Sometimes a regular audit is not enough. A shareholder notices that cash reserves have quietly shrunk without explanation. A board member suspects a related-party transaction was priced to benefit an insider. An investor asks a simple question — "where did this money actually go?" — and nobody in the finance team has a clean answer. When something genuinely does not add up, and the numbers alone cannot settle the matter, that is usually the point at which a forensic audit in Nepal becomes necessary rather than optional.
This guide explains what a forensic audit actually investigates, the legal basis for ordering one in Nepal, who has the authority to trigger it, and how it differs from the annual statutory audit your company already goes through every year.
What a Forensic Audit Investigates
A forensic audit is a focused, evidence-driven investigation into suspected fraud, financial mismanagement, or irregularities within a company. Unlike a routine audit, which samples transactions to form an overall opinion on the financial statements, a forensic audit digs into specific allegations — misappropriation of funds, falsified invoices, ghost employees on the payroll, undisclosed related-party dealings, or deliberate manipulation of accounts to mislead shareholders or lenders. The objective is not simply to flag an error, but to establish exactly what happened, who was responsible, and how much financial loss resulted, in a manner that can stand up to legal scrutiny.
The Legal Basis: Chapter 9 of the Companies Act, 2063
In Nepal, the legal foundation for ordering an investigation into a company's affairs comes from Chapter 9 of the Companies Act, 2063 (2006), titled "Call for Explanation and Investigation." Under Section 120, the Office of the Company Registrar (OCR) has the power to call for an explanation from a company if it has reasonable grounds to believe something is amiss. If the explanation is unsatisfactory, Section 121 empowers the OCR to depute an inspector to investigate the company's affairs, with Section 122 setting out that inspector's functions, duties, and powers, and Section 124 requiring a formal report to be submitted once the investigation concludes. This statutory investigation mechanism is what typically sits behind a forensic audit ordered through official channels in Nepal, alongside directives that can arise from a court in the course of ongoing litigation.
Who Can Order a Forensic Audit
Several parties can set a forensic audit in motion. Shareholders, particularly minority shareholders who suspect mismanagement or believe their interests are being harmed, can petition the company or approach the OCR with a formal complaint. The Office of the Company Registrar can initiate an investigation on its own authority once it has reasonable grounds under Chapter 9 of the Companies Act. Courts can order a forensic examination as part of ongoing civil or criminal proceedings, particularly in shareholder disputes or fraud litigation. And sector regulators — such as Nepal Rastra Bank for banks and financial institutions, or the Securities Board of Nepal for listed companies — can direct a forensic review as part of their supervisory powers when red flags emerge in regulatory filings or examinations.
How a Forensic Audit Differs from a Statutory Audit
A statutory audit is a recurring, broad-based examination of financial statements, conducted annually for every registered company regardless of whether anything is suspected to be wrong. Its purpose is to provide reasonable assurance that the financial statements, taken as a whole, are free from material misstatement. A forensic audit is the opposite in almost every respect: it is triggered by a specific suspicion, it is narrow and deep rather than broad and sampled, and its findings are prepared with the expectation that they may be presented as evidence in court or before a regulator. Where a statutory auditor works to accounting and auditing standards, a forensic auditor works to an evidentiary standard — every document, interview note, and data trail must be preserved and defensible, because the outcome may determine someone's legal liability.
The Forensic Audit Process
A forensic audit typically follows a structured sequence. It begins with evidence gathering: securing financial records, bank statements, contracts, emails, and digital transaction logs before they can be altered or destroyed. This is followed by detailed documentation review, where the forensic team traces transactions, looks for patterns such as round-number payments, duplicate invoices, or transactions clustered around unusual dates or times, and cross-checks related-party dealings. Interviews with relevant staff, management, and sometimes external parties such as vendors or bankers are then conducted, often under a formal, recorded process. Finally, the findings are compiled into a report that documents the methodology used, the evidence collected, the loss quantified, and, where identifiable, the individuals or control failures responsible — written specifically to withstand challenge in a legal or regulatory setting.
Possible Outcomes
The outcome of a forensic audit depends on what the evidence shows. In some cases, the findings support civil action — recovery of misappropriated funds, damages claims, or contract disputes among shareholders. In more serious cases involving deliberate fraud or falsification of records, the findings can support criminal proceedings under applicable law, including provisions dealing with cheating, breach of trust, or company law offences. Where the individuals involved are licensed professionals, such as a director, accountant, or auditor, findings can also trigger disciplinary action from a professional body such as ICAN. It is also entirely possible for a forensic audit to conclude that suspicions were unfounded, which itself provides valuable closure for the company and its shareholders.
Real-World Triggers in Nepal
In practice, forensic audits in Nepal are most commonly triggered by three situations. Shareholder disputes, especially in closely held family businesses or joint ventures where trust has broken down, frequently lead one party to demand an independent forensic review before agreeing to a settlement or exit. Suspected embezzlement, often surfacing when a routine statutory audit flags unusual cash movements or unexplained variances, is another common entry point. And related-party concerns — transactions between a company and its directors, promoters, or affiliated entities that appear priced outside market terms — regularly prompt boards, minority shareholders, or regulators to commission a deeper, forensic-level examination rather than relying on the annual audit alone.
Conclusion
A forensic audit is not a routine compliance exercise — it is a targeted, evidence-based response to a specific concern that a statutory audit was never designed to resolve. Understanding when one applies, who can order it, and how it differs from your annual audit puts you in a far stronger position, whether you are a shareholder raising a concern or a company preparing to respond to one.
If you suspect irregularities in your company's finances, or you have been asked to respond to an investigation, our team at Bandhu Fintech can help you understand your options and next steps.
Disclaimer: This article is for general information only and does not constitute legal or tax advice. Please consult an ICAN-registered Chartered Accountant for guidance specific to your company's circumstances.
Discussion