How to Prepare Bank Statement Working Papers for a Section 44AB Tax Audit (2026)
A defensible bank-statement working-paper file is the spine of a 44AB audit. Here is what it contains, how it feeds Form 3CD clauses 31, 21 and 34, and the documentation discipline that lets it survive a scrutiny notice three years later.
Audit season has a predictable shape. The client sends a year of bank statements in the last fortnight before the specified date, and someone in the office has to turn thousands of narration rows into a file that will hold up if the return is ever picked for scrutiny. The Form 3CD gets the attention, but the 3CD is only as good as the working papers behind it, and for most assessees the bank statement is the single most important working paper of all. It is the one near-complete, third-party record of where the money actually went.
This guide sets out what a defensible bank-statement working-paper file contains for a tax audit under Section 44AB, how the party ledger, categorisation and AIS tie-out become the backbone that feeds specific 3CD clauses (clause 31 for 269SS, 269T and 269ST, clause 21 for disallowances, clause 34 for TDS), and the documentation discipline that separates a file you can defend from a stack of printouts you cannot. It is written for the person doing the finalisation, not for a checklist.
Why the Bank Statement Is the Spine of a 44AB File
Start with who is in the net. A tax audit under Section 44AB is triggered where business turnover exceeds Rs 1 crore (raised to Rs 10 crore where both cash receipts and cash payments are 5% or less of the respective totals), where professional gross receipts exceed Rs 50 lakh, or in the presumptive-scheme opt-out cases under 44AD, 44ADA and 44AE. Notice that the 5% test itself cannot be computed without splitting receipts and payments into cash and banking channels. Before you have even accepted the engagement, the bank statement is load-bearing.
Once inside the audit, the statement earns its place for a simple reason: it is external evidence. Under the auditor's evidence framework, a record generated by a third party (the bank) outside the assessee's control carries more weight than the assessee's own books. Almost every figure in the financials touches the bank at some point, so the statement corroborates income, expenses, loans, capital and tax payments in one place.
That is also why it is dangerous to treat casually. A statement dumped into the file as a PDF printout, un-reconciled and un-analysed, is not a working paper. A working paper is the statement reorganised into the shape the audit questions actually take, tied to the books, and annotated so that a reviewer (or an assessing officer years later) can retrace every conclusion. The rest of this guide is about building that.
What a Defensible Working-Paper File Actually Contains
A bank-statement working-paper file is not one document. It is a small set of schedules, each answering a different question and each feeding a different part of the audit. At minimum it should contain the following.
| Working paper | What it proves | Where it feeds |
|---|---|---|
| Account completeness schedule | Every bank account of the assessee is captured; none omitted | Opinion on completeness; cross-checked to 26AS and AIS |
| Opening and closing tie-out plus BRS | Statement balances agree to the books via a reconciliation | Balance sheet, unreconciled-item review |
| Party-wise ledger | Who the money moved between, rolled up per counterparty | Clauses 23 and 31; related-party review |
| Categorised transaction sheet | Every row assigned an accounting head | Clauses 16, 21 and 34 |
| Cash-transaction register | Cash deposits, withdrawals and cash-mode payments isolated | Clauses 21(d) and 31 |
| AIS and SFT reconciliation | Third-party reported figures agree to the books | ITR summary; clause-level cross-checks |
| Exception and suspense register | Unresolved rows, listed with the reason each is open | Audit trail and review notes |
The completeness schedule deserves a line of its own because it is the one people skip. You audit the accounts you were given, but the assessee may have an account you were not told about. AIS and Form 26AS often reveal interest credited by a bank whose statement is not in your file. Reconciling the bank interest in AIS against the accounts you hold is the cheapest way to catch an undisclosed account before the department does. If a client is sending statements as PDFs, ask them to re-export in Excel from netbanking instead; our bank-wise export guides show the exact steps you can forward to them, and clean Excel inputs remove an entire class of transcription error from the file.
The Party Ledger and Categorisation: the Backbone
The bank hands you the year date-wise. Every question an auditor has is party-wise. Reorganising the statement so that each counterparty is rolled up, with its transaction count, total debits, total credits and net position, is the analytical move that turns raw rows into evidence. This is the same discipline as classical ledger scrutiny, applied to the bank rather than to a nominal ledger, and it is the backbone everything else hangs on.
