An Employer Checklist for Payroll Audits in Singapore

Did you receive an audit notice from the Central Provident Fund (CPF) Board or Inland Revenue Authority of Singapore (IRAS)? 

Don’t fret; it doesn’t always mean something is wrong. The CPF Board proactively audits employers to check that contributions have been paid correctly, and IRAS conducts both desk and field reviews to confirm what employers reported matches their books. 

Despite this, routine inspections can take days to respond to if your records aren’t already organised. This is why a growing number of Singapore employers move to payroll outsourcing services in Singapore as their compliance burden grows, since outsourced systems maintain the audit trail by default.

If you handle payroll in-house, an internal payroll audit checklist is what you need. Run it monthly and your records stay organised year-round, so any inspection becomes a few hours of document retrieval rather than a multi-week scramble.

Here’s what regulators actually look at, where most employers stumble, and how to keep your payroll audit-ready all year-round.

How Payroll Audit Works in Singapore

Most employers picture an audit as a single event. In practice, three different bodies can audit different parts of your payroll, each with its own focus:

• CPF Board audits contribution accuracy. Inspectors check rates by age and residency, classification of Ordinary Wage vs Additional Wage, and whether contributions were submitted by the 14th of the following month.
• IRAS focuses on what you reported as employee income, including IR8A, Appendix 8A, Appendix 8B, and your Auto-Inclusion Scheme (AIS) submissions.
• Ministry of Manpower (MOM) checks employment records and itemised payslips for compliance with the Employment Act.

All three want to see the workings behind the totals. Payroll registers, attendance logs, employment contracts, bank transfer records, and CPF Submission Numbers all sit in scope. The further apart your reported numbers are from your supporting documents, the longer the audit runs.

Who Conducts Payroll Audits, And What Triggers One?

Audits can be triggered by something specific or selected at random. Common triggers are shown in the table below:

Table: Common triggers of payroll audits in Singapore. 

CPF Board inspectors operate under Section 5 of the CPF Act. They can ask employers to produce documents, make related enquiries, and take possession of or copy requested records. Obstructing an inspection is an offence in itself, with fines up to S$10,000.

IRAS audits run either as desk reviews (responding to written queries with documents) or field audits (on-site visits and staff interviews). MOM tends to act on employee reports or sector-wide compliance sweeps.

The first sign is usually a letter or email requesting specific records by a deadline. That deadline is rarely flexible, which is why audit-readiness is something you build before the notice.

The Payroll Audit Checklist: What You Should Have Ready

The records auditors commonly request fall into four groups. Keep all of them current, organised, and easy to retrieve.

Statutory submissions and proof of payment:

• CPF contribution submissions for the audit period, with proof of payment dates
• IRAS AIS submissions and IR8A forms
• Skills Development Levy (SDL) payments to SkillsFuture Singapore
• Self-Help Group contributions for each employee, where applicable

Employee records:

• Employment contracts and Key Employment Terms (KETs) for every employee covered by the Employment Act
• Identification documents, NRIC numbers or work pass details, and contact information
• Leave records, including annual, sick, and any unpaid leave that affects pay calculations

Pay run documentation:

• Itemised payslips for the audit period
• Payroll registers showing gross-to-net calculations
• Records of overtime, allowances, bonuses, commissions, and benefits-in-kind
• Bank transfer records or cheque numbers proving salaries were paid

Retention periods to remember:

• IRAS: payroll and supporting financial records for at least 5 years from the relevant Year of Assessment (YA), which is the calendar year following the financial year being assessed
• MOM: itemised payslip records for the latest 2 years for current employees; for former employees, the last 2 years of records must be kept for 1 year after their last day of employment

Common Employer Mistakes

The gaps that turn a routine audit into a multi-month back-and-forth are rarely about deliberate non-compliance. They’re about process drift. Four issues come up most often:

1)  Late CPF contributions: The CPF Board charges late payment interest at 1.5% per month from the day after the due date, with a minimum of S$5. For employers convicted of non-payment, court fines start at S$1,000 to S$5,000 per offence and rise on subsequent convictions. Late AIS submissions to IRAS can attract fines of up to S$5,000.

2) Misclassifying wages (OW vs. AW): Monthly commissions, overtime, and irregular allowances are sometimes treated as Ordinary Wage (OW) when they should be Additional Wage (AW). Because OW and AW carry different contribution ceilings, misclassification produces under-contribution. The CPF Board can recover these arrears years after the fact, and since there’s no statute of limitations on CPF underpayments, the financial tail can be long.

3) Payslip gaps: Missing payslips, late issuance beyond 3 working days after salary payment, or incomplete information all constitute offences. Repeat infringements carry administrative penalties; serious cases can reach fines of up to S$5,000 per offence.

4) Manual record-keeping: Spreadsheets stored on a single laptop, payslips emailed without a central archive, no audit trail of changes. When an inspector asks for a six-month payroll register, companies struggle to reconstruct the paper trail. 

The reason this matters beyond compliance is that audit-ready records protect the business in other ways. Employee salary disputes resolve faster. M&A due diligence runs more smoothly. CFOs reviewing payroll exposure see a clean picture. However, when payroll records are maintained manually, audit readiness depends entirely on internal discipline, and this is where gaps typically emerge.

An outsourced payroll company in Singapore rebuilds the audit trail for you. At YesPay our cloud-based platform logs every change, retains records for the full statutory period, and generates the reports auditors typically request without manual collation.

We offer payroll outsourcing services in Singapore that helps you improve your audit posture automatically, with every record stored and timestamped. Backed by HRnetGroup’s 33 years of Asia HR expertise, our team knows what CPF and IRAS inspectors look for because we work through these requirements with clients every month. Talk to a YesPay payroll specialist about keeping your records audit-ready year-round.

References:

1. Enforcement and penalties for non-compliance. Retrieved on 12 May 2026 from https://www.cpf.gov.sg/employer/compliance-and-rectifications/enforcement-and-penalties-for-non-compliance
2. Record Keeping Requirements. Retrieved on 12 May 2026 from https://www.iras.gov.sg/taxes/corporate-income-tax/basics-of-corporate-income-tax/record-keeping-requirements
3. Itemised pay slips. Retrieved on 12 May 2026 from https://www.mom.gov.sg/employment-practices/salary/itemised-payslips
4. Employment records. Retrieved on 12 May 2026 from https://www.mom.gov.sg/employment-practices/employment-records
5. Submit employment income records. Retrieved on 12 May 2026 from https://www.iras.gov.sg/taxes/individual-income-tax/employers/auto-inclusion-scheme-(ais)-for-employment-income/submit-employment-income-records

Frequently Asked Questions About Payroll Audits In Singapore