Transfer Pricing Risk Assessment: India Steps (2026)

A transfer pricing risk assessment is a structured review that scores how likely your intercompany prices are to be challenged by the tax authority, and how much that challenge could cost.

It matters because Indian transfer pricing rules require related-party transactions to meet the arm's length principle, and when your booked margin drifts from the agreed margin, the gap becomes an assessment risk.

You generally run the assessment before you file, so you can fix documentation and pricing while there is still time. This guide gives India-facing groups, typically IT and ITeS exporters and captive GCCs, a repeatable method, a risk heatmap, an indicator checklist and the current penalty and threshold numbers.

The single most important update for this cycle is a change of law, so start here before you score anything.

For AY 2026-27 (financial year 2025-26), the established position holds: your accountant's report is Form 3CEB under Section 92E of the Income-tax Act, 1961, filed one month before the return due date. That has not changed for this year (source: incometax.gov.in).

From Tax Year 2026-27, meaning income earned on or after 1 April 2026, the new Income-tax Act, 2025 and the Income-tax Rules, 2026 take effect. The accountant's report moves to Form No. 48 under Section 172 of the 2025 Act, replacing Form 3CEB. In the old vocabulary, that first Form 48 filing lands in what was called AY 2027-28, not AY 2026-27, so groups filing this year still use Form 3CEB (source: incometax.gov.in). Form 48 is structured, ID-linked and machine-readable, so it reconciles transaction by transaction against your tax audit report and return.

One more current change: Safe Harbour scope was widened by CBDT Notification No. 21/2025, dated 25 March 2025. The eligibility ceiling rose from ₹200 crore to ₹300 crore, lithium-ion batteries for electric and hybrid vehicles were added to core auto components, and the rules apply for AY 2025-26 and AY 2026-27 (source: incometax.gov.in). If you sit under the ceiling, opting into a safe harbour margin can take the pricing dispute off the table for those years.

A transfer pricing risk assessment is the process of identifying every related-party transaction, testing whether its price sits within an arm's length range, and rating the chance and size of an adjustment.

It sits inside the wider discipline of transfer pricing in taxation, which governs how connected companies price goods, services and financing between them. The assessment is the risk lens: it tells you where an adjustment is likely and where your file is thin, so you can act before a notice arrives.

It differs from a transfer pricing assessment by the tax officer. The officer's assessment is the formal review that can end in an adjustment. Your risk assessment is the internal rehearsal you run first.

Related-party billing is the norm for IT and ITeS captives, so almost every rupee you invoice a parent is in scope. When the margin you book does not reconcile with the margin you agreed, or your file cannot prove the arm's length basis, the officer can restate income and stack penalties on top.

For groups managing transfer pricing in multinational companies, the exposure compounds across entities and years.

A weak assessment invites the everyday transfer pricing problems that drag on for years

A thin assessment does not just risk one adjustment. It seeds the recurring transfer pricing problems that keep a captive in litigation: disputed comparables, mismatched agreements and margins the file cannot defend. Catching these early is cheaper than arguing them at appeal.

Transfer pricing risk usually falls into six buckets. Knowing the type points you to the right fix.

• Transactional or markup risk: The price or cost-plus margin sits outside the arm's length range.
• Documentation risk: The Local File, master file or intercompany agreements are missing, late or contradictory.
• Compliance risk: A form is filed late or wrong, or a threshold is crossed and ignored.
• Operational risk: Actual conduct does not match the functions, assets and risks written into the agreement.
• Permanent establishment risk: Cross-border activity creates a taxable presence you did not plan for.
• FX and margin-slippage risk: Currency conversion erodes the realised margin so the booked figure drifts below the agreed cost-plus rate.

Score each area on likelihood and impact, then start with the red cells. This heatmap is the backbone of the assessment.

Beyond the heatmap, Indian tax administration tends to focus on a recognisable set of indicators. Treat this as a pre-filing checklist: any yes is a cell to investigate. Deep coverage of how cases get picked, and what to expect once selected, sits on our companion guide to the transfer pricing audit.

Run these six steps in order. Each one narrows the risk before the next.