Why it matters for a 44AB file specifically:
- It surfaces related parties. Once counterparties are grouped, payments to persons specified under section 40A(2)(b) stop hiding among hundreds of routine transfers. That grouping is what makes clause 23 reporting and any related-party review tractable rather than guesswork.
- It separates income from capital from loans. A large credit is not automatically revenue. The party rollup lets you see that three credits from the same person over the year are a loan being drawn down, not sales, which changes both the P&L and the clause 31 analysis.
- It is the substrate for every downstream clause. You cannot test 269SS or 40A(3) on a pile of undifferentiated rows. You test them on a ledger where the counterparty and the nature of each line are already established.
Alongside the rollup sits categorisation: every transaction assigned an accounting head, from supplier payment to salary to bank charges to EMI to cash deposit. Categorisation is what feeds the disallowance and TDS clauses later, so it has to be honest. The failure mode to avoid is a sheet that forces every row into a confident head with no unknowns; a real statement always contains rows no one can classify from the narration alone, and those belong in a visible suspense bucket, not smoothed over. Our guide to categorising bank transactions sets out a defensible head list, and the party ledger guide covers the merge-and-rollup mechanics in detail.
Pro tip
Build the party ledger once, at the start, and run every subsequent test off it. Auditors who go back to the raw statement for each clause re-do the same counterparty identification five times and reconcile poorly across the schedules.
Feeding Clause 31: 269SS, 269T and 269ST
Clause 31 of Form 3CD is where cash-mode loans, repayments and receipts get reported, and it is the clause most often understated because the trail sits inside the bank statement and the cash book together, not in the ledger summary. The party ledger is what makes it testable. Three sections drive it:
| Section | What it catches | Limit | Form 3CD clause |
|---|---|---|---|
| 269SS | Loan, deposit or specified sum accepted otherwise than by account payee cheque, draft or ECS | Rs 20,000 | 31(a), 31(b) |
| 269ST | Amount received from a person, in aggregate in a day, per transaction, or per event, otherwise than through banking channels | Rs 2,00,000 | 31(ba) to 31(bd) |
| 269T | Repayment of a loan, deposit or specified advance otherwise than by account payee instrument | Rs 20,000 | 31(c), 31(d), 31(e) |
The bank statement matters here in two ways. First, it evidences the mode of payment. A loan received by NEFT satisfies 269SS on its face; the same amount appearing as a cash deposit into the account on the day a loan was recorded is a flag that needs documenting either way. Second, cash deposits and withdrawals in the statement are the starting point for the mirror-image test: a large cash withdrawal by the assessee may be someone else's cash receipt, and a cash deposit into the account may be a cash receipt that trips 269ST at the assessee's end.
Work the cash-transaction register against the party ledger, tag every line with the section it could attract and the mode actually used, and carry the residue into clause 31 with the mode-of-payment particulars the form demands. Our guide to cash transactions under 269SS, 269T and 269ST walks each sub-clause with worked examples.
Worth knowing
269ST is the one that gets missed. It is not a loan provision; it catches ordinary receipts (sales collections, gifts, cash against a bill) once they cross Rs 2,00,000 from one person in a day, in a single transaction, or across transactions relating to one event. A clean 269SS and 269T review can still leave a 269ST exposure sitting in the cash deposits.
Feeding Clause 21 and Clause 34: Disallowances and TDS
If the party ledger is the backbone, the categorised transaction sheet is what feeds the disallowance clauses. Clause 21 collects amounts debited to the profit and loss account that are inadmissible, and several of its heads are discoverable only by reading the payment side of the bank statement:
- Clause 21(d), section 40A(3). A payment exceeding Rs 10,000 in a day to a single person, made otherwise than by account payee cheque, draft or a prescribed electronic mode, is disallowed in full (the limit is Rs 35,000 for payments to a transporter for plying or hiring goods carriages). The categorised sheet is how you find these: isolate the cash-mode payments, aggregate them per party per day, and test against the limit.
- Clause 21(b), section 40(a). Payments that attracted TDS but where tax was not deducted or not paid in time are inadmissible, wholly for certain non-resident payments under 40(a)(i) and to the extent of 30% for resident payments under 40(a)(ia). The bank statement shows the payment; the categorisation flags the ones (contractor, professional, rent, commission) that should have carried TDS.
- Clause 21(a). Capital and personal expenditure debited to the P&L surfaces the same way, once each debit is named rather than left as "other".
