Payroll Audits: What Employers Should Do Before, During, and After
Payroll audits ensure accuracy, compliance, and clean financial records. This blog explains why audits matter, what to review, and how often to conduct them. It also highlights how proactive auditing prevents payroll errors, statutory risks, and employee dissatisfaction.
No one loves audits. But when it comes to payroll, skipping them can cause real damage: missed salaries, wrong tax deductions, or compliance trouble.
A payroll audit is a detailed check of your payroll system to confirm everything is accurate and compliant. You review employee records, salary structures, tax filings, statutory deductions, and payment timelines, so that what you’ve recorded, paid, and reported to the government all line up.
A payroll audit is a systematic review of your company’s payroll process. It involves checking employee records, salary structures, tax deductions, statutory contributions, payment timelines, and compliance with labour laws. Its main objective is to confirm that employee payments, tax deductions, and statutory contributions are accurate and compliant, and to surface issues like overpayments, misclassifications, or missing documentation before they become penalties or disputes.
Run by your in-house HR or finance team as a routine check, usually quarterly or before a statutory filing deadline. It’s the right choice for catching incorrect employee data, missing documentation, or calculation errors early, without the cost or lead time of bringing in outside help.
Carried out by a third-party auditor or a government agency, typically to verify legal compliance, support financial reporting, or satisfy an investor’s due-diligence request. Mid-size Indian companies often run a hybrid model: internal quarterly checks feeding into an annual external audit, so the external auditor is validating a payroll process that’s already been cleaned up rather than starting from scratch.
In India, the risk of skipping payroll audits isn’t abstract, it shows up as specific statutory penalties. Under the EPF Act, 1952 and the ESI Act, 1948, unpaid or short-paid PF and ESI contributions attract interest and damages on top of the shortfall itself, and persistent default can trigger prosecution. Under the Income Tax Act, failing to deduct or deposit TDS on salary correctly can draw interest, a penalty equal to the tax not deducted, and disallowance of the expense in the company’s own tax return. Under the Payment of Gratuity Act, 1972, miscalculating gratuity for employees who’ve completed five or more years of service can mean underpaying a departing employee a statutory entitlement, which is a compliance issue as much as a goodwill one.
A regular audit catches these before they compound. It also gives you a clean, well-documented payroll trail to point to if a labour inspector, an auditor, or an employee ever asks how a number was calculated.
A well-run payroll audit should:
Confirm tax reporting is accurate and TDS is deposited on time
Verify compliance with Indian labour laws, including the applicable state Shops and Establishments Act and the Minimum Wages Act
Validate PF, ESI, and professional tax calculations against current statutory rates
Uncover payroll fraud, duplicate payments, or ghost employees
Confirm that employee compensation records match what was actually paid and approved
Most Indian companies run a quarterly internal audit, with a comprehensive annual audit timed to close before the financial year ends in March, so any correction can be reflected in that year’s filings. Outside that regular rhythm, a few triggers should prompt an ad-hoc audit: a statutory rate change, such as a revised PF wage ceiling or ESI threshold, a sudden surge in new hires, a payroll system migration, or a pattern of employee complaints about pay.
Define the audit’s scope and timeline first, then bring in HR and finance, plus an external auditor if the audit is meant to satisfy a third party. Assign one person to own coordination so the audit doesn’t stall between departments.
Before you start reviewing anything, collect:
Salary registers for the audit period
Form 16 and Form 16A records
PF ECR challans and ESI contribution records
Bank reconciliation statements
Attendance and leave records
Offer letters and salary revision documents
Confirm that everyone paid during the period was actively employed, and that their classification, permanent, contractual, intern, or consultant, matches how they were actually engaged and paid. Investigate any payment that lacks matching attendance or HR records.
Match basic pay, HRA, and allowances against offer letters and the most recent revision. Recalculate gross-to-net for a sample of employees, cross-check loss-of-pay deductions against approved leave, and flag one-time payments or manual overrides for a closer look.
Check PF contributions against the standard 12% employer and 12% employee rate on eligible wages, ESI against the ₹21,000 gross monthly wage threshold, and professional tax against the slab that applies in each employee’s state, since these slabs differ from state to state. Verify TDS against the employee’s declared regime and investment proofs, and reconcile the totals in your payroll system with what was actually filed in Form 24Q, the PF ECR, and the ESI return. For anyone who’s completed five or more years of service, verify the gratuity accrual separately.
Match total payroll cost against the general ledger entries for salary, benefits, and tax heads, and compare net pay totals against the amounts actually transferred from the salary account. Any deduction that’s been made but not yet remitted, such as PF withheld but not yet deposited, should show up as a booked liability, not disappear.