• Map every intercompany transaction. List services, goods, financing, royalties and cost allocations by entity, currency and value. Nothing is out of scope until you have looked at it.
• Run a FAR analysis. Document the functions performed, assets used and risks borne by each party. This is where contract-versus-conduct gaps surface.
• Test arm's length pricing and margins. Pick an accepted method and benchmark against comparables. If you are unsure which method fits, our guide to transfer pricing methods walks through CUP, RPM, CPM, PSM and TNMM and when each is flagged.
• Check documentation readiness. Confirm the Local File, master file and intercompany agreements exist and agree with each other. Our checklist of transfer pricing documentation covers what to hold and by when.
• Score likelihood and impact. Use the heatmap and the indicator checklist to rate each transaction, then rank the red cells.
• Build mitigation and monitoring plan. Fix pricing, close documentation gaps, and set a cadence to re-score. The output feeds directly into your transfer pricing report.

The assessment only means something against the real numbers. These apply as of 2026 (source: incometax.gov.in); confirm the version for your assessment year.

A secondary adjustment under Section 92CE also bites when a primary adjustment exceeds ₹1 crore and the excess is not repatriated: the money is treated as a deemed advance carrying interest under Rule 10CB (an SBI one-year MCLR plus a spread for rupee cases). Verify the current spread before you model it.

The documentation thresholds decide who has to file at all:

Consider an Indian GCC billing its US parent at cost-plus 15% on a ₹40 crore operating base. The agreed invoice is ₹46 crore.

The parent remits USD. The bank converts at roughly 40 paise below the mid-market rate. On a ₹46 crore receivable that conversion costs about ₹19 lakh, so realised revenue falls short and the operating margin slips from the agreed 15% to about 14.5%.

That half-point looks small. In an assessment it is not. The booked margin no longer reconciles with the agreed cost-plus rate, which is exactly the indicator an officer looks for. The pricing was defensible; the settlement mechanics quietly broke it. This is the FX and margin-slippage cell in the heatmap, and it is fixable at the point of payment rather than at appeal.

This is where a risk assessment meets the money trail. Every related-party receipt into India leaves a record, and that record either supports your arm's length position or undermines it.

Settling at a transparent mid-market rate with visible fees keeps realised revenue in line with the agreed margin, so the FX cell in the heatmap stays green. Beyond the rate, three pieces of documented evidence reconcile booked margin to agreed margin:

• Auto-issued eFIRA: Every payment carries an eFIRA as proof the foreign currency actually arrived, which is the receipt an officer expects to see. The related FIRC sits alongside it for GST and audit needs.
• The correct purpose code: Tagging each receipt with the right purpose code, typically the software or ITeS service codes, matches the money to the intercompany service you benchmarked.
• A clean, dated settlement record: A receiving account that logs rate, fee and date gives you a documented arm's length money trail, rather than a bank statement you have to reverse-engineer later.

Xflow holds the final RBI Payment Aggregator Cross-Border authorisation for exports and imports, as of February 2026, and is ISO 27001 and SOC 2 certified. None of this replaces your TP study. It makes the study's numbers provable.

The assessment is only as good as its inputs. Comparables age quickly, so a benchmark that held last year may not this year. Intercompany agreements drift from actual conduct as teams reorganise. Data sits across finance, legal and operations, and pulling it together is often the step that takes longest. And the law itself is moving, so an assessment built on the 1961 Act needs a second read against the 2025 Act for the years it now covers.

Done early, the assessment turns surprises into decisions. You price with a documented basis, you know your exposure before you file, and you can weigh a safe harbour or an APA with real numbers. It also shortens any future enquiry, because a reconciled file answers most questions before they are asked. These are the habits behind good transfer pricing best practices.

Move from a one-off review to a standing process. Set a policy that fixes methods and margins by transaction type. Assign an owner for benchmarking, documentation and filing dates. Re-score quarterly, not annually, so margin drift shows up while you can still act. And keep the money trail clean at source, so cross-border tax compliance is a by-product of how you get paid rather than a year-end scramble.

Acquisitions inherit risk. Before you close, review the target's intercompany agreements, its benchmarking and its open assessments. A target with loss-making captives or unreconciled margins carries a liability that survives the deal. Fold the target into your framework on day one, and re-run the risk assessment on the combined structure.

A transfer pricing risk assessment is your rehearsal before the officer's assessment. Map the transactions, run FAR, test the margins, ready the documentation, score with the heatmap and indicator checklist, then fix and monitor. For this cycle, file Form 3CEB for AY 2026-27 and prepare for Form 48 from Tax Year 2026-27. Keep the settlement clean so the money trail proves the margin you booked.