Internal Controls Every Gold Loan NBFC Needs
| Financial Services
Key Highlights
- Collateral safety: Dual custody and CCTV-backed appraisal are the first line of defense against the fraud gold lending is most exposed to.
- Segregation of duties: Maker-checker on appraisal, disbursement and closure stops a single employee from controlling an entire transaction.
- Independent verification: Surprise gold audits and purity checks catch shortages before they surface as write-offs.
- Regulatory alignment: The RBI's 2025 gold loan directions turn several of these controls from good practice into explicit compliance requirements.
Why Internal Controls Matter More in Gold Lending Than in Most Lending Products
Gold loans are unusual among lending products in one specific way: the collateral is physical, fungible, and sitting inside the branch itself. There is no registry entry, no lien on a property, no hypothecation filing - just a sealed packet of gold in a vault, valued and recorded by a branch employee at the moment of disbursement. That makes gold lending a business where operational risk and credit risk are the same risk. A weak internal control environment does not just cause inefficiency; it directly threatens the asset backing every loan on the book.
This is also why gold loan NBFCs carry a different risk profile from banks or unsecured lenders when it comes to fraud: appraiser collusion, gold substitution, ghost loans against fictitious collateral, and auction manipulation are all internal-control failures, not credit failures. Quarterly results from Muthoot, Manappuram and IIFL show how fast the industry is scaling AUM - and scale without a matching control framework is exactly when these failures surface. The controls below are the ones we consistently see separating NBFCs that catch problems at the branch from those that discover them at the audit committee.
The Core Internal Controls Framework
These are the controls we recommend every gold loan NBFC have in place, spanning the loan lifecycle from appraisal to closure or auction.
| Control | What It Covers | Why It Matters | Failure Mode Without It |
|---|---|---|---|
| Dual Custody of Vault Keys | Vault access requires two authorized employees, never one | No single individual can access collateral unsupervised | Unauthorized or undocumented vault access, hard to trace after the fact |
| CCTV-Backed Appraisal and Vault Access | Continuous recording of the appraisal counter and vault entry/exit, retained per policy | Creates an evidentiary trail for disputes, fraud investigation, and regulatory review | No way to verify what was actually pledged when a customer disputes valuation or shortage |
| Maker-Checker on Appraisal & Disbursement | The employee who values the gold is not the same one who authorizes disbursement | Segregates valuation from payout, the two steps most exposed to collusion | A single employee can originate and approve a fraudulent or over-valued loan end to end |
| Standardized Valuation Methodology | Purity testing method, weighing procedure, and net-weight deduction rules applied uniformly | Removes appraiser discretion as a source of inconsistent or manipulated valuation | Branch-to-branch variance in LTV for identical collateral, hard to defend at audit |
| Surprise Gold Audits & Purity Verification | Unannounced, independent physical verification of weight and purity against records | The only reliable check that recorded collateral matches what is actually in the vault | Shortages accumulate undetected until a customer closure or an external audit exposes them |
| Insurance of Pledged Gold | Adequate, continuously updated insurance cover for gold held across all branches | Protects the balance sheet against theft, robbery, or loss beyond the NBFC's control | An uninsured or under-insured loss becomes a direct capital hit |
| Auction Process Governance | Defined notice periods, reserve pricing, approved auctioneers, and post-auction reconciliation | Prevents undervaluation, related-party manipulation, or unauthorized private sale of collateral | Auction proceeds below fair value, or repeated auctions routed through the same buyer |
| Staff Rotation & Mandatory Leave | Periodic rotation of appraisers/branch managers and enforced continuous leave | Long-running collusion or concealment schemes are hard to sustain across a rotation or absence | The same employee controls the same branch's gold operations for years unchecked |
| Systems & Access Controls | Role-based access to the loan system, audit trails on every record edit, no backdated entries | Prevents manipulation of loan records, LTV overrides, or ghost accounts | Undetected backdated or off-system entries used to mask irregular loans |
| Whistleblower Mechanism | A confidential, retaliation-protected channel for employees to report irregularities | Frontline staff usually notice a problem branch long before an audit cycle reaches it | Known irregularities go unreported until they surface as a loss or a regulatory complaint |