The same categorised payments feed clause 34, the TDS and TCS compliance clause. A payment head that attracts deduction becomes a line item to trace against the TDS returns and the 26AS. Building this once, off the categorised sheet, means the clause 21(b) inadmissibility and the clause 34 compliance testing draw on the same evidence rather than two separate passes over the statement.
Pro tip
Keep a per-party, per-day running total on the cash-payment lines rather than testing each row in isolation. 40A(3) aggregates by day and by person, so three payments of Rs 4,000 to the same supplier on the same date are inside the net even though no single voucher crosses Rs 10,000.
The AIS and SFT Tie-Out
The Annual Information Statement has changed what a defensible file looks like. The department now sees a large slice of the assessee's banking activity independently, reported by banks and other filers under the Statement of Financial Transactions regime (Rule 114E). If your working papers do not reconcile to it, you are leaving the mismatch for an assessing officer to find first.
The high-value bank reporting that lands in AIS includes items such as cash deposits aggregating Rs 10 lakh or more in a year across savings accounts, cash deposits or withdrawals aggregating Rs 50 lakh or more in current accounts, time deposits of Rs 10 lakh or more, and credit-card bill payments above the prescribed cash and non-cash limits. Each of these is, at root, a bank-statement figure. That makes the statement the primary record and AIS the third-party corroboration, which is exactly the direction of reliance an auditor wants.
The working paper is a three-way reconciliation: books, bank statement, and AIS or SFT. Where they agree, tick and move on. Where they differ, the reconciling item and its reason go into the file (a deposit reported gross of a same-day reversal, a joint-account figure attributed in full, a timing difference across the year end). Do not force the numbers to match; document why they do not. This schedule then rolls straight into the ITR summary with the AIS and SFT flags attached, and our AIS and SFT reconciliation guide sets out the line-by-line method.
Worth knowing
An unexplained AIS mismatch is now one of the more common triggers for a notice. A bank cash-deposit figure in AIS that is higher than the books, left unreconciled in the file, is the kind of gap that turns a routine return into correspondence.
Documentation Discipline: Making the File Defensible
Working papers exist to be re-performed. The governing test, drawn straight from the auditing standards on documentation, is whether an experienced auditor with no prior connection to the engagement could pick up your file and understand the nature, timing and extent of the work, the evidence examined, and the conclusions reached. A bank-statement file that only you can navigate is not documented; it is remembered.
What that means in practice for this file:
- A tick-mark legend. Every symbol (agreed to bank, agreed to books, traced to TDS return, included in clause 31) defined once, so a reviewer reads the file without a translator.
- Cross-referencing both ways. Each 3CD clause points to the schedule that supports it, and each schedule points back to the clause it feeds. Clause 31 should reference the cash-transaction register by page; the register should carry the clause number.
- A stated materiality and scope basis. If you sample-tested rather than examined every row, the basis and the threshold go in writing.
- Dating and sign-off. Who prepared each schedule, who reviewed it, and when. An undated working paper is weak evidence of when the work was actually done.
- The exception register closed out. Every suspense row either resolved with a note or explicitly left open with a reason. Zero suspense on a real statement is not a sign of quality; it is a sign that guesses were recorded as facts.
Retain the file for the full statutory period and keep it consistent with the ICAI guidance for tax audits. The reader you are really writing for is not this year's reviewer; it is an assessing officer opening the file three years from now with a specific clause in mind. Much of the assembly, the party rollup, the categorisation and the AIS-ready summary, is mechanical rather than judgemental, which is where a tool like Greenote earns its place: it produces the party-wise ledger, the categorised sheet and the summary from an Excel or CSV statement, so the auditor's time goes to the judgement calls rather than the transcription.
The Assembly Checklist, in Order
Put together, the file assembles in a sequence, each step building on the last:
1. Confirm completeness. List every bank account and reconcile bank interest in AIS and 26AS against the accounts you hold. Chase any account you cannot see. 2. Get clean inputs. Obtain Excel or CSV exports from netbanking rather than PDFs, to keep amounts as numbers. 3. Tie out balances. Agree opening and closing balances to the books and prepare the reconciliation. 4. Build the party ledger. Roll up every counterparty across narration variants. This is the backbone. 5. Categorise every row. Assign an honest accounting head, with a visible suspense bucket for the unclassifiable. 6. Run the cash-transaction register. Isolate cash deposits, withdrawals and cash-mode payments; test 269SS, 269T, 269ST and 40A(3). 7. Trace the TDS-attracting heads. Feed clause 21(b) and clause 34 off the categorised sheet. 8. Reconcile to AIS and SFT. Three-way tie-out, with reasons for every difference. 9. Document and cross-reference. Legend, sign-off, clause-to-schedule links, exception register closed.
