Internal Controls & Audit
The Employee Who Asked One Question That Changed Everything
Audits, reports, and reconciliations are important. But sometimes the most valuable information comes from the people working on the shop floor. A simple question from an employee prompted an investigation that uncovered unpaid statutory dues despite payments being made to an external consultant. This experience reinforced one lesson I'll never forget: always verify, never assume.
Published on 22 July 2026 • 8 min read
Introduction
During my career, I’ve learned that important discoveries don’t always begin with sophisticated reports or audit observations.
Sometimes, they begin with a simple conversation.
Within a few weeks of joining a new organization, I had already started reviewing the company’s financial reporting and statutory compliance processes. Although I was new to the business, one experience during the statutory audit had already encouraged me to look beyond the numbers and ask more questions.
I didn’t know it then, but the next lesson would come from someone completely unexpected.
An employee.
One Simple Question
One afternoon, an employee approached me with a concern.
He said,
“Sir, I haven’t received any PF deposit messages for almost one and a half years. We also don’t have our PF login details. How can we check whether everything has been deposited?”
For many people, it might have sounded like a routine query.
For me, it immediately raised a concern.
Employees normally receive SMS notifications whenever Provident Fund contributions are deposited.
If those messages had stopped for such a long period, something deserved a closer look.
Connecting the Dots
Only a few days earlier, I had questioned the quality of the statutory audit.
That experience had already taught me not to rely only on documents.
This new concern strengthened my belief that the underlying process needed verification.
At that time, the company had outsourced compliance activities relating to PF, ESIC, and Professional Tax to an external consultant.
The monthly process appeared straightforward.
- The consultant prepared the statutory challans.
- The accounts department released payment to the consultant along with his professional fees.
- The consultant was expected to deposit the amount with the respective government authorities.
On paper, everything looked normal.
But one question remained.
Were the statutory payments actually reaching the government?
Verification Before Assumption
Instead of relying on assumptions, I requested access to the official government portal.
I sent an email to the consultant requesting the login credentials and marked the Director in copy.
Initially, there was no response.
Only after the Director personally instructed the consultant to provide the details were the login credentials finally shared.
Sometimes, delayed responses tell their own story.
What the Portal Revealed
The moment I logged into the Provident Fund portal, the picture became clear.
Although monthly challans had been generated, most of them had never been paid.
Only a handful of challans had actually been deposited.
The remaining liabilities had accumulated over a long period.
The company had already released more than ₹8 lakh towards PF, ESIC, Professional Tax, and the consultant’s professional fees.
However, the statutory authorities had not received those payments as expected.
The issue wasn’t merely a compliance delay.
It was a complete breakdown of verification.
The Real Lesson
One realization stayed with me.
The consultant had generated the challans.
The accounts department had released the funds.
Documents existed.
Records existed.
Yet the most important step had never been independently verified.
No one had confirmed whether the money had actually reached the government account.
The system depended entirely on trust.
Unfortunately, trust without verification creates opportunity for failure.
Beyond Compliance
This experience wasn’t just about Provident Fund.
The same principle applies across finance.
Whether it’s:
- GST
- TDS
- Income Tax
- ESIC
- Professional Tax
- Vendor payments
- Bank transfers
Generating a challan or making a payment instruction doesn’t necessarily mean the transaction has been completed successfully.
Finance professionals should always verify the final outcome using the appropriate source.
Practical Checklist
Whenever statutory payments are outsourced, ask these questions:
✅ Do we have direct access to the government portal?
✅ Are payment confirmations independently verified?
✅ Are login credentials controlled by the company rather than the consultant?
✅ Is there a monthly reconciliation between challans and successful deposits?
✅ Has someone independently reviewed outstanding statutory liabilities?
If the answer to any of these questions is “No”, your internal controls deserve immediate attention.
Key Takeaways
- Always listen carefully when employees raise compliance concerns.
- Never assume that generating a challan means the payment has been completed.
- Outsourcing responsibility does not outsource accountability.
- Government portal verification should become part of every finance team’s monthly closing process.
- Strong internal controls depend on verification – not assumptions.
Final Thoughts
Looking back, I often think about that conversation.
If one employee hadn’t asked that simple question, the issue might have continued unnoticed for much longer.
That experience reminded me of something every finance professional should remember.
The most valuable evidence doesn’t always come from reports. Sometimes it comes from asking one more question.
About the Author
Aniruddha Birje
COST & MANAGEMENT ACCOUNTANT
Aniruddha Birje is a Cost & Management Accountant (CMA) with over 16 years of experience in finance, accounting, taxation, internal controls, audit, and business process improvement. Through AniruddhaBirje.com, he shares practical insights to help finance professionals and business leaders make informed decisions.
Let's Start a Conversation
Have a finance challenge, career opportunity, or question about this article? I'd be happy to connect.