Watchdog Fines Deloitte £6.05m Over Go-Ahead Audits

As the Financial Reporting Council published its sanctions statement on 8 October 2026, Penrose Foss, the FRC’s executive counsel, put the charge. “These breaches show a highly concerning pattern of failure by Deloitte to apply sufficient scrutiny to decisions and actions by GAG which were clearly questionable.”

The regulator fined Deloitte £6.05 million and issued a severe reprimand for the firm’s audits of Go-Ahead Group plc covering the financial years ended July 2016 to June 2020. Those audit reports, the FRC declared, did not satisfy the relevant requirements.

The FRC is the independent regulator of auditors in the United Kingdom and Ireland, the body charged with the quality of company reporting that investors and the public rely on. Deloitte is one of the Big Four professional services networks that dominate statutory audit of large listed groups. A fine of that size, paired with Foss’s language, marked how far short the work had fallen of the standard the watchdog enforces.

The audits under review had run through years when public money and a major rail franchise sat inside the group’s ledgers. Go-Ahead’s Govia joint venture with French firm Keolis lost the Southeastern rail franchise over a serious breach of trust. The government stripped the franchise on that ground. Roughly a year later the Financial Reporting Council opened its investigation. The probe ran about four years.

In 2021 the Department for Transport learned that London & South Eastern Railway had received erroneous overpayments from the department before Deloitte became auditor. The subsidiary kept the money without telling the DfT, despite a duty to repay. The department declined to renew the franchise, acted to recover the overpayments, and fined the subsidiary £23.5 million. Go-Ahead stopped the practice after the discovery. The overpayments remained unrepaid across the audit years.

London & South Eastern Railway began moving the set-aside sums into profit. It booked £2.4 million into profit in the year ended July 2016. Under a later franchise agreement it set aside a further £27 million from that year through to June 2020.

The FRC statement fixed on what the auditors had not grasped. “Deloitte failed to appreciate that the company was under a contractual obligation to act in good faith and...bring the overpayments to the DfT’s attention.” Professional scepticism is the auditor’s duty to test management’s claims with disciplined doubt rather than accept them at face value. Deloitte failed to ask enough questions, apply enough of that scepticism, or weigh evidence of fraud risk. The regulator recorded numerous breaches of different relevant requirements.

Go-Ahead kept over £30 million of public money it was not entitled to. The same thin challenge appeared again in two other ledgers inside the group.

London & Birmingham Railway released £5.6 million owed to the Department for Transport into profit in the year ended June 2020. The FRC said the subsidiary tried to conceal the release through the wording of a note in the accounts.

At Go-Ahead Bayern GmbH the ledger problem was valuation rather than retained subsidy. Management supplied new information that shifted the measured value of future cash flows from an €8 million loss to a €3 million gain. Deloitte did not scrutinise the change enough. A €8.1 million provision for loss-making contracts was recorded for the 2020 year; that figure was restated to €49.5 million in the 2021 accounts. The FRC closed its investigation into the FY21 audit in December 2024 without action.

The three subsidiaries named together in the findings were London & South Eastern Railway, London & Birmingham Railway and Go-Ahead Bayern GmbH. The breadth of those failures fixed the scale of what the firm would next be ordered to pay.

The original proposed fine stood at £11 million. Exceptional co-operation cut it by 10 per cent. Admissions and early disposal cut it by another 35 per cent. What remained was £6.05 million, also rendered as £6 million, £6.1 million, or roughly $7.9 million.

Penrose Foss placed that number against the public funds left exposed. “The fact that some of those decisions and actions put very large amounts of UK taxpayers’ money at risk is particularly troubling, and this is reflected in the high level of financial sanction imposed.”

A Deloitte UK spokeswoman answered for the firm. “We regret that aspects of our audit work did not meet the standards expected and have learned from this matter. We are committed to continuous improvement and the delivery of high-quality audits.” Deloitte has paid the cost of the investigation. It must still give its FRC supervisor a report on the root causes, the actions taken, and empirical evidence that those actions reduce the risk of a repeat.

On the same Thursday the Financial Reporting Council closed a separate investigation into Deloitte’s work on the financial statements of retailer Joules. After reviewing the evidence the watchdog decided not to bring any enforcement action. That file ended without a sanction on the day the Go-Ahead sanctions statement went public. The supervisor still waited on Deloitte’s written account of causes and proof the risk will not repeat.