Monitoring of Shared Accounts

1. Meaning

Monitoring of shared accounts refers to the systematic supervision, review and control of accounts that are accessible by more than one person, department, employee, director, trustee, partner or organisation.

Shared accounts may include:

• Joint bank accounts;
• Corporate bank accounts;
• Shared accounting or finance-system accounts;
• Joint investment or escrow accounts;
• Shared email or digital accounts;
• Payroll accounts;
• Trust or employee-benefit accounts; and
• Accounts operated by multiple authorised representatives.

Monitoring is intended to ensure that shared funds or information are used only for authorised purposes, transactions are properly recorded, and misuse, fraud, unauthorised transfers or conflicts of interest are detected promptly.

2. Objectives of Monitoring

The principal objectives include:

A. Prevention of unauthorised transactions

Monitoring helps identify payments, withdrawals or transfers that were not properly authorised.

B. Accountability

Each person accessing the account should be identifiable where the system permits individual user identification.

C. Detection of fraud

Regular review can identify unusual payments, duplicate transactions, unexplained withdrawals or transfers to related persons.

D. Compliance

Organisations may need to comply with company law, financial regulations, accounting requirements, contractual obligations and internal policies.

E. Protection of stakeholders

Monitoring can protect shareholders, employees, beneficiaries, creditors, customers and other persons whose money is held or administered by an organisation.

3. Shared Accounts and Internal Controls

Effective monitoring normally involves several controls.

1. Access controls

Only authorised individuals should have access.

2. Segregation of duties

The same individual should not ordinarily control the entire transaction cycle where appropriate controls are required.

For example:

• Employee A prepares payment;
• Employee B approves payment;
• Employee C reconciles the account.

3. Transaction limits

Organisations may impose limits on withdrawals or transfers.

4. Dual authorisation

Certain transactions may require approval from two authorised persons.

5. Periodic reconciliation

Bank statements should be compared with internal accounting records.

6. Audit trails

Electronic systems should preserve records showing who initiated, approved or modified a transaction.

7. Exception monitoring

Unusual transactions should be investigated.

4. Monitoring Shared Corporate Accounts

In companies, shared accounts may be operated by several directors or authorised employees.

Directors have statutory duties under the Companies Act, 2013, including duties concerning good faith, due care, skill and diligence and avoidance of conflicts of interest.

Monitoring therefore helps the company demonstrate that its financial resources are being properly administered.

A director cannot necessarily escape responsibility simply by arguing that another director or employee controlled the account if the circumstances required supervision and reasonable oversight.

5. Monitoring in Employment and Payroll Accounts

Shared accounts can also arise in payroll administration.

For example, several HR or finance employees may have access to a payroll system.

Monitoring should ensure that:

• salary data is accessed only for legitimate purposes;
• changes to employee bank details are authorised;
• payroll amendments are logged;
• unusual salary payments are investigated;
• terminated employees are removed from payroll;
• access rights are reviewed periodically.

This is particularly important because payroll systems contain sensitive employee information as well as financial information.

6. Monitoring and Employee Privacy

Monitoring shared digital accounts must also respect applicable privacy and data-protection principles.

An employer should distinguish between:

legitimate monitoring, such as checking access logs for security purposes, and

unnecessary or excessive surveillance, which may interfere with privacy or confidentiality.

Monitoring should therefore generally be:

• connected to a legitimate purpose;
• proportionate;
• transparent where required;
• limited to relevant information; and
• supported by appropriate policies and safeguards.

7. Monitoring Bank Accounts and Fiduciary Relationships

Where an account contains money belonging to beneficiaries, clients or other persons, monitoring becomes particularly important.

Examples include:

• trust accounts;
• client accounts maintained by professionals;
• employee-benefit funds;
• escrow arrangements;
• partnership accounts; and
• accounts maintained by trustees.

The person controlling such funds may owe fiduciary or contractual duties and may be required to maintain accurate records.

Misappropriation or unauthorised use can potentially result in:

• civil liability;
• restitution;
• accounting orders;
• removal of a fiduciary;
• disciplinary consequences; or
• criminal liability, depending upon the conduct and applicable law.

8. Important Case Laws

1. Tata Consultancy Services Ltd. v. Cyrus Investments Pvt. Ltd. (2021)

The Supreme Court considered issues concerning corporate governance, directors, shareholders and the management of corporate affairs.

The Court examined the statutory framework governing the relationship between the company's management and its shareholders.

Significance

The case demonstrates the importance of statutory corporate governance mechanisms and the responsibilities associated with management and oversight of corporate affairs.

2. Dale & Carrington Investment (P) Ltd. v. P.K. Prathapan (2005)

The Supreme Court considered allegations concerning the conduct of company directors and the exercise of corporate powers.

The Court emphasised that directors must exercise their powers for proper purposes and in accordance with their fiduciary obligations.

Significance

The principle is relevant to monitoring shared corporate accounts because persons controlling company assets cannot use corporate powers or resources for improper purposes.