If you want the honest comparison of doing steps 4 to 8 by hand versus automating them, our note on manual Excel versus automated bank-statement analysis walks through where each approach holds up under audit conditions.
Conclusion
The bank statement is not a document you attach to the file at the end. For a 44AB assessee it is the file's spine, the one third-party record that corroborates income, loans, disallowances and tax payments in a single place, and the direct source for clause 31, clause 21 and clause 34. A defensible working paper turns it from date-wise raw data into a party-wise ledger, a categorised statement and an AIS tie-out, then documents each conclusion so the file re-performs itself for a reader who was never in the room.
Build the party ledger first, keep an honest suspense bucket, and reconcile to AIS before the department does. The mechanical layers of that (the rollup, the categorisation, the summary) are where Greenote Lite analyses your first Excel or CSV statement free and returns the party-wise ledger and category summary you can drop into the file; the statement is processed in memory and deleted once the report is ready, with nothing stored. For the wider tooling picture, our 2026 buyer's guide for CAs covers what to check before you trust any analyser with a client statement.
Frequently asked questions
What bank statement records are needed for a Section 44AB tax audit?
At a minimum: an account-completeness schedule confirming every bank account is captured and tied to AIS and 26AS, an opening and closing balance tie-out with a bank reconciliation, a party-wise ledger, a categorised transaction sheet, a cash-transaction register isolating cash deposits, withdrawals and cash-mode payments, an AIS and SFT reconciliation, and an exception register for unresolved rows. Together these feed the relevant Form 3CD clauses and let the file be re-performed by another reviewer.
Which Form 3CD clauses does the bank statement feed?
Chiefly clause 31 (loans and deposits under 269SS, repayments under 269T, and cash receipts and payments under 269ST), clause 21 (inadmissible amounts, including 40A(3) cash payments in 21(d) and TDS-related disallowances under 40(a) in 21(b)), clause 34 (TDS and TCS compliance), and clause 23 (payments to related parties under 40A(2)(b)). The party ledger and categorised sheet are what make each of these testable.
What is the cash payment limit reported in clause 21(d)?
Clause 21(d) reports amounts inadmissible under section 40A(3): payments exceeding Rs 10,000 in a day to a single person made otherwise than by account payee cheque, draft or a prescribed electronic mode, which are disallowed in full. The limit is Rs 35,000 for payments to a transporter for plying, hiring or leasing goods carriages. The test aggregates per person per day, so several small cash payments to the same party on one date can breach it.
How do you reconcile a bank statement with AIS for a tax audit?
Run a three-way reconciliation between the books, the bank statement and the AIS or SFT figures. Where they agree, tick and move on. Where they differ, record the reconciling item and its reason (a same-day reversal reported gross, a joint account attributed in full, a year-end timing difference) rather than forcing the numbers to match. High-value bank items such as large cash deposits and current-account cash movements are reported under Rule 114E and appear in AIS, so an unexplained mismatch is a common trigger for a notice and should be resolved in the working papers first.
See it on your own statement
Upload an Excel or CSV bank statement and get back a party ledger, categorised transactions and an ITR-ready summary. First statement free. Files are processed and deleted, never stored.
Keep reading
Bank Statement Red Flags: 12 Patterns Every CA Should Catch in Ledger Scrutiny (2026)
A working list of twelve red-flag patterns to hunt for in every client bank statement: what each looks like in a raw date-wise export, why a party-wise rollup is what exposes it, and the first action to take.
Ledger Scrutiny Checklist for Finalisation (2026): What to Verify Before You Sign
A stage-by-stage checklist a practising CA can print and run before signing a finalisation or tax audit, from statement completeness and the party-wise rollup to the Section 269 cash-law tests, AIS and SFT tie-out, and suspense clearance.
How to Analyse a 10,000-Row Bank Statement Without Excel Falling Over (2026)
Ten thousand rows will not crash Excel, but the pivots, TEXTSPLIT formulas, and party-wise rollup you stack on top will. Here is where large bank statements actually break, and how to get a clean, audit-ready read.