Deloitte Fined More Than £6 Million by FRC Over Go-Ahead Audits

The Financial Reporting Council fined Deloitte LLP £6.05 million ($7.9 million) on October 8, 2026, over its audits of the UK transport operator Go-Ahead Group plc for the financial years 2016 to 2020, in a Deloitte FRC fine Go-Ahead case that also carries a severe reprimand.

The FRC’s Executive Counsel issued a Final Settlement Decision Notice under the Audit Enforcement Procedure. It found that Deloitte failed to enquire sufficiently, failed to apply sufficient professional scepticism and failed to evaluate evidence pointing to fraud risk factors at Go-Ahead subsidiaries.

For audit partners and finance directors, the notice is a detailed account of what the regulator expects when a client’s management holds money or provisions that look wrong. It also shows how the FRC prices a settlement: a starting fine of £11 million, reduced by 45%.

What the FRC decided on Deloitte and Go-Ahead

The notice covers the audits for the years ended 2 July 2016 through 27 June 2020. The FRC declared that Deloitte’s audit reports for those five years did not satisfy the relevant requirements.

Alongside the fine and the published severe reprimand, the FRC ordered Deloitte to prepare a report for its FRC Firm Supervisor. The report must set out the root causes of the failures, the actions taken and evidence of how effective those actions have been.

Deloitte also paid the costs of the investigation. The notice names no individual partner or staff member as subject to findings, and no individual was fined.

The FRC opened the investigation in April 2022. Its scope also took in the audit for the year ended 3 July 2021, which Executive Counsel closed in December 2024 without enforcement action.

“These breaches show a highly concerning pattern of failure by Deloitte to apply sufficient scrutiny,” said Penrose Foss, Executive Counsel and Executive Director of Investigations and Enforcement at the FRC.

How the Deloitte FRC fine was calculated

The FRC set a starting fine of £11 million. It applied a 10% discount for exceptional co-operation and a 35% discount for admissions and early disposal, which together equal 45% and produce the final £6,050,000.

The settlement route is the same one the regulator has used in earlier Deloitte cases. In April 2022 the FRC fined the firm £1.45 million over its audit of Mitie Group, after an initial £2 million was reduced for early admissions.

The £6.05 million is a large sum against that precedent, and the FRC tied it to the amount of public money at stake.

The breaches: rail overpayments and a German loss

The findings centre on three subsidiaries. Each involved a point where Deloitte’s audit risk assessment identified a significant risk, yet the evidence went unchallenged.

At London & South Eastern Railway, Deloitte did not challenge the retention of erroneous overpayments from the Department for Transport. The company released £2.4 million to profit in FY16 and accrued a further £27 million across FY16 to FY20, rather than returning the money.

The FRC found that the subsidiary disguised the nature of those accruals in FY19 and FY20, and that the retention breached the good-faith terms of its franchise agreements.

At London & Birmingham Railway, the company released £5.6 million of accruals to profit in FY20. It worded the financial statement note so that the release was concealed.

At Go-Ahead Bayern, the German rail business, Deloitte gave insufficient scrutiny to revised cash flow figures. The changes turned a projected €8 million loss into a €3 million gain.

A €8.1 million onerous contract provision was recognised for FY20. It was later restated to €49.5 million in FY21.

Why the Go-Ahead audit failures matter to firms

The notice is a study in professional scepticism under pressure. Management explanations for retained cash and falling provisions were accepted where the evidence called for challenge, and the pattern ran across five consecutive audits rather than one.

Foss said that putting very large amounts of UK taxpayers’ money at risk was “particularly troubling”. The FRC reflected that in the size of the sanction.

The practical lessons are familiar but specific. Provisions that move sharply between years, accruals whose descriptions change and projections that are revised after a loss appears all need independent evidence. Documentation of that work, in a clear audit trail, is what a regulator will test later.

Firms preparing for inspection can use the Accountio audit preparation pack to structure that file. Teams comparing tooling for testing and documentation can start with the best audit software on the site.

The case matters beyond the UK. The standards at issue, professional scepticism and fraud risk evaluation, are the same ones that US and EU inspectors apply.

Deloitte’s response and the client relationship

“We regret that aspects of our audit work did not meet the standards expected and have learned from this matter,” Deloitte UK said in a statement. “We are committed to continuous improvement and the delivery of high quality audits.”

Go-Ahead’s ownership has changed since the audits in question. A consortium led by Kinetic Group and Globalvia Inversiones SA took the company private for £714 million in 2022.

Neither the FRC notice nor Deloitte’s statement says whether Deloitte remains Go-Ahead’s auditor.

The DfT dimension predates the fine. The department penalised the Govia joint venture £23.5 million after it was stripped of the Southeastern franchise, an episode that preceded the FRC investigation.

What comes next for Deloitte

The root cause report to Deloitte’s FRC Firm Supervisor is the next step the notice requires. The FRC’s full Final Settlement Decision Notice sets out the remedial obligations in detail.