How to Pass a FEMA Audit: Preparation Checklist

Why FEMA Audits Matter for Foreign-Invested Companies

A FEMA violation carries real financial teeth: under Section 13(1) of FEMA, 1999, penalties can reach up to three times the amount involved in the contravention, or up to INR 2,00,000 where the amount is not quantifiable, plus INR 5,000 per day for continuing violations. RBI's Foreign Exchange Department directly inspects companies with significant FDI exposure or complex cross-border structures, while every other foreign-invested company's Authorized Dealer (AD) bank monitors its FEMA filings and flags non-compliance to the RBI.

In 2025, the RBI updated its Master Directions on compounding, allowing compounding amounts for miscellaneous non-reporting contraventions to be capped, at the compounding authority's discretion, at INR 2,00,000 per regulation or rule contravened — but serious violations remain subject to the three-times multiplier.

Understanding the FEMA Audit Framework

Who Conducts FEMA Audits?

FEMA audits are conducted by multiple authorities depending on the context:

• RBI's Foreign Exchange Department (FED): Conducts direct inspections of companies with significant foreign exchange exposure, typically those with large foreign investment or complex cross-border structures.
• Authorized Dealer (AD) Category-I Banks: Your AD bank is the frontline compliance monitor. They review FEMA filings, verify KYC/AML compliance for foreign investors, and flag non-compliances to the RBI.
• Enforcement Directorate (ED): Investigates willful FEMA violations, money laundering through foreign exchange channels, and cases referred by the RBI.
• Chartered Accountant Firms: Conduct voluntary FEMA audits or due diligence reviews, particularly during M&A transactions, fundraising rounds, or annual compliance reviews.

What Triggers a FEMA Audit?

Common triggers include:

• Delayed or missed filings (FC-GPR, FC-TRS, FLA returns)
• Discrepancies between reported and actual foreign investment amounts
• Unusual patterns in cross-border remittances
• Complaints from AD banks about non-responsive companies
• Sector-specific reviews (e.g., defence, telecom, media)
• M&A transactions involving foreign parties
• Annual compliance reviews by your AD bank

Pre-Audit Checklist: Foundation Documents

Step 1: Corporate Structure Documentation

Assemble the following foundational documents before any audit:

• Certificate of Incorporation and all amendments
• Memorandum of Association (MoA) and Articles of Association (AoA) — current versions
• Shareholding pattern: Complete cap table showing all foreign and domestic shareholders, with dates and amounts of each investment
• Board resolutions authorizing foreign investment, share allotments, and cross-border transactions
• Shareholder agreements with foreign investors, including tag-along, drag-along, and anti-dilution provisions
• Valuation reports: Reports from a SEBI-registered merchant banker or a chartered accountant for each share issuance or transfer involving foreign parties

Step 2: Foreign Investment Documentation

For every round of foreign investment, maintain:

• Foreign Inward Remittance Certificate (FIRC): Obtained from your AD bank as proof of receipt of foreign funds. This is the single most important document in any FEMA audit.
• KYC documents of all foreign investors (passport, proof of address, beneficial ownership declaration)
• FC-GPR filing acknowledgements: Proof of filing within 30 days of share allotment
• Share certificates issued to foreign shareholders
• Pricing documentation: Fair market value calculations using an internationally accepted pricing methodology (for unlisted companies) or market price (for listed companies)

The Complete FEMA Filing Checklist

Mandatory Filings with Deadlines

Filing Verification Checklist

For each filing, verify the following:

1. Timeliness: Was it filed within the prescribed deadline? Late filings are the most common FEMA contravention.
2. Accuracy: Do the amounts, dates, and party details match the underlying transaction documents?
3. Completeness: Were all required supporting documents uploaded with the filing?
4. Acknowledgement: Do you have the system-generated acknowledgement from the FIRMS/FLAIR portal?
5. AD Bank confirmation: Has your AD bank verified and forwarded the filing to the RBI?

