ESG Audit Failures in 2026: The Top 5 Recycling-Related Findings That Wrecked Ratings

Updated: September 02, 2026 · 17 min read

SEBI’s BRSR Core assurance mandate — operative from FY 2023-24 for the top 150 listed companies and expanding to the top 1,000 by FY 2026-27 — has transformed recycling disclosures from a narrative exercise into a forensic audit trail. Where sustainability reports once reproduced vendor-issued certificates at face value, assurance auditors are now cross-checking those claims against CPCB authorisation databases, state pollution control board (SPCB) records, and GST-linked transaction histories. The results have been uncomfortable: across multiple assurance engagements completed in FY 2024-25, ESG audit failures in recycling-related disclosures accounted for some of the most consequential negative findings — findings that cascaded into rating downgrades, auditor qualifications, and, in several cases, regulatory referrals. This post is a post-mortem of the five patterns that appear most frequently, written for the audit committee members and sustainability heads who need to fix them before their next assurance walk.

Why BRSR Core Assurance Has Made ESG Audit Failures Expensive in 2025

SEBI’s circular dated 12 July 2023 introduced BRSR Core — a subset of 49 key performance indicators (KPIs) drawn from the Business Responsibility and Sustainability Reporting framework that must be independently assured rather than self-reported. Waste management, recycling intensity, and EPR compliance sit squarely within these mandatory KPIs. For the top 150 listed companies, assurance was compulsory from FY 2023-24 onwards. The top 250 joined in FY 2024-25, and the top 500 are required to comply from FY 2025-26.

The practical consequence is that assurance providers — typically Big Four firms or specialist sustainability auditors — are no longer accepting management representations on recycling. They are requesting primary evidence: CPCB or SPCB authorisation certificates of each recycling vendor, EPR credit statements downloaded directly from the CPCB EPR portal, GST-reconciled invoices that match tonnage claims, and in some cases, site-visit photographs or geo-tagged delivery records. When that evidence is missing, incomplete, or contradictory, the auditor flags a “material misstatement” or “limitation of scope” — both of which damage an ESG rating. For companies in the BSE 500, a qualified BRSR assurance report can trigger an ESG rating downgrade within one review cycle.

Finding #1 — The Phantom Recycler: Vendors With No Valid CPCB Authorisation

The single most common recycling-related ESG audit failure in FY 2024-25 was the discovery of “phantom recyclers” — vendors that appear in a company’s approved-vendor list and have been issuing recycling certificates for years, but whose CPCB or SPCB authorisation had either lapsed, was never obtained, or was issued for a different category of waste than what they were processing. Under the Hazardous and Other Wastes (Management & Transboundary Movement) Rules, 2016, Rule 6 mandates that any facility handling hazardous waste must hold a valid authorisation from the concerned SPCB or Pollution Control Committee. An expired authorisation is legally equivalent to no authorisation at all.

The trigger for discovery is usually straightforward: auditors query the CPCB’s Paryavaran portal or a state’s online registration system and find that the vendor’s authorisation expired 12 to 36 months before the period under review. The company’s procurement team had onboarded the vendor years earlier and assumed ongoing compliance. No one ran a renewal check. The recycling tonnage claimed — sometimes 200 to 800 tonnes per year for mid-sized manufacturers — then becomes entirely unverifiable, and the associated recycling rate disclosed in the BRSR must be restated or qualified.

The procurement failure at the root

This is not fundamentally an ESG failure — it is a procurement governance failure that ESG assurance has exposed. Companies that conduct annual vendor audits for quality (ISO 9001) routinely skip environmental compliance checks. The fix is structural: authorisation expiry dates must be tracked in the vendor master, and renewal confirmation must be a gate for invoice approval, not a post-facto check. Our full-service waste dealer partnerships include proactive authorisation renewal tracking precisely because this failure mode is so predictable.

