The Trust Account Audit Checklist: What State Auditors Actually Ask For

What Triggers a Trust Account Audit

Based on disciplinary records from CA DRE, NCREC, AZ ADRE, TX TREC, FL DBPR, WA DOL, and CO DRE, four conditions reliably put a property management firm on an auditor's schedule.

• NSF reports from banks. Banks are legally required to notify regulators when a trust account generates an NSF event. CA DRE and NCREC both treat a bank-filed NSF report as one of the most direct audit triggers. A single returned payment can open your entire file.
• Tenant or owner complaints. A tenant who never received a deposit refund, or an owner who disputes a disbursement shortfall, files a complaint with the state commission. NCREC case studies document many audits that began with a single phone call to the commission's consumer line.
• Random selection. Arizona ADRE routinely selects licensed firms for scheduled audits with no complaint required — the ADRE Property Management Audit Packet is a standing document designed for exactly this use. If you hold an Arizona license, you can be selected at any time.
• Prior audit findings still open. CA DRE records show that firms with a previously documented shortage — in one case $46,729.72 — are flagged for follow-up audits to confirm the deficiency was corrected. A prior finding does not close a file; it opens ongoing scrutiny.

The 24-Point Audit Checklist

The items below are drawn from state audit manuals and disciplinary records. Citations reference the source jurisdiction; regulation numbers are included where specified.

Account Setup (3 items)

• Trust account name contains "Trust" or "Escrow." The auditor pulls the bank signature card and account title. Operating funds must not be present, with one narrow exception: most states permit a nominal broker reserve — typically no more than $200 — to cover bank fees. Anything above that threshold is commingling. (NCREC)
• Security deposit escrow is a separate account from the rental receipts trust. Colorado 4 CCR 725-1 Rule 5.11 requires property managers to maintain at least two distinct trust accounts: one for rental receipts (owner funds) and one for security deposits (tenant funds). The auditor checks that deposit receipts went to the escrow account, not the operating account. (CO DRE; WA WAC 308-124E-115)
• Bank service charges are not debited directly from the trust account. The auditor reviews the bank statement line by line for any debit that is not a client disbursement. Wire fees, monthly service fees, and NSF fees charged against trust — rather than the operating account — are a standalone violation. (US Realty Training; PMI Franchising)

Record Integrity (4 items)

• Every transaction has its own journal entry — no batch summaries. The auditor samples the journal and traces individual entries to the sub-ledger, check number or ACH trace ID, and supporting document. A single line reading "daily deposits $4,320" without individual breakouts is a recordkeeping violation. (NCREC)
• Rent is recorded on a cash basis; management fees are calculated on rent actually collected. The deposit date must precede or match the ledger credit date — rent appearing before the deposit clears is a pre-posting violation. Management fees charged on scheduled rent for units that were short-paid are a billing violation. Both are checked against the signed management agreement. (NCREC; WPM Accounting; Rentvine)
• Management fee transfers are recorded as income in the company books, and transfers happen after the monthly reconciliation is complete. Every trust-to-operating transfer must appear in the company GL as management fee revenue in the same period. The auditor cross-references PMS owner ledger debits against the company QuickBooks management fee income account. Transfers made before the three-way reconciliation is finished are premature withdrawals. (WPM Accounting; Rentvine)
• Security deposits are posted to a liability account, not income, and closed periods are locked. The auditor confirms that Security Deposits Payable on the GL equals the deposit register total. Deposits coded to Rental Income overstate revenue and hide the liability. Any correction after a statement is issued must appear as a current-period adjusting entry, not a backdated edit. (Buildium; CA DRE; PMI Franchising)

Reconciliation (5 items)

• A completed three-way reconciliation exists for every month. The three legs are: bank statement balance = trust book balance = sum of all owner sub-ledger balances plus all tenant security deposit sub-ledger balances. The auditor requests the working paper for each month in the audit period. A missing month is itself a violation. AZ ARS 32-2151, CA DRE, and NCREC all have explicit three-way requirements. (ADRE; CA DRE; NCREC)
• Every reconciling item is tied to a specific transaction. "Timing difference" or "pending adjustment" are not acceptable reconciling descriptions. The auditor expects a check number, deposit date, or transaction ID for each open item. A reconciling item with no reference document is itself an ARS 32-2151 violation. (ADRE)
• Reconciliations are completed at least monthly, with no gap exceeding 45 days. The auditor checks the last reconciled date in the PMS. A gap exceeding 60 days is documented as an independent violation. (AppFolio Bookkeeping)
• No deposit-in-transit item spans two consecutive reconciliation periods. A deposit still listed as outstanding on next month's reconciliation is no longer a timing difference. The auditor treats any in-transit item older than five business days — or one that still does not appear on the subsequent bank statement — as an unresolved discrepancy. (CA DRE)
• The security deposit clearing account is at zero at month-end. The clearing account is a zero-sum pass-through used during move-out processing. A nonzero month-end balance means a refund or transfer step was reversed or mis-coded, leaving funds stranded in a suspense state. (AppFolio Bookkeeping)

Security Deposits (5 items)