Sector-Specific Compliance Verification

Foreign investment in India is regulated through two routes: the automatic route and the government approval route. During a FEMA audit, the examiner will verify that your investment complies with the applicable sectoral cap and route. Review these critical checkpoints:

• Sectoral cap compliance: Verify that the aggregate FDI in your company (including indirect foreign investment) does not exceed the sectoral cap. Most sectors now permit 100% FDI under the automatic route.
• Government approval: If your sector requires government approval (defence beyond 74%, multi-brand retail — government route with a 51% cap, media/broadcasting at various caps), verify that you hold the required approval from the Department for Promotion of Industry and Internal Trade (DPIIT).
• Press Note 3 compliance: Companies with beneficial owners from countries sharing a land border with India (China, Pakistan, Bangladesh, Nepal, Myanmar, Bhutan, Afghanistan) require prior government approval regardless of sector.
• Pricing guidelines: For unlisted companies, share issuance to non-residents must be at or above fair market value (calculated using any internationally accepted pricing methodology, certified by a chartered accountant, a SEBI-registered merchant banker, or a practising cost accountant). For listed companies, pricing follows SEBI's ICDR regulations.

Cross-Border Transaction Documentation

Inward Remittances

For every inward remittance from abroad, maintain:

• FIRC from the AD bank
• Purpose code declaration (matching the actual nature of the transaction)
• Underlying contract or agreement
• Invoice (for trade-related remittances)
• Board resolution authorizing the transaction

Outward Remittances

For remittances sent abroad, document:

• Dividend repatriation: Board resolution, withholding tax deduction proof under section 393(2) of the Income-tax Act, 2025 (Table, Sl. No. 17; section 195 of the Income-tax Act, 1961), Forms 145 and 146 (formerly Forms 15CA and 15CB) certificates
• Royalty and technical service fees: Agreement registered with the RBI (if required), withholding tax compliance, transfer pricing documentation
• ECB repayments: Loan agreement, RBI approval (if applicable), repayment schedule adherence
• Salary remittances: Employment contract, tax deduction certificates

Common FEMA Audit Findings and How to Prevent Them

Finding 1: Delayed FC-GPR Filing

The issue: FC-GPR filed after the 30-day window. This is the single most common contravention found in FEMA audits.

Prevention: Set a calendar reminder for Day 1 after share allotment. Engage your CA firm and AD bank immediately after the board approves the allotment. Have FIRC, valuation report, and KYC documents pre-staged.

If already delayed: File immediately and pay the Late Submission Fee described below, which regularises a delayed FC-GPR of up to three years for INR 7,500 plus 0.025% of the amount involved for each year of delay. Compounding under the RBI's Master Directions on Compounding of Contraventions (updated 2025) applies only where that three-year window has closed, or where the contravention is something other than a reporting delay.

Finding 2: Missing or Incomplete FLA Returns

The issue: FLA return not filed by July 15, or filed with incorrect data.

Prevention: Begin FLA data collection by June 1. Reconcile your foreign liabilities (share capital from foreign investors, ECBs, trade credits) and foreign assets with audited financial statements. Use the RBI's FLAIR portal for filing.

Finding 3: Pricing Non-Compliance

The issue: Shares issued to foreign investors below fair market value, or shares transferred from non-resident to resident above fair market value.

Prevention: Always obtain a valuation report before the transaction. For unlisted companies, use an internationally accepted pricing methodology certified by a chartered accountant, a SEBI-registered merchant banker, or a practising cost accountant.

Finding 4: Improper Purpose Codes

The issue: Remittances classified under incorrect purpose codes, leading to discrepancies between reported and actual transaction types.

Prevention: Maintain a purpose code reference sheet. Common codes include P0006 (foreign direct investment in equity shares, inward) and P0007 (FDI in debt securities), with a separate S-series for outward payments such as S0006 (repatriation of FDI in equity shares). Verify the correct code with your AD bank before initiating each remittance.

Finding 5: Downstream Investment Non-Reporting

The issue: An Indian company owned by foreign entities makes investments in other Indian companies without reporting the downstream investment.

