In Mumbai, Internal Audit Feels Like Guesswork — But Not Because of the Law
💡 律咖编者按: 本文由律咖网社群读者 james 投稿分享。 为了方便大家阅读,律咖网编辑 JingJing(微信:lvga2015)对原文进行了细致的逻辑润色与合规性整理。希望能给正在 印度 创业路上的你带来真实的参考。
I came to Mumbai thinking I’d find order.
Not because I believed India was better than Vietnam or Indonesia — but because I thought the system, if it existed, would at least be visible. I run a small stationery factory back in Hubei. We’ve been exporting to the Middle East for ten years. But last year, I tried to restructure. I needed internal audit. Not for compliance. Not for investors. For me. To know if my Mumbai office was stealing from me.
I didn’t know how to ask.
So I started with the surface.
One: Surface Difference — Paper vs. Presence
In Vietnam, internal audit meant a folder. Thick. Stamped. Signed by a certified accountant. You paid $800, got three copies. One for you. One for the bank. One for the government.
In Mumbai? No folder.
I hired a local firm. “We do full-scope internal audit,” they said. “ISO 9001 aligned. RBI compliant.” They handed me a PDF. 12 pages. No signatures. No stamps. Just bullet points.
I asked: “Where’s the physical verification?”
They said: “We call the warehouse manager. He confirms.”
I called the warehouse manager.
He said: “I don’t know what audit is. My boss told me to say yes.”
That’s the first shock.
Seems like: India has formal systems.
Actually: The system is a script. Everyone recites it. No one believes it.
I saw this in the fuel surcharge hikes last week. Air India, IndiGo, Akasa — all raised prices overnight. Why? “Geopolitical uncertainty,” they said. The same line. The same date. The same email template. But no one showed me the actual fuel invoice. No one showed me the contract with the supplier.
In Mumbai, compliance is performance. Not proof.
Two: System Difference — Rules Are Public, Enforcement Is Private
In Thailand, if your audit fails, you get fined. The tax office sends a notice. You pay. You fix it.
In Mumbai? There’s no notice.
There’s a whisper.
I asked a local lawyer — a guy who used to work with Deloitte — “What happens if my internal audit doesn’t match my bank records?”
He smiled. “Nothing. Unless someone complains.”
I asked: “Who complains?”
He said: “The guy who wants to buy your company. The guy who wants your license. The guy who doesn’t like your face.”
That’s the difference.
India’s laws are written in English. Clear. Detailed. The Companies Act, 2013. The Income Tax Act. The GST Rules. You can download them. Read them.
But enforcement? It lives in relationships.
I found out my Mumbai office manager was paying suppliers in cash — no invoice. When I asked, he said: “It’s faster. No GST delay.”
I checked: he was paying 15% more than market rate.
I didn’t fire him.
I asked: “Who told you to do this?”
He said: “No one. I just thought… it’s how things work here.”
That’s the system.
Seems like: India has strict financial controls.
Actually: The rules exist to protect the powerful — not to punish the weak.
Three: Execution Difference — Process Is a Suggestion, Not a Command
I tried to implement a monthly audit checklist. Four items:
- Bank reconciliation
- Inventory count
- Vendor KYC verification
- Expense approval trail
I gave it to my local team. Two weeks later, they handed me a report.
Bank reconciliation? “We did it.” But no reconciliation file. Just a note: “Matches.”
Inventory count? “We counted.” But no photos. No signatures. No date.
Vendor KYC? “We checked.” But no document. Just a WhatsApp photo of a passport — blurred.
Expense trail? “All approved by boss.” But boss was on vacation.
I asked: “Why not follow the checklist?”
They looked confused. “We follow the spirit.”
I said: “What’s the spirit?”
They said: “Don’t make trouble.”
This is not negligence.
This is cultural adaptation.
I saw it again in the news this week — India repatriating Iranian sailors from Kochi. The government didn’t say “We’re doing this because of US pressure.” They said: “We’re ensuring safe passage for Indian-flagged vessels.” Clean. Neutral. No blame.
Same here.
Seems like: India has structured processes.
Actually: Process is a suggestion. Trust is the real control.
Four: Psychological Difference — Control vs. Acceptance
Back in Guangxi, I was a control freak. I wanted spreadsheets. I wanted timestamps. I wanted to know who touched what.
In Mumbai, I learned something else.
The people here don’t want control.
They want peace.
I sat with my CFO — a 32-year-old from Pune. He said: “James, you think I’m hiding something. I’m not. I’m just tired of fighting.”
He showed me his calendar. Five meetings with auditors last month. Two from the bank. One from the GST department. One from the municipal corporation.
“All of them ask for the same thing,” he said. “But none of them check it.”
“So why do you do it?”
“Because if I don’t, someone else will come. And they’ll ask harder questions.”
That’s the emotional weight.
