Startup Bank Account Controls: Founder Checklist for Authorised Signatories, Board Approvals, KYC, Payments and Investor Diligence
A startup bank account should never be treated like a founder's personal wallet with a company name attached. The moment customer money, investor money, GST payments, payroll, vendor advances or loan…
Direct answer for founders
A startup bank account should never be treated like a founder’s personal wallet with a company name attached. The moment customer money, investor money, GST payments, payroll, vendor advances or loan repayments start moving through the account, founders need written banking controls: who can operate the account, who approves payments, what needs board approval, how KYC changes are updated, how internet banking access is controlled, and how bank statements reconcile with books.
This is not paperwork for a later stage. Banking weaknesses are visible in every serious diligence. Investors, lenders, auditors and acquirers will ask whether company money was controlled through board-approved authority, whether related-party payments were transparent, whether founder reimbursements were documented, whether no personal account was used for company collections, and whether payment access changed when a founder, CFO or finance employee left.
The legal and regulatory base is practical. Section 179 of the Companies Act, 2013 confirms that the Board can exercise the powers of the company, subject to the Act, the memorandum, articles and company-level regulations: https://www.indiacode.nic.in/show-data?actid=AC_CEN_22_29_00008_201318_1517807327856&orderno=183. Section 188 covers related-party transactions and is relevant where founder-linked entities, relatives, group companies or director-controlled vendors receive payments: https://www.indiacode.nic.in/show-data?actid=AC_CEN_22_29_00008_201318_1517807327856&orderno=192. RBI’s KYC Direction explains bank KYC expectations, including beneficial-owner identification for company customers: https://www.rbi.org.in/commonman/english/scripts/notification.aspx?id=2607. RBI’s KYC FAQ also describes KYC as a process through which regulated entities obtain and verify identity, address, nature of business and financial status information: https://www.rbi.org.in/commonman/english/Scripts/FAQs.aspx?Id=3782.
Why banking controls become a founder problem
Founders often focus on incorporation, GST, contracts and fundraising documents, but bank access decides whether the company can actually run with discipline. A weak bank setup can create five problems at once: money can leave without approval, payments can be booked under the wrong ledger, founder expenses can look like hidden loans, vendors can get paid without contracts, and investor money can be mixed with operating cash without a clear budget trail.
| Banking area | Founder risk if ignored |
|---|---|
| Authorised signatories | One person can move money without internal approval |
| Board resolution | Bank authority may not match corporate records |
| Internet banking access | Former employees or informal finance support may retain access |
| Payment matrix | Small and large payments get approved through the same casual process |
| Founder reimbursements | Personal and company expenses become difficult to separate |
| Related-party payments | Conflict questions arise during diligence |
| Bank KYC | Changes in directors, shareholding or address are not updated |
| Bank statements | Books, GST returns, TDS payments and cash flow do not reconcile |
Start with the right bank-account structure
Most startups begin with one current account. That may be enough at incorporation, but the structure should change as the business grows.
| Account type | When it helps |
|---|---|
| Main operating current account | Daily customer receipts and vendor payments |
| Tax payment account or tagged ledger | GST, TDS, PF, ESI and statutory payments tracking |
| Payroll account | Salary payments, reimbursements and employee settlements |
| Investor proceeds account or clean ledger | Fresh funding receipts and use-of-proceeds tracking |
| Escrow or nodal arrangement | Marketplace, fintech, lending, payment, acquisition or regulated flows |
| Foreign currency or export-related account | Export services, overseas customers or FEMA-linked receipts where bank advises |
Do not open too many accounts early. The real goal is traceability. If one account is used, the accounting ledger and monthly MIS should still separate collections, payroll, tax, capex, founder reimbursement, loan repayment and investor-funded spends.
Build a payment approval matrix
Every startup should have a written payment matrix, even if the finance team is one person. The matrix should answer: who raises the payment request, who checks invoice and contract evidence, who approves it, who releases it, and who reconciles it.
| Payment type | Evidence before payment | Suggested approval logic |
|---|---|---|
| Routine SaaS or utility | Invoice, contract or subscription approval | Function head plus finance |
| Vendor advance | Signed PO or agreement, GST details, milestone | Founder or CFO approval |
| Contractor fee | Consultant agreement, invoice, TDS/GST check, IP clause | Function head plus finance |
| Payroll | Payroll sheet, employee list, TDS computation | Founder/CFO plus maker-checker |
| Founder reimbursement | Expense proof, business purpose, policy check | Another founder, CFO or board note |
| Related-party payment | Contract, pricing basis, disclosure and approval record | Board-level review where applicable |
| Capex | Quote comparison, budget approval, asset tagging | Founder/CFO and board if material |
| Loan repayment | Sanction letter, schedule, board approval if required | Founder/CFO with ledger check |
The maker-checker principle matters. The person preparing the payment should not be the only person approving and releasing it. In very small teams, founders can still separate roles by requiring documented approval before release and monthly bank reconciliation by someone other than the payment maker.
KYC and beneficial-owner discipline
Bank KYC is not a one-time account-opening exercise. A startup should keep bank KYC aligned with the current company position: directors, authorised signatories, registered office, beneficial owners, shareholding pattern, contact email, mobile number and nature of business.
KYC update triggers:
- New director appointment or resignation.
- Change in authorised signatory.
- Change in registered office or principal place of business.
- Significant cap table change after a funding round.
- Change in beneficial ownership or control.
- Change in business model, especially fintech, lending, marketplace, crypto-adjacent, export or regulated activity.
- Bank request during periodic KYC refresh.
Keep a banking KYC folder with COI, MOA, AOA, PAN, board resolutions, director KYC, beneficial-owner details, shareholding summary, GST certificate, proof of address, bank forms, submitted declarations and acknowledgement emails.