Finding #2 — Unverifiable Certificates of Recycling That Auditors Reject on Sight

Even where vendors hold valid authorisations, a second failure pattern emerges: recycling certificates that are structurally unverifiable. Auditors are trained to look for four elements on any certificate of recycling — the authorisation number of the issuing facility, the quantity processed (by weight, in metric tonnes), the date of processing, and the waste category code (as specified in Schedule I or Schedule II of the relevant Rules). Certificates that omit the authorisation number, round quantities to suspiciously neat figures, or pre-date the actual invoice are routinely flagged.

In e-waste specifically, this problem is compounded by the E-Waste (Management) Rules, 2022, which require dismantlers and recyclers to update processing records on the CPCB’s centralised e-waste portal within a prescribed timeline. If a company claims 50 tonnes of IT equipment was recycled in Q3 FY 2024-25, an auditor can cross-check whether the named recycler’s portal account reflects an equivalent inflow during that period. Discrepancies of even 10-15% between certificate tonnage and portal records are sufficient to qualify the disclosure. For companies with large IT refresh programmes — particularly in sectors like BFSI or FMCG where laptop replacement cycles are under three years — this gap is material.

The remedy is not complicated: before accepting a recycling certificate, your environment or facilities team should download a portal-verified processing confirmation from the recycler, not just accept a printed certificate on company letterhead. If your current recycler cannot provide portal-linked evidence, that is a vendor adequacy problem, not a documentation problem. Explore our CPCB-authorised e-waste recycling service for portal-integrated reporting.

Finding #3 — Mis-Classified Hazardous Waste and the ₹1 Crore Trap

Hazardous waste mis-classification is the finding most likely to generate a regulatory referral, not merely an audit qualification. Schedule I of the Hazardous and Other Wastes (Management & Transboundary Movement) Rules, 2016 lists 84 categories of hazardous waste by process origin and chemical composition. Schedule II covers 47 categories of “other hazardous characteristics”. A waste stream that meets any criterion in either schedule must be managed under the full hazardous waste regime — SPCB authorisation for storage, Form 10 manifests for transport, and authorised treatment, storage and disposal facility (TSDF) or recycler for final processing.

The mis-classification failure typically occurs in three scenarios. First, printed circuit board (PCB) scrap from electronic goods is routed to general metal scrap dealers rather than e-waste recyclers, because the metal recovery value is higher and general scrap dealers are easier to work with. PCB scrap is listed under Schedule I, Category 11 of the E-Waste (Management) Rules, 2022 and cannot legally be processed by a facility that does not hold e-waste recycler authorisation. Second, paint sludge and solvent waste from manufacturing operations is sometimes classified as “solid waste” and disposed of at municipal sites, despite being Category 5.1 under Schedule I of the Hazardous Rules. Third, lead-acid battery scrap — which falls under the Battery Waste Management Rules, 2022 — is sold to unregistered smelters in Rajasthan or Gujarat without Form-level documentation, because the price differential can be ₹4-6/kg.

The financial exposure is real. Under Section 15 of the Environment Protection Act, 1986, mis-classified or illegally transported hazardous waste can attract penalties of up to ₹1 crore per incident and imprisonment of up to five years for responsible officials. Recent CPCB enforcement actions in FY 2024-25 — particularly in industrial clusters around Vapi, Ankleshwar, and Ludhiana — have demonstrated that these are not theoretical maximums. Boards should note that BRSR assurance auditors are increasingly cross-referencing Form 10 manifest records against waste quantity disclosures; a gap between manifests filed and tonnage claimed will surface.

Common Waste Mis-Classification Patterns and Regulatory Exposure (FY 2025)

Waste Type	Incorrect Route Used	Applicable Rule / Schedule	Maximum Penalty
PCB / e-waste scrap	General metal scrap dealer	E-Waste Rules 2022, Schedule I, Cat. 11	₹1 crore + 5 yrs imprisonment
Paint sludge / solvent waste	Municipal landfill / skip	HW Rules 2016, Schedule I, Cat. 5.1	₹1 crore per incident
Lead-acid battery scrap	Unregistered smelter	Battery Waste Management Rules, 2022	₹1 crore + EPR account suspension
Plastic packaging waste	Non-registered kabadiwala	Plastic Waste Management Rules 2016 (amended 2024)	EPR shortfall + ₹25,000/tonne environmental compensation
Used oil / lubricant waste	Burning as fuel (informal)	HW Rules 2016, Schedule I, Cat. 5.2	₹1 crore + criminal liability

Finding #4 — Scope 3 Emission Gaps Traced Back to Recycling Chain Blind Spots

BRSR Core KPI P6-E3 requires disclosures on Scope 3 greenhouse gas emissions, with specific sub-categories covering waste generated in operations and end-of-life treatment of sold products. Both categories pull directly from the recycling chain. The sustainability audit failure pattern here is subtler than a missing certificate: companies are disclosing Scope 3 figures that do not account for the actual processing route of their waste.

