COMPANIES ACT MASTER SERIES - CHAPTER 14

Inspection, Inquiry and Investigation

A complete regulatory-response guide covering Registrar scrutiny, inspection and inquiry, search and seizure, general investigation, SFIO, beneficial-ownership tracing, witness powers, asset and security freezes, reports, recovery and evidence offences.

Sections 206-22924 statutory sectionsInspection Rules + SFIO Arrest Rules

Reviewed: 28 June 2026Finin2min Companies Act Master Series

Core principle: Regulatory response is an evidence-governance exercise. Preserve first, establish one verified fact base, respond precisely and never alter the record after a notice or investigation trigger.

Section, Rule, Form and company-class control

This page is integrated with the section index, Rules and MCA Forms repository, company-class matrix and transaction workflows. Current MCA/Gazette instruments and portal instruction kits control.

For the connected rule, example or next step, see Companies Act Chapter XV - Compromises, Arrangements and Amalgamations.

Chapter architecture

Six layers of regulatory escalation

1. Scrutiny

Section 206 information requests test whether filings and explanations reconcile.

2. Inspection / inquiry

Sections 206-209 move from record production to inspection, report and evidence preservation.

3. Investigation

Sections 210 and 213 provide Government and Tribunal investigation routes.

4. SFIO

Sections 211-212 provide multidisciplinary serious-fraud investigation, arrest, report and prosecution powers.

5. Protection

Sections 217-222 preserve documents, witnesses, employees, assets and securities.

6. Consequences

Sections 223-229 convert findings into evidence, prosecution, recovery, continuing proceedings and fraud liability.

Do not collapse the stages: an ROC notice is not an SFIO investigation, a seizure is not a conviction, and a report is not itself a final adjudication. Each stage has its own authority, safeguards and response strategy.

Execution map

From MCA query to enforcement outcome

Receive and authenticate

Verify issuer, statutory provision, deadline, scope and delivery. Preserve the original notice and portal trail.

Trigger legal hold

Freeze deletion, retention overrides, device disposal and document cleanup. Identify custodians and systems.

Build one fact base

Reconcile filings, books, bank records, contracts, minutes, beneficial ownership and digital communications.

Classify the proceeding

Section 206 scrutiny, inspection/inquiry, section 210 investigation, SFIO assignment or Tribunal route.

Respond and cooperate

Produce indexed evidence, record limitations, protect privilege properly and prepare witnesses on process and facts.

Track protective orders

Search/seizure, employee protection, asset freeze and securities restriction require separate compliance registers.

Remediate without rewriting history

Correct controls and filings through lawful routes while preserving original evidence and decision chronology.

Prepare for outcome

Report, prosecution, recovery, disgorgement, winding-up/oppression action, cost recovery and disclosure.

Section 206

Power to call for information, inspect books and conduct inquiries

Create the first regulatory escalation point: information request, inspection, then inquiry.

Operative statutory core

Registrar may require information, explanation or documents by written notice when filings or other information suggest clarification is needed.
The duty to respond may extend to past and present officers, employees and other persons connected with the company.
If the response is inadequate, the Registrar may inspect books and papers after recording reasons.
Where circumstances suggest fraudulent or unlawful business, non-compliance, investor grievances or other prescribed concerns, an inquiry may follow after giving the company a reasonable opportunity of being heard.
The Central Government can direct inspection and may authorise another statutory authority for this purpose.
Current section 206(7) retains a criminal-fine framework; the 2026 Bill proposes a civil-penalty replacement and is not operative law.

Finin2min decode

A notice under section 206 is not routine correspondence. Build a response team, preserve evidence, identify data owners, answer precisely and reconcile the reply with all MCA filings and financial records.

Practical example: A company receives a notice asking why loans shown in AOC-4 do not match related-party disclosures. It should freeze the relevant ledgers and emails, prepare a reconciliation, identify the approving resolutions and answer each query with indexed evidence.

Evidence file: Notice, acknowledgement, query matrix, document index, legal-hold memo, Board/Audit Committee briefing, filed-form reconciliation.

Section 207

Conduct of inspection and inquiry

Give the Registrar or inspector access, assistance and civil-court-like procedural powers.

Operative statutory core

Directors, officers and employees must produce books and papers and provide assistance reasonably required for inspection or inquiry.
The inspecting authority may make copies or place identification marks on documents.
For discovery, production, summons, examination on oath and inspection, the Registrar or inspector has powers comparable to a civil court.
Deliberate disobedience can lead to imprisonment and fine; conviction can also trigger vacation of office and disqualification consequences.

