific facility in default is classified as NPA - not all facilities of that PACS/FSS. This is an explicit regulatory exception to the borrower-wise NPA principle.
However, if the same PACS/FSS has direct loans from the bank outside the on-lending arrangement, those direct facilities become NPA even if only the on-lending facility is in default - because for direct loans, the normal borrower-wise rule applies in full.
The applicable rule is: selective classification for on-lending facilities, full borrower-wise classification for direct loans. This distinction is rarely applied correctly at branch level.
Jewel Loans for Agricultural Purposes - Crop Season Rule, Not 90 Days
Gold loans are typically 90-day rule accounts. But jewel loans taken specifically for agricultural purposes are governed by the crop season norms - short duration or long duration - not the 90-day rule. This requires the auditor to look beyond the product code and verify the stated purpose of the advance. Given the volume of jewel loan portfolios at rural and semi-urban branches, this distinction can be material.
Conclusion
The audit of advances at branch level carries professional risk that extends well beyond the audit engagement itself - RBI divergence notices, provisioning shortfalls identified in subsequent inspections, and income overstatements can all be traced back to situations where the regulatory position was clear but not applied. The provisions discussed in this article - CBS override possibilities, year-end regularisation, consortium recovery gaps, security erosion thresholds, income recognition on Central Government guaranteed accounts, correct upgradation conditions, and category-specific rules for agricultural and PACS advances - are not interpretive grey areas. They are explicitly addressed in IRACPD 2025 and the ICAI Guidance Note 2026 Edition. What makes them practically significant is not their complexity but the fact that routine audit procedures tend not to surface them. A branch audit that actively looks for these situations - and documents its findings or clean chits accordingly - is substantively different from one that does not. That difference is ultimately what determines audit quality.
Resources
Practitioners seeking to automate the core NPA analysis process in bank branch audit may refer to banklens.nabsai.com, a desktop-based offline tool aligned with RBI IRACPD 2025 and the ICAI Guidance Note on Audit of Banks (2026 Edition).
CAclubindia
