SECP to FIA: Why Financial Irregularities Can Lead to Criminal Charges

A recent regulatory development has sent a clear warning signal through Pakistan’s corporate sector. Following an investigation by the Securities and Exchange Commission of Pakistan (SECP) into the alleged misuse of funds at a local food company, the matter has been referred to the Federal Investigation Agency (FIA) for criminal prosecution.

For Pakistani business owners, startup founders, and finance managers, this escalation highlights a critical reality: corporate non-compliance and financial irregularities are not merely administrative hurdles that can be resolved with a simple fine. When financial mismanagement or the unauthorized diversion of funds is detected, regulatory oversight can quickly transition into a criminal investigation.

Understanding how these regulatory mechanisms operate—and implementing robust internal controls—is essential to protecting your business, your reputation, and your directors from severe legal liabilities.

The Escalation Path: From SECP Audit to FIA Investigation

The SECP operates as the primary registrar and regulator of corporate entities in Pakistan. Under the Companies Act, 2017, the commission holds broad powers to inspect company books, order investigations, and call for records if there is reason to suspect mismanagement, fraud, or non-compliance.

However, the SECP’s jurisdiction primarily covers corporate administration. If a routine inspection, a stakeholder complaint, or a sudden audit reveals evidence of deliberate financial fraud, embezzlement, or the siphoning of public or investor funds, the nature of the case changes.

Under Pakistani law, the SECP is empowered—and often legally obligated—to refer such criminal matters to the FIA. Once the FIA takes over, the case shifts from the domain of corporate compliance to criminal law enforcement. The consequences of an FIA investigation are severe, often involving:

• The freezing of corporate and personal bank accounts.
• The placement of directors' names on exit control lists.
• Publicly damaging criminal trials and potential imprisonment for key officeholders.

This escalation path underscores why corporate governance cannot be treated as a secondary priority, even for growing startups and private limited companies.

Why SMEs and Startups are Highly Vulnerable

Many small and medium enterprises (SMEs) and early-stage startups in Pakistan operate with highly informal financial structures. In the rush to scale, establish market share, or manage daily cash flow pressures, formal corporate governance is frequently overlooked.

Several common practices put smaller companies at risk of regulatory scrutiny:

• Co-mingling of Funds: Founders often treat the company’s bank account as a personal treasury, mixing personal expenses with business operations without formal documentation.
• Informal Related-Party Transactions: Transferring funds between sister concerns, or making interest-free loans to directors without proper board resolutions and legal agreements.
• Lack of Internal Controls: Operating without a clear segregation of duties, allowing a single individual to initiate, approve, and record financial transactions.

While founders rarely intend to commit fraud, the absence of clean trails, formal approvals, and transparent accounting records can look highly suspicious during an SECP inquiry. Under regulatory scrutiny, the inability to explain where capital went can be interpreted as a deliberate misuse of funds.

Key Areas of Regulatory Scrutiny to Watch

To ensure your business remains compliant and insulated from legal risks, finance teams must focus on three primary areas that regulators scrutinize closely:

1. Capital and Investment Utilization

Funds raised from investors, financial institutions, or public schemes must be utilized strictly for the purposes detailed in the company’s incorporation documents, investment agreements, or bank term sheets. Diverting these funds into unauthorized projects, personal real estate, or unrelated businesses is a primary trigger for regulatory investigations.

2. Related-Party Transactions

Any transaction between the company and its directors, major shareholders, or associated undertakings must be conducted on an arm's-length basis. These transactions must be formally approved by the Board of Directors, recorded in the company's minutes, and clearly disclosed in the annual financial statements.

3. Accuracy of Financial Reporting

There must be absolute consistency between the physical reality of the business, its bank balances, and the financial statements submitted annually to the SECP. Discrepancies between reported revenues and actual bank inflows are immediate red flags for auditors.

Practical Steps to Safeguard Your Business

Transitioning from informal management to structured corporate governance does not require the budget of a multinational corporation. Pakistani SMEs and startups can significantly reduce their regulatory risk by taking several practical steps:

• Establish Clear Board Minutes: Ensure that every major financial decision—especially fund allocations, capital expenditures, and related-party transactions—is formally debated, approved, and recorded in signed board meeting minutes.
• Maintain Meticulous Transaction Records: Every single debit and credit in the company’s bank account must be backed by a valid invoice, a signed payment voucher, and a clear business justification. Eliminate undocumented cash transactions wherever possible.
• Enforce Segregation of Duties: Ensure that the person who manages the company's bank accounts is not the same person who reconciles the books or approves payments. If your team is small, involve an external advisor to review reconciliations monthly.
• Conduct Regular Internal Audits: Do not wait for the annual statutory audit to find errors. Conducting quarterly internal reviews of your books ensures that compliance gaps are identified and corrected early.
• Work with Professional Advisors: Engaging qualified corporate lawyers and chartered accountants ensures that your filings, tax treatments, and corporate structures remain fully compliant with the Companies Act, 2017, and SECP regulations.

Ultimately, robust corporate governance should not be viewed as an administrative burden. It is a foundational asset that protects your directors from personal liability, builds trust with future investors, and ensures the long-term sustainability of your business.