Finin2min decode

Cooperation must be controlled, complete and documented. Nominate one response coordinator, maintain a production log and never destroy, backdate, curate or selectively withhold responsive material.

Practical example: An employee refuses to provide archived procurement emails because they are on a personal device used for company work. The company should preserve and collect responsive business records through a lawful, documented process rather than treating device location as an exemption.

Evidence file: Authority letter, custodian list, document-production log, interview protocol, chain-of-custody register, privilege review.

Section 208

Report on inspection made

Convert inspection findings into a written government report and possible deeper investigation.

Operative statutory core

The Registrar or inspector submits a written report to the Central Government after inspection or inquiry.
The report may recommend further investigation and should state the reasons supporting that recommendation.

Finin2min decode

Treat the post-inspection stage as a decision gateway. Close factual gaps before the report, but do not pressure witnesses or create retrospective documents.

Practical example: An inspection finds unexplained round-tripping with an affiliate. Even if the underlying entries are later corrected, the report may still recommend investigation into intent, approvals and beneficiary ownership.

Evidence file: Closure response, corrective-action tracker, Board minutes, root-cause report, evidence of remediation.

Section 209

Search and seizure

Protect records where destruction, alteration or concealment is reasonably feared.

Operative statutory core

A search-and-seizure step requires an order of the Special Court based on the statutory risk concerning books or papers.
The authority may enter, search and seize relevant books and papers and allow the company to take copies or extracts.
Seized material is generally returned within 180 days; a further retention period of up to 180 days requires a written order.
Criminal Procedure Code search-and-seizure safeguards apply, subject to the Companies Act framework.

Finin2min decode

A seizure is an evidence-preservation measure, not a finding of guilt. Immediately document what was taken, verify the inventory, preserve parallel systems and protect privileged material through the proper process.

Practical example: Investigators seize servers and physical ledgers after evidence that accounting backups were being deleted. Management should preserve cloud copies, validate the seizure list, notify counsel and maintain business continuity without altering remaining data.

Evidence file: Special Court order, seizure memo, panchnama/inventory, copy request, privileged-material log, return-date tracker.

Section 210

Investigation into affairs of company

Enable a formal investigation on statutory triggers.

Operative statutory core

The Central Government may order investigation on a Registrar/inspector report, on a company special resolution or where public interest requires it.
Where a court or Tribunal orders investigation, the Central Government must appoint inspectors.
Inspectors investigate company affairs and report in the manner directed.

Finin2min decode

Section 210 is a general Companies Act investigation route. Keep it distinct from section 212 SFIO assignment and section 213 Tribunal-ordered investigation on member or other applications.

Practical example: Members approve a special resolution seeking an investigation after a whistleblower alleges diversion of assets. The company must preserve all transaction and governance records even though the request originated internally.

Evidence file: Trigger document, special resolution, terms of reference, inspector appointment, data-room register, response governance.

Section 211

Establishment of Serious Fraud Investigation Office

Create the multidisciplinary specialist agency for serious corporate fraud.

Operative statutory core

SFIO is a statutory office of the Central Government with specialists in banking, corporate affairs, taxation, forensic audit, capital markets, information technology, law and other fields.
The Director is an officer not below the rank of Joint Secretary to the Government of India.
The office is designed for complex, multi-agency and multidisciplinary corporate-fraud investigations.

Finin2min decode

SFIO is not merely another ROC inspection team. Its matters typically require forensic accounting, digital evidence, ownership tracing and coordinated criminal/proceeds analysis.

Practical example: A listed group uses shell entities, layered loans, falsified invoices and overseas transfers. The multidisciplinary structure allows the accounting, tax, banking, securities and digital strands to be investigated together.

Evidence file: Group structure, beneficial-ownership map, fund-flow model, device inventory, cross-border transaction register.

Section 212

Investigation into affairs by SFIO

Provide the integrated investigation, arrest, reporting and prosecution framework for serious fraud.

Operative statutory core

The Central Government may assign a case to SFIO based on a section 208 report, company special resolution, public interest, or a request from a government department or State Government.
Once assigned, other investigating agencies stop investigating the offence under the Companies Act and transfer relevant records; statutory coordination with other agencies continues.
The SFIO investigation officer exercises section 217 powers and current/former officers and employees must assist.
Fraud under section 447 is cognizable and special bail conditions apply, with statutory exceptions for specified vulnerable persons.
An authorised SFIO officer not below Assistant Director may arrest on recorded reasons, must communicate grounds, forward the arrest material in the prescribed manner and produce the arrested person before the competent court within 24 hours excluding journey time.
SFIO may issue interim and final reports; the final report filed before the Special Court is treated as a police report. The Central Government may direct prosecution.
The investigation can support Tribunal proceedings for disgorgement and personal unlimited liability where the statutory case is established.

