Skip to main content
How-To · 5 min read

CARO 2020 and Bank Reconciliation: Audit Requirements for Indian Companies

Clause 3(ii)(b) of CARO 2020 requires auditors to report whether quarterly statements filed with banks agree with books of account for companies with working capital limits exceeding ₹5 crore. Finance teams that treat bank reconciliation as a month-end formality face audit qualifications, material weakness disclosures, and GST exposure from unreconciled bank credits.

Terra Insight
Terra Insight Reconciliation Infrastructure

Content authored by practitioners with experience at Amazon India, Intuit QuickBooks, and the Tata Group. Meet the team →

Published 3 April 2026
Domain expertise
TDS Reconciliation GST Input Credit Platform Settlements NACH Batch Matching Bank Reconciliation Form 26AS Matching ERP Integrations Enterprise Finance Ops
Knowledge Card
Problem

Companies with working capital above ₹5 crore must demonstrate quarterly BRS agreement with bank statements under CARO 2020. Unreconciled items constitute a reportable material weakness.

How It's Resolved

Generate quarterly BRS per CARO 2020 Clause 3(ii)(b). Match against Section 143(3)(i) internal controls framework. Flag items exceeding auditor-defined aging thresholds. Cross-reference bank inflows against GSTR-1 declared turnover.

Configuration

CARO threshold: working capital above ₹5 crore. DBCP portal for digitally signed confirmations (Canara, PNB, BoM, UCO). Form 3CD → Form 26 under new Act with Clauses 49-51.

Output

Audit-ready quarterly BRS, material weakness assessment, DBCP confirmation reconciliation, and turnover-to-bank-inflow cross-reference for GST scrutiny readiness.

Statutory auditors reporting under CARO 2020 must verify that quarterly statements filed with banks reconcile to books of account for companies with working capital limits above ₹5 crore. This requirement, combined with Section 143(3)(i) internal controls reporting, makes bank reconciliation an audit-critical process rather than a back-office task. This guide covers the specific CARO clauses, the new Digital Bank Confirmation Portal, and where manual reconciliation creates audit exposure.

What CARO 2020 Requires for Bank Reconciliation

Clause 3(ii)(b) of CARO 2020 directs auditors to report whether quarterly returns or statements filed by the company with banks and financial institutions agree with the books of account. This applies to every company where the aggregate working capital limit sanctioned by banks exceeds ₹5 crore at any point during the financial year. Discrepancies between the quarterly statements and ledger balances must be disclosed with specific amounts and explanations.

Section 143(3)(i) of the Companies Act, 2013 adds a second layer: auditors must comment on whether the company has adequate internal financial controls with reference to financial statements. A persistent bank reconciliation backlog, or unexplained items older than the aging threshold, constitutes a reportable material weakness. There is no statutory fixed materiality threshold for bank reconciliation items. Auditors exercise professional judgment based on SA 320 (Materiality in Planning and Performing an Audit), but unexplained items older than 90 days consistently trigger escalation in practice.

Where Audit Exposure Originates

Quarterly BRS Discrepancies

The quarterly statement filed with the bank for drawing power calculation must reconcile to the general ledger. When the BRS carries unresolved items across quarters, auditors cannot verify the accuracy of the working capital utilisation. For companies with multiple bank accounts and payment channels, these items compound.

GST Turnover Cross-Referencing

GST authorities use data-sharing arrangements with banks to match declared turnover in GSTR-1 against total bank inflows. Unreconciled credits sitting in suspense accounts create a presumption of suppressed turnover. A demand notice under Section 73 of the CGST Act carries 18% per annum interest, and fraud cases under Section 74 attract a 100% penalty on the tax amount.

Digital Bank Confirmation Portal

The DBCP, launched in July 2025 by the Indian Banks’ Association in collaboration with ICAI, provides digitally signed bank balance confirmations directly to auditors. Canara Bank, Punjab National Bank, Bank of Maharashtra, and UCO Bank are currently live on the portal. The digitally signed confirmation is admissible as audit evidence under SA 505, which means discrepancies between the DBCP-confirmed balance and the company’s BRS are now verifiable in real time rather than after a 4-to-6-week manual confirmation cycle.

