Bank Due Diligence Checklist for Business Loans: Documents, Ratios & Red Flags (2026)

Bank due diligence checklist is a practical framework for reviewing a borrower before sanction, renewal or enhancement of a business loan. A sound review does more than collect financial statements: it tests the quality of cash flows, working-capital discipline, debt-service capacity, security, statutory compliance, related-party exposure and warning signals that may affect repayment. This 2026 guide is written for promoters, CFOs, finance teams, lenders and advisers who want to understand what a credit review usually examines—and what is lender practice rather than a universal RBI-prescribed form.

Bank Due Diligence Checklist: What Should Be Reviewed?

A lender’s exact checklist depends on the facility, borrower size, sector, security structure and internal credit policy. There is no single RBI-mandated document called a universal ‘bank due diligence checklist’ for every business loan. However, a robust review normally covers the following evidence streams.

• Constitution, ownership, KYC and beneficial ownership records; incorporation, partnership or LLP documents; board/partner authorisations where relevant.

• Audited financial statements, tax returns, GST data, bank statements and management accounts for trend and consistency testing.

• CMA or lender-format historical and projected financial information, where requested by the bank.

• Working-capital data: inventory, receivables, creditors, stock statements, ageing, drawing power and utilisation patterns.

• Cash-flow and debt-service analysis, including DSCR/ISCR, leverage, liquidity and sensitivity to weaker sales or margins.

• Existing facilities, repayment track record, security, guarantees, covenant compliance and sanction-condition adherence.

• Related-party transactions, unusual fund movements, contingent liabilities, litigation, statutory dues and other credit red flags.

1. Start With Financial Statement Quality, Not Just Profit

A borrower can report accounting profit and still have weak repayment capacity. Due diligence therefore begins by reconciling the profit and loss account, balance sheet and cash-flow statement across multiple years. The reviewer should identify whether revenue growth is supported by collections, whether margins are stable, whether working capital is absorbing cash and whether borrowings are funding genuine operating needs or persistent cash deficits.

Useful trend questions include: Are receivables rising faster than sales? Is inventory increasing without matching turnover? Are creditor days extending materially? Are finance costs rising faster than EBITDA? Has operating cash flow remained negative despite reported profits? None of these points alone proves stress; together they can indicate where deeper verification is required.

2. CMA Data and Projections: Test the Assumptions

In Indian banking practice, ‘CMA data’ commonly refers to structured historical and projected financial information used by lenders for credit appraisal and working-capital assessment. It is not one universal RBI statutory form applicable identically to every borrower. Banks may use their own formats and methods depending on product and policy.

The important due-diligence question is not whether projections look attractive, but whether they are internally consistent. Revenue growth should reconcile with capacity, order book or market assumptions; working-capital projections should align with collection and inventory cycles; capital expenditure should match funding sources; and projected interest and repayments should be reflected in cash flows.

• Compare projected sales growth with historical growth and current order visibility.

• Recalculate gross margin and EBITDA assumptions rather than accepting percentages at face value.

• Check whether debt repayments, interest, tax and capital expenditure are fully built into projected cash flows.

• Stress-test a slower collection cycle, lower margin or delayed project ramp-up.

• Reconcile projections with GST turnover, bank credits, major contracts and management budgets where available.

3. Working Capital: Stock, Receivables and Drawing Power

For cash-credit and other working-capital facilities, the quality of current assets is central. A stock statement is useful only when it is reconciled with books, GST records and the actual operating cycle. Review slow-moving or obsolete inventory, goods held at third-party locations, uninsured stock, receivables beyond the eligible ageing period, related-party receivables and large balances that remain unchanged month after month.

Drawing power is generally calculated in accordance with the bank’s sanction terms after applying stipulated margins and eligibility conditions. The formula and eligible ageing buckets can differ by lender and facility, so a due-diligence report should quote the applicable sanction terms rather than assume one standard method.

4. Cash Flow, DSCR and ISCR: Repayment Capacity Comes First

Debt Service Coverage Ratio (DSCR) is commonly used to assess whether cash generation is sufficient to service scheduled interest and principal obligations. A simple conceptual form is cash available for debt service divided by debt service. Interest Service Coverage Ratio (ISCR) focuses more narrowly on the ability of operating earnings to cover interest.

There is no single RBI-prescribed DSCR minimum that applies to every corporate loan. Acceptable levels are influenced by lender policy, sector risk, project characteristics, tenor and cash-flow stability. Accordingly, professional analysis should avoid presenting a universal number such as 1.25x or 1.50x as a regulatory rule unless the specific sanction or scheme actually states it.

A stronger review calculates base-case and stressed DSCR, identifies the lowest annual or quarterly coverage period and explains the assumptions driving the result. This is more useful than quoting only an average ratio.

5. Bank Statements and Account Conduct

Bank account behaviour can reveal information that annual financial statements cannot. Review frequent overdrawings, cheque returns, repeated temporary limits, large round-number transfers, immediate outward movement of loan disbursements, transfers among related entities, unusual cash deposits, and major credits that do not match the borrower’s normal business pattern.

RBI’s 2024 Fraud Risk Management Directions require banks to maintain Early Warning Signal frameworks and specifically contemplate indicators based on transactional data, financial performance, market intelligence and borrower conduct. The Directions also call for periodic review of credit sanction and monitoring processes. This does not convert every unusual transaction into fraud; it means unusual patterns should be examined and documented.

6. Related Parties, Statutory Dues and Contingent Liabilities

Related-party exposures deserve special attention because group transactions can distort working-capital needs or move funds away from the financed business. Review loans and advances to related parties, guarantees, common customers or suppliers, unusual year-end balances, and whether transactions are supported by commercial rationale and agreements.