Finin2min decode

Create one defensible response architecture across legal, forensic, IT and finance teams. Parallel, inconsistent explanations to SFIO and other regulators can become evidence of concealment or false statement.

Practical example: SFIO asks for ERP extracts, promoter communications and bank trails across ten subsidiaries. The group should preserve source systems, provide a documented extraction method and ensure entity-level responses reconcile to the consolidated fund-flow analysis.

Evidence file: Assignment order, authorised-contact list, production tracker, interview records, arrest protocol, forensic images, report/prosecution tracker.

Section 213

Investigation into company affairs in other cases

Allow Tribunal-directed investigation on qualifying member applications or serious misconduct indicators.

Operative statutory core

For a company with share capital, at least 100 members or members holding at least one-tenth of total voting power may apply; for a company without share capital, at least one-fifth of members may apply.
The Tribunal may also act on an application by any other person or otherwise where circumstances suggest fraud, oppression, misconduct or withholding of information.
The company must receive a reasonable opportunity of being heard before the order.
If fraud is established, section 447 consequences may follow.

Finin2min decode

The threshold only opens the door. Applicants still need credible material, and the Tribunal tests whether the statutory circumstances justify investigation.

Practical example: A 12% voting block produces bank statements and board extracts indicating promoter-controlled purchases at inflated prices. The Tribunal may order investigation after hearing the company.

Evidence file: Membership/voting proof, application, supporting affidavit, transaction dossier, company reply, hearing record.

Section 214

Security for payment of costs and expenses

Protect against speculative member applications while preserving access to investigation.

Operative statutory core

The Central Government may require applicants under section 213(a) to provide security for costs and expenses.
The statutory maximum security is Rs 25,000.
The amount is refundable if the investigation results in prosecution.

Finin2min decode

Security is not a penalty or a merits finding. Record who paid, the order terms and the refund trigger.

Practical example: A group of 120 members is directed to deposit Rs 25,000 security. If the investigation leads to prosecution, the refund process should be tracked and supported by the relevant order.

Evidence file: Security order, payment receipt, applicant register, prosecution status, refund application.

Section 215

Firm, body corporate or association not to be appointed as inspector

Require the statutory inspector to be an identifiable individual.

Operative statutory core

Only an individual may be appointed as inspector under this Chapter.
A firm, body corporate or association cannot itself be appointed as the statutory inspector.

Finin2min decode

External forensic, technology or specialist firms may support the process, but the statutory appointment and accountability remain with the named individual inspector.

Practical example: A consulting firm is engaged to support data analytics. The formal inspector remains the appointed individual, and the support team works within authorised directions and confidentiality controls.

Evidence file: Appointment order, support-team authorisations, confidentiality undertakings, role matrix.

Section 216

Investigation of ownership of company

Trace true ownership, beneficial interest and control behind formal shareholding.

Operative statutory core

The Central Government may appoint inspectors to determine the true persons financially interested in the company, controlling or materially influencing policy, or beneficially interested in securities.
The investigation may examine past or present membership, arrangements, understandings and concert-party behaviour.
The Government may limit the investigation to specified shares, debentures, periods or matters.

Finin2min decode

Do not stop at the registered member. Map funding, voting arrangements, nominees, side letters, options, trusts and informal control.

Practical example: Shares are held by several employees, but funding and voting instructions originate from one promoter-linked trust. The investigation can examine the arrangement and real control beyond the register.

Evidence file: Register of members, SBO records, bank funding, voting agreements, trust deeds, side letters, communications.

Section 217

Procedure, powers, etc., of inspectors

Provide production, examination, retention, evidence and cross-border assistance powers.

Operative statutory core

Current and former officers, employees and agents must preserve and produce books and papers and provide reasonable assistance.
Relevant records of other bodies corporate or persons may also be required where the statutory connection exists.
Books and papers may generally be retained for up to 180 days, with a further written-order period of up to 180 days.
Inspectors may examine persons on oath. Examination of other persons requires the prescribed approval; in an SFIO matter the Director approval route applies.
Inspectors have civil-court-like powers for discovery, summons, examination and inspection.
Examination notes may be reduced to writing, signed and used as evidence.
Refusal or failure to cooperate can lead to imprisonment, fine and continuing fine.
Government authorities must assist, and reciprocal foreign-evidence arrangements and letters of request may be used.