Prevention: If your company is foreign-owned (directly or indirectly), any investment you make in another Indian company is deemed "downstream investment" and must be reported within 30 days through the FIRMS portal.

Building an Audit-Ready Compliance System

Monthly Compliance Tasks

• Reconcile all foreign exchange transactions with bank statements
• File ECB-2 returns (if applicable) within 7 days of month-end
• Review and update the foreign investment register
• Monitor any share transfers involving foreign parties

Quarterly Compliance Tasks

• Review compliance with sectoral caps (especially after new share issuances)
• Reconcile transfer pricing documentation with actual intercompany transactions
• Verify that every outward remittance carries its Form 145 (formerly Form 15CA) declaration, and that Form 146 (formerly Form 15CB, a certificate from a Chartered Accountant) is on file for the Part C cases — taxable remittances above INR 5 lakh in the tax year where no lower or nil withholding certificate has been obtained from the Assessing Officer
• Update the FEMA compliance binder with new transaction documents

Annual Compliance Tasks

• File FLA return by July 15 (begin preparation by June 1)
• File Annual Performance Report by December 31 (for overseas investments)
• Conduct internal FEMA audit or engage a CA firm for an independent review
• Update valuation reports for ongoing or anticipated share transactions
• Review and update KYC documents of all foreign shareholders

Late Submission Fee: The First Remedy for a Reporting Delay

A late FC-GPR does not go straight to compounding. The Late Submission Fee (LSF) under A.P. (DIR Series) Circular No. 16 of 30 September 2022, as amended by A.P. (DIR Series) Circular No. 25 of 30 March 2026 with effect from 1 April 2026, lets you regularise the delay by paying a calculated fee through the same portal used for the filing itself, without a separate application to the RBI.

• Returns that capture a financial flow — FC-GPR, FC-TRS, Form ESOP, Form DI, Form InVi, Form ODI Part I and Part III and Form ECB 2 — attract INR 7,500 plus (0.025% × A × n), where A is the amount the form should have reported and n is the delay expressed in years, rounded upwards to the nearest month and given to two decimal places.
• Returns that capture no flow — the FLA return, FCGPR (B), Form ODI Part-II/APR, Form OPI and, since 1 April 2026, Form ECB 1 and Revised Form ECB 1 — attract a flat INR 7,500.
• The fee is capped at 100% of A, and the facility is available only for three years from the due date of the filing.

Compounding is what happens beyond that window, or where the contravention is something other than a reporting delay.

The Compounding Process: When LSF Is Not Available

If a FEMA contravention falls outside the LSF facility, the compounding process is your remedy. Under the RBI's updated 2025 Master Directions:

1. Identify the contravention: Determine the specific FEMA provision violated and the amount involved.
2. File the application: Submit a compounding application to the RBI, either voluntarily (suo moto) or in response to an RBI memorandum. There is no filing deadline for the applicant — the 180-day clock in the rules applies to the RBI's disposal of a complete application.
3. Calculate the compounding amount: The RBI considers the nature, duration, and amount of the contravention. The 2025 amendments allow the amount for miscellaneous non-reporting contraventions to be capped at INR 2,00,000 per regulation or rule at the compounding authority's discretion; reporting delays follow the published computation matrix (a fixed INR 10,000 plus a variable amount).
4. Submit through your AD bank: The application must be routed through your AD Category-I bank with all supporting documents.
5. RBI order: The RBI will issue a compounding order within 180 days of receiving a complete application.
6. Pay and comply: Pay the compounding amount within 15 days of the order and take corrective action to prevent recurrence.

Note that contraventions under Section 3(a) of FEMA (dealing in foreign exchange without authorization) cannot be compounded by the RBI — they fall within the Directorate of Enforcement's jurisdiction.