| Board & Audit Committee Oversight | Regular reporting of audit findings, shortages, and fraud incidents to the audit committee | Ensures control failures are a governance issue, not just a branch-operations issue | Systemic issues stay buried at the branch or regional level and never reach the board |
| RBI-Aligned Disclosure & Timelines | Standardized loan agreements, disclosure of all charges, and timely return of gold on closure | Converts regulatory compliance from a periodic exercise into a built-in operational control | Customer disputes, regulatory penalties, and reputational damage from non-compliance |
Four Controls Worth a Deeper Look
1. Dual Custody and CCTV-Backed Vault Control
The single most important control in gold lending is also the simplest: no one person should ever have unsupervised access to the vault. Dual custody of keys or combinations, paired with continuous CCTV recording of both the appraisal counter and the vault, does two things at once - it makes collusion require at least two people, and it creates an evidentiary record that resolves disputes in the NBFC's favor rather than leaving it as one employee's word against a customer's. The RBI's 2025 gold loan directions push this from best practice into an explicit expectation, and NBFCs that had already built it in have had a far easier compliance transition than those retrofitting it branch by branch. See our companion piece on branch vault security best practices for construction standards, CCTV retention windows, and the operational discipline dual custody needs to hold up in practice.
2. Maker-Checker on Appraisal and Disbursement
Segregation of duties is the control that most directly limits the size of any single fraud. When the same employee can value the gold, approve the loan, and authorize disbursement, a bad actor needs no accomplice at all. Splitting appraisal, credit approval, and payout across different roles - even in a small branch - means a fraudulent loan requires collusion rather than opportunity, which meaningfully raises the bar for anyone attempting it.
3. Surprise Gold Audits and Purity Verification
Scheduled audits are predictable, and predictable audits get worked around. A surprise gold audit function - independent of the branch, with its own reporting line to the audit committee - is the only control that reliably catches a shortage before a customer closure or an external event forces the issue. Re-verification is only as good as the testing method behind it; see our comparison of acid test, XRF, and fire assay purity testing methods for why a surprise audit should cross-check with a different method than the one used at original appraisal. This also links directly to the branch-level metrics a CEO should already be tracking; see our companion piece on gold loan branch KPIs for how audit shortage and purity variance fit into a broader branch dashboard.
4. Auction Process Governance
Auction is the point in the loan lifecycle with the least customer oversight, which makes it the point most exposed to manipulation - undervaluation, sale to related parties, or bypassing the notice period entirely. A defensible auction process needs a defined notice period, an independent reserve price tied to the prevailing gold rate, approved and rotated auctioneers, and a reconciliation step that compares auction proceeds against the outstanding loan and the appraised value. Weakness here shows up as a rising gold auction ratio at a branch - a metric worth watching alongside these process controls, not instead of them.
Key Takeaways
Internal controls in gold lending exist to answer one question at every stage of the loan lifecycle: can any single individual, acting alone, compromise the collateral or the record of it? Dual custody, CCTV, maker-checker, surprise audits, and auction governance are the controls that keep the answer "no."
- Collateral integrity: Dual custody and CCTV protect the physical asset the entire book depends on
- Segregation of duties: Maker-checker stops any one employee from controlling a transaction end to end
- Independent assurance: Surprise audits catch shortages before they become write-offs or disputes
- Governance: Board and audit committee oversight ensures control failures are addressed systemically, not locally
Building this control environment is an operating-model investment, not a policy document - it needs a functioning gold audit team, clean branch-level reporting, disciplined process design at the branch level, and managers trained to run these controls day to day rather than treat them as a checklist. Technovative Consulting has helped gold loan NBFCs and banks stand up each of these: gold audit team and process design, branch-level data pipelines and PAR/portfolio analysis, core process design and execution, and training programs for middle managers who own these controls on the ground.