PF and ESI compliance testing in a payroll audit confirms four things: that the entity correctly determined which employees and establishments the schemes apply to, that the amounts deducted and deposited agree to the payroll register for the corresponding month, that deposits were made within the due date with interest recognized for any delay, and that the employer and employee contribution components reconcile to what the law and the entity's own records require. Each of these is tested separately because a pass on one does not imply a pass on the others.
Applicability: establishment and employee level
Both Provident Fund (under the Employees' Provident Funds and Miscellaneous Provisions Act) and ESI (under the Employees' State Insurance Act) apply based on establishment size and, for ESI, a wage ceiling. Both the employee-count thresholds that bring an establishment into coverage and the wage ceilings that determine individual applicability have moved over time and differ in detail between the two schemes, so confirm the figures in force for the period under audit rather than relying on a number carried forward from a prior file.
Regulatory requirement
Coverage thresholds and wage ceilings under the PF Act and the ESI Act are set by statute and periodically revised by notification. Confirm the figures applicable to the period under audit from the current text of the Act and the relevant notifications before concluding on applicability.
- Confirm the establishment is registered under both schemes, where applicable, and that the registration has not lapsed or been incorrectly surrendered.
- For employees near the ESI wage ceiling, check applicability is reassessed when a salary revision pushes gross wages across the ceiling mid-year, not just at the start of the contribution period.
- Check employees who are statutorily excluded (certain categories of apprentices, for instance) are correctly excluded from both deduction and the employer contribution base.
- For PF, confirm whether any employees have opted for a higher voluntary contribution and that the higher rate is applied consistently rather than reverting to the statutory minimum in some months.
Matching challans to the payroll register
An entity that deposits the right total amount can still have the wrong population of employees contributing, or the wrong amount for individuals even while the total nets out. The match needs to be done at a granular level, not just a total-to-total agreement.
- 01Obtain the Electronic Challan cum Return (ECR) or equivalent filing for each month in the sampleThis gives the employee-wise contribution detail actually filed with the PF authority, which is the right level to match against, not the consolidated challan total alone.
- 02Match the ECR employee-wise detail to the payroll register for the same monthConfirm the wages on which PF was computed in the filing agree to PF-wages as per the payroll register. A mismatch here, even with a matching total deposit, usually means either an employee was omitted from the filing or wages were understated for PF purposes specifically.
- 03Trace the deposited amount to the bank statement or the payment confirmation from the EPFO/ESIC portalConfirms the challan was actually paid and for the amount shown, not merely generated.
- 04For ESI, match the half-yearly return to the sum of the monthly contributions for the corresponding periodESI return periodicity differs from PF's monthly filing, so this reconciliation has its own cadence and should not be skipped on the assumption the monthly testing already covers it.
| Check | Source documents | What it catches |
|---|---|---|
| Applicability reassessment | Salary revision log, employee master | Employees whose wages crossed the ESI ceiling but continued to be deducted, or vice versa |
| Employee-wise challan match | ECR / ESI monthly contribution detail, payroll register | Employees omitted from the statutory filing despite being on payroll |
| Due-date testing | Challan payment date, bank statement | Late deposits not flagged for interest, or disallowance exposure under tax law |
| Employer vs employee contribution split | Payroll register, challan, books of account | Employer's share misclassified as employee deduction, understating the true cost to the company |
Due-date and interest-on-delay testing
Both PF and ESI contributions carry a due date for deposit after the end of the wage month, and the client's own payment history is the best evidence of whether this is a recurring issue rather than a one-off. Build a due-date-versus-actual-payment-date schedule across the full year, not just the audit sample, because this is a cheap full-population test once the data is in a usable form.
- Any delay attracts interest and, depending on the extent and pattern, can attract penal provisions — the precise rates and the conditions for penal action change by notification, so confirm current figures rather than assuming a rate from a prior audit.
- Check whether the entity has recognized interest on delayed deposits in its books, and whether a contingent liability note is needed for unresolved demands.
