Cost and Management Audit · Forensic Audit

Legal Framework and Evidence in Forensic Audit

Updated 11 October 2026 · Fact-checked

The legal framework for forensic audit is the set of Indian laws that define fraud, fix punishment, give agencies power to investigate, and decide whether evidence is accepted in court. Key pieces are section 447 of the Companies Act, 2013, the SFIO, and the law of evidence. Solve questions by linking the fact, the law, and the evidence.

Understand Legal Framework and Evidence

A forensic audit is only useful if its findings can be used. That needs law on three points: what counts as fraud, who can investigate it, and whether your evidence will be accepted by a court or tribunal.

Definition and punishment. Section 447 of the Companies Act, 2013 defines fraud in relation to the affairs of a company. It covers any act, omission, concealment of fact or abuse of position, done with intent to deceive, to gain undue advantage, or to injure the interests of the company, its shareholders, creditors or any other person. It is not necessary that there is wrongful gain or wrongful loss. Section 447 also gives the punishment for it.

Investigators. The Serious Fraud Investigation Office (SFIO) is a multi-disciplinary body under the Ministry of Corporate Affairs. It investigates complex corporate frauds. The Central Government assigns a case to it, usually where the matter is serious, involves public interest, or needs coordinated inquiry. Its officers have powers of investigation, and the Act provides for arrest in specified circumstances and for filing a report with the Central Government. Other agencies also act on the same facts, for example the Enforcement Directorate under the money-laundering law, and the police or CBI under criminal law.

Evidence. Findings must be proved. Indian law of evidence deals with relevance, proof, documents and electronic records. Electronic records, such as emails, ERP logs and bank data, are admitted only if the statutory conditions for electronic evidence are met, usually a certificate identifying the record and the device or system that produced it. Under the Bharatiya Sakshya Adhiniyam, 2023, which replaced the Indian Evidence Act, 1872, the same approach applies. Expect the exam to use either name, so know both.

Why it matters to the auditor. An expert's opinion helps the court but does not bind it. Your working papers, a clear chain of custody, and untampered copies decide whether your work survives cross-examination.

Key rules to remember

Elements of fraud under section 447: Act or omission or concealment or abuse of position + intent to deceive / gain undue advantage / injure interests; Wrongful gain or wrongful loss need not be proved. Intent is the key element.
Who may be affected: Company, its shareholders, creditors or any other person; Use this wording when applying the definition to a case.
SFIO route: Central Government assigns case → SFIO investigates → report to Central Government → prosecution in the Special Court; SFIO does not start on its own. Assignment by the Central Government is needed.
Admissibility of electronic record: Electronic record + statutory certificate + integrity shown = admissible as a document; Keep a hash value and a record of who handled the data (chain of custody).
Expert opinion: Expert opinion = relevant evidence, not conclusive; The court decides. Your reasoning must be explained and supported.

How to solve Legal Framework and Evidence questions

Use this method for any question on fraud law, SFIO or forensic evidence. It keeps the answer structured and tied to the facts.

1Read the facts and list the acts: false entry, concealment, misuse of position, diversion of funds.
2Test the facts against the section 447 elements: act or omission, intent, and who was harmed or who gained.
3State the consequence in plain words: the offence of fraud and the punishment under section 447. Give the figures only if you are sure of them.
4Decide who investigates: the company's auditor reporting, SFIO on assignment by the Central Government, or another agency, and why.
5Identify the evidence: documents, electronic records, witness statements, expert opinion.
6Check admissibility: original or certified copy, certificate for electronic records, chain of custody, no tampering.
7Add the auditor's duty: preserve evidence, report, keep confidentiality, avoid tipping off.
8Close with a clear conclusion or recommendation in one or two lines.

Quickest way: Fact – Law – Proof in three lines

When to use it: Use it for 2-mark MCQs and for short-note questions where time is tight.

Fact: name the act and the intent in one line.
Law: say fraud under section 447 and which body acts, such as SFIO.
Proof: say what evidence is needed and how its admissibility is secured.
For MCQs, eliminate options that say wrongful gain must be proved, or that SFIO can start on its own.