The typical gap: a company discloses that 300 tonnes of scrap steel was “recycled” and applies an emission factor of near-zero (on the logic that recycling avoids primary smelting). But the scrap was actually sold to a secondary steel mill in Raipur that uses an induction furnace with no energy monitoring, and a meaningful fraction was downgraded to landfill due to contamination. The auditor, reviewing transport manifests and secondary mill certification, cannot verify the processing route. The Scope 3 figure is then flagged as “based on unverifiable assumptions” — a material limitation in assurance terms.

The NITI Aayog’s circular economy roadmap, published in 2023, explicitly calls out the need for verifiable material flow data in India’s secondary materials sector. Until Indian mills and recyclers adopt systematic measurement and reporting — which many large operators are now doing under pressure from their own listed customers — the Scope 3 gap will persist. The practical answer is to require your recycling partners to provide a processing route declaration alongside each recycling certificate, confirming the facility type (electric arc furnace vs induction furnace for steel; mechanical shredding vs pyrolysis for plastics) and the disposition of any non-recyclable residue.

Finding #5 — EPR Non-Traceability: When Target Numbers Don’t Match CPCB Portal Records

Extended Producer Responsibility compliance is the area generating the most ESG audit failures in 2025, and the problem is specifically one of traceability rather than intent. Most large producers — whether under the E-Waste (Management) Rules, 2022, the Plastic Waste Management Rules, 2016 (as amended in 2024), or the Battery Waste Management Rules, 2022 — have EPR targets and have engaged PROs (Producer Responsibility Organisations) or registered recyclers to meet them. The BRSR disclosure reflects the PRO’s reported fulfilment figure. But when the auditor cross-checks that figure against the producer’s EPR account on the CPCB EPR portal, the credit balance does not match.

The discrepancy arises from a systemic weakness in how PRO-generated credits are allocated. A PRO aggregates collection and recycling from multiple producer clients, uploads tonnage to the portal, and then allocates credits. If the PRO has a backlog of uploads — which was common in FY 2024-25 given CPCB’s tightened verification protocols — the credits may appear on the PRO’s account but not yet on the individual producer’s account at the time of the audit. The producer has disclosed a 70% EPR target fulfilment (the minimum for plastic packaging under the 2024 amendment schedule) but the portal shows 54%. That 16-percentage-point gap is a material misstatement in BRSR terms, and no amount of post-hoc clarification from the PRO remedies it for the reporting year in question.

The structural fix requires producers to reconcile their portal account with their PRO’s fulfilment certificate every quarter — not at year-end. For our clients using our EPR compliance services, we provide quarterly portal screenshots alongside collection records precisely to prevent this year-end mismatch. It is worth noting that CPCB’s enhanced enforcement calendar for FY 2025-26 includes quarterly compliance reviews for plastic EPR — making mid-year reconciliation not just good practice but a regulatory necessity.

The Pre-Assurance Compliance Checklist Your Audit Committee Should Run This Quarter

The five findings above share a common characteristic: they are all detectable — and fixable — before an assurance auditor arrives, provided the sustainability or environment team runs a structured internal review. The following checklist is drawn from the documentary requests most commonly made by assurance providers during BRSR Core audits. Complete it at least eight weeks before your scheduled assurance engagement.