Log every issue with the employee ID, the type of error, the amount involved, and the date, then assign a named owner and a due date to each fix. Share the finished report with HR, finance, and leadership so everyone is working from the same list.
Use this as a quick pass before signing off on a payroll cycle:
Employee master data is complete and current
Salary components, basic, HRA, and special allowances, match approved structures
Attendance and leave records match what payroll processed
Leave encashment is calculated correctly
PF, ESI, and TDS deductions match statutory rates and thresholds
Reimbursements are backed by valid bills or approvals
Loan and advance recoveries are tracked and deducted correctly
Final settlement calculations are complete for anyone who exited during the period
Misclassifying employees as contractors invites scrutiny under Indian labour law, but courts don’t reclassify workers lightly. In Bharat Heavy Electricals Ltd. v. Maheshwar Prasad Jakhmola (2019), the Supreme Court held that 64 contract workmen were not BHEL’s direct employees, precisely because they could show no appointment letters, no wage slips, and no evidence that BHEL had exercised hiring, disciplinary, or payment control over them; gate passes alone weren’t enough. The lesson for HR cuts both ways: keep contractor agreements clean and let contractors handle their own hiring and supervision, but also don’t assume the label on a contract protects you if your company is, in practice, directing that worker’s day-to-day work.
Tips to stay compliant:
Let contractors handle hiring, supervision, and discipline for their own staff
Avoid company-issued appointment letters, wage slips, or PF numbers for contract workers
Audit contractor agreements periodically to confirm they still reflect the actual working arrangement
Wrong PF, ESI, TDS, or professional tax deductions can bring notices from the relevant department and unhappy employees at year-end. Common causes include an outdated tax declaration, applying the wrong tax regime, or missing the ₹15,000 wage threshold that determines mandatory PF coverage.
Tips to avoid this:
Collect each employee’s investment and regime declaration, on Form 124 (the form formerly known as Form 12BB, renamed under the Income-tax Act, 2025), at the start of the year
Configure payroll software with the current tax slabs and surcharge rates
Lock declarations by a fixed cutoff date and communicate it clearly
Reconcile monthly TDS totals against quarterly Form 24Q filings
Missing timecards, offer letters, or tax forms slow audits down and can draw penalties on their own. Keep a centralized, digital, and backed-up record of every key payroll document.
Manual or unreliable attendance tracking is one of the most common sources of payroll error, especially for hourly and shift-based staff. Overtime for factory workers must follow the working-hours and overtime provisions under the Factories Act, and leave encashment needs to match each state’s own rules, since professional tax, labour welfare fund contributions, minimum wages, and leave policies all vary by state. Companies with employees spread across states need payroll software that can apply the right rule set to each location rather than one default configuration.
Set a fixed audit timeline, whether annual, quarterly, or ad hoc, based on how mature your payroll process already is
Automate statutory compliance tracking rather than checking rates manually each cycle
Maintain an audit trail for every payroll change, not just the final numbers
Run occasional surprise audits alongside the scheduled ones
Cross-train HR, finance, and payroll staff so audit knowledge doesn’t sit with one person
Track annual PF and ESI notifications so rate changes are reflected before, not after, the next cycle
Keka brings payroll, attendance, tax, and employee data into one place, with audit logs that track who changed what and when. That includes automated PF, ESI, and TDS calculations, exportable compliance reports, and dashboards that surface discrepancies before they reach an external auditor, so most of the manual reconciliation work in the steps above happens automatically.
What triggers a payroll audit?
Common triggers include a statutory notice from a labour or tax authority, an investor’s due-diligence request ahead of funding, an employee complaint about pay, or simply the organization’s own scheduled review cycle.
What is the typical cost of a payroll audit in India?
It depends on company size, payroll complexity, and whether the audit is internal or outsourced. Small to mid-size companies typically pay ₹10,000 to ₹50,000 or more for an external audit, depending on scope and depth.
What happens if you fail a payroll audit?
Consequences scale with the finding: minor errors usually mean back-payments and corrected filings, while sustained non-compliance with PF, ESI, or TDS rules can bring interest, statutory penalties, and in serious cases, legal action or prosecution under the relevant Act.
Can payroll software replace manual audits?
Software can automate calculations, compliance checks, and data tracking, and it catches far more errors than a manual review would. But expert oversight is still needed to interpret edge cases, judge unusual transactions, and take responsibility for the overall sign-off.
Subscribe to keep up with the latest strategic finance content.
Request a demo