This is a composite, illustrative scenario, not an account of a named client. A debtor confirmation reply came back agreeing exactly with the balance on the client's books, signed by a named finance manager at the confirming company and stamped with what appeared to be that company's official seal. A routine cross-check — searching the signatory's name against the confirming company's current staff directory, prompted by nothing more specific than standard practice for confirmations above a size threshold — showed that person had left the confirming company roughly eight months before the date on the confirmation letter.
Why a matching balance was not, on its own, reassuring
A confirmation that agrees with the client's books is often treated as the end of the procedure once the amount ties out. But the figure matching doesn't establish who actually sent the reply, or whether it came from someone with authority to confirm balances on the counterparty's behalf at all. A former employee signing a confirmation raises the specific possibility that the reply did not originate from the confirming company's current finance function — it could have been drafted and returned by someone with access to old letterhead and a stamp, including, in the more concerning case, someone connected to the client being audited rather than to the counterparty.
What the follow-up established
- 01Contacted the confirming company directly through a phone number independently sourced, not the one on the confirmation letterCurrent finance staff confirmed the named individual had indeed left roughly eight months earlier and had no continuing involvement with the company.
- 02Asked the confirming company's current finance team whether they recognised the balance and the letterThey had no record of having sent that specific confirmation reply and could not confirm it had originated from their office.
- 03Asked the client directly how the confirmation letter had been returnedIt had come back through the client's own postal address rather than directly to the audit firm — a deviation from the standard confirmation process, which specifies replies are to be returned directly to the auditor.
- 04Treated the reply as unreliable and performed alternative proceduresSubsequent cash receipts from that debtor after year end were traced instead, to independently corroborate the balance without relying on the compromised confirmation.
| Appeared to show | Actually found | |
|---|---|---|
| Balance | Matched client's books exactly | Still unverified independently at this point |
| Signatory authority | Finance manager at confirming company | Had left that company eight months earlier |
| Return route | Appeared to follow standard process | Routed through the client, not direct to the auditor |
What went into the file
- The signatory check and the confirming company's own statement that they had no record of the reply.
- The deviation from the standard direct-return confirmation process, documented explicitly as a reliability concern.
- The alternative procedure performed — subsequent cash receipts — and its result as the basis for the final conclusion on the balance.
- A firm-wide reminder, following this instance, to verify confirmation return routes and, for larger balances, the signatory's current standing before accepting a reply at face value.
Regulatory requirement
SA 505 on external confirmations requires the auditor to maintain control over the confirmation request and response process, including addressing confirmation requests appropriately and evaluating whether the results of the confirmation process provide relevant and reliable audit evidence. A reply that matches the balance but did not demonstrably come from someone with current authority at the confirming party, through a controlled channel, has not met that bar.
This is practical guidance written for audit teams, not an authoritative statement of any standard or statute. Standards, forms and timelines change. Check the current text issued by the ICAI and the relevant authority before relying on anything here in an audit file.
Related resources
- Audit documentationSA 505: what the external confirmation standard requires, beyond bank and debtor lettersSA 505's rules on non-responses and negative confirmations apply just as much to a lawyer's letter or a lender confirmation as they do to a bank or debtor one.
- Revenue, receivables & cut-offDebtors confirmation procedure: balance confirmation in practicePositive versus negative confirmation, selection criteria, handling non-responses and disputes, and the alternative procedures that cover the gap when confirmations fail.
- Bank, cash & treasuryBank confirmation letters: what to request and verifyWhat a bank confirmation covers beyond the balance, how to keep the request genuinely independent, and what to do when the bank is late.
Free tools, no signup
Each one reads a file entirely in your browser — or, for two of them, just answers a few questions — and nothing is ever uploaded.
- Purchase register checkDuplicate payments, round-sum amounts, weekend-dated invoices, incomplete records.
- GSTR-2B reconcilerMatches your purchase register against GSTR-2B — missing invoices either side, amount mismatches.
- Bank reconciliation checkerMatches your cash book against a bank statement — what's outstanding on each side.
- Fixed asset register checkDuplicate asset codes, missing location or useful life, negative net book value.
- Payroll red-flag scannerBank accounts shared across employees, and records missing an ID, PAN or salary.
- CARO applicability checkerAnswer a few questions about the company and see which CARO 2020 clauses likely apply.
- MSME payment delay checkerMSME-flagged invoices paid — or still unpaid — beyond the 45-day Section 22 limit.
- Related-party transaction screenerTransactions above a threshold you set with no approval reference, grouped by counterparty.
- Depreciation useful life checkerCompares a useful life in use against the Schedule II, Part C indicative figure.
- Materiality calculatorOverall and performance materiality against PBT, revenue, assets or equity, with reasoning shown.
- Sample size calculatorStatistical sample size for a test of controls or a substantive test of detail.