Auditing Cash and Cash Equivalents: Common Misstatements to Watch For
6/27/2026
Cash is audited badly at more engagements than any other account, and the reason is a reasonable-sounding assumption: cash is confirmable, therefore low risk, therefore assign it to the newest person with a checklist.
The assumption inverts the actual risk. Cash is where fraud concentrates, the misstatements available in it are simple and material, and the assertions that matter are not the one a confirmation addresses.
The Assertion Most at Risk Is Not Existence
A confirmation provides good evidence that a disclosed account exists and held a stated balance. That is the easy part.
For cash, the higher risks are:
Completeness — accounts, or balances, that were not disclosed. A confirmation cannot address this, because you can only confirm accounts you know about.
Classification and presentation — restricted cash presented as unrestricted, an overdraft netted against a positive balance rather than presented as a liability, and instruments classified as cash equivalents that do not qualify.
Rights — cash pledged, restricted, or subject to a compensating balance arrangement.
Cutoff — the period in which receipts and disbursements were recorded.
An audit program weighted toward existence has weighted itself toward the assertion least likely to be wrong.
Confirmations, Done Properly
The auditor controls the process. Addresses obtained independently rather than from the client, sent by the auditor, received directly by the auditor. As our post on audit red flags notes, a response arriving through the client, from a personal email domain, or with a reply-to address the client controls is not evidence.
Ask about more than the balance. The standard confirmation form addresses accounts and also loans, lines of credit, pledges, and guarantees — which is how an undisclosed borrowing or a pledge of the account is discovered. An auditor who confirms only balances has forfeited that.
Prefer direct access to the source. Obtaining statements through a bank portal the auditor accesses, or through a third-party service, is materially better evidence than a client-provided statement — because altering a document requires no sophistication.
Understand what the confirmation does not cover: unrecorded accounts, informal restrictions, arrangements not documented with the institution, and the timing of items around period end.
The Reconciliation Is the Centerpiece
Not the confirmation. Test the reconciliation, and test it rather than read it.
Recompute it. Balance per bank, plus deposits in transit, less outstanding checks, plus or minus other items, equals balance per books. Auditors who tick and accept an arithmetic error do exist.
Test outstanding checks to the subsequent period's statement. The classic manipulation is a fictitious or overstated outstanding check, which reduces the book balance without any real disbursement — or conceals one. Each material outstanding check should be traced to its clearing in the subsequent statement, and any that never cleared should be explained.
Test deposits in transit to the subsequent statement, with attention to timing. A deposit in transit at year end should clear in the first days of the new period. One that cleared two weeks later was not in transit at year end — it was recorded before it existed, which overstates cash and usually overstates revenue.
Investigate old outstanding checks. Items outstanding for months should have been voided or escheated, and their presence artificially reduces cash while overstating liabilities.
Scrutinize the "other reconciling items" line. This is where plugs live. Any unexplained item, and any item that recurs at the same amount across periods, needs a specific answer.
Kiting
Still worth testing wherever there are multiple accounts, because it still happens.
Kiting exploits the float between accounts: a transfer is recorded as a receipt in one account in the period and the corresponding disbursement is not recorded until the next, so the same funds appear in two places at once and cash is overstated.
The procedure: build an interbank transfer schedule covering the days on either side of period end. For each transfer, list the disbursing account, the receiving account, the date recorded as disbursed, the date recorded as received, and the dates each actually cleared per the statements. The disbursement and the receipt must fall in the same period. Any transfer where they do not is either an error or the thing you are looking for.
This takes an hour where multiple accounts exist and it is skipped routinely.
Held Checks — the Understatement Nobody Looks For
An elegant manipulation that improves the balance sheet without moving any money.
Checks are written and recorded as of year end, reducing both cash and accounts payable, and then not released until the new period. The result: cash and payables are both understated, and the current ratio improves — which is precisely the metric a lender is reading.
The procedure: examine the final checks written before period end and establish whether they were actually mailed or released. Compare the check date to the postmark or the transmission record where available, and ask the person who releases payments rather than the person who records them. A signed check in a drawer is not a disbursement.
Lapping
Receipts applied to the wrong customer to conceal a theft, with each subsequent receipt covering the previous gap.
Detection: compare the remittance detail — who actually paid — to the customer accounts credited, for a sample of receipts around the period end and in periods with unusual activity. Confirming customer balances also surfaces it, since a customer will dispute a balance that was paid.
Completeness: Finding Accounts Nobody Mentioned
The highest-value cash procedure and the one most often omitted, because it requires looking rather than confirming.
The client's list is the starting point, not the answer.
Where undisclosed accounts surface:
Interest income that does not reconcile to the balances you know about — an account earning interest you cannot trace is an account you have not confirmed. This is the single best analytical test in the area.
Cash disbursements to financial institutions — fees, transfers, and loan payments to an institution not on the account list.
The general ledger for accounts opened or closed during the year, including any account with activity and a zero year-end balance, which will not appear on a year-end listing at all.
Loan agreements, which frequently require accounts to be maintained at the lender.
The prior year's confirmations, compared to this year's list.
Board minutes authorizing accounts or signatories.
Asking, specifically, including about accounts in other names, accounts at institutions where the entity has borrowings, and accounts held for a specific purpose.