Finin2min decode

Prepare witnesses on process and records, not on a scripted story. Preserve interview notes, identify corrections promptly and never coordinate testimony improperly.

Practical example: The inspector summons a former CFO and requests records from a vendor. Both may be required to assist if the information is relevant to the investigated affairs.

Evidence file: Custodian map, summons log, witness binder, oath/examination record, foreign-request tracker, retention calendar.

Section 218

Protection of employees during investigation

Prevent retaliation against employees while an investigation or connected proceeding is underway.

Operative statutory core

An employer proposing discharge, suspension, punishment, reduction in rank or adverse change in employment conditions must seek Tribunal approval in the statutory circumstances.
If the Tribunal does not communicate objections within 30 days, the employer may proceed subject to the law.
An aggrieved person may appeal to NCLAT within 30 days.

Finin2min decode

Separate genuine performance management from retaliation risk. Maintain objective pre-existing evidence and obtain the required approval before adverse action.

Practical example: A finance manager who supplied records to the inspector is proposed to be demoted for alleged misconduct. The company must assess section 218 and seek Tribunal approval rather than proceeding through ordinary HR process alone.

Evidence file: HR file, investigation participation log, proposed-action note, Tribunal application, non-retaliation controls.

Section 219

Power of inspector to conduct investigation into affairs of related companies, etc.

Extend a company investigation to connected entities and persons when necessary.

Operative statutory core

With prior Central Government approval, the inspector may investigate specified related bodies corporate, present or former management, and persons connected with the company.
The extension must be relevant to the primary investigation and follow the statutory scope.

Finin2min decode

Group boundaries do not block investigation. Preserve parent, subsidiary, associate, promoter and intermediary evidence together where transactions are linked.

Practical example: A subsidiary transferred funds to a promoter-controlled LLP before investing overseas. The inspector may seek approval to extend the investigation to connected entities and responsible persons.

Evidence file: Group chart, related-party map, approval for extended scope, inter-company ledgers, common-director register.

Section 220

Seizure of documents by inspector

Allow an appointed inspector to protect books and papers at risk during investigation.

Operative statutory core

Where the inspector has reasonable grounds to believe books or papers may be destroyed, mutilated, altered, falsified or secreted, the inspector may seize them under the statutory process.
Seized material may be retained until the conclusion of the investigation, subject to statutory safeguards.
Criminal Procedure Code search-and-seizure principles apply so far as relevant.

Finin2min decode

Section 220 operates within an investigation, while section 209 is the Registrar/inspector search-and-seizure route supported by Special Court order. Track the legal authority used in each case.

Practical example: During an SFIO investigation, an employee attempts to remove hard drives. The investigation team can act to preserve the evidence and document the seizure and custody trail.

Evidence file: Grounds note, seizure inventory, forensic hash, custody log, access/copy requests.

Section 221

Freezing of assets of company on inquiry and investigation

Preserve company funds, assets and property from dissipation.

Operative statutory core

On a statutory reference or application, the Tribunal may order that company funds, assets or properties not be transferred, removed or disposed of for a period up to three years.
The order is preventive and can be tailored to protect the subject matter of inquiry or investigation.
Contravention attracts statutory consequences for the company and responsible officers.

Finin2min decode

Map every asset covered by the order, notify banks and custodians, configure ERP blocks and establish a controlled exception/approval process.

Practical example: After evidence of asset stripping, the Tribunal freezes identified bank balances and properties for two years. A routine asset sale cannot proceed without dealing with the order.

Evidence file: Tribunal order, asset schedule, bank notices, ERP restriction, compliance certifications.

Section 222

Imposition of restrictions upon securities

Prevent transfer or manipulation of securities while ownership or control issues are examined.

Operative statutory core

The Tribunal may impose restrictions on specified securities for a period up to three years in the statutory circumstances.
Restrictions can protect ownership, control and investigation outcomes by limiting transfer or related rights.
Current subsection (2) contains consequences for contravention. The 2026 Bill proposes omission of that subsection and reliance on the Tribunal contempt framework; the proposal is not operative law.

Finin2min decode

Coordinate the order across the company, registrar and transfer agent, depositories, brokers and beneficial owners. A register note alone may be insufficient.

Practical example: The Tribunal restricts transfer of promoter shares while beneficial ownership is investigated. The company and RTA must block transfers and preserve all attempted-transaction records.