CARO 2020 Bank Reconciliation Audit Reference

RequirementSourceScopeConsequence of Non-Compliance
Quarterly BRS agreement with booksClause 3(ii)(b), CARO 2020Working capital above ₹5 croreDisclosure of discrepancies in audit report
Internal financial controls adequacySection 143(3)(i), Companies Act 2013All companies subject to CAROMaterial weakness qualification
Bank balance confirmationSA 505 (revised) / DBCPAuditor’s external confirmationModified opinion if confirmation unavailable
Tax audit reconciliationForm 3CD (Clause 36) / Form 26 under new ActAll tax audit applicable companiesReporting of unreported TDS/TCS counts
GST turnover vs bank inflowsSection 73/74, CGST Act 2017All GST-registered entitiesDemand notice with 18% interest and penalties

New Income Tax Act 2025: Form 3CD to Form 26 Transition

Under the new Income Tax Act 2025, Form 3CD is replaced by Form 26. Clauses 49, 50, and 51 of the new form require exact counts and monetary amounts of unreported TDS and TCS transactions. This means bank reconciliation must now feed directly into tax audit reporting: every bank debit for TDS payment must be matched to a corresponding TDS return entry, and every bank credit from a customer must be verified against TCS collection records where applicable. Unmatched items are no longer discretionary disclosures. They are mandatory line items in the tax audit report.

For companies processing 500 to 2,000 transactions per month across 3 to 5 bank accounts, manual reconciliation typically consumes 3 to 7 staff days per month. When payment gateway settlements and NACH collections are added, the effort increases to 10 to 15 staff days per month with an error rate between 15% and 25%. Bank reconciliation software India that applies structured matching reduces processing time by 85% and achieves match rates exceeding 95%, converting the audit-critical BRS from a quarterly scramble into a continuous, verifiable process.

Organisations managing reconciliation across multiple entities and bank accounts benefit from reconciliation software India-wide deployments that consolidate all BRS data into a single audit-ready workspace. CARO 2020 reporting requirements, including the DBCP-confirmed balances, are published on the Ministry of Corporate Affairs website.

Primary reference: Ministry of Corporate Affairs — where CARO 2020 notification and Companies (Auditor's Report) Order are published.

Frequently Asked Questions

Which companies are covered under CARO 2020 bank reconciliation reporting?
CARO 2020 applies to all companies except banking companies, insurance companies, Section 8 companies, one-person companies, and small companies as defined under Section 2(85) of the Companies Act, 2013. Clause 3(ii)(b) specifically applies where the aggregate working capital limit from banks or financial institutions exceeds ₹5 crore at any point during the year. Listed companies, NBFCs above threshold, and manufacturing companies with working capital facilities are the most commonly affected.
What happens if the quarterly BRS does not match the bank statement?
Auditors must disclose the nature and amount of discrepancies in their report under Clause 3(ii)(b). Persistent unexplained items older than 90 days typically trigger a material weakness observation under Section 143(3)(i). If the discrepancy is large relative to working capital, the auditor may issue a qualified opinion. Companies must then disclose the qualification in their annual return filed with the MCA.
What is the Digital Bank Confirmation Portal and how does it affect bank reconciliation?
The DBCP was launched in July 2025 by the Indian Banks' Association in collaboration with ICAI. It provides digitally signed bank balance confirmations directly to auditors, eliminating manual balance confirmation letters. Currently, Canara Bank, Punjab National Bank, Bank of Maharashtra, and UCO Bank are live on the portal. Auditors can request balance confirmations for specific dates, and the digitally signed response is admissible as audit evidence under SA 505.
How does GST enforcement use bank data to detect turnover mismatches?
GST authorities cross-reference declared turnover in GSTR-1 against total bank inflows received through data-sharing arrangements with banks. Unreconciled credits sitting in suspense accounts or unexplained bank deposits that exceed declared sales create a presumption of suppressed turnover. This triggers a demand notice under Section 73 or Section 74 of the CGST Act, with interest at 18% per annum and penalties ranging from 10% to 100% of the tax amount depending on whether fraud is established.
How long does manual bank reconciliation take for companies under CARO 2020?
For a company with 3 to 5 bank accounts processing 500 to 2,000 transactions per month, manual reconciliation typically requires 3 to 7 staff days per month. Companies with payment gateway settlements and NACH collections face higher volumes and typically spend 10 to 15 staff days per month. The manual error rate ranges from 15% to 25%, primarily from narration mismatches and date-proximity errors across UPI, NEFT, and RTGS entries.

See how TransactIG handles reconciliation for your industry

Configuration takes 2–4 weeks. No code development required. ISO 27001:2022 certified.