Why EY’s Shell Audit Caught the Watchdog’s Attention

Imagine. You are hosting a dinner party, the same guest keeps showing up year after year, sits in the same chair, knows where the good wine is, and at some point, someone asks, “Uh, shouldn’t this person have rotated out by now?” That, in very accounting terms, is where EY finds itself in the UK. The Financial Reporting Council (FRC), Britain’s audit watchdog, has opened yet another investigation into EY. This time, the spotlight is on EY’s 2024 audit of Shell, one of the biggest names on the FTSE 100. The issue is not the numbers. It is who signed off on them, and for how long.

The Rotation Rule Everyone Knows

Audit partner rotation is not some obscure footnote buried in an ethics manual. In the UK, listed companies must rotate their lead audit partner every five to seven years, with mandatory cooling-off periods. In the U.S., the SEC is stricter. Lead and reviewing partners rotate after five years and must sit out for another five. Shell disclosed in July 2025 that EY breached both UK and U.S. independence rules tied to those time limits. Translation: the same partner stayed on the Shell audit longer than allowed. EY agreed, admitted the breach, and told regulators it had crossed the line. Shell refiled its Form 20-Fs for 2023 and 2024 in the U.S. It stressed that the financial statements stayed exactly the same and the audit opinions remained unqualified. No restatements. No number drama. Still, regulators do not shrug at independence lapses. The FRC said its probe will examine whether partner rotation requirements were breached. EY says it is cooperating fully. That line is becoming muscle memory.

Big Client, Big Fees, Big Attention

Shell is not a small engagement that slipped through the cracks. EY has audited the energy giant for nearly a decade and was paid $66 million for its work in 2024 alone. That kind of fee comes with serious scrutiny. Independence rules exist to avoid auditors getting too cozy with management. As the old saying goes, familiarity breeds contempt. Or at least regulatory headaches. And Shell is only part of the picture. This investigation lands on top of several others already open against EY, making 2025 a rough year for the firm in the UK.

Now with Extra Paperwork

Separate from the Shell matter, the FRC is also investigating EY over the unauthorized issuance of audit reports. Two EY auditors and the firm itself are under review for signing reports they were not authorised to issue. EY self-reported the issue. It told the regulator it informed affected clients, fixed the audit files, and concluded that no changes were needed to financial statements or audit opinions. The FRC emphasized that opening an investigation does not equal guilt. Still, this is not the kind of headline any firm wants. The Conduct Committee approved the investigation in July 2025, and enforcement is handling the review. Names of the auditors have not been released. Why does this matter? Because an unauthorized audit report is a bright red flag, even if the numbers are fine. Would a lender, investor, or regulator accept “the math was right” if the signer was not allowed to sign? That question keeps compliance teams up at night.

A Crowded Docket for EY

Add Shell and unauthorized reports to an already crowded list. The FRC is still investigating EY’s audits of the Post Office, Made.com, and NMC Health. The NMC case is especially heavy. Its administrators are suing EY in London’s High Court for alleged negligence and are seeking about £2 billion in damages. Earlier this year, EY was fined £325,000 for overstaying the ten-year audit limit at Stirling Water Seafield Finance. It also paid £6.5 million for serious audit failures tied to Thomas Cook’s collapse. All in, EY has already paid more than £5 million in fines in 2025. That is real money, but the reputational hit may sting more. As Warren Buffett once put it, “It takes 20 years to build a reputation and five minutes to ruin it.” Auditors know that quote by heart.

What Professionals Should Actually Take from This

• First, independence rules are not optional. They are not “close enough” guidelines. They are bright lines, and regulators are clearly watching.
• Second, self-reporting helps but does not make the problem disappear. EY did the right thing by informing the FRC and clients. The investigations still moved forward.
• Third, this is not about cooked books. Shell’s statements remain unchanged. Audit opinions remain unqualified. That distinction matters, especially for investors tempted to panic.

So, what is the real risk? For firms, it is systems and oversight. Who tracks partner tenure across jurisdictions? Who double-checks SEC rules versus UK ethical standards? Is someone actually empowered to say, “Time’s up, you’re off the job"? For audit committees, the message is a heads-up. Ask about partner rotation. Ask early. Ask again. Do not assume the firm has it covered just because it usually does.

The Final Audit

EY is on the hook for a string of investigations that all point to one theme: controls around audit governance matter just as much as technical accounting. Numbers can be clean, and processes can still be messy. The FRC says opening a probe does not mean misconduct. Fair enough. But when multiple probes pile up, regulators, clients, and competitors start paying closer attention. The lesson for the profession is simple and not glamorous. Follow the rules by the book. Rotate when the calendar says rotate. Make independence boring again because nothing wrecks trust faster than a preventable compliance slip that everyone thought was handled.