3. Official Assignee, Madras v. Krishnaswami Naidu (1955)

The case concerned fiduciary responsibilities and dealings involving property and financial interests.

Significance

It illustrates the broader principle that persons entrusted with another's property or financial interests may be required to account for their administration and cannot treat entrusted assets as their personal property.

4. Canara Bank v. Canara Sales Corporation (1987)

The Supreme Court considered fraudulent transactions involving banking instruments and the responsibilities associated with bank accounts.

The case is particularly significant concerning forged cheques and banking transactions.

Principle

Banks and account holders may have different responsibilities depending upon the circumstances, including the nature of the forgery, negligence and the banking relationship.

Significance

The case demonstrates why proper monitoring of account transactions and detection of irregularities is important in preventing or limiting financial loss.

5. Ramakrishna Dalmia v. Justice S.R. Tendolkar (1958)

The Supreme Court examined corporate financial conduct and the misuse of company funds.

The case concerned allegations involving diversion and improper use of corporate resources.

Significance

The judgment illustrates the importance of accountability in the management of corporate funds and the legal consequences that may follow when corporate assets are improperly utilised.

6. Needle Industries (India) Ltd. v. Needle Industries Newey (India) Holding Ltd. (1981)

The Supreme Court considered corporate powers, directors' conduct and allegations of improper exercise of corporate authority.

Principle

Corporate powers must be exercised consistently with the purposes for which those powers are conferred and in accordance with applicable legal duties.

Significance

Where several persons control corporate accounts, monitoring helps identify whether financial powers are being exercised for legitimate corporate purposes.

7. V. B. Rangaraj v. V. B. Gopalakrishnan (1992)

The Supreme Court considered disputes concerning shareholder arrangements and corporate rights.

Significance

The case reinforces the importance of distinguishing between private arrangements and rights governed by company law. In shared-account arrangements, the actual legal authority to operate an account must similarly be determined from the governing documents and applicable law.

9. Monitoring Does Not Mean Constant Surveillance

Monitoring should not be confused with unrestricted observation of every activity.

A proper monitoring system should establish:

• what is being monitored;
• why it is being monitored;
• who can access the information;
• how long records are retained;
• who investigates irregularities; and
• what action is taken after an irregularity is detected.

This is particularly important where shared accounts involve employee or customer personal information.

10. Red Flags in Shared Accounts

Organisations should pay particular attention to:

• unexplained withdrawals;
• repeated small transactions;
• transactions outside normal business hours;
• payments to related parties;
• sudden changes in beneficiary details;
• duplicate invoices;
• unusual cash withdrawals;
• transactions inconsistent with the account's purpose;
• unexplained reversals;
• changes made by unauthorised users; and
• transactions lacking supporting documentation.

A red flag does not automatically establish fraud. It should trigger appropriate verification.

11. Documentation

A good monitoring system should maintain:

1. Account-opening documents;
2. Authorised-signatory records;
3. Board or management approvals;
4. Transaction records;
5. Bank statements;
6. Reconciliation statements;
7. Access logs;
8. Approval records;
9. Investigation reports; and
10. Corrective-action records.

Proper documentation is particularly valuable during audits, regulatory investigations and litigation.

12. Shared Digital Accounts

For digital accounts, monitoring should include:

Access management

Each user should ideally have an individual login rather than sharing one password.

Multi-factor authentication

MFA can reduce the risk of unauthorised access.

Activity logs

Systems should preserve relevant records of login and transaction activity.

Periodic access review

Access should be removed when an employee changes role or leaves the organisation.

Password security

Passwords should not be casually shared among employees.

Incident response

Suspicious access should be investigated promptly.

13. Legal Risks of Poor Monitoring

Failure to properly monitor shared accounts may contribute to:

• financial loss;
• breach of fiduciary duty;
• negligence claims;
• employment disputes;
• regulatory action;
• shareholder litigation;
• disciplinary proceedings;
• data-protection issues; and
• criminal investigation where fraud or misappropriation is involved.

The exact liability depends on the person's legal duties, the governing contract or statute, and the facts of the case.

14. Best-Practice Framework

An organisation can adopt the following framework:

Authorisation → Access control → Transaction approval → Recording → Reconciliation → Exception detection → Investigation → Corrective action → Periodic audit

This creates a continuous control cycle rather than relying on monitoring only after something goes wrong.

Conclusion

Monitoring of shared accounts is an important financial, corporate-governance and compliance mechanism. It ensures that persons who jointly or individually have access to funds or account information remain accountable for their actions. Effective monitoring requires appropriate authorisation, segregation of duties, transaction review, reconciliation, audit trails and investigation of unusual activity.

The case law concerning corporate funds, fiduciary responsibilities and banking transactions demonstrates that entrustment of financial authority carries corresponding responsibilities of proper use, accountability and oversight. However, monitoring must itself remain lawful and proportionate, particularly where shared digital accounts contain employee or customer personal information.