Common mistakes in Legal Framework and Evidence

Saying that fraud under section 447 needs actual wrongful gain or loss.
Students mix it with the general idea of cheating in criminal law.
Fix: Remember that the definition says it is not necessary that there is wrongful gain or wrongful loss. Intent to deceive is what matters.
Treating SFIO as a body that can take up any case at will.
Students know it as the fraud agency and ignore the process.
Fix: Write that the Central Government assigns the investigation to SFIO. Then SFIO reports back to the Central Government.
Treating printouts or emails as automatically admissible.
Students think a paper copy of a record is as good as the original.
Fix: State the need for the statutory certificate and for proof of integrity of the electronic record.
Assuming expert opinion binds the court.
Students over-rate the forensic auditor's role.
Fix: Say the opinion is relevant and helpful, but the court decides the weight to give it.
Quoting section numbers or penalties from memory without certainty.
Students try to look precise.
Fix: Quote only what you know. A correct principle in plain words earns marks. A wrong number loses them.
Naming only the Evidence Act, 1872 and forgetting the Bharatiya Sakshya Adhiniyam, 2023.
Old study notes still use the earlier Act.
Fix: Mention both, saying the 2023 law replaced the 1872 Act and keeps the same approach to proof.

Worked examples

Example 1

The finance head of Sundaram Textiles Ltd. inflates closing stock by ₹40,00,000 to help the company obtain a bank loan. No cash is taken by him personally. Does this amount to fraud under section 447 of the Companies Act, 2013? Which evidence would you collect?

Show the solution

Act: a false entry (inflated stock) is an act or concealment of a fact in the books.
Intent: the aim is to deceive the bank and gain an undue advantage for the company.
Personal gain: the definition does not need wrongful gain or loss, so the absence of personal cash does not matter.
Persons affected: the bank (creditor) and possibly shareholders.
Evidence: stock records, physical verification reports, ERP logs showing who changed the entry and when, loan application and stock statements given to the bank, emails, and witness statements.
Admissibility: secure forensic copies of the data with hash values, record chain of custody, obtain the certificate for electronic records.

Answer: Yes. It is fraud under section 447 because there is an act and concealment with intent to deceive and gain undue advantage. Wrongful gain to the person is not required. Evidence should be collected and preserved so that electronic records are admissible.

Example 2

A forensic auditor finds that a company's emails show a pattern of diverting funds to related parties. The company wants to submit unsigned printouts to the court. Advise on admissibility and on the role of SFIO.

Show the solution

Identify the evidence: emails are electronic records.
Printouts alone are weak. The statutory conditions for electronic records must be met, mainly a certificate identifying the record and the system that produced it.
Support integrity: take a forensic image of the mail server, compute hash values, and document who held the data (chain of custody).
Add corroboration: bank statements, related-party ledgers, board minutes.
SFIO: if the matter is serious and complex, the Central Government may assign the investigation to SFIO. Its report goes to the Central Government and prosecution follows in the Special Court.
Expert opinion: your report helps the court but does not bind it, so explain method and reasoning.

Answer: Unsigned printouts alone should not be relied on. Produce the emails with the statutory certificate and proof of integrity. SFIO can investigate only when the Central Government assigns the case, and the auditor's opinion is relevant but not conclusive.

Exam tips

Write the section 447 definition in your own words and always mention intent and that wrongful gain or loss need not be proved.
In case scenarios, apply the law to the facts in the order: act, intent, harm, investigator, evidence.
For MCQs, watch for traps such as SFIO acting on its own, or opinion binding the court.
Mention chain of custody and the certificate for electronic records whenever the question involves digital data.
Do not quote exact punishment figures unless you are sure. Describe the punishment in words.

Practice questions from Forensic Audit

Legal Framework and Evidence in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Legal Framework and Evidence: frequently asked questions

What is fraud under section 447 of the Companies Act, 2013?

It is any act, omission, concealment of fact or abuse of position done with intent to deceive, gain undue advantage or injure the interests of the company, shareholders, creditors or any other person. Wrongful gain or loss need not be proved. The section also prescribes the punishment.

What is the role of SFIO?

SFIO investigates serious and complex corporate frauds. The Central Government assigns the case to it. After investigation, it submits its report to the Central Government, and prosecution can follow in the Special Court.

Is a forensic audit report admissible in court?

It is treated as expert opinion, which is relevant but not binding on the court. Its value depends on the method used, the quality of supporting documents, and the integrity of the evidence.

How are electronic records proved in court?

They are admitted as documents when the statutory conditions are met, usually through a certificate that identifies the record and the system that produced it. Good practice adds hash values and a record of custody.