Your Bank Just Reported a Trust Account Overdraft to the State Bar: The First-72-Hours Response Playbook for Law Firms in 2026

🏦 What Actually Triggers the Notice

Most attorneys assume the bank reports only when a check bounces. That is the narrower half of the rule. In the majority of jurisdictions, the reporting obligation attaches when an item is presented against insufficient available funds in the trust account — regardless of whether the bank honors it, returns it, or covers it from another account. Firms are routinely surprised to learn a notice went out on an item that cleared without incident.

Several ordinary events produce that condition without anyone doing anything dishonest:

⏳ Hour 0–4: Stop the Bleeding

1️⃣ Freeze discretionary trust activity

Suspend all non-essential trust disbursements and every earned-fee transfer until the account is reconciled. Do not "fix" a shortfall by moving money between client matters — that compounds the violation.

2️⃣ Get the raw data, not the summary

Pull the full bank transaction detail for the affected period, including pending items, holds, returned items, and any bank-initiated debits or fees. Ask the bank in writing for a copy of the notice it sent and the date it was sent.

3️⃣ Fund the shortfall with firm money — correctly

If client funds are short, the firm deposits its own funds to make the client whole immediately. Post it as a firm contribution to the trust account with a clear memo and a matching journal entry. Never label it a "loan" between client ledgers.

🔍 Hour 4–24: Reconstruct, Don't Estimate

The disciplinary authority is going to ask one question in several forms: on the date of the overdraft, what did each client's ledger say, and did the bank hold that much? Answering it requires a three-way reconciliation as of the overdraft date — bank balance, book balance, and the sum of every individual client ledger, tied to a single number.

Do it in this order:

1. Reconcile the bank statement to your trust book balance and identify every outstanding item.
2. Print every matter-level client ledger with a balance on that date and total them.
3. Compare the three figures. Any gap is your investigation scope.
4. Walk the gap backward transaction by transaction until you find the originating entry — the duplicate transfer, the premature disbursement, the misrouted fee.
5. Document the root cause in one paragraph, in plain English, with transaction IDs.

📁 Hour 24–72: Build the Response File

Assemble one organized package before you draft a single sentence of response. At minimum:

• The bank notice and your written request for its records
• Bank statements covering at least the three months surrounding the event
• The three-way reconciliation as of the overdraft date, plus the prior two months
• The individual client ledger for every matter touched by the affected transactions
• The deposit slip, check image, or wire confirmation for the triggering item
• Proof that any shortfall was cured with firm funds, with the date
• A short written statement of root cause and the specific control you changed

Then respond promptly, factually, and without argument. Regulators respond well to a firm that shows its work and shows a fix. They respond badly to delay, to partial records, and to explanations that cannot be tied to a ledger.

🛡️ The Controls That Prevent the Next One

Every overdraft investigation ends with the same question: what changed? Four controls do most of the work.

🔒 Real-time balance enforcement at the matter level

A disbursement should be blocked — not warned about after posting — when the matter's trust ledger lacks the funds. LawAccounting's trust compliance alerts flag negative-balance and overdraft conditions in real time, before the entry posts and before a check leaves the office.

🔄 Monthly three-way reconciliation you cannot skip

Automated three-way reconciliation that ties bank, book, and client ledgers into one provable number turns the hardest question in an inquiry into a saved report. Bank feeds across 15,000+ institutions plus AI matching mean the exercise takes minutes rather than a weekend.

🚧 Hard separation of trust and operating

Card and ACH processing configured so that fees, chargebacks, and reversals never touch the trust account. Trust-safe payment handling is a configuration decision made once, not a discipline exercised daily.

👤 Segregation of duties

The person who initiates a trust disbursement should not be the person who reconciles the account. Role-based permissions make that structural rather than aspirational — and the audit trail proves it later.