Digital Compliance Infrastructure: RBI Portals and Tools

FIRMS Portal (Foreign Investment Reporting and Management System)

The FIRMS portal is the RBI's primary platform for reporting foreign investment transactions. All FC-GPR, FC-TRS and downstream investment (Form DI) filings must be submitted through FIRMS; overseas-investment (ODI) reporting runs through a separate online system via your AD bank. Key requirements for using FIRMS include:

• Business User authorisation: A Business User must be registered for your entity, with an authority letter verified by your AD bank, before any form can be filed. Keep your authorized signatory's Digital Signature Certificate current as well — the company-law filings that precede FC-GPR (such as the allotment return on the MCA portal) require one.
• Entity registration: Your company must be registered on FIRMS with correct CIN, PAN, and AD bank details before any filing can be submitted.
• Document upload limits: FIRMS caps the size of each attachment, so compress supporting PDFs before uploading to avoid rejection.

FLAIR Portal (Foreign Liabilities and Assets Information Reporting)

The FLAIR portal is used exclusively for the annual FLA return. This portal is separate from FIRMS and requires its own registration. Companies often discover — too late — that they are not registered on FLAIR when the July 15 deadline approaches. Register well in advance.

EDPMS and IDPMS

The Export Data Processing and Monitoring System (EDPMS) and Import Data Processing and Monitoring System (IDPMS) track export and import transactions respectively. During a FEMA audit, the examiner may cross-reference your reported transactions against EDPMS/IDPMS data held by your AD bank. Ensure your export realization certificates and import payment records are consistent with these systems.

Illustrative FEMA Audit Scenarios

The following composite scenarios show how contraventions typically surface and get resolved. The amounts are indicative worked examples, not actual RBI orders or advices.

Scenario 1: First Funding Round — Startup with Foreign Angel Investor

A Bangalore-based SaaS startup received USD 500,000 from a US-based angel investor. The founders, focused on product development, filed FC-GPR 45 days after share allotment instead of the required 30 days. During the AD bank’s annual review, the 15-day delay was flagged. Because it was well inside the three-year LSF window, the company regularised the filing by paying the Late Submission Fee rather than applying for compounding: on the INR 7,500 + (0.025% × A × n) formula, with A of roughly INR 4.3 crore and n of 0.08 years (15 days rounded up to one month), the fee came to a little over INR 8,000. Had they filed on time, the cost would have been zero.

Scenario 2: Multi-Tranche Investment — PE Fund

A manufacturing company received a multi-tranche investment from a Singapore PE fund: USD 2 million in March and USD 3 million in September. The company filed a single FC-GPR for the total amount after the second tranche. The RBI noted that each tranche required a separate FC-GPR within 30 days of the respective allotment. Two separate compounding applications were required, with a total compounding amount of INR 3,50,000.

Scenario 3: Share Transfer Without FC-TRS

A foreign shareholder sold shares in an Indian company to an Indian resident. The company failed to file FC-TRS within 60 days because neither party informed the company secretary of the transfer. When this was discovered during a due diligence for a subsequent funding round, the company had to apply for compounding, delaying the new fundraise by 3 months.

Engaging Professional Support

For foreign-invested companies, professional FEMA compliance support is not optional — it is essential. Consider engaging:

• FEMA-specialized CA firms: For ongoing compliance monitoring, filing, and audit preparation. Budget INR 1,50,000 to INR 5,00,000 annually depending on transaction volume.
• FEMA compliance advisory services: For complex transactions, restructuring, or remediation of past contraventions.
• Legal counsel: For compounding applications, ED investigations, or FEMA appellate tribunal matters.

Beacon Filing provides end-to-end FEMA and RBI compliance services for foreign-invested companies, including audit preparation, filing management, and compounding assistance.

Key Takeaways

• Start early: FEMA audit readiness is built month by month through consistent compliance, not crammed before an audit notice.
• FIRCs are critical: The Foreign Inward Remittance Certificate is the single most important document — ensure you have one for every foreign remittance received.
• File on time, every time: Delayed FC-GPR filing (30-day deadline) is the most common FEMA contravention. Set calendar alerts and pre-stage documents.
• Maintain a compliance binder: Organize all FEMA-related documents chronologically and by transaction type for instant audit readiness.
• Use compounding proactively: If you discover a past contravention, apply for compounding immediately rather than waiting for the RBI to find it — voluntary disclosure typically results in lower compounding amounts.