How to Verify a Private Company in India: MCA Search, Financial Statements & Risk Scoring Explained

A few years ago, a mid-sized manufacturing client I was advising almost signed a supply contract with a company that, on paper, looked perfectly fine. Decent website, professional email domain, a director who spoke all the right language on the call. It was only when someone ran a basic MCA company search that we found the company's registered office was a residential flat, two directors had resigned within the same quarter, and the last financial filing was over eighteen months old. That deal didn't go through. And honestly, that's the story behind most verification failures in India — not fraud that's hard to detect, but due diligence that never got done properly in the first place.

If you deal with financial statements of private companies in India — as a vendor, an investor, a lender, or even a large enterprise onboarding a new supplier — you've probably run into this exact problem. Private companies here aren't required to publish anything for the public the way listed companies are. So the information exists, but you have to know where to look, and more importantly, how to read it.

This is the process I'd walk any client through, step by step.

Why Bother Verifying at All?

It's tempting to skip this step, especially when a deal is moving fast and everyone seems credible. But private companies operate with far less public scrutiny than listed ones, which is exactly why third-party risk assessment in India has become such a serious discipline for banks, NBFCs, and even mid-size corporates. The Companies Act, 2013, along with rules from the Ministry of Corporate Affairs (MCA), require every registered company to file certain documents whether they want to or not. That's the opening you need. It's not perfect, and it's not always current, but it's real, verifiable data — and it's usually enough to separate a legitimate business from one that's cutting corners or worse.

Start With the Financial Statement — But Know What You're Reading

A financial statement of a private company usually has five parts worth your attention.

The balance sheet tells you what the company owns and owes at a given moment. The profit and loss statement shows how it performed over the year — revenue, costs, and what's left after both. The cash flow statement is arguably the most honest of the three, because profit can be dressed up but cash movement is harder to fake. Then there are the notes to accounts, which is where the real story often hides — contingent liabilities, related-party dealings, changes in accounting policy. And finally, the auditor's report, which is worth reading in full rather than skimming, because a "qualified opinion" buried on page four is the auditor quietly telling you something's off.

Under Indian company law, most private limited companies (barring small companies and certain OPCs) must get audited annually and file their financials with the MCA through Form AOC-4. That's what makes the private company financial statement India dataset genuinely useful — it's not marketing material, it's a legal filing with real accountability attached to it.

A few things I always check first: whether revenue or profit jumped sharply without a clear business reason, how leveraged the company is relative to its equity, how much of its business is with related parties rather than arm's-length customers, and whether the auditor flagged anything at all.

Run an MCA Company Search Before You Do Anything Else

Honestly, this should be step one, not step three — but I'm putting the financial statement first because it's what people usually think of when they hear "verification." In practice, an MCA company search is quicker and often more revealing.

Head to the MCA portal and you can pull up a company's CIN, its date of incorporation, registered office, current status (active, dormant, under liquidation, or the fairly damning "struck off"), authorized and paid-up capital, its directors along with their DIN, and any charges registered against its assets — which usually means secured loans.

What you're really looking for here isn't the presence of information, it's the absence of red flags. A company that's behind on its statutory filings, has a director disqualified under Section 164, or shows a "struck off" status is telling you something important, whether or not anyone in the room says it out loud. Filing on time, year after year, is a small thing, but it's also one of the more reliable signs that a company takes its own governance seriously.

Where to Actually Get the Financial Data

Once you know the company is real and in reasonably good standing, the next question is simply: where do you get its numbers?

The MCA-filed AOC-4 form is the primary legal source, though it usually lags by a year, since companies file annually and not in real time. Beyond that, a number of credit bureaus and data platforms in India now compile MCA filings alongside GST returns and banking signals into a single report, which saves a lot of manual digging. And frankly, sometimes the simplest route works best — just ask the company directly for its latest audited financials during due diligence, particularly for the most recent year that hasn't shown up in MCA records yet.

Private company financial data in India is more available than most people assume. It's just scattered across a few different sources, and pulling from more than one usually gives you a more current and complete picture than relying on MCA filings alone.

Turning Data Into a Decision: Company Risk Scoring

Here's where a lot of due diligence processes fall apart — people gather the data but never actually turn it into something they can act on consistently. That's the whole point of company risk scoring.

A reasonably built risk score usually weighs financial health (liquidity, leverage, profitability trends), compliance history (are filings on time or chronically late), legal exposure (pending litigation, insolvency proceedings you can check through NCLT records), operational signals (employee counts, GST turnover consistency), and governance red flags like a revolving door of directors or a sudden change of registered office or auditor.

Banks and larger enterprises often boil all of this down into a single number or rating band — low, medium, high risk — so that procurement or credit teams aren't re-litigating the same judgment call every time a new vendor comes through the door. It's not a perfect system, but it's far better than gut feeling, and it scales in a way that manual review simply doesn't.

So, How Do You Actually Verify a Private Company in India?

If I had to boil this whole process down to a checklist I'd hand someone before their next vendor meeting, it would look like this:

Run an MCA company search first, and confirm the company is legally active and reasonably compliant
Pull at least two to three years of financial statements, not just the most recent one
Look closely at the directors and any related entities for patterns that don't sit right
Check litigation history and any charges registered against the company's assets
Build or request a risk score so you're comparing this company against a consistent benchmark rather than a one-off impression
Don't treat this as a one-time exercise — for any relationship that's going to last, revisit the verification periodically, because things change

A Final Thought

None of this requires special access or expensive software. What it requires is discipline — the willingness to spend an extra hour on an MCA search and a financial statement before signing something, instead of after something's already gone wrong. In a market as large and fast-moving as India's, that hour is usually the cheapest insurance you'll ever buy.

FAQs

What is the primary purpose of an MCA company search?

It confirms a company's legal existence and current standing — its CIN, incorporation date, directors, registered office, and filing history. It's usually the fastest way to tell whether a private company is legitimate and in good compliance standing.

How does a financial statement actually help with third-party risk assessment?

It shows you the company's liquidity, debt levels, profitability, and cash flow — the things that determine whether a business can actually meet its obligations to you, not just whether it looks credible on the surface.

Where can I get private company financial data in India if the company won't share it directly?

The MCA's AOC-4 filings are the primary legal source, though they can lag by up to a year. Several credit bureaus and data aggregators combine this with GST and banking data for a more current view.

What actually goes into a company risk score?

Typically financial health, filing and compliance history, litigation or insolvency exposure, and governance red flags like frequent director changes or sudden shifts in registered office or auditor.

Is MCA data reliable enough on its own?

It's a solid legal foundation, but it's not real-time — companies file annually, so the numbers can be a year old by the time you see them. Pairing MCA data with more current signals, like GST filings, gives a fuller picture.