Evidence file: Restriction order, ISIN/security schedule, RTA/depository confirmation, attempted-transfer log.

Section 223

Inspector’s report

Control interim/final reports, access and evidentiary use.

Operative statutory core

An inspector may submit interim reports and must submit a final report at the conclusion of the investigation.
The Central Government may provide copies to members, creditors and other affected persons as the statute permits.
An authenticated report is admissible as evidence in legal proceedings.
The section does not govern SFIO investigation reports, which follow section 212.

Finin2min decode

Do not treat an interim report as a final adjudication, but use it to assess remediation, litigation holds and disclosure obligations.

Practical example: An interim report identifies control failures but the final culpability analysis is pending. The Board should remediate controls without publicly overstating the legal conclusions.

Evidence file: Interim/final report register, access request, Board response, disclosure assessment, remediation tracker.

Section 224

Actions to be taken in pursuance of inspector’s report

Translate findings into prosecution, recovery, winding-up, oppression and disgorgement action.

Operative statutory core

Where the report indicates an offence, the Central Government may cause prosecution of responsible persons.
The Government may pursue winding-up or oppression/mismanagement proceedings where the statutory case exists.
Public-interest proceedings may seek damages, recovery of property and other relief for the company or body corporate.
Disgorgement and personal liability remedies can be pursued in the statutory circumstances.

Finin2min decode

Create a findings-to-remedy matrix: offence, responsible person, company loss, asset location, available forum, limitation and evidence required.

Practical example: The report finds directors diverted a property to a connected entity at undervalue. Proceedings may combine prosecution with recovery, damages and governance relief.

Evidence file: Offence matrix, loss quantification, asset-tracing report, proposed proceedings, limitation calendar.

Section 225

Expenses of investigation

Allocate investigation costs to responsible persons, recovered entities, the company or applicants as provided.

Operative statutory core

Government initially meets investigation expenses.
Amounts may be recovered from persons convicted or ordered to pay damages, from a company/body corporate receiving recovered property, and in specified cases from the company or applicants.
Recoverable expenses can have statutory priority or first-charge consequences.

Finin2min decode

Maintain a cost ledger and understand that reimbursement exposure may follow the outcome even where the Government funded the investigation initially.

Practical example: A company recovers misappropriated assets through proceedings based on the report. Investigation expenses may be recoverable from the beneficiary company under the statutory allocation.

Evidence file: Government demand, expense ledger, recovery order, charge/priority analysis, accounting treatment.

Section 226

Voluntary winding up of company, etc., not to stop investigation proceedings

Prevent restructuring or winding-up events from defeating an investigation.

Operative statutory core

An investigation continues despite an oppression/mismanagement application, voluntary winding up or a pending winding-up proceeding.
Current and former directors, officers and employees remain subject to cooperation and liability obligations.

Finin2min decode

Do not destroy or relocate records because the entity is closing. The liquidation or restructuring data room must preserve investigation materials and responsible-person access.

Practical example: A company enters voluntary liquidation after receiving an investigation notice. The liquidator and former management must preserve records and continue cooperation.

Evidence file: Liquidator handover, record-preservation schedule, former-officer contact list, investigation status report.

Section 227

Legal advisers and bankers not to disclose certain information

Balance legal professional privilege and banking confidentiality with investigative needs.

Operative statutory core

Legal advisers are not required to disclose privileged communications, except that statutory limits apply to client identity and address information.
Bankers are not required to disclose information about customers other than the person or entity whose affairs are under investigation, subject to the statutory wording.

Finin2min decode

Privilege must be identified document by document and cannot be used as a blanket shield for underlying facts, business records or communications made to further wrongdoing.

Practical example: Counsel’s legal opinion may be privileged, but the underlying board minutes, invoices and transaction instructions are not privileged merely because copies were sent to counsel.

Evidence file: Privilege protocol, privilege log, independent review, banker-customer scope note.

Section 228

Investigation, etc., of foreign companies

Apply Chapter XIV investigation provisions to foreign companies with necessary modifications.

Operative statutory core

The Chapter applies to foreign companies, with the necessary contextual adaptations.
Indian records, places of business, officers and transactions may therefore fall within inspection and investigation processes.
Cross-border evidence may also involve section 217 reciprocal-assistance mechanisms and other applicable law.

Finin2min decode

Build a jurisdiction and data-location map early. Local Indian compliance records and overseas parent data may need coordinated lawful collection.

Practical example: An overseas company with an Indian place of business records revenue offshore while contracts are executed in India. Investigators may examine Indian operations and seek cross-border evidence through lawful channels.

