How to Survive a State Bar Trust Account Review: A 2026 Compliance Checklist for Law Firms

Mandatory trust account compliance reviews are here, and some states now require a State Bar-approved CPA review that can cost $10,000 to $25,000. This step-by-step checklist walks law firms through the records, reconciliations, and habits that turn an audit from a crisis into a formality.

Published: 2026-07-05T12:26:41.588Z · Category: Compliance · 8 min read

💡 IN SHORT

Trust account compliance reviews are no longer rare. Several bars now conduct mandatory reviews — and in California, selected attorneys may have to hire a State Bar-approved CPA at their own expense (often $10,000–$25,000). The good news: firms that keep per-matter ledgers, run three-way reconciliation every month, and never let fees touch the trust account pass these reviews without drama. Here's the checklist.

👥 Who should read this: Managing Partners Firm Administrators Bookkeepers Compliance Officers

For years, trust account rules were enforced mostly after something went wrong. That has changed. Bars are moving to proactive, mandatory reviews, and the cost of being caught unprepared is no longer just embarrassment — it can be a five-figure CPA bill plus discipline. This guide gives you a practical, do-this-now checklist so a review becomes a formality instead of a fire drill.

📋 The Pre-Review Checklist

1️⃣ Confirm your account setup and required notices

Make sure every client trust account is a properly designated IOLTA account, and that any required regulator forms are filed on time. California, for example, requires attorneys to submit a Notice to Financial Institutions identifying the responsible licensee for each trust account by July 1, 2026. Missing a filing deadline is an easy, avoidable finding.

2️⃣ Verify you keep a separate ledger for every client and matter

This is the backbone of trust compliance. Every deposit, every disbursement, and every running balance must be documented per client. If a reviewer asks for the complete history of one client's funds, you should be able to produce it in seconds, not spend a weekend rebuilding it from bank statements.

🚫 Red Flag

If your "client ledgers" are actually just a spreadsheet reconstructed from the bank feed, you don't have client ledgers — you have a liability. Reviewers can tell the difference immediately.

3️⃣ Run three-way reconciliation — monthly, not annually

Three-way reconciliation means three numbers must agree: your bank balance, your book balance, and the sum of all individual client ledgers. When those three match every month, you have mathematical proof that no client's money is missing or borrowed. When they don't, you've found a problem while it's still small.

4️⃣ Prove that fees never came out of trust

Bank fees, credit card processing fees, and monthly account charges cannot be paid from an IOLTA account. Neither can you draw earned fees before they're actually earned and invoiced. Reviewers specifically look for these. Make sure all such charges hit your operating account.

⚠️ Watch Out

Payment processing is a frequent trap. If your merchant processor pulls its fee out of the trust account by default, you can be non-compliant without ever making a "real" mistake. Use a processor that separates trust and operating, and pulls fees only from operating.

5️⃣ Timestamp everything with an audit trail

Every transaction should show who did what and when. Manual, editable records are a weakness; an immutable audit trail is a strength. If you can hand a reviewer a clean, chronological, tamper-evident history, most questions answer themselves.

🛠️ How the Right Software Turns This Into a Non-Event

Every item on the checklist above is either automatic or trivial when your accounting system was built for legal trust rules — and painful when it wasn't. This is exactly where generic tools like QuickBooks fall short: they don't understand per-matter trust ledgers or three-way reconciliation.

🔄

Automated Three-Way Recon

LawAccounting reconciles bank, book, and client-ledger totals continuously, so the three numbers that must match, do.

📒

Per-Matter Trust Ledgers

Every client and matter has a complete, exportable transaction history — ready to hand to a reviewer on request.

🚧

Overdraft Prevention

Disbursements that would push a client ledger negative are blocked before they post — the most common violation, eliminated.

🧾

Immutable Audit Trail

Every entry is timestamped and attributed, giving you tamper-evident records that stand up to scrutiny.

💡 Pro Tip

Don't wait for a review notice. Run a full three-way reconciliation this month and fix any gap you find. A firm that reconciles monthly has, in effect, already passed its next audit.

📊 Did You Know?

A negative balance in a single client ledger is the most-cited trust finding — and it's fully preventable with software that blocks the disbursement in real time instead of catching it weeks later.

✅ Key Takeaways

Mandatory trust reviews are here, and unprepared firms can face CPA-review costs of $10,000–$25,000 plus discipline.
Keep a separate, complete ledger for every client and matter — not a spreadsheet rebuilt from the bank feed.
Run three-way reconciliation monthly; matching bank, book, and client-ledger totals is your proof of compliance.
Never let bank or processing fees touch the trust account, and confirm your payment processor pulls fees from operating.
Purpose-built legal accounting automates the checklist and turns a review into a formality.

Be Audit-Ready Every Single Month

LawAccounting gives law firms automated three-way reconciliation, per-matter trust ledgers, and real-time overdraft prevention — so a State Bar review is a formality, not a fire drill.

Schedule Your Demo →