New credit analysts see a bank statement and cannot tell which patterns are normal and which deserve a second look.
Sort each unusual pattern into document fraud or credit stress, note a possible innocent reason, then decide whether to ask for proof, refer or reject.
Twelve months of statements, a list of known flags, the applicant's stated income or turnover, and the lender's own credit policy.
A short note per flag with the evidence requested and the action taken, filed with the credit memo.
A red flag in a bank statement is a pattern that does not fit a genuine salary or business profile. The common ones are signs of an edited document, balance spikes just before the application, circular credits, repeated bounces, unexplained cash and heavy loan-app activity. A flag is a reason to ask a question, not a verdict.
Which red flags point to document fraud and which to credit stress?
It helps to sort flags into two groups. Document fraud flags question whether the statement is real. Credit stress flags are real entries that suggest the borrower may struggle to repay.
| Flag | How it appears | Possible innocent reason | Action |
|---|---|---|---|
| Running balance does not add up | Previous balance plus credit minus debit gives a different figure | Rare in a genuine bank PDF | Refer for forensic review |
| Fonts or alignment differ | One row looks bolder or shifted | Poor scan of a printed copy | Ask for a fresh net-banking download |
| Transaction on a bank holiday | A cheque clearing dated on a national holiday | Some digital payments do post on holidays | Check the payment mode |
| Balance spike before applying | Large credit in the last week, gone soon after | Genuine sale of an asset | Ask for the sale deed or invoice |
| Circular credits | Money goes out and comes back from the same party | Refund or returned advance | Ask for the contract or credit note |
| Repeated bounces | Several inward returns of EMI or cheques | One-off technical failure | Count bounces across 12 months |
| Large unexplained cash | Cash deposits far above the usual daily level | Cash-heavy trade such as a kirana | Ask for daily sales records |
| Many loan-app credits and debits | Small credits from lending apps and frequent repayments | Short-term working capital | List all obligations and recompute repayment capacity |
When is one flag enough to escalate, and when do you ask for proof first?
Escalate at once when the document itself looks altered. If the arithmetic is broken on even one row, every other number in the file is in doubt, so the file goes to whoever handles fraud review under your lender’s policy.
For credit stress flags, ask for proof first. A trader who sold a vehicle can show the sale letter. A shop with heavy cash can show a sales register and GST returns. Escalate when the answer does not match the evidence, or when two or three flags appear together, for example a spike plus circular credits plus near-zero balances the rest of the year.
Worked example: a spike at the year end
An applicant’s statement shows month-end balances under ₹25,000 for eleven months. Then:
- On 28 March, ₹3,50,000 is credited by NEFT from an individual.
- On 31 March, the closing balance is ₹3,71,000.
- On 3 April, ₹3,45,000 is debited to the same individual.
- The April month-end balance falls back to ₹22,400.
If you looked only at the 31 March balance, the account seems to hold about 15 times its normal level. Averaged across the year, the ₹3,50,000 stayed for only 6 days, so it adds roughly ₹3,50,000 × 6 ÷ 365 = ₹5,753 to the average daily balance. The money arrived and left within a week and went back to the same person. That is a classic balance spike. Ask what the credit was. If the applicant cannot show a genuine reason, exclude it from income and balance calculations.
What else should a new analyst keep in mind?
- Read the whole period, not just the last three months.
- Compare the statement with the stated income or turnover. A ₹60,000 monthly salary should show about ₹60,000 credited each month, less deductions.
- Look at the days just after the statement date as well as before it.
- Write down what you asked for and what you received. A clear note protects the applicant and the lender.
What to read next
Each flag has its own guide. Start with how to check if a bank statement is fake without software, then read PDF tampering detection for bank statements and counterparty spread analysis for loops and unusual party patterns.
When volumes grow, a bank statement analyzer runs these checks on every file. TransactIQ, delivered as a managed service on Terra Insight’s AWS Mumbai infrastructure, produces 40+ engineered credit signals, including fraud and anomaly signals that are rule-traceable so your credit team can explain each one.