In China, we audit to prevent fraud.
In Mumbai, we audit to prevent inconvenience.
I realized: I was trying to apply a Chinese mindset to an Indian reality.
I needed to stop demanding proof.
And start accepting ambiguity.
So — How Do You Know If This Works For You?
You’re not here to fix India.
You’re here to survive it.
Ask yourself:
Can you tolerate uncertainty?
If you need a signed stamp to sleep at night — Mumbai will break you.
If you can say “I don’t know, but I trust the person” — you’ll last.Do you have patience for slow verification?
A vendor KYC might take 3 weeks. Not because they’re slow — but because they’re waiting for someone to call someone else.Can you build trust without contracts?
In Mumbai, the best auditors aren’t the ones with the most certifications.
They’re the ones who show up at 7 a.m. with chai.
Who remember your kid’s name.
Who say “I’ll fix it tomorrow” — and actually do.
I didn’t fire my manager.
I hired a local friend of his — someone who’d worked with him for 12 years.
I asked him: “Tell me what’s really happening.”
He said: “He’s not stealing. He’s just scared. He thinks if he follows the rules, someone will take his job.”
So now, we have a new system.
No checklist.
No PDF.
We meet every Friday. Over tea. We talk. He tells me what’s broken. I say: “Fix it. Or tell me why not.”
And it works.
Better than any audit report ever did.
❓ FAQ: What Should You Actually Do?
Q1: Can I rely on a local audit firm in Mumbai for compliance?
Steps:
- Ask for a sample report — not a brochure.
- Call the last three clients. Ask: “Did they actually find anything?”
- Check if they’re registered with ICAI — Institute of Chartered Accountants of India.
Points to verify:
- Do they do physical verification?
- Do they sign on the report?
- Do they have a GSTIN?
Note: Many firms are just “consultants.” They write reports. They don’t audit.
Q2: How do I know if my internal audit is legally sufficient?
Path:
- Download the Companies Act, 2013 — Section 143.
- Compare your report to the requirements listed under “duties of auditor.”
- If your report says “we reviewed” — but doesn’t say “we verified with original documents” — it’s not legally sufficient.
Key checklist:
- Physical inventory count witnessed
- Bank statements matched with ledger
- Signed board resolution for audit appointment
- Auditor’s stamp and registration number
Tip: If your auditor says “It’s fine for private companies,” they’re lying. The law applies to all.
Q3: Should I hire an international firm like Deloitte or PwC?
Answer: Maybe.
Why?
- They follow global standards.
- Their reports are accepted by foreign banks.
Why not? - Cost: 5x local firms.
- They don’t understand local relationships.
- Their reports are perfect — but useless if no one reads them.
I use both: a local guy for weekly trust, and a Big 4 for yearly filings. Not because I need to. But because I need to sleep.
Final Thought: You Don’t Need to Fix the System. You Need to Navigate It.
I used to think audit was about control.
Now I know: it’s about connection.
In Mumbai, the best internal audit isn’t written on paper.
It’s whispered over chai.
It’s the quiet nod from the warehouse guy who says, “James, the boxes are there.”
It’s the accountant who shows up on Sunday because he knows you’re worried.
You won’t find that in a manual.
You’ll find it when you stop demanding proof — and start asking for honesty.
If you’re running a business in Maharashtra — or just trying to survive the chaos — you’re not alone.
Join our free Lvga.com Cross-Border Founder Group on WhatsApp. We share real stories. No sales. No promises. Just people who’ve been there.Or, if you want to talk about Mumbai audits, vendor risks, or how to handle a team that says “we’ll fix it tomorrow” —
Add JingJing on WeChat: lvga2015.She doesn’t fix your audit.
But she’ll listen. And maybe, just maybe, help you see it differently.
🔗 延伸阅读
🔸 LPG Trouble! India Plans A Contingency - What Is DME?
🗞️ 来源: TimesNow News – 📅 2026-03-14
🔗 阅读原文
🔸 West Asia conflict: How Air India, IndiGo, Akasa fuel surcharge hikes are making flights costlier
🗞️ 来源: Business Today – 📅 2026-03-14
🔗 阅读原文
🔸 India Repatriates Non-Essential Crew Of Iranian Warship Docked In Kochi Amid US-Iran Conflict
🗞️ 来源: ABP Live – 📅 2026-03-14
🔗 阅读原文
📌 免责声明
请知悉:律咖网(Lvga.com)是跨境创业公开信息与内容分享平台,不提供法律、税务、会计或合规服务。
本文内容基于公开资料,并由人工编辑与 AI 工具协助整理,仅供信息参考之用,不构成任何法律、投资、移民或商业决策建议。
政策可能随时间变化,请以官方渠道与当地持牌专业人士意见为准。
如内容有需要修订之处,欢迎随时与我联系。
