How to Run a Client Trust Account Self-Audit Before Your CTAPP Review: The 12-Point Checklist That Saves California Firms $10K-$25K in 2026

Why This Matters Now

The State Bar of California’s Client Trust Account Protection Program (CTAPP) annual reporting deadline falls on March 30 each year. Since August 2025, the Bar has run mandatory compliance reviews of selected attorneys’ trust accounts. Selected firms must hire a State Bar-approved CPA at their own expense — and the typical cost runs $10,000 to $25,000, more if the books are messy.

Beyond the dollar cost, a CTAPP review can surface findings that escalate to the Office of Chief Trial Counsel. The cheapest defense is preventive: a real self-audit, documented monthly, that proves the firm already does what the Bar would check.

The 12-Point Self-Audit Checklist

1. Three-Way Reconciliation Performed Monthly

Bank statement balance, cleared/outstanding items, and the sum of every individual client ledger must all reconcile. Differences must be zero — not “small,” zero.

2. Designated Licensee Documented

The Designated Licensee must be on file with both the Bar and the financial institution, with documented signature authority and supervisory role.

3. Client Trust Listing Aged and Reviewed

Every client with a trust balance must be listed, aged, and reviewed monthly. No “Unidentified” or “Adjustments” line items — those are audit findings on day one.

4. No Negative Balances at the Client Level

One client’s funds may not cover another client’s matter, ever. A single negative client ledger is among the most common CTAPP findings.

5. All Earned Fees Transferred to Operating Within Reasonable Time

Earned fees sitting in trust commingle. Document the trigger and the timing for every operating transfer.

6. All Trust Disbursements Tied to a Matter

Every check, ACH, and wire out of trust must be traceable to a specific client matter and a specific authorization.

7. Bank-Issued IOLTA Account, Properly Titled

The account must be a Bar-eligible IOLTA, titled exactly as the Bar requires, with interest sweeping to the IOLTA program.

8. Account Reconciliation Reviewed and Signed by the Designated Licensee

A reconciliation that is performed but not reviewed and signed is incomplete. The reviewer must be the Designated Licensee or their direct supervisor.

9. No Cash Withdrawals Ever

ATM withdrawals, debit card use, or cash-back transactions on a trust account are per-se compliance failures.

10. Bank Notifications of Insufficient Funds Routed to the Bar

Under California rules, banks must notify the Bar of any overdraft on an attorney trust account. Confirm your bank has the correct notification setup on file.

11. Stale Balances Investigated and Resolved Quarterly

Trust balances older than 12–18 months without activity must be investigated. Unclaimed funds must be escheated under California’s unclaimed property law where applicable.

12. Documented Internal Control Procedures

A written policy describing who can deposit, withdraw, sign, and reconcile — kept current — is part of every CPA reviewer’s first request.

Why Generic Accounting Software Makes This Harder Than It Should Be

QuickBooks and other generic platforms can technically track trust balances, but they do not enforce client-level isolation, three-way reconciliation, or the audit trail the Bar expects. Most CTAPP findings we see at firms using generic accounting software fall into three categories: missing client-level ledger detail, no documented three-way reconciliation, and bank-feed reconciliation that quietly nets across clients.

The Monthly Cadence That Keeps Firms Out of Trouble

The Three Findings That Trigger Escalation

Not every CTAPP finding goes to discipline. But three almost always do:

1. Negative client ledger balances at any point in the audit period.
2. Cash withdrawals or debit-card activity on the trust account.
3. Failure to perform monthly three-way reconciliation.

Any one of these in a CTAPP review packet typically means the file leaves the CTAPP unit and lands with Chief Trial Counsel. Avoiding all three is a software question, not a willpower question.