Payslip Verification in NBFC Underwriting: What Salary Documents Reveal and Where Fraud Hides

Payslip verification is frequently the most shortcut step in salaried personal loan underwriting. These shortcuts happen because high application volumes, standardised formats, and turnaround time (TAT) pressures create challenging conditions. Consequently, review often becomes a superficial check: does it look like a payslip, does the income match the declaration, and move on. However, this abbreviated process misses critical fraud signals and income quality indicators that rigorous underwriting is designed to surface.

Therefore, this article covers what payslip data actually reveals beyond the basic salary figure. It outlines specific fraud signals in fabricated documents, details cross-verification checks, and explains how to integrate this analysis with bank statements for a complete salaried income assessment.

What a Payslip Reveals Beyond the Salary Amount

Employment Tenure from PF Contribution History

A payslip reveals much more than a basic salary figure. For instance, Employee Provident Fund (EPF) contribution history provides strong evidence of employment tenure. The payslip header alone cannot prove this stability. When you review employer and employee contributions accumulating over time, you gain clear proof of tenure. Specifically, an EPF member number with 24 months of history offers credible evidence of stable employment. This history is far more reliable than a single month’s payslip showing a high gross salary.

CTC vs Take-Home: Understanding Deductions

The deduction structure also reveals the true quality of the employment relationship. Legitimate payslips from registered companies feature standard deductions. These include the EPF contribution at 12% of basic salary, state-specific Professional Tax, and TDS based on income tax liability. They may also include voluntary deductions like insurance or loan repayments.

In contrast, unusual deductions serve as immediate fraud signals. Watch out for deductions without standard descriptions or those that reduce net salary to an implausibly low percentage. Missing standard deductions are also a major red flag.

Leave Balance and Other HR Data

Legitimate companies use structured HR systems. Consequently, their payslips include leave balance data, attendance records, and other HR-generated fields. Fabricated payslips, however, often come from generic templates.

Therefore, fraudsters usually omit these fields entirely or include incorrect data. For example, a template might show a leave balance of zero in February, even though annual leave typically accumulates every month.

Employer PF and PT Registration Numbers

Every registered employer possesses government-issued registration numbers for EPF and Professional Tax. These numbers appear directly on the payslips. Fortunately, underwriters can easily verify them. You can check EPF registration numbers against the EPFO database, while checking PT registration numbers against state government records. Ultimately, any payslip featuring an EPF registration number that does not exist in the EPFO database is fraudulent.

Common Payslip Fraud Patterns

Template-Based Fabrication

Template modification is the most common form of payslip fraud. Fraudsters easily obtain legitimate templates from job portals or former employees. After that, they modify the salary figures and the applicant’s name. However, you can detect template-based fabrication through font inconsistencies between modified fields and template-generated fields. Furthermore, PDF metadata analysis often shows that someone modified the file after the stated payslip date. To catch this, cross-reference the document against Form 26AS to see if the TDS matches the declared salary. Finally, use automated bank statement analysis to identify the salary credit independently.

Inflated Gross with Minimal Net

A fabricated payslip may show a high gross salary but an inflated deduction set that reduces the net take-home to a lower (and perhaps real) figure. This allows the borrower to declare a high gross salary for loan sizing purposes while the net salary matches what actually appears in the bank account. Checking that the declared net take-home matches the bank statement salary credit is the most direct cross-verification.

Ghost Employer Payslips

A borrower who claims employment at a company that exists (is legally registered) but does not employ them, using a company name from online research or a company where a family member works, submits a payslip that references a real employer but a non-existent employment relationship. Detection: employer verification call to the HR department with the employee’s name and department; EPF contribution verification against the employer’s EPFO records; identity fraud signals from Credit Bureau India that show address and employment history inconsistencies.

The Cross-Verification Framework for Payslip Authentication

To maintain high credit quality, NBFCs should deploy a structured cross-verification process for every salaried application:

1. Bank statement reconciliation: The net take-home pay on the payslip must strictly match the salary credit appearing in the bank statement. This remains the single most reliable fraud detection check.
2. Form 16 and 26AS verification: Lenders must verify that the declared gross salary and TDS deductions match official government tax records. This step uses tamper-proof data that borrowers cannot manipulate.
3. EPF portal cross-checks: Credit officers should cross-reference the EPF member ID against the EPFO portal. This confirms that the employer’s monthly contributions are active and match the employment claims.
4. Direct employer verification: For high-value personal loans above Rs 5 lakh, placing a verification call to the employer’s HR or payroll department is an essential safety step.
5. Digital forensic analysis: Utilising automated tools helps analyse PDF metadata, layout fidelity, and font consistency against known genuine documents from the same employer.

Key Takeaways

• In conclusion, effective underwriting requires rigorous cross-referencing of payslip details against actual bank statement credits to eliminate income inflation.
• Additionally, verifying EPF IDs and employer registration numbers against government databases provides independent authentication that a document cannot self-certify.
• Furthermore, Form 26AS cross-references provide government-backed income confirmation. This layer delivers a level of security that bank statements and payslips alone cannot match.
• Finally, ghost employer schemes are easily detected through targeted HR verification calls and active EPF contribution checks.

Frequently Asked Questions