# Unrecorded Bank Accounts: How Auditors Find Them

- Author: PreciseBankFlow (https://www.precisebankflow.com)
- Published: 2024-11-26
- Updated: 2024-11-26
- Category: Bank statements in an audit
- Canonical: https://www.precisebankflow.com/blog/unrecorded-bank-accounts

> How auditors find unrecorded bank accounts: transfers to unknown accounts, interest and fee clues, confirmations and the questions to ask management.
Unrecorded bank accounts are accounts the client holds but never put in the general ledger. Auditors find them through transfers on known statements that go to unknown account numbers, stray interest, fee or tax documents, confirmations that list extra accounts, and direct questions to management. Together these clues cover most ways an account stays hidden.

## Why an unrecorded bank account matters to the audit

An unrecorded bank account matters because everything that passes through it is outside the books. Sales can be deposited there and never recorded, expenses can be paid from it without approval, and loans secured on it can go undisclosed. Even an honest forgotten account means cash on the balance sheet is understated.

The audit risk is a completeness risk, which is harder to test than existence. Existence tests start from what the client recorded and ask whether it is real. A missing account offers nothing to start from. So the procedures here look for traces the account leaves in places the client does not control, or in documents the client did record for some other reason.

There are three broad reasons an account goes unrecorded. Some accounts are simply forgotten: a savings account opened for a project, a deposit account from an acquisition, an old payroll account nobody closed. Some are kept off the books on purpose by someone with signing authority who wants a place to hold diverted money. And some belong to the business in substance but were opened in an owner's or employee's name. The first is a cleanup job. The second and third are fraud risks, and the response is very different.

## Transfers to unknown accounts in recorded bank statements

The known statements are the best map to unknown accounts. Money rarely sits in a hidden account untouched: it arrives from a recorded account, leaves to one, or both. Scanning every transfer on the recorded statements and matching each receiving or sending account number to the client's list of accounts finds the gaps.

Build the list of known accounts first, with the bank, the account type and the last four digits. Then pull every transfer line from every statement in the period. Most will read like "TRANSFER TO SAV ...4411" or "WIRE OUT ACCT ENDING 0912". Tick each one against the list. Anything that does not tick is either a third party, which should have a payee and support, or an account the client owns and did not list.

Pay attention to these:

- **Transfers to an account at the same bank** with only an internal reference. Same-bank transfers are often to accounts in the same customer profile.
- **Round transfers in both directions** with the same counterparty account. Money that goes out and comes back looks like a holding account.
- **Deposits of customer receipts that are smaller than expected.** If sales receipts for a period are lower than invoicing suggests, some customers may be paying into another account.

The last point links to the receipts side of the audit. The post on [cash receipts audit procedures](/blog/cash-receipts-audit-procedures) covers tracing customer payments to deposits, which is where diverted receipts usually show up first.

## Interest, fee and tax form clues to unrecorded bank accounts

Small items leave a trail when large ones do not. A fee for services on another account, an interest tax form from a bank the ledger never mentions, or a loan agreement naming a deposit as collateral can each point to an account. Look for documents about money, not just statements of it.

The checklist below lists the clues and where to look. It is an example structure to adapt to the client.

| Clue | Where to look | What it may mean |
| --- | --- | --- |
| Interest income tax forms from an unlisted bank | Tax files, prior-year returns, mail | An interest-bearing account at that bank |
| Fee lines describing services on another account | Recorded statements, fee analysis | An account in the same relationship |
| Loan agreements with a cash collateral or offset clause | Debt files, board minutes | A pledged deposit account |
| Board minutes authorizing a new account or signatory | Minute books | An account opened during the year |
| Credit card or merchant agreements naming a settlement account | Vendor contracts | An account receiving processor payouts |
| Checks with an unfamiliar account number in the MICR line | Cleared check images | A second checking account |
| Bank statements arriving at an employee's home address | Inquiry, mail log | An account outside finance's view |

Example structure only.

Do not stop at the documents the finance team gives you. Ask for the mail log or a week of unopened bank mail, and look at the bank names in the accounts payable and receivable masters. A bank appearing anywhere in the records that does not appear on the account list is a question to ask.

## Can bank confirmations reveal an unrecorded bank account?

A bank confirmation can reveal unrecorded accounts at the banks you send it to, when the request asks the bank to report any other accounts it holds for the client, not only the ones you listed. It cannot reveal an account at a bank you did not know about, and it cannot find an account opened in someone else's name.

Fill in the request with every account you know of at each bank, and leave space for the bank to add others. When the reply comes back, compare its list with yours line by line. An extra account on the reply is direct evidence; a reply that only repeats your list does not prove there are no others, especially if the bank answers just the accounts it was asked about. The guide to the [bank confirmation request](/blog/bank-confirmation-request) explains how to send one and what the reply covers.

To widen the net, send confirmations to every bank the client had any dealing with during the year, including those where the client says all accounts were closed. A bank that confirms a closed account also confirms its closing date and final balance, which shows where the money went.

## Questions to ask management about bank accounts

Asking management directly is an essential step, and it works best when the questions are specific, put to more than one person and recorded. Ask who can open accounts, which accounts were opened or closed during the year, whether any accounts are held in another name for the business, and who receives the statements.

Good questions, adapted to the client:

1. Which banks does the company have any relationship with, including loans, cards and merchant services?
2. Were any accounts opened or closed this year? Who authorized it?
3. Does anyone hold a bank account in their own name that is used for company money, such as a petty cash or event account?
4. Who receives paper or electronic statements for each account?
5. Has the company acquired another business whose accounts are still open?
6. Are there accounts used only occasionally, such as a tax reserve or a deposit account?

Ask the controller, the owner and someone outside finance, such as an operations manager. Differences in the answers are informative. An owner who mentions a reserve account the controller has never heard of has told you where to look next, and why the finance team could not have reconciled it. Put the key answers in the management representation letter, so the client confirms in writing that all bank accounts have been disclosed.

## What happens after an unrecorded bank account turns up?

Once an unrecorded account turns up, get its statements for the whole period, ideally from the bank, and work out what passed through it. Then decide whether it was forgotten or hidden. The answer decides whether you are dealing with a correcting entry or a fraud investigation that changes the risk assessment for the whole engagement.

### First steps

- Get the statements and a confirmation of the balance.
- List every deposit and withdrawal, and trace each to the recorded accounts, to customers or to vendors.
- Identify the signatories and who opened the account.
- Record the account in the ledger and reconcile it, as for any balance sheet account; the post on [balance sheet account reconciliations](/blog/balance-sheet-account-reconciliations) covers that routine.

### When an unlisted account is harmless

Many unrecorded accounts turn out to be dormant accounts with small balances: an old savings account with 112.38 in it, or a deposit account left over from a lease. If the activity is minimal, the signatories are the right people and nothing passed through it during the period, the fix is to record and reconcile it, report the control gap and move on.

The account is not harmless if it received customer money, paid anyone or was opened by someone who should not have opened it. Then treat it as a fraud risk: extend testing to revenue and disbursements, tell those charged with governance and consider whether management's other representations still hold. Add the account to the bank reconciliation program described in the [audit procedures for bank reconciliation](/blog/audit-procedures-for-bank-reconciliation), so it is reconciled and confirmed each year from now on.

Scanning every transfer line for unfamiliar account numbers is easy to skip when statements arrive as PDFs. [PreciseBankFlow](/get-started) is built to extract each statement line with its description and export the lines to Excel, so transfers to account numbers outside the known list can be filtered instead of read one page at a time.