Evidence file: Foreign-company filings, India office records, data-location map, cross-border transfer assessment.

Section 229

Penalty for furnishing false statement, mutilation or destruction of documents

Treat evidence tampering and knowingly false explanations as fraud exposure.

Operative statutory core

A person who destroys, mutilates, falsifies, conceals, tampers with or unauthorisedly removes relevant documents can be punished under section 447.
Making a false entry or providing a knowingly false explanation in relation to inspection, inquiry or investigation can trigger the same fraud provision.
The exposure is separate from underlying transaction offences and cooperation failures.

Finin2min decode

The safest rule is preserve first, explain truthfully, correct mistakes promptly and maintain an auditable record of every production.

Practical example: A controller deletes emails after receiving an inspection notice and creates replacement invoices. Even if the underlying purchase was genuine, the evidence conduct can itself trigger serious fraud exposure.

Evidence file: Legal-hold proof, deletion logs, backup recovery, version history, correction letter, disciplinary record.

Rules framework

Inspection and SFIO operating rules

Rule framework	Operating purpose	Control point
Companies (Inspection, Investigation and Inquiry) Rules, 2014	Operationalise Chapter XIV, including prescribed expertise, SFIO staffing/service matters, security and procedural applications.	Use the current consolidated rules and the MCA/NCLT procedure applicable on the action date.
SFIO expert disciplines	Support multidisciplinary investigation in financial transactions, forensic audit, taxation, law, capital markets, information technology and connected fields.	Mirror the regulator's multidisciplinary approach in the company response team.
Section 214 security procedure	Supports the order, payment and refund trail for applicant security.	Track the precise order and prosecution-based refund condition.
Section 218 employment-action procedure	Supports Tribunal approval and appeal mechanics for adverse action against protected employees.	Do not proceed solely under internal HR policy.
Companies (Arrests in connection with Investigation by SFIO) Rules, 2017	Support authorisation, arrest order, custody records, personal search and forwarding of arrest materials.	Keep a specialist arrest-response and representation protocol ready in serious-fraud matters.
MCA / NCLT filing instructions	Forms, fees, attachments, service and portal mechanics may change.	Check the current instruction kit and procedural rules on the filing date.

Rule of use: the Act determines power and liability; the Rules and current forum procedure determine how that power is exercised and documented.

High-risk distinctions

Do not confuse these statutory routes

Comparison	First route	Second route	Why it matters
Section 209 vs 220	Search/seizure linked to Registrar/inspector concern and Special Court order.	Seizure by an appointed inspector during investigation where records are at risk.	Authority, timing, retention and challenge records must match the actual section used.
Section 210 vs 212	General Central Government investigation.	SFIO assignment for serious, complex or public-interest fraud.	SFIO brings specialised powers, arrest framework and police-report treatment.
Section 210 vs 213	Government-triggered or court/Tribunal-directed general investigation.	Tribunal investigation on member thresholds or serious-circumstance application.	Applicant eligibility, hearing and security requirements differ.
Section 221 vs 222	Freeze company funds, assets and properties.	Restrict specified securities and related rights.	Different subject matter, implementation parties and compliance evidence.
Section 223 vs 212 report	Inspector report with section 223 access/evidence framework.	SFIO report under section 212, final report treated as police report when filed before Special Court.	Access, prosecution and evidentiary consequences differ.

SFIO deep dive

Serious-fraud response architecture

Governance

Board-level response committee
Independent counsel where conflicts exist
Single authorised regulator interface
Daily decision and production log

Forensics

Read-only imaging and hashes
ERP and email extraction validation
Fund-flow and beneficial ownership maps
Source-to-report reconciliation

People

Custodian and witness matrix
Non-retaliation protocol
Truthful interview preparation
Separate representation for conflicts

Arrest readiness: maintain emergency contact, authorisation review, grounds-of-arrest record, medicine/health information, production-before-court timeline and family notification protocol.

Never do: wipe devices, coach witnesses to align stories, create retrospective approvals, send unverified data extracts, or run a parallel internal inquiry that contaminates evidence.

Digital and documentary evidence

Minimum defensible evidence-control stack

Legal hold

Issue immediately; suspend deletion and record acknowledgements.

Custodian map

Current/former personnel, agents, advisers, vendors and related entities.

System map

ERP, email, messaging, cloud, laptops, mobiles, backups and archives.

Chain of custody

Collection date, operator, source, hash, copy, movement and access.

Production log

Request item, owner, search, review, privilege, production and correction.

