Trust Account Audit Requirements: What Regulators Actually Look For

Every year, thousands of Australian businesses that hold client money face regulatory scrutiny, and most of them are not fully prepared for what that process involves. A trust account audit is not just a box-ticking exercise. Regulators look closely at how records have been maintained, whether client funds were handled correctly, and if your processes meet the required standards throughout the year. 

Understanding what they actually check puts you in a much stronger position before the audit begins. At S & H Tax Accountants, we help Melbourne businesses with accounting and auditing support so they stay prepared, compliant, and confident all year round.

Who Actually Has to Undergo a Trust Account Audit in Australia?

Not every business operates a trust account, but those that do are legally required to have it audited, without exception. If your business receives or holds money on behalf of clients, the obligation applies to you regardless of the size of your operation.

The requirement spans several industries across Australia:

For those in property, a real estate trust account audit is mandatory every year, regardless of transaction volume. For those in financial services, accountants trust that account audit obligations fall under APES 310, which requires an annual audit within three months of the applicable year-end date.

What Do Regulators Actually Examine During the Audit?

Regulators are not simply confirming that a trust account exists. A qualified audit accountant works through your records methodically, and what they are looking for goes well beyond a bank statement.

Here is what comes under scrutiny:

• Reconciliation accuracy: Your trust ledger, client ledgers, and bank balance must all match at every reconciliation point, because a single unexplained difference is enough to raise a flag.
• Transaction authorisation trails: Every deposit and withdrawal needs a clear, documented instruction behind it, as undocumented transactions are treated as a serious concern, no matter how small the amount.
• Receipt sequencing: Receipts must follow a strict numerical sequence with no gaps, and any missing or voided receipts without a documented reason are a common trigger for a qualified trust account audit finding.
• Disbursement documentation: Written authorisation is required for every payment made out of the trust account, as verbal instructions or missing client directions do not satisfy the requirements of any state legislation.
• Record retention compliance: Trust account records must be kept for a minimum of seven years in most jurisdictions, and any incomplete or missing historical records will be noted directly in the audit report.
• Separation of funds: Client money must be kept entirely separate from business operating funds, and commingling of the two is one of the most seriously treated breaches across all accounting and auditing standards in Australia.

What Triggers a Qualified Audit and Why Does It Matter?

A qualified audit is not the same as a failed audit, but it is serious. It means the auditor has identified one or more breaches that must be reported to the relevant regulator. Once a qualified finding is lodged, the regulator decides what action to take, and that process is largely out of your hands.

Understanding what leads to a qualified real estate trust account audit or any trust-based qualified finding helps businesses avoid the situations that create them.

Who Is Qualified to Conduct a Trust Account Audit?

Appointing the wrong auditor is itself a compliance breach. Not every accountant holds the authority to sign off on a trust account audit report, and regulators verify auditor eligibility as part of the process.

Qualification requirements that an eligible audit accountant must meet:

• Current practising certificate: A valid certificate from CPA Australia, CA ANZ, or the Institute of Public Accountants (IPA) must be held before an auditor can legally sign off on any report.
• ASIC registration: Several states require separate registration as a company auditor under the Corporations Act 2001, and this registration sits alongside professional body membership as a standalone requirement.
• Full independence: Any auditor who has been employed by or partnered with the business being reviewed within the past two years cannot conduct the accountant’s trust account audit for that business.
• No financial interest: If an auditor holds any financial stake in the entity under review, they are fully disqualified from conducting the audit, regardless of how minor that interest may be.
• Formal written appointment: The appointment must be documented and confirmed before the audit work begins, as no Australian regulator accepts a verbal arrangement as sufficient proof of engagement.

The independence requirements exist because audit accountant responsibilities carry a public interest obligation. The auditor’s duty is to the regulator and to the integrity of the process, not to the business relationship.

How Does S & H Tax Accountants Keep Your Records Audit-Ready All Year?

A trust account audit does not test what you prepare in September, it tests how consistently you have managed your records across the entire year. At S & H Tax Accountants, our approach to accounting and auditing is built around keeping clients in a state of continuous compliance, not reactive preparation. Here is what that looks like in practice.

• Monthly reconciliation reviews: Every month, S & H Tax Accountants reviews your trust ledger, client ledgers, and bank balance together so any discrepancy is caught and corrected long before your auditor steps in.
• Structured disbursement documentation: Each client disbursement is processed with written authorisation kept on file, so your withdrawal trail holds up to the standard regulators’ check during a real estate trust account audit.
• Cloud-based record organisation via Xero: Trust account transactions are recorded and maintained in Xero, building a clean and timestamped digital trail that meets the seven-year record retention requirement across all Australian states.
• Pre-audit compliance review: Before your audit period closes, our team goes through your trust account records in detail to find and fix any gaps before they show up as a finding in your audit report.

Is Your Trust Account Truly Audit-Ready?

A trust account audit is a reflection of decisions made across an entire financial year, not just the weeks before the deadline. Businesses that maintain clean records consistently are the ones that move through the audit process without complications or regulatory consequences.

S & H Tax Accountants works with small businesses, real estate professionals, and NDIS providers across Melbourne to ensure their accountants trust account audit obligations are met with confidence every year. If your next audit period is approaching and you are unsure where your records stand, reach out to our team today for a free, no-obligation consultation.

Frequently Asked Questions

1. How often is a trust account audit required in Australia?

In most Australian states, a trust account audit is required once a year, with the report due within three months of the 30 June audit period end.

2. What records do I need to prepare for a real estate trust account audit?

Your auditor will need bank statements, client ledgers, reconciliation records, sequentially numbered receipts, and written authorisation for every disbursement processed during the year.

3. What happens if my trust account audit is lodged late?

Depending on your state, late lodgement can lead to fines, licence renewal being refused, or your business being flagged for a formal regulatory review.

4. Can my regular accountant conduct my trust account audit?

No, audit accountant rules require full independence, so anyone who has worked with your business in the past two years cannot conduct your audit.

5. What is the difference between a qualified and an unqualified trust account audit report?

An unqualified report means the accounting and auditing review found no breaches, while a qualified report means at least one issue was found and must be reported to your state regulator.