Also reconcile GST, TDS, provident fund and other material statutory dues with the financial statements and payment records. Persistent overdue statutory liabilities can be a liquidity signal even where they are eventually paid. Litigation, tax demands, guarantees, letters of credit, derivative exposures and other contingent liabilities should be assessed for their possible cash-flow impact rather than merely copied from financial-statement notes.

7. Security and Documentation Review

Financial strength does not eliminate the need to verify security and documentation. Depending on the facility, a review may cover ownership of charged assets, insurance, valuation reports, charge registration, guarantees, sanction terms and compliance with conditions precedent or subsequent. Where legal title review is required, it should be performed by the appropriate legal professional; financial due diligence should not be presented as a substitute for a legal title opinion.

8. Practical Red Flags That Deserve Deeper Review

• Revenue growth accompanied by materially weaker operating cash flow.

• Receivables or inventory growing substantially faster than sales without a clear business reason.

• Large or recurring related-party advances while bank borrowings remain elevated.

• Frequent ad-hoc limits, overdrawings, cheque returns or delayed debt servicing.

• Significant mismatch between GST turnover, audited revenue and bank-account credits without reconciliation.

• Sharp changes in accounting policies, unusual year-end journal entries or unsupported one-off income.

• Repeated covenant breaches or sanction-condition non-compliance.

• Material contingent liabilities, litigation or statutory arrears not reflected in cash-flow forecasts.

Professional view: the strongest red flag is often not one bad ratio but an unexplained inconsistency between independent data sources. A borrower whose audited accounts, GST data, bank conduct, inventory records and management projections tell the same economic story is easier to assess than one where each source points in a different direction.

9. Mini Example: Why Profit Alone Can Mislead

Assume a manufacturing company reports EBITDA of ₹3 crore and net profit of ₹1.2 crore. During the same year, receivables increase by ₹4 crore and inventory increases by ₹2 crore, while creditors increase by only ₹1 crore. The business may therefore consume substantial cash despite being profitable. If a term-loan instalment and interest are due during the year, the lender needs to understand whether collections will convert accounting profit into cash before debt service falls due.

A proper review would examine debtor ageing, customer concentration, post-year-end collections, stock movement, utilisation of existing working-capital limits and whether projected improvements are supported by actual operating evidence.

10. Documents Commonly Requested for Business Loan Due Diligence

• Constitution/KYC documents and ownership or beneficial-ownership information.

• Audited financial statements and tax returns for relevant historical periods.

• Recent provisional financials and management accounts.

• GST returns and reconciliations where relevant to turnover verification.

• Bank statements and details of all existing banking facilities.

• CMA/lender-format projections and assumptions, if requested.

• Stock statements, receivables ageing, creditor ageing and inventory records.

• Sanction letters, repayment schedules, security documents and covenant reports.

• Major customer/supplier contracts, order book and project documents where relevant.

• Details of litigation, guarantees, contingent liabilities, statutory dues and related-party balances.

The exact documents vary by lender and facility. Public lender materials illustrate this principle: for example, SIDBI provides a borrower application framework, while SBI product pages specify product-specific security and documentation requirements rather than one universal checklist.

11. Regulatory Context: What RBI Actually Requires

The most relevant current regulatory context is RBI’s Master Directions on Fraud Risk Management in Commercial Banks and AIFIs (15 July 2024), which strengthen Early Warning Signal and Red Flagged Account frameworks and emphasise monitoring of credit facilities using quantitative and qualitative indicators. Separately, RBI’s KYC framework governs customer identification and customer due diligence; KYC/CDD should not be confused with the wider financial and commercial credit due diligence described in this article.

For borrower-facing institutional context, see the SIDBI Borrower Corner. These sources should be read together with the specific lender’s credit policy, product terms and sanction conditions.

12. Related PGT Resources

For supporting financial-analysis work, see PGT’s Form 3CD Clause 40 guide on turnover and GP/NP ratio reconciliation. For investigation-oriented context, see Can NCLT Order a Forensic Audit in Oppression Cases?. These are separate legal/tax contexts, but the reconciliation discipline is relevant when testing the reliability of borrower information.

Frequently Asked Questions

Is CMA data mandatory for every bank loan?

No. CMA data is common in Indian credit appraisal, especially for larger or working-capital facilities, but the exact format and requirement depend on the bank, facility and internal credit policy. It should not be described as one universal RBI statutory form.

What is the ideal DSCR for a bank loan?

There is no single RBI minimum that applies to every business loan. Lenders set benchmarks based on sector, risk, tenor and product. The relevant sanction or credit policy should be checked, and sensitivity analysis is more informative than relying on one average ratio.

What is the difference between KYC due diligence and credit due diligence?

KYC/customer due diligence focuses on identity, beneficial ownership, customer risk and anti-money-laundering requirements. Credit due diligence is broader and evaluates financial performance, cash flows, repayment capacity, security, operations, covenants and credit risks.

Can a CA or adviser guarantee that a bank will sanction a loan?

No. An adviser can help prepare, reconcile and analyse information, but the credit decision, pricing, security requirements and sanction conditions remain with the lender under its policies and applicable regulations.

Practical Takeaway

Bank due diligence works best when it is treated as a reconciliation exercise rather than a document-collection exercise. The reviewer should connect audited financials, GST data, bank conduct, working-capital records, projections and sanction terms into one coherent cash-flow story. Where the sources disagree, the difference should be investigated and documented before credit decisions are made.

PGT & Associates can support businesses and finance teams with financial due diligence, lender-ready reconciliations, CMA/projection review, cash-flow analysis and documentation support. The scope should always be agreed for the specific facility; no financing or sanction outcome can be guaranteed.