Founder loans, reimbursements and personal spending
Early-stage founders sometimes pay company expenses personally and later reimburse themselves. That can be acceptable if documented, but it becomes risky when personal and company spends are mixed casually.
Free Weekly Newsletter
Subscribe to BSA startup funding alerts
- Every Sunday, all Indian startup funding alerts in one place
- Monthly funding report on the last day of the month
- Free, concise, founder-focused, and easy to unsubscribe
Get the complete Indian startup funding roundup in your inbox, covering deals, sectors, investor moves, and founder readiness notes from the week.
Built for founders, investors, CFOs, and advisors
No spam. Unsubscribe anytime.
Use three rules:
- Company collections should go to company bank accounts, not founder personal accounts.
- Founder reimbursements should carry invoice, payment proof and business purpose.
- Money moved between founder and company should be classified correctly as reimbursement, salary, loan, advance, capital contribution or expense settlement.
If a founder gives money to the company, record whether it is share application money, loan, advance or temporary support. Do not let these entries sit as unexplained credits. They affect tax, Companies Act compliance, FEMA if the founder is non-resident, and investor diligence.
Monthly bank-control pack for founders
Every month, founders should review a short bank-control pack:
| Pack item | What to check |
|---|---|
| Bank reconciliation | Closing bank balance matches books |
| Payment exceptions | Payments without PO, invoice, contract or approval |
| Large payments | Material spends and capex against budget |
| Founder transactions | Salary, reimbursement, loan and expense entries |
| Tax payments | GST, TDS, PF, ESI, professional tax and challans |
| Receivables | Customer collections and ageing |
| Access list | Net banking users, limits and mobile/email alerts |
| Related-party ledger | Payments to founder-linked or group entities |
This pack need not be long. It should be consistent. A founder who reviews the same controls every month catches problems before auditors or investors do.
Investor diligence folder
Prepare this before fundraising:
| Folder | Documents |
|---|---|
| Bank accounts | Account list, opening dates, bank names and purpose |
| Authority | Board resolutions, signatory list and limit matrix |
| KYC | Bank KYC documents and update acknowledgements |
| Statements | Monthly bank statements for all accounts |
| Reconciliation | Bank reconciliation statements and ledger mapping |
| Payments | Approval matrix, sample invoices and payment proofs |
| Founder entries | Founder reimbursement, loan and salary records |
| Related parties | Contracts, approvals, pricing notes and disclosures |
| Statutory | GST, TDS, payroll and ROC payment proofs |
| Funding proceeds | FIRC/KYC/FC-GPR where foreign investment exists, plus use-of-proceeds tracking |
Common mistakes founders should avoid
- Letting one person keep all bank logins, OTP devices and cheque books.
- Using founder personal accounts for company receipts.
- Not updating authorised signatories after a founder exit.
- Paying vendors before contracts or purchase approvals.
- Treating founder reimbursements as informal withdrawals.
- Missing related-party disclosures.
- Ignoring bank KYC refresh requests.
- Not reconciling bank statements with books every month.
- Paying statutory dues without storing challans.
- Opening extra accounts without clear purpose or ledger control.
A 10-day cleanup plan
| Day | Action |
|---|---|
| 1 | List all bank accounts, users, limits, cards and cheque books |
| 2 | Collect board resolutions and bank mandates |
| 3 | Review authorised signatories and remove stale access |
| 4 | Create payment approval matrix |
| 5 | Reconcile last three months of bank statements with books |
| 6 | Separate founder salary, reimbursement, loan and advance entries |
| 7 | Review related-party payments |
| 8 | Check KYC documents and pending bank requests |
| 9 | Create investor data-room folder |
| 10 | Add bank-control review to monthly board or founder MIS |
Sources
- India Code, Companies Act, 2013, Section 179: https://www.indiacode.nic.in/show-data?actid=AC_CEN_22_29_00008_201318_1517807327856&orderno=183
- India Code, Companies Act, 2013, Section 188: https://www.indiacode.nic.in/show-data?actid=AC_CEN_22_29_00008_201318_1517807327856&orderno=192
- RBI, Know Your Customer Direction, 2016: https://www.rbi.org.in/commonman/english/scripts/notification.aspx?id=2607
- RBI, FAQs on Master Direction on KYC: https://www.rbi.org.in/commonman/english/Scripts/FAQs.aspx?Id=3782
FAQ Section
Does every startup need a board resolution for bank operations?
Yes, company bank authority should be backed by corporate approval. Banks may provide their own formats, but founders should keep a board record that matches the company’s articles and actual operating authority.
Should startup collections ever go to a founder’s personal account?
Avoid it. Company revenue, advances and investor money should move through company bank accounts. Personal-account collections create tax, accounting and diligence problems.
What bank records do investors usually check?
Investors commonly review bank statements, reconciliations, board mandates, payment approvals, founder transactions, statutory payment proofs, related-party ledgers and funding receipt records.
When should a startup update bank KYC?
Update bank KYC when directors, authorised signatories, registered office, beneficial ownership, shareholding control, contact details or business activity materially changes, and whenever the bank asks for periodic refresh.
Founder / Business Takeaway
Banking controls are founder controls. The Best CS Firm In India approach is to make account authority, payment approvals, KYC, founder transactions and bank reconciliation clear before investors ask for proof.
Need expert support?
BSA helps Indian startups clean up board approvals, authorised signatory records, related-party payment controls, founder loan records and investor-ready banking documentation.
Need expert support?
BSA supports founders across India with ROC, FEMA, due diligence, fundraising readiness, and company secretarial execution.