• The escrow account balance equals the sum of all active tenant deposit balances. The auditor asks for the security deposit register and compares it to the bank balance. Any positive or negative variance triggers further investigation. Washington DOL auditors treat this comparison as a core audit step. (AppFolio Bookkeeping; WA DOL)
• No moved-out tenant has an unresolved deposit balance older than 30 days. The auditor cross-references the deposit register against refund records. A former tenant whose deposit remains in the register more than 30 days after move-out is a compliance gap — the funds should either be refunded or moving toward escheatment. (AppFolio Bookkeeping)
• Onboarding documentation confirms deposits transferred from the prior manager or owner. When a firm takes over a portfolio, the auditor compares each lease's stated deposit amount to the tenant ledger in the new system. A lease showing a $1,500 deposit with a $0 ledger balance means the transfer was never completed or never recorded. (APM Help)
• Stale checks older than six months are voided and filed as unclaimed property. The auditor reviews the outstanding check list. A check written more than six months ago that has not been cashed, voided, or reported as unclaimed property is a standalone violation. After one year without an escheatment filing, the exposure increases significantly. (Rynoh/Segin)
• Deposits are held and traceable at the individual tenant level — no pooled liability accounts without sub-ledgers. A single "Security Deposits Held" bucket with no per-tenant breakdown cannot be audited. The auditor must be able to tie every dollar in the escrow account to a named tenant on an active lease. (NCREC)

Disclosure and Authorization (3 items)

• Management fees match the rate and calculation method in the management agreement. The auditor pulls the signed agreement, verifies the rate and calculation base, and checks that move-in months do not show both a placement fee and a management fee unless the agreement explicitly authorizes both charges. Double-billing on the first month is a recurring finding. (APM Help)
• Owner distributions are made only after the underlying rent has cleared. The standard ACH clearing window is three to five business days. The auditor checks distribution dates against settlement dates. Distributions made before clearing, followed by an NSF return, produce a negative owner sub-ledger — which is commingling by definition. (APM Help; WA WAC 308-124E-105)
• No owner sub-ledger carries a negative balance at any point during the audit period. The auditor pulls every owner ledger and looks for any period where the balance went below zero. A negative balance means that owner's disbursement was funded by another client's money — a trust shortage. (CA DRE; NCREC)

Documentation and Reporting (4 items)

• Monthly owner statements are issued and match the ledger. The auditor requests statements for the audit period and compares them to current ledger balances. A statement that no longer matches because of a backdated correction is a problem; the fix should have appeared as a current-period adjusting entry. (Oregon OAR 863-025-0055; PMI Franchising)
• 1099-MISC forms report gross rent collected in Box 1, not net disbursements. The auditor compares the PMS gross rent total to the 1099 issued. The difference should equal management fees and owner-approved expenses. A 1099 showing only the wire amount sent to the owner is under-reported and constitutes a tax filing error. (Dinesen Tax)
• All supporting documents are retained and retrievable. For any transaction the auditor selects, they expect the original receipt, invoice, or authorization. Retention requirements vary by state, but the standard floor is three to five years. A transaction with no retrievable support document is recorded as a violation regardless of whether the transaction itself was correct. (US Realty Training)
• Every journal entry links to a specific owner or tenant sub-ledger — no orphan postings. The auditor samples the general ledger and traces each entry to a named sub-account. An entry sitting in the trust control account without an associated beneficiary label cannot be audited and is flagged as a recordkeeping deficiency. (NCREC)

The Three Findings That Hurt Most

California DRE conducted 361 trust account audits in fiscal year 2023–24. The pattern in those results applies across every state on this list.

Finding	CA FY23-24 Prevalence	Why It Compounds
Recordkeeping violations	57% of audits	Missing records make every other finding harder to contest. If the support document is gone, the auditor must assume the worst about the transaction.
Trust fund shortages	32% of audits	Shortages across those 361 audits totaled $3.5 million. A shortage means client money is missing, which triggers both regulatory action and civil liability to the affected owners and tenants.
Missing monthly reconciliations	Included in the 57% recordkeeping figure; treated as an independent violation	No reconciliation means no early warning. Every shortage in the CA DRE data could have been caught — and would have been smaller — if monthly three-way reconciliations had been completed. NCREC and ADRE both treat a missing reconciliation as a chargeable offense separate from any underlying shortage.

Commingling underpins all three. A firm that swept management fees before the reconciliation was complete, or never separated trust and operating accounts, will typically show all three findings simultaneously — a combination that draws license suspension hearings rather than simple fines.

How to Self-Audit Before They Arrive

The checklist above is also a self-audit protocol. Run it quarterly, or any time you onboard a new portfolio or transition software. Four steps cover the highest-risk areas.

First, confirm every bank account is correctly named, correctly designated in your PMS, and separated between rental receipts and security deposits. Second, complete a three-way reconciliation and verify it matches state-required format — everything else on this list depends on that being accurate. Third, pull the security deposit register and compare it to the escrow bank balance today; any variance greater than one dollar needs an explanation before an auditor asks. Fourth, review every owner sub-ledger for negative balances in the past 12 months — a negative balance is a trust shortage, corrected or not, and needs to be documented.

Our free audit readiness check runs the same structural tests against your actual data. You can also review a sample audit report to see what findings look like in practice.

The auditor's goal is not to find violations. It is to confirm that client funds are intact and traceable. A firm that can answer every question on this list with a document in hand will pass.

← All guides