Privilege log

Document-specific basis; never use a blanket withholding claim.

Fact dictionary

One verified definition for entities, people, dates, amounts and transactions.

Remediation log

Fix controls prospectively without changing historic evidence.

Quality test: an independent reviewer should be able to reproduce each regulatory answer from the indexed source records and understand every transformation applied to the data.

Applied cases I

Regulatory-response casebook

Incomplete ROC response

Situation: The company answers a section 206 notice using only year-end ledger balances.

Control response: Rebuild the answer across the full period, related parties, peak exposures, approvals and filed disclosures.

Former employee records

Situation: A former treasury head holds messages relevant to the inquiry.

Control response: Preserve lawful company records and document outreach; former status does not automatically remove cooperation relevance.

Cloud deletion after notice

Situation: Auto-delete continues for chat data after receipt of a notice.

Control response: Suspend deletion immediately, recover backups, document the gap and disclose limitations truthfully.

Special resolution for investigation

Situation: Minority shareholders convince the company to request investigation.

Control response: Preserve evidence and treat the company-originated resolution as a statutory trigger, not a waiver of process.

Multiple agencies

Situation: ROC, tax and police teams ask about the same transaction.

Control response: Use one verified fact base, track each legal power and avoid inconsistent submissions.

SFIO group request

Situation: SFIO asks for records across subsidiaries and promoter entities.

Control response: Create entity-level production owners and a group reconciliation with common definitions.

Employee demotion

Situation: A whistleblower is demoted during investigation.

Control response: Assess section 218 approval and retaliation risk before any adverse employment action.

Applied cases II

Evidence, protection and outcome cases

Asset freeze

Situation: NCLT freezes bank accounts and property.

Control response: Notify banks/custodians, block ERP transactions and create a controlled exception register.

Restricted shares

Situation: Promoter securities are subject to a Tribunal restriction.

Control response: Coordinate company, RTA and depository controls and preserve attempted-transfer evidence.

Privilege claim

Situation: Company marks every document sent to counsel as privileged.

Control response: Review document by document; underlying facts and ordinary business records remain producible.

Liquidation during investigation

Situation: The company begins voluntary liquidation.

Control response: Investigation and cooperation continue; transfer records and status to the liquidator under a legal hold.

False correction

Situation: Management replaces old invoices with corrected versions without retaining originals.

Control response: Preserve originals, explain corrections and maintain version history; silent replacement creates section 229 risk.

Cross-border server

Situation: Relevant email is hosted outside India.

Control response: Map jurisdiction, privacy and transfer restrictions and use lawful collection/reciprocal assistance routes.

Interim report disclosure

Situation: The Board wants to announce that it has been cleared by an interim report.

Control response: Read the report precisely, distinguish control observations from final culpability and avoid misleading disclosure.

Forms and evidence

Investigation response register

Record	Purpose	Owner	Timing
Notice and deadline register	Authenticate authority, section, delivery and due date.	Company Secretary / Legal	Immediately
Legal-hold notice	Suspend deletion and preserve responsive records.	Legal / IT	Same day
Query-response matrix	Map every question to fact owner, evidence and reviewer.	Response PMO	Before collection
Custodian and system map	Identify people, devices, repositories and backups.	IT Forensics	Initial 24-48 hours
Production index	Track search, review, privilege, production and corrections.	Legal / Forensics	Continuous
Witness file	Summons, records reviewed, representation and examination notes.	Legal	Per appearance
Search/seizure inventory	Record authority, items, copies, hashes, custody and return dates.	Legal / IT	At event
Section 218 employment register	Identify protected employees and approval/appeal steps.	HR / Legal	Before adverse action
Freeze/restriction compliance file	Implement sections 221-222 across banks, assets, RTA and depositories.	CFO / CS	Immediately on order
Findings and remedy matrix	Connect report findings to remediation, disclosure, recovery and proceedings.	Board / Legal	Interim and final report

Consequences map

Where Chapter XIV can lead

Cooperation offences

Failure to produce records, assist or answer may create imprisonment, fine, continuing fine and director-status consequences.

Fraud prosecution

Section 447 can apply to underlying fraud and to section 229 evidence destruction or knowingly false explanations.

Corporate remedies

Winding-up, oppression/mismanagement, damages, recovery of property and public-interest action may follow.

Personal recovery

Disgorgement and personal unlimited liability can arise in the statutory circumstances.

Protective orders

Assets and securities may be frozen or restricted for up to three years.

Cost recovery

Government-funded investigation expenses may ultimately be recovered from responsible or benefiting parties.

