Which States Actually Audit Attorney Trust Accounts — And What They All Expect the Same Way
- Irvine Bookkeeping
- 1 day ago
- 4 min read
By Tammy Hoang, Certified QuickBooks ProAdvisor
California's Client Trust Account Protection Program made national headlines when mandatory reviews began in September 2025, but random and structured attorney trust account audits are not a new idea. Several states have been doing this for decades — New Jersey and North Carolina both since 1985, Florida since the earliest days of IOLTA in the 1980s, Washington with random examination authority built directly into its enforcement rules. California is not the pioneer here. It is the newest state to catch up.
If you practice in more than one jurisdiction, or you are simply trying to understand what "real" trust account enforcement looks like, this comparison walks through what each of these programs actually checks — and the one requirement every single one of them shares.
New Jersey and North Carolina: The Oldest, Most Active Programs
New Jersey and North Carolina are widely regarded as leaders in proactive trust account regulation, each running a dedicated random audit team and generating real statistics on their programs. Both states launched their random audit structures in the 1980s. New Jersey pairs its Random Audit Compliance Program with an automatic bank overdraft notification system, supporting what its own Office of Attorney Ethics calls a "culture of compliance" — and it shows in the numbers: New Jersey's client fund theft reimbursements ran roughly $1.1 million over a recent twelve-month period, a small fraction of what states with less active oversight pay out in the same span.
North Carolina's program is old enough that its longtime staff auditor is simply known by his first name across much of the bar. A recent quarter's results were stark: of 60 firms audited, 60 percent were not in compliance with reconciliation requirements — not an aberration, but a typical finding after 40 years of the same program running.
Practicing in Multiple Jurisdictions?
Book a 30-minute call with Irvine Bookkeeping.
Call or Text: (949) 482-2790 | irvinebookkeeping.com
Florida: The Original IOLTA State With Real Enforcement Teeth
The Florida Bar Foundation launched the nation's first IOLTA program in 1981, and Florida requires every participating attorney to certify trust account compliance annually by August 15. Beyond the certification, Florida Bar Rule 5-1.2 gives the Bar broad authority to audit trust accounts and treats failure to produce trust records on request as a matter of contempt — a materially harsher consequence than a documentation gap carries in most professional contexts.
Since 2014, Florida has also required multi-attorney firms to maintain a written trust account plan naming exactly who is responsible for reconciliation and oversight, closing the "nobody was really in charge" gap that shows up in trust account discipline cases everywhere.
Washington: Random Examination Built Directly Into the Rules
Washington's Enforcement of Lawyer Conduct rules give the Bar explicit tiered authority: random examination of any lawyer's books and records, escalating to a full audit, and further to an investigation if findings warrant it. Selection requires no complaint and no prior trigger — the same structural model New Jersey and North Carolina pioneered, adapted into Washington's own enforcement code alongside its own overdraft notification requirement.
What Washington shares with every state on this list is the core standard: RPC 1.15A ultimately asks whether individual client ledgers can be verified independently, not just whether the pooled trust account balances.
California's CTAPP: The Newest Program, Built From These Models
California's mandatory compliance reviews began with a pilot program in early 2025 before the first mandatory notifications went out on September 29, 2025 — genuinely new by comparison to programs that have run for four decades in other states. Reporting on state trust account oversight has explicitly noted that New Jersey "stands ready to assist" other states developing random audit programs, as it recently did for California.
California's voluntary pilot, completed before the mandatory program launched, found real gaps: 83 percent of participating firms had noncompliant trust account journals, 89 percent had noncompliant client ledgers, and 83 percent had noncompliant monthly three-way reconciliations — numbers strikingly close to North Carolina's long-running 60 percent finding, suggesting the underlying compliance gap looks similar everywhere, regardless of how long a state has been auditing for it.
Every State Expects the Same Discipline. We Deliver It.
Talk with Irvine Bookkeeping about multi-jurisdiction trust accounting.
Call or Text: (949) 482-2790 | irvinebookkeeping.com
The One Requirement Every Program Actually Shares
Strip away the state-specific names, deadlines, and enforcement mechanics, and every one of these programs is checking for exactly the same thing: can the firm produce a genuine three-way reconciliation — bank statement, trust ledger, and the sum of individual client ledgers, all matching — on a documented monthly basis, with individual client funds never commingled.
Whether the trigger is California's CTAPP self-assessment, New Jersey's random computer selection, North Carolina's Bruno, Florida's annual certification, or Washington's random examination authority, the firms that pass are the ones that were already doing this every month, not the ones scrambling to reconstruct it after the letter arrives.
Every State Expects the Same Discipline. We Deliver It.
Talk with Irvine Bookkeeping about rebuilding compliant trust records.
Call or Text: (949) 482-2790 | irvinebookkeeping.com
Comments