Blog/Fintech & Lending

Bank Statement Analysis for Lenders: Spot Red Flags the Same Way Every Time

Turn bank statement review into a repeatable set of checks for income, obligations and red flags that every credit analyst applies the same way.

By Sagar Makker · 7 min read · October 2026
Accounting Finance
In short
Analysts read statements differently, so the same file can get different income and obligation figures.
Define fixed checks: income credits, existing EMIs, bounces, cash patterns, related-party flows and tampering.
Record each finding in a standard summary so credit decisions are explainable and comparable.
The problem

This is for credit heads and underwriting managers at NBFCs, small business lenders and co-lending desks who rely on bank statements to judge repayment capacity. When each analyst reads statements their own way, income gets overstated, existing loans get missed and fabricated statements slip through. This post sets out a consistent bank statement analysis routine, the red flags worth codifying, and a standard summary format that makes every credit decision easier to defend in audit and to a co-lending partner.

Two analysts review the same twelve months of a trader's current account. One counts every credit as business income; the other strips out transfers from a family member's account and a one-off loan disbursal. Their eligible income figures differ widely, and the credit committee has no way to tell which method was used.

Meanwhile the statement shows a recurring debit to another lender that never appeared on the application, and a cluster of inward and outward transfers with the same counterparty on the same day. Without a defined checklist these patterns depend on whether the analyst happened to look for them, which makes portfolio quality depend on individual attention.

Why it happens
01No written rule on which credits count as income and which are excluded.
02Existing EMIs and NACH debits to other lenders are not systematically extracted.
03Circular and related-party transactions are spotted by instinct rather than a defined test.
04Statement authenticity is not checked against source, format or balance continuity.
05Findings are written as free text, so decisions cannot be compared across analysts.
How to fix it
1
Define income inclusion rules
The credit policy owner writes which credits count as income and which are excluded, such as inter-account transfers, loan disbursals, refunds and reversals. Analysts tag each large credit against these rules rather than estimating.
2
Extract all existing obligations
The analyst lists every recurring debit that looks like an EMI, NACH, ECS or standing instruction, with amount and counterparty. Compare this list with declared obligations and the bureau report, and flag anything undeclared.
3
Test for circular and related flows
Credit policy defines tests, such as matching inflows and outflows with the same counterparty within a short window you set. The analyst records any match so the credit manager can ask the borrower to explain.
4
Check statement authenticity
Ops verifies the statement source, whether fetched through the account aggregator framework, a net-banking download or a bank-stamped copy, and checks running balances for continuity. Any break or format oddity goes to a senior reviewer.
5
Produce a standard summary
Each analyst completes the same summary: average balance, eligible income, obligations, bounces, red flags and authenticity status. The credit manager uses only this summary for the decision note, keeping methods comparable.
Worked example
An MSME lender standardises statement review

A small business lender in Ahmedabad noticed that eligible income on similar files varied by analyst, and an internal audit found undeclared loans that statements had clearly shown. The credit head wrote income inclusion rules, a list of obligation patterns to extract, and a same-day matching test for circular flows. Statements fetched through the account aggregator route were preferred, and uploaded PDFs got a balance-continuity check. Every analyst now completes one summary template. Credit committee discussions became shorter because the method was visible, undeclared obligations were caught before sanction, and a co-lending partner's due diligence on sampled files went more smoothly.

Common mistakes
×
Counting all credits as income
Transfers, disbursals and reversals inflate capacity and lead to over-lending. Write exclusion rules and make analysts tag large credits explicitly so the eligible figure is traceable.
×
Trusting uploaded PDFs without checks
Edited statements are a known fraud route. Prefer direct fetch where available, and check balance continuity and format consistency before relying on any uploaded copy.
×
Writing findings as free-form notes
Free text hides the method and makes audits painful. Use a fixed summary template so every decision states the same facts in the same order.
Where an AI agent helps
Input
Bank statements fetched or uploaded, plus the lender's income and red-flag rules
Agent does
Categorises credits and debits, extracts EMIs, tests circular flows and checks balance continuity
Human gate
Credit analyst confirms tagged income and every flagged red-flag item
Outcome
Standard statement summary with eligible income, obligations and flags
Checklist
Write income inclusion and exclusion rules for credits
Extract every recurring EMI, NACH and ECS debit
Compare extracted debits with declared and bureau obligations
Define a same-counterparty matching test for circular flows
Check source and balance continuity before using a statement
Use one summary template for every credit decision note
What to measure
Undeclared obligations found before sanction
Statements failing authenticity checks
Variance in eligible income across reviewers
Analyst time per statement reviewed
Questions
How many months of bank statements should we analyse?

It depends on product, ticket size and your credit policy. Many lenders use six or twelve months for business loans. Decide the period by product, write it into policy, and check any partner or regulatory requirements with your compliance team.

Is account aggregator data better than PDF statements?

Data fetched through the account aggregator framework comes directly from the bank with consent, which reduces tampering risk and removes manual parsing. Keep a fallback route for borrowers whose bank or account type is not yet available.

What counts as a circular transaction?

Typically money that leaves and returns through the same or related parties within a short period, inflating turnover. Define your own window and amount thresholds, and treat a match as a question for the borrower rather than automatic rejection.

Should bounces automatically lead to rejection?

Not always. Record the count, timing and reason of inward and outward bounces in the summary. Credit policy should state how many and which types trigger a decline, a deviation or simply a closer look.

Keep reading
All posts →
Accounting FinanceFintech & Lending
Clearing KYC Document Backlogs Without Hiring More Ops Staff
5 min readRead →
Seo ComputerFintech & Lending
Where Loan Application Drop-Offs Happen and How to Recover Them
5 min readRead →
Business OfficeFintech & Lending
Underwriting Document Checks That Catch Mismatches Before Credit Review
7 min readRead →
Next step

Want this fixed in your business?

Send the workflow. You get a scope and a fixed price within two working days — or a straight answer that it isn't a fit.

Secure by default · find → fix → verify · authorised scope only
Send a brief →enquiry@xdqlabs.com