Independent offence risk: evidence tampering, false entries and knowingly false explanations may be prosecuted even where the original transaction allegation is disputed.

Section 447 cross-reference

Current fraud-punishment bands

Fraud band	Current consequence	Control point
At least Rs. 10 lakh or 1% of company turnover, whichever is lower	Imprisonment from six months to ten years and fine from the fraud amount up to three times that amount; public-interest fraud carries a minimum three-year imprisonment term.	Use the lower statutory threshold.
Below Rs. 10 lakh or 1% of turnover, whichever is lower, and no public interest	Imprisonment up to five years, or fine up to Rs. 50 lakh, or both.	The smaller-fraud proviso is not a sub-Rs. 1 lakh rule.

Investigation implication: Chapter XIV reports and SFIO findings often lead to section 447 exposure, so the correct monetary band and public-interest test must be documented.

Legislative watch

Corporate Laws (Amendment) Bill, 2026 - proposals only

These items are not operative unless enacted and commenced.

Provision	Proposal	Current treatment in this guide
Section 206(7)	Replace the existing criminal-fine framework with civil penalties: proposed company base penalty plus daily continuing penalty subject to a cap, and a lower officer penalty/cap.	Current enacted section remains the legal baseline; proposal shown only as watch item.
Section 222(2)	Omit the current contravention offence and use the Tribunal contempt mechanism under section 425.	Current subsection remains applicable until any amendment is enacted and commenced.
Section 457 / section 212	Consequential confidentiality amendment relating to non-disclosure in the SFIO context.	No operative change assumed.

Compliance rule: do not update templates, penalty matrices or legal advice merely because a Bill has been introduced.

Finin2min visual framework

Inspection to investigation escalation map

Finin2min visual framework

SFIO, evidence and asset protection map

Finin2min FAQs

Questions professionals ask first

Does a section 206 notice mean fraud has been proved?

No. It is an information and scrutiny power. The response can influence whether inspection, inquiry or investigation follows.

Can former employees be required to assist?

Yes, the Chapter expressly reaches current and former officers, employees and connected persons in the relevant provisions.

Can the company delete routine emails after receiving a notice?

No. A legal hold should suspend deletion of potentially responsive records immediately.

What is the difference between inspection and investigation?

Inspection/inquiry tests records and explanations; investigation is a deeper formal examination with broader powers and reports.

When does SFIO become involved?

The Central Government assigns a matter under section 212 on the specified statutory triggers, including public interest and government requests.

Can SFIO arrest?

Yes, an authorised officer meeting the statutory rank and process requirements may arrest on recorded reasons.

How long can seized records be retained?

The applicable route must be checked. Several provisions use a 180-day period and a further written-order period, while section 220 permits retention until investigation conclusion.

Can an employee be dismissed during investigation?

Section 218 may require Tribunal approval for specified adverse action; ordinary HR approval alone may be insufficient.

Can NCLT freeze company assets?

Yes, section 221 permits protective orders for up to three years in the statutory circumstances.

Are legal communications always privileged?

No. Privilege is document-specific and does not protect underlying facts, ordinary business records or communications outside the legal-advice privilege.

Does liquidation stop the investigation?

No. Section 226 preserves the investigation and cooperation obligations.

What is the biggest response risk?

A fragmented or altered evidence record. One verified fact base, preservation and truthful correction are more important than speed alone.

Primary-source register and editorial notice

Source	Use
India Code - Companies Act, 2013 official PDF	Operative sections 206-229 and amendment footnotes.
India Code - Act and Rules register	Inspection, Investigation and Inquiry Rules and SFIO arrest-rule register.
MCA Acts and Rules e-book	Current notifications, forms and procedural access.
Corporate Laws (Amendment) Bill, 2026	Proposal-only Chapter XIV changes; not treated as operative law.

Reviewed through 26 June 2026. Current forms, procedural rules, court/Tribunal orders and agency-specific instructions must still be checked on the action date.

© 2026 Finin2min. Original explanations, examples, matrices, cases and visual frameworks are protected. Statutory wording belongs to the Government of India. This educational material does not replace the Act, notified Rules, criminal procedure, tribunal/court directions, professional privilege review or entity-specific legal advice.

Next chapter
Chapter XV - Compromises, Arrangements and Amalgamations

Sections 230-240

Source and review trail

Use the current official instrument, portal or regulator publication before acting. This panel separates the category authority from page-specific references.

Primary category: Companies Act & MCA
Official starting point: www.indiacode.nic.in