- Test a bank reconciliation by agreeing each reconciling item to independent evidence
- Prepare a four-column proof of cash and explain what it detects
- Explain the SAS 150 requirement to confirm cash held by third parties and its effective date
- Identify transfer and kiting red flags at period-end
Why cash still needs real work
Cash is often low inherent risk, but it is the account most exposed to misappropriation and the one every other cycle runs through. Under current standards, AU-C 330.19 requires the auditor to consider whether external confirmation procedures are to be performed as substantive procedures. Many firms confirm every bank account as a matter of policy. SAS 150 turns that policy into a requirement, with two exceptions.
SAS 150, External Confirmations, issued in July 2026, adds a requirement in AU-C 505 to perform external confirmation procedures for cash and cash equivalents held by third parties unless (a) confirmation is impracticable or (b) the assessed risk at the relevant assertion level is low and other planned substantive procedures address it. The auditor may meet the requirement by directly accessing information held by a knowledgeable external source, such as a bank portal accessed with credentials the bank provides to the auditor. Access codes supplied by management do not count. The basis for using either exception must be documented. SAS 150 is effective for audits of periods ending on or after December 15, 2028, and early adoption is permitted.
Confirming balances
Whatever the year, the confirmation process follows AU-C 505.07: the auditor controls what is confirmed, who receives the request, the design and addressing of the request, and the sending. Responses come directly to the auditor. For bank confirmations, ask about loans, lines of credit and other relationships as well as deposit balances, so the confirmation also supports completeness of debt. A bank confirmation letter and the step-by-step bank confirmation process cover mechanics.
Testing the bank reconciliation
The confirmation proves the bank balance. The reconciliation is what bridges it to the books, and the reconciling items are where errors and theft hide.
- Agree the bank balance to the confirmation or to the bank statement obtained directly.
- Agree the book balance to the general ledger.
- Foot the reconciliation and the outstanding check list.
- Trace deposits in transit to the subsequent bank statement. A deposit in transit that clears a week into the new year needs an explanation.
- Trace large outstanding checks to the subsequent statement, checking payee, amount and clearing date. Checks dated before year-end that clear months later may have been written but held to dress up payables.
- Investigate old outstanding items and any unexplained "other" reconciling line.
Obtain the subsequent period bank statement directly from the bank or by direct access when the risk warrants it. A statement from the client's files is weaker evidence.
The proof of cash
A proof of cash reconciles four columns between bank and books: opening balance, receipts, disbursements and closing balance. A standard year-end reconciliation only proves the closing balance. The proof of cash shows whether the receipts and disbursements recorded in the books for the period agree with the bank activity. It catches unrecorded receipts offset by unrecorded disbursements, which net to zero in a closing-balance reconciliation. Use it for a month with high fraud risk, a client with weak segregation of duties, or where you need evidence about cash activity rather than just the balance. The proof of cash template and proof of cash calculator lay out the columns.
Transfers and kiting
Prepare or test an interbank transfer schedule for the days around period-end: date withdrawn per bank, date deposited per bank, and dates recorded in the books for each leg. A transfer recorded as a deposit before year-end but as a withdrawal after year-end inflates cash in two accounts at once. See interbank transfers and kiting.
Common file findings
- Reconciling items "agreed to client support" with no subsequent statement in the file.
- Bank accounts that appear on the confirmation but not on the trial balance, with no follow-up.
- Restricted cash or compensating balances not identified for disclosure.
- Confirmations sent by client staff, which breaks the AU-C 505.07 control requirement.
Proof of cash for December at Cedar Point Logistics, LLC
Per bank: opening $412,600, deposits $1,286,400, withdrawals $1,301,900, closing $397,100. Per books: opening $398,700, receipts $1,262,200, disbursements $1,268,300, closing $392,600.
Reconciling items:
- Opening: deposit in transit at November 30 of $18,400; outstanding checks at November 30 of $32,300. Bank $412,600 + $18,400 - $32,300 = $398,700. Agrees.
- Receipts: bank deposits $1,286,400 - November deposit in transit $18,400 + December deposit in transit $21,700 = $1,289,700. Books show $1,262,200. Difference: $27,500.
- Disbursements: bank withdrawals $1,301,900 - November outstanding checks $32,300 + December outstanding checks $26,200 = $1,295,800. Books show $1,268,300. Difference: $27,500.
- Closing: bank $397,100 + $21,700 - $26,200 = $392,600. Agrees with books.
The closing balance reconciles, yet receipts and disbursements are each understated in the books by $27,500. The team finds a $27,500 vendor refund deposited and a matching $27,500 payment to a new vendor, both unrecorded. The vendor's address matches an employee's. The matter goes to the engagement partner and is evaluated under the fraud requirements.
Self-check
Answer each question before you open the answer.
Under SAS 150, when may the auditor skip confirming cash held by third parties?
Show answer
When confirmation is impracticable, or when the assessed risk at the relevant assertion level is low and other planned substantive procedures address it. The basis for using an exception is documented.
Management emails you login codes to the bank portal. Is viewing the balances there direct access under SAS 150?
Show answer
No. Under SAS 150, access codes provided by management do not make the evidence an external confirmation. Direct access requires the knowledgeable external source to provide the access to the auditor.
What does a proof of cash detect that a year-end bank reconciliation does not?
Show answer
Differences in the period activity: unrecorded receipts and disbursements that offset each other. A closing-balance reconciliation only proves the ending balance, so offsetting omissions pass unnoticed.
A check dated December 28 for $60,000 clears the bank on March 2. Why investigate?
Show answer
A long lag suggests the check was recorded before year-end but not released, which understates payables and cash together, or that it was mailed late. Check the release date and the payee.
Use it on the file
- GuideBank Reconciliation: How to Prepare One, Reconciling Items and the Red Flags Auditors Look For
- StandardAU-C 505: External Confirmations: Control, Nonresponses, Exceptions and SAS 150
- ToolProof of Cash Calculator: Four-Column Bank to Books
- TemplateBank Confirmation Letter (AU-C 505)
- GuideSAS 150, External Confirmations: What Changes in AU-C 505 and When
Sources
- AICPA Statements on Auditing Standards (AU-C sections), currently effective
- AICPA SAS No. 150, External Confirmations
- AICPA news: AICPA updates standards involving audit confirmations
Standards are paraphrased from the primary sources listed above; read the source before relying on a requirement. This lesson is training material, not professional advice. Report an error