FEMA (Foreign Exchange Management Act) audits of Indian businesses receiving international payments are rare but consequential. Most small and mid-size Indian businesses will never face a formal ED investigation. But regulatory scrutiny can come from banks, GST audits, and IT assessments — all of which can trigger FEMA-related queries. This guide covers the most common compliance failures and how to avoid them.
Who Actually Faces FEMA Scrutiny
Enforcement Directorate (ED): Investigates willful, large-scale FEMA violations. For genuine Indian service exporters receiving payment through authorised channels: ED investigation is extremely rare.
RBI's AD banks: Your Indian bank is an Authorised Dealer. Banks periodically review large incoming international transfers and may request documentation. This is more common than ED investigation.
GST audits: GST audit that uncovers foreign income without proper FIRA/documentation may trigger FEMA-related questions.
Income tax scrutiny: IT assessment that flags international income discrepancies may involve questions about the nature of foreign currency receipts.
Most Common FEMA Compliance Failures by Indian Businesses
Failure 1: Receiving International Payments Through Unauthorised Channels
What it is: Receiving foreign currency through channels not authorised by RBI — e.g., a foreign friend physically bringing cash, receiving payment to a foreign account you hold without proper ODI/OCI structure, or routing through unregistered entities.
What's authorised: AD banks (HDFC, ICICI, SBI, etc.) and PA-CB licensed gateways (Playto Pay, Skydo, Razorpay International, Wise Business).
Risk: Receiving through unauthorised channels is a clear FEMA violation. Penalty up to 3x the amount involved.
Failure 2: Not Repatriating Earnings Within 9 Months
What it is: Foreign currency earned from service exports must be repatriated to India within 9 months. Holding large USD balances in Wise, Mercury, or other foreign accounts beyond this window violates repatriation requirements.
Playto Pay auto-repatriates daily: Funds received via Playto Pay convert to INR and credit your Indian bank daily. Zero repatriation risk.
Risk: Non-repatriation treated as FEMA violation. Penalties up to 3x the unrepatriated amount.
Failure 3: Purpose Code Mismatch
What it is: The nature of the service declared on your FIRA/bank documentation doesn't match your actual business activity.
Example: Software development income reported under "Other Services" (P1007) when it should be "Computer and Information Services" (P0699). Not a major violation for minor misclassification but can trigger questions.
Risk: Low for honest misclassification. Medium if there's a pattern that looks like deliberate misrepresentation.
Failure 4: Under-Reporting International Income in ITR
What it is: International income not fully declared in ITR. Whether intentional or accidental ("I didn't know my Wise income needed to be declared").
Risk: Income tax violation that can cascade into FEMA scrutiny if the undeclared income is from foreign sources.
Failure 5: Indian Founder Holding Foreign Company Shares Without ODI Compliance
What it is: Indian founders setting up a US LLC or Delaware C Corp must comply with FEMA ODI (Overseas Direct Investment) regulations. Form ODI filing with RBI is required.
Risk: Holding foreign company equity without ODI compliance is a FEMA violation. Significant penalties.
The Simple Compliance Framework for Indian Service Exporters
- Receive through authorised channels only. PA-CB licensed gateway (Playto Pay) or your Indian bank's SWIFT account. Nothing else.
- Auto-repatriate daily. Playto Pay's daily INR settlement means you're always compliant with the 9-month repatriation requirement.
- Keep FIRA per transaction. Playto Pay auto-generates. Keep in organised folders by financial year.
- Declare all international income in ITR. Every rupee from international sources. Engage a CA familiar with international income.
- File LUT annually. For GST zero-rating on service exports. File before April 1 each financial year.
- Use correct purpose codes. Match your business activity to the appropriate RBI purpose code. Ask your CA if unsure.
FAQ
Can Indian freelancers be audited under FEMA? Technically yes, but ED investigation of individual freelancers receiving legitimate service income is extremely rare. More likely: your bank queries an incoming transfer, or a GST audit raises questions. Proper documentation (FIRA, invoices, authorised channels) resolves these easily.
Is using Wise to receive international payments FEMA compliant? Wise Business (as an RBI-registered entity or through partner banks) can be FEMA compliant. Verify Wise's current PA-CB or AD registration status. Transfer amounts to your Indian bank regularly (within 9-month repatriation window).
What is the penalty for FEMA violations? Civil penalty up to 3x the amount involved. Willful, repeated, or large-scale violations: criminal prosecution. Most genuine exporters with documentation issues face warnings or minor penalties, not prosecution.