Internal Audit of Payroll Systems

Introduction

Internal audit of payroll systems is the systematic examination of an organisation’s payroll processes, records, controls, payments, deductions, statutory compliance, and employee-related data. The purpose is to ensure that employees are paid accurately, lawfully, timely, and only for legitimate services rendered.

Payroll auditing is particularly important because payroll involves large recurring financial transactions and sensitive employee information. Errors or weaknesses may result in overpayments, underpayments, fraudulent payments, incorrect deductions, or violations of labour and tax laws.

In India, payroll audit may cover compliance with the Payment of Wages Act, 1936, Minimum Wages Act, 1948, Payment of Bonus Act, 1965, Payment of Gratuity Act, 1972, Employees’ Provident Funds and Miscellaneous Provisions Act, 1952, Employees’ State Insurance Act, 1948, income-tax withholding requirements, and the applicable provisions of the labour codes.

Objectives of Internal Payroll Audit

The principal objectives are:

1. Accuracy of payroll calculations
   To verify basic salary, allowances, overtime, incentives, bonuses, deductions, and net salary.
2. Verification of employees
   To ensure that payments are made only to genuine and currently employed persons.
3. Detection of payroll fraud
   To identify ghost employees, duplicate employees, manipulated attendance, unauthorised salary changes, and fictitious overtime.
4. Statutory compliance
   To check compliance with applicable labour, social-security and taxation requirements.
5. Verification of deductions
   To ensure proper deductions for provident fund, ESI, tax, professional tax, loans, advances and other authorised deductions.
6. Timely payment
   To determine whether wages and statutory contributions are paid within prescribed time limits.
7. Protection of employee information
   To examine controls over bank details, salary information, tax information and other confidential HR data.

Major Areas Covered by Payroll Internal Audit

1. Employee Master Data

The auditor examines:

• Employee name and identification details
• Employee number
• Date of joining
• Designation
• Department
• Salary structure
• Bank-account information
• PAN and other tax details
• PF/ESI information
• Employment status

Changes to master data should be supported by proper authorisation.

2. Attendance and Leave Records

The auditor compares payroll with:

• Attendance records
• Biometric records
• Leave records
• Overtime records
• Holiday records
• Shift records

This helps identify situations where salary has been paid despite absence or where overtime has been improperly claimed.

3. Salary Calculation

The audit should verify the calculation of:

Gross Salary = Basic Pay + Allowances + Overtime + Bonus/Incentives + Other Earnings

and:

Net Salary = Gross Salary − Authorised Deductions

The auditor should test whether calculations correspond with employment contracts and approved salary structures.

4. Overtime Payments

Overtime is an important audit area because unauthorised overtime can create significant financial leakage.

The auditor should compare:

• Overtime approval
• Attendance records
• Overtime hours
• Applicable overtime rate
• Amount actually paid

5. Statutory Deductions

The audit should verify appropriate deductions and deposits relating to applicable:

• Provident fund
• Employees' State Insurance
• Income-tax withholding
• Professional tax
• Labour welfare contributions
• Other statutory deductions

6. Payroll Bank Reconciliation

The total amount approved in payroll should reconcile with the amount transferred through the organisation's bank account.

The auditor should investigate:

• Unclaimed salaries
• Returned payments
• Duplicate payments
• Payments to inactive accounts
• Unauthorised bank-account changes

7. Final Settlement

When an employee leaves, the auditor should verify:

• Salary up to last working day
• Leave encashment, where applicable
• Bonus/incentives
• Gratuity, where applicable
• Notice-period adjustment
• Loans and advances
• Statutory deductions
• Other authorised recoveries

Common Payroll Audit Risks

Ghost Employees

A ghost employee is a fictitious or unauthorised person appearing in payroll records.

Controls include:

• HR-to-payroll reconciliation
• Employee identity verification
• Bank-account duplicate testing
• Periodic payroll master review

Duplicate Payments

An employee may accidentally or fraudulently receive salary more than once.

Auditors should compare employee IDs, bank accounts, names and payroll transactions.

Unauthorised Salary Changes

Salary may be increased without proper approval.

Auditors should compare payroll changes with:

• Promotion letters
• Increment letters
• Revised employment contracts
• Management approvals

Incorrect Overtime

Unauthorised or inflated overtime can increase payroll costs.

Incorrect Statutory Contributions

Errors in contribution calculations can create employee disputes, penalties and liability.