And the completeness assertion applies to a zero-balance account too, because it can be the conduit rather than the destination.
Classification: Where the Errors Are
Overdrafts. A negative balance is a liability, not negative cash, and it should not be netted against positive balances at other institutions. Netting improves the current ratio and is wrong.
Restricted cash. Cash restricted as to withdrawal or use — escrows, sinking funds, security deposits, amounts pledged, and cash held for a specific purpose — is not unrestricted cash, and both the classification and the disclosure matter.
Compensating balances, required under a borrowing arrangement, which have their own disclosure implications.
Cash equivalents, which must be short-term, highly liquid, readily convertible to known amounts, and so near maturity that interest rate risk is insignificant — with the maturity tested from the acquisition date. The recurring errors: an instrument with a longer original maturity classified as an equivalent because it is now near maturity; a money market fund with redemption restrictions; and an investment the client simply calls cash.
Foreign currency balances, translated correctly and assessed for repatriation restrictions — cash in a jurisdiction that limits transfers is arguably restricted, and it is a disclosure the entity may not have considered.
Analytical Procedures Worth Running
Interest income against average balances, per above — the test that finds unrecorded accounts.
The relationship between cash, revenue, and receivables across periods. Revenue growing while cash and receivables do not is a question.
Days cash on hand, trended.
Bank fees against activity volumes, which can reveal accounts or transaction levels inconsistent with the records.
Structured coverage is available through the audit training courses catalog, internal auditing training, the Certificate in Forensic Accounting, Fraud Examination, the fraud and forensic accounting training catalog, and the Certificate in Financial Reporting and Analysis.
Petty Cash and Cash on Hand
Usually immaterial to the financial statements and worth a look anyway, because it is where small, persistent fraud lives — and because an entity with poor petty cash controls frequently has poor controls elsewhere. A surprise count, and a review of the reimbursement documentation, takes twenty minutes.
Disclosure
Restrictions on cash and their nature. Compensating balance arrangements. Concentration of credit risk where balances exceed insured limits at an institution — a disclosure that became considerably more salient after depositors began paying attention to insurance limits. And non-cash transactions that affect the cash flow statement's articulation.
Where Cash Audits Fall Short
- Treating cash as low risk and assigning it accordingly
- Weighting the program toward existence, the assertion least likely to be wrong
- Confirming only balances, forgoing the loan, pledge, and guarantee information on the standard form
- Accepting client-provided statements rather than obtaining access to the source
- Reading the reconciliation rather than recomputing it
- Not tracing outstanding checks to the subsequent statement
- Accepting a deposit in transit that cleared two weeks later
- Ignoring the "other items" line, where plugs live
- No interbank transfer schedule where multiple accounts exist
- Never asking whether year-end checks were actually released
- No procedures for completeness, so undisclosed accounts remain undisclosed
- Not reconciling interest income to known balances
- Overdrafts netted against positive balances
- Cash equivalent classification tested from the current date rather than acquisition
- Restricted cash presented as unrestricted
- Foreign balances not assessed for repatriation restrictions
The summary for an engagement: confirm the accounts you know about, then spend your time on the ones you do not — reconcile interest income to the balances on your list, recompute the reconciliation, trace outstanding checks and deposits in transit into the next period, build the transfer schedule if there are multiple accounts, and ask whether the last checks of the year actually left the building.
Frequently Asked Questions
Which cash assertion carries the most risk?
Completeness, followed by classification — not existence. A confirmation provides good evidence about a disclosed account and cannot address accounts nobody disclosed, informal restrictions, or arrangements not documented with the institution. An audit program weighted toward existence has focused on the assertion least likely to be misstated.
What does a bank confirmation not tell you?
Whether other accounts exist, whether the balance is restricted or pledged informally, and the timing of items around period end. It also only covers what is asked — the standard form addresses loans, lines of credit, pledges, and guarantees, and an auditor who confirms only balances forgoes the evidence that reveals undisclosed borrowings.
How should outstanding checks and deposits in transit be tested?
By tracing them into the subsequent period's statement. A fictitious or overstated outstanding check reduces the book balance without a real disbursement, so each material item should be traced to its clearing. And a deposit in transit that cleared two weeks later was not in transit at year end — it was recorded before it existed.
What is a held check and why does it matter?
A check written and recorded as of year end but not actually released until the new period. It understates both cash and payables, which improves the current ratio — precisely the metric a lender reads. Detection means examining the final checks written and establishing whether they were mailed, asking the person who releases payments rather than the person who records them.
How are undisclosed bank accounts found?
Chiefly by reconciling interest income to the balances you know about, since interest you cannot trace indicates an account you have not confirmed. Also: disbursements to institutions not on the account list, general ledger accounts opened or closed during the year including zero-balance ones, loan agreements requiring accounts at the lender, prior-year confirmations, board minutes, and asking specifically.
What classification errors recur in cash?
Overdrafts netted against positive balances rather than presented as liabilities; restricted cash shown as unrestricted; and cash equivalent classification tested from the current date rather than from acquisition, so an instrument with a long original maturity is misclassified because it is now near maturity. Money market funds with redemption restrictions and foreign balances subject to repatriation limits are the other recurring cases.
