FRC Sanctions Deloitte Go-Ahead Audit: £6.05M Penalty for Failures

• The Financial Reporting Council (FRC) has sanctioned Deloitte LLP with a £6.05 million fine and a severe reprimand for audit failures related to Go-Ahead Group plc (GAG) from FY16 to FY20.
• The audit breaches involved GAG subsidiaries LSER and LM, which retained DfT overpayments, created undisclosed accruals, and released them to profit without informing the DfT.
• LSER's actions led to the DfT not renewing its franchise, recovering overpayments, and imposing a £23.5 million penalty.
• Deloitte failed to apply sufficient professional scepticism, adequately investigate subsidiary actions, and evaluate fraud risk factors during the audits.
• The FRC's action highlights the critical importance of robust audit procedures and transparent financial reporting for Public Interest Entities.

This FRC sanction against Deloitte serves as a critical reminder for auditors to apply rigorous professional scepticism, particularly when assessing complex accruals and management representations related to government contracts.

The Financial Reporting Council (FRC) has announced significant sanctions against Deloitte LLP, stemming from an investigation into the firm's statutory audits of Go-Ahead Group plc (GAG) for the financial years spanning 2016 to 2020. This FRC sanction against Deloitte Go-Ahead audit includes a financial penalty of £11 million, which was reduced to £6.05 million due to settlement, alongside a severe reprimand. Additionally, Deloitte is required to undertake specific non-financial measures, including an internal review of its audit procedures and regular reporting to the FRC.

Deloitte has also covered the costs associated with the Executive Counsel's investigation. While the initial scope of the inquiry extended to GAG's audit for the financial year ended 3 July 2021, the Executive Counsel decided in December 2024 to conclude this part of the investigation without pursuing further enforcement action. Go-Ahead Group, a prominent international transport provider operating bus and rail services, was classified as a Public Interest Entity during the period in question. It was delisted from the London Stock Exchange in 2022 after being acquired by a consortium.

The core of the audit failures relates to three of GAG's subsidiaries involved in passenger rail services: London & South Eastern Railway Ltd (LSER), London & Birmingham Railway Ltd (LM), and Go-Ahead Bayern GmbH (GABY). LSER, prior to Deloitte's appointment as auditor, had received erroneous overpayments from the Department for Transport (DfT) under a rail franchise agreement. Instead of informing the DfT, LSER retained these funds, created accruals, and subsequently released them to profit.

This practice continued under Deloitte's audit, with LSER releasing £2.4 million in overpayments to profit in FY16 and accruing a further £27 million from FY16 to FY20 under a subsequent franchise agreement. Evidence suggested an intention to release these later overpayments to profit if they remained undiscovered by the DfT. Furthermore, in FY19 and FY20, LSER deliberately misclassified these accruals in its financial statements to obscure their true nature, breaching good faith clauses in its franchise agreements. When the DfT became aware in 2021, it declined to renew LSER's franchise, initiated recovery of the overpayments, and imposed a £23.5 million penalty. Similarly, LM held undisclosed accruals for sums owed to the DfT under a different rail franchise. In FY20, following the franchise's conclusion, LM released £5.6 million of these accruals to profit, attempting to conceal this action through misleading wording in its financial statement notes. For GABY, GAG provided initial information regarding its franchise contract during the FY20 audit.

Deloitte's audit of the Go-Ahead Group was found to be deficient in several critical areas. The firm failed to adequately investigate the actions undertaken by LSER and LM, particularly regarding the undisclosed accruals and their subsequent release to profit. A significant failing was the insufficient application of professional scepticism audit FRC standards demand, especially when confronted with evidence that indicated potential fraud risk factors within the subsidiaries.

Furthermore, Deloitte did not fully grasp the contractual obligation LSER had to act in good faith, which inherently required the subsidiary to disclose the overpayments to the DfT. This oversight meant the auditors did not properly challenge management's representations or the accounting treatment of these material items, contributing to the Go-Ahead Group audit failure.

The FRC's decision, issued under its Statutory Audit Enforcement Procedure, underscores the rigorous standards expected of auditors, particularly those overseeing Public Interest Entities. The announcement of these UK audit sanctions on October 8, 2026, highlights the ongoing commitment of the Financial Reporting Council to upholding audit quality and ensuring financial reporting integrity.

This FRC sanction against Deloitte serves as a critical reminder for auditors to apply rigorous professional scepticism, particularly when assessing complex accruals and management representations related to government contracts. The case emphasizes the importance of thoroughly scrutinizing subsidiary financial reporting and ensuring transparent disclosure to regulatory bodies to prevent severe penalties and reputational damage across the industry.

This FRC sanction against Deloitte serves as a critical reminder for auditors to apply rigorous professional scepticism, particularly when assessing complex accruals and management representations related to government contracts. For compliance officers and in-house counsel, it underscores the necessity of scrutinizing subsidiary financial reporting and ensuring transparent disclosure to regulatory bodies to avoid severe penalties and reputational damage.

Source: Original reporting via FRC press notice