1. Validate recycling vendor authorisations: Download current CPCB/SPCB authorisation certificates for every recycling vendor active in the last two financial years. Confirm the authorisation category matches the waste type you are routing to them. Flag any that expired during the reporting period and obtain a gap analysis from your legal team.
2. Reconcile certificate tonnage against portal records: For e-waste, plastic, and battery recyclers, cross-check the tonnage stated on recycling certificates against the corresponding entry on the CPCB EPR portal or the relevant state portal. A variance of more than 5% requires written explanation from the recycler before the assurance period opens.
3. Audit your waste classification register: Map each waste stream generated at each plant against Schedule I and Schedule II of the Hazardous and Other Wastes (Management & Transboundary Movement) Rules, 2016. Any stream that meets a hazardous characteristic must be managed under the full manifest (Form 10) and authorised-disposal regime. Correct mis-classifications before year-end.
4. Reconcile EPR portal credits quarterly: Log into your producer EPR account on the CPCB portal and download a credit statement. Compare it against your PRO’s fulfilment certificate. If there is a lag, issue a written notice to the PRO requesting upload completion within 30 days, and retain that correspondence as audit evidence.
5. Prepare processing route declarations for Scope 3: For every significant recycled material stream — particularly steel scrap, aluminium, copper, and plastic — obtain a signed processing route declaration from the receiving facility confirming facility type, energy source, and residue disposal method. This forms the basis for defensible Scope 3 emission factor selection.
6. Verify GST invoice and HSN code alignment: Ensure that every scrap sale or recycling invoice carries the correct HSN code and that the GST treatment is consistent. Scrap sales are subject to Reverse Charge Mechanism (RCM) under specific conditions — misapplication creates both a tax risk and a procurement paper-trail inconsistency that auditors notice. Refer to our post on GST on scrap sales in India for a detailed breakdown.
7. Retain records for the CPCB-mandated minimum period: Under the Hazardous and Other Wastes Rules, 2016, manifest records must be retained for a minimum of five years. Under the E-Waste Rules, 2022, records must be maintained for a minimum of three years. Confirm your document management system enforces these retention periods before your auditor asks for historical records.
8. Brief your audit committee on negative findings before the auditor does: If internal review surfaces any of the above issues, the sustainability head should brief the audit committee before submitting to assurance. A self-identified and remediated finding is treated materially differently from one uncovered by the auditor — the former demonstrates governance maturity; the latter suggests control failure.

Related Articles

• BRSR Core Assurance: The Waste and Circularity Metrics Your Auditor Will Test
• Hazardous and Other Wastes Rules 2016: A Practical Compliance Map for Indian Factories
• Consent to Operate From Your State Pollution Control Board: Renewal Traps That Halt Production

Frequently Asked Questions

Which companies are currently required to obtain BRSR Core assurance in India?

Under SEBI’s circular dated 12 July 2023, BRSR Core assurance is mandatory for the top 150 listed companies (by market capitalisation) from FY 2023-24, the top 250 from FY 2024-25, the top 500 from FY 2025-26, and the top 1,000 from FY 2026-27. The assurance must be conducted by an independent third party — a chartered accountant firm or accredited sustainability assurance provider — against the 49 KPIs specified in the BRSR Core framework. Recycling, waste, and EPR disclosures are among the most evidence-intensive KPIs in the set.

What penalty applies if a company routes hazardous waste to an unauthorised recycler?

Routing hazardous waste to an unauthorised facility violates the Hazardous and Other Wastes (Management & Transboundary Movement) Rules, 2016, framed under the Environment Protection Act, 1986. Section 15 of the Act prescribes penalties of up to ₹1 crore per incident, with imprisonment of up to five years for the responsible person. The Ministry of Environment, Forest and Climate Change (MoEFCC) and state pollution control boards have both civil and criminal enforcement powers. Repeated violations can result in facility closure directions under Section 5 of the Act.

How long must recycling-related records be retained for BRSR assurance purposes?

Retention periods vary by waste category. Under the Hazardous and Other Wastes (Management & Transboundary Movement) Rules, 2016, hazardous waste manifests (Form 10) must be retained for five years. Under the E-Waste (Management) Rules, 2022, dismantler and recycler records must be maintained for three years. For BRSR assurance purposes, auditors typically request evidence covering the full three prior financial years — meaning a company being assured in FY 2025-26 should have records dating to FY 2022-23. Gaps in historical records are treated as a limitation of scope.