- Under the Income Tax Act, employee contributions to PF and ESI deducted from salary but deposited after the due date prescribed under the respective Act are disallowed as a deduction — this interacts directly with the tax audit and should be flagged to that workstream, not assumed to be someone else's problem.
The disallowance for late deposit of employee contributions is a frequent source of a tax adjustment that the statutory audit team only discovers during the tax audit cross-check, after the financial statements have already been drafted. Running the due-date schedule early in the payroll audit, rather than leaving it to the tax team, avoids a late-stage restatement.
Reconciling employer and employee contributions
The employee's share is a deduction from salary; the employer's share is a cost to the company recognized separately in the books. Confirm both halves are present and correctly classified — a common error is recording only the net cash outflow on deposit, which quietly drops the employer's contribution out of the salary cost line and understates payroll expense for the year.
- 01Recompute the employer's contribution independently using the applicable rate and the PF/ESI wage baseDo not take the client's computed figure as given — the rate applied to the wage base is exactly the kind of recurring calculation that should be checked at full population, not sampled.
- 02Trace the employer's contribution to the payroll cost in the profit and loss accountConfirms it was expensed, not merely paid out through the balance sheet as if it were a pass-through.
- 03Agree the employee's deducted share nets to zero against the corresponding payable, once the deposit is madeAn outstanding balance at year end for employee deductions not yet deposited should be isolated and separately disclosed, since it carries the disallowance risk above.
How we think about this
Applicability thresholds and contribution rates are facts the law states, and matching a challan to a register is a lookup — both belong to software that applies the same rule to every employee and every month without getting tired on month eleven. Whether a borderline employment arrangement is genuinely covered, or whether a pattern of late deposits reflects a cash-flow problem worth flagging in the audit report, is a judgement for the auditor, and no computation replaces it.
This is practical guidance written for audit teams, not an authoritative statement of any standard or statute. Standards, forms and timelines change. Check the current text issued by the ICAI and the relevant authority before relying on anything here in an audit file.
Related resources
- Payroll & employee costPayroll audit procedure: a complete checklistMaster data testing, gross-to-net recomputation, statutory deduction checks, and the approval trail — the full payroll audit procedure in order.
- Payroll & employee costTDS on salary: audit testing approachRecomputing TDS for a sample against the declared regime, matching to Form 24Q, and reconciling TDS deducted to deposited and to the payroll register.
- Payroll & employee costContractor vs employee classification: the audit riskWhy misclassification creates PF, ESI, and TDS exposure, the indicators to look for, and how GST on contractor invoices differs from salary.
- CARO & Companies ActCARO statutory dues clause: testing approachHow to test timely deposit of statutory dues for CARO reporting, handle disputed dues disclosure, and avoid redoing work already done in the GST and payroll sections.
Free tools, no signup
Each one reads a file entirely in your browser — or, for two of them, just answers a few questions — and nothing is ever uploaded.
- Purchase register checkDuplicate payments, round-sum amounts, weekend-dated invoices, incomplete records.
- GSTR-2B reconcilerMatches your purchase register against GSTR-2B — missing invoices either side, amount mismatches.
- Bank reconciliation checkerMatches your cash book against a bank statement — what's outstanding on each side.
- Fixed asset register checkDuplicate asset codes, missing location or useful life, negative net book value.
- CARO applicability checkerAnswer a few questions about the company and see which CARO 2020 clauses likely apply.
- MSME payment delay checkerMSME-flagged invoices paid — or still unpaid — beyond the 45-day Section 22 limit.
- Related-party transaction screenerTransactions above a threshold you set with no approval reference, grouped by counterparty.
- Depreciation useful life checkerCompares a useful life in use against the Schedule II, Part C indicative figure.
- Materiality calculatorOverall and performance materiality against PBT, revenue, assets or equity, with reasoning shown.
- Sample size calculatorStatistical sample size for a test of controls or a substantive test of detail.