Payroll Manipulation

Potential manipulation may include:

• Fake employees
• False attendance
• Inflated overtime
• Unauthorised allowances
• Altered bank details
• Duplicate salary payments

Internal Controls for Payroll

A sound payroll system should follow segregation of duties.

For example:

One person should not have complete control over employee creation, salary modification, payroll processing and payment.

Payroll Audit Procedure

A typical audit can follow these steps:

Step 1: Understand the payroll system.

Step 2: Review payroll policies and procedures.

Step 3: Obtain the employee master list.

Step 4: Select a representative sample of employees.

Step 5: Verify appointment and salary records.

Step 6: Compare attendance and leave with payroll.

Step 7: Recalculate selected salaries.

Step 8: Verify overtime, bonus and incentives.

Step 9: Check statutory deductions and deposits.

Step 10: Reconcile payroll with the general ledger and bank statement.

Step 11: Test employee additions and deletions.

Step 12: Examine terminated employees.

Step 13: Identify exceptions and investigate them.

Step 14: Prepare an audit report and recommend corrective measures.

Important Case Laws

1. People’s Union for Democratic Rights v. Union of India (1982)

The Supreme Court examined the obligation to pay workers at least the legally prescribed minimum wages. The Court treated payment below the minimum wage in the circumstances of the case as implicating the constitutional prohibition against forced labour under Article 23.

Relevance to payroll audit:
Payroll auditors should verify that wages do not fall below applicable statutory minimum-wage requirements.

2. Sanjit Roy v. State of Rajasthan (1983)

The Supreme Court held that workers employed on famine-relief work could not lawfully be paid less than the minimum wage merely because the work was connected with a relief programme.

Relevance:
An employer or authority cannot simply disregard applicable minimum-wage requirements because of the nature or purpose of the work.

3. PUDR v. Union of India (Asiad Workers Case) (1982)

In the context of workers engaged in construction connected with the Asian Games, the Supreme Court considered compliance with minimum-wage requirements and the protection available to workers.

Relevance to payroll audit:
Auditors should verify wage registers, attendance records and wage payments against applicable statutory rates.

4. Rajasthan State Road Transport Corporation v. Krishna Kant (1995)

The Supreme Court considered disputes involving employment conditions and the relationship between service conditions and labour-law remedies.

Relevance:
Payroll systems should be consistent with legally applicable service conditions, employment rules and collective arrangements.

5. Municipal Corporation of Delhi v. Female Workers (Muster Roll) (2000)

The Supreme Court recognised the importance of maternity-related benefits for women workers, including workers engaged on a muster-roll basis.

Relevance to payroll audit:
Auditors should not limit their review to permanent employees. Payroll-related benefits and statutory entitlements of eligible temporary, contractual or other categories of workers should also be examined.

6. State of Punjab v. Jagjit Singh (2016)

The Supreme Court dealt with the principle of equal pay for equal work in relation to temporary employees and held that temporary employees performing duties comparable to regular employees may, subject to the applicable legal requirements, be entitled to parity in pay.

Relevance:
Payroll auditors should examine whether employees performing substantially comparable work have been placed under appropriate pay structures and whether applicable legal or service rules have been followed.

7. Regional Provident Fund Commissioner (II), West Bengal v. Vivekananda Vidyamandir (2019)

The Supreme Court examined which salary components should be considered for provident-fund contribution purposes and discussed the distinction between genuine basic wages and allowances that are universally, ordinarily and necessarily paid.

Relevance to payroll audit:
Auditors should examine salary components carefully rather than assuming that every allowance is automatically excluded from PF-related calculations.

8. Hindustan Times Ltd. v. Union of India (1998)

The Supreme Court considered issues concerning provident-fund contributions and statutory liability.

Relevance:
Payroll audits should verify both the correctness of statutory contributions and timely compliance with statutory obligations.

Payroll Audit Checklist

Conclusion

Internal audit of payroll systems is not limited to checking whether employees received their salaries. It is a comprehensive examination of the entire payroll control environment, beginning with employee creation and attendance and continuing through salary calculation, deductions, statutory contributions, bank payments and final settlement.

An effective payroll audit helps an organisation detect ghost employees, duplicate payments, unauthorised salary changes, incorrect overtime, statutory-compliance failures and payroll fraud. It also provides assurance that employees receive their lawful wages and benefits accurately and on time.

The case law demonstrates that payroll controls must be designed with regard to minimum wages, equal-pay principles, statutory social-security contributions and other employment-related entitlements.