The Surprise Trust Account Review Checklist: 7 Steps to Pass a Bar Compliance Audit in 2026

🚨 Why Trust Reviews Got Real in 2026

For years, IOLTA compliance was largely on the honor system — you certified you were following the rules and hoped you never had to prove it. That era is ending. California's Client Trust Account Protection Program (CTAPP) requires annual registration, self-assessment, and a compliance certification each year, and in August 2025 the State Bar launched mandatory compliance reviews that actually inspect firms' trust records. As of January 1, 2026, financial institutions must collect and maintain the State Bar license numbers of attorneys associated with each client trust account — meaning the bar can now connect a specific account to a specific lawyer with a few keystrokes.

✅ The 7-Step Surprise Review Checklist

Use this as a quarterly drill. If you can answer "yes, here's the report" to all seven, a surprise review holds no fear.

1️⃣ Reconcile Three Ways, Every Month

Three-way reconciliation means your bank balance, your book balance, and the sum of all individual client ledgers all agree. All three must match — not two of three. This is the gold standard reviewers look for, and it must be done monthly, not quarterly.

2️⃣ Confirm No Client Ledger Is Negative

Pull a client ledger balance report and scan for any negative figure. Even one cent negative on a single matter signals that you spent one client's money on another's behalf.

3️⃣ Verify Every Disbursement Was Earned or Authorized

Trust funds are unearned until you have done the work or incurred the cost. Confirm each transfer out of trust maps to an earned fee or an authorized expense, with documentation behind it.

4️⃣ Keep Operating and Trust Strictly Separate

No commingling — ever. Operating expenses never come out of trust, and earned fees move to operating promptly and on the record.

5️⃣ Maintain a Complete, Timestamped Audit Trail

Every deposit, transfer, and disbursement needs a date, an amount, a matter, and a reason. Reviewers want to follow the money without gaps.

6️⃣ Match Your Records to the Bank's License-Number Data

With banks now reporting attorney license numbers on each trust account, make sure your internal records of which attorney "owns" each IOLTA match what your bank has on file.

7️⃣ Keep Your CTAPP Certification Current

Register, complete the self-assessment, and certify by the annual deadline. Missing the certification is itself a compliance failure, separate from how clean your books are.

🛠️ How the Right Software Makes This Automatic

Every step above is painful with spreadsheets and a generic accounting tool that doesn't understand trust accounting. LawAccounting was purpose-built for exactly this checklist.