Can a company use a PRO to meet its EPR targets, and what documentation is required?

Yes. Under the Plastic Waste Management Rules, 2016 (as amended in 2024) and the E-Waste (Management) Rules, 2022, producers may engage a registered Producer Responsibility Organisation (PRO) to collect, channel, and recycle waste on their behalf. The producer’s EPR account on the CPCB portal must, however, reflect the allocated credits — not just the PRO’s account. Required documentation includes the PRO agreement, quarterly fulfilment certificates, portal-verified credit allocation statements, and underlying recycler authorisations. Without portal-level evidence, auditors will not accept PRO certificates alone.

What is the minimum EPR fulfilment target for plastic packaging producers in FY 2025-26?

Under the Plastic Waste Management Rules, 2016 as amended, plastic packaging producers are required to meet escalating annual EPR targets. For FY 2025-26, the target for rigid plastic packaging is 70% of the total plastic packaging placed on the market in the base year. Flexible packaging targets are also stepped up, with a trajectory toward 100% by FY 2027-28. Shortfalls attract an environmental compensation levy — currently set at ₹25,000 per tonne of shortfall — deposited with the CPCB. Companies are strongly advised to reconcile their portal accounts quarterly to identify shortfalls before the March year-end deadline.

Work With The National Recycling Corporation

The National Recycling Corporation is a CPCB and SPCB-authorised recycling and scrap trading company headquartered in Mumbai, with pan-India pickup and processing operations across Maharashtra, Gujarat, Karnataka, Tamil Nadu, Telangana, and Delhi-NCR. We have worked with listed companies, large manufacturers, FMCG majors, and IT enterprises to build the compliance-grade recycling infrastructure that BRSR Core assurance demands.

Every engagement includes GST-compliant invoicing with the correct HSN code, a certificate of recycling or destruction issued by an authorised facility, quarterly portal-verified EPR credit reconciliation, and documentation packages structured to meet BRSR assurance evidence standards. Our metal scrap pricing is indexed to London Metal Exchange (LME) benchmarks for copper, aluminium, and lead, ensuring fair-market prices alongside regulatory compliance — not a trade-off between the two. Our ferrous and non-ferrous metal recycling service is available for industrial and commercial scrap across all major categories.

If your sustainability audit is approaching, or if an internal review has surfaced any of the five failure patterns described in this post, the time to act is now — not after your assurance provider issues a limitation of scope. Contact us to discuss a compliance-grade recycling arrangement tailored to your waste streams, EPR obligations, and BRSR reporting calendar.

• Pan-India scrap pickup — scheduled or on-call — for ferrous, non-ferrous, e-waste, and hazardous waste streams
• CPCB-authorised disposal partners for e-waste, battery scrap, and hazardous categories
• GST-compliant invoicing with correct HSN codes and reverse-charge documentation where applicable
• Certificate of recycling and certificate of destruction accepted by Big Four assurance providers
• BRSR-grade documentation: authorisation copies, manifest records, portal screenshots, processing route declarations
• Quarterly EPR credit reconciliation with CPCB portal verification — across plastic, e-waste, and battery frameworks
• Fair-market pricing for metal scrap indexed to LME rates, with transparent weight and grade reporting

Sources and References

• Central Pollution Control Board (CPCB) — Authorisations, EPR Portals and Enforcement Notices
• CPCB — Hazardous and Other Wastes (Management & Transboundary Movement) Rules, 2016
• CPCB — E-Waste (Management) Rules, 2022: EPR Registration and Compliance
• CPCB EPR Portal — Plastic Waste Management Rules (as amended 2024): Producer Registration and Credit Tracking
• Ministry of Environment, Forest and Climate Change (MoEFCC) — Waste Management Rules and Environment Protection Act, 1986
• NITI Aayog — Circular Economy Roadmap and Material Flow Policy (2023)
• London Metal Exchange (LME) — Benchmark Pricing for Copper, Aluminium, Lead and Nickel
• Securities and Exchange Board of India (SEBI) — BRSR Core Assurance Circular, 12 July 2023