Most church fraud isn’t committed by strangers. According to the Association of Certified Fraud Examiners, religious organizations are among the most frequently victimized nonprofits — and in the majority of cases, the perpetrator is a trusted staff member or volunteer who had unrestricted access to funds. The congregation never saw it coming.
That uncomfortable reality doesn’t mean churches should treat everyone with suspicion. It means the systems around money should be designed so that no single person — regardless of how trusted — can move funds without accountability. That’s what internal controls are: not distrust, but structure.
Strong church accounting services aren’t just about keeping the books clean. They’re about building the kind of financial transparency that protects your staff, reassures your congregation, and keeps your ministry financially healthy for the long term.
What Are Internal Controls?
Internal controls are the policies, procedures, and oversight mechanisms that govern how money enters, moves through, and leaves your church. They include everything from who counts the offering to who approves large purchases to how often financial statements go to the board.
Why Most Churches Lack Internal Controls
Most small and mid-size churches operate without a formal controls structure — not because their leaders are careless, but because they were never given a model to follow. Volunteers take on financial roles informally, processes grow around whoever is available, and written policies either don’t exist or haven’t been updated in years.
The result is a system where the same person who receives checks also records them in the ledger, where credit card statements are reviewed only by the person using the card, and where the board sees financials once a quarter — if at all. Each of these gaps is a vulnerability, and any one of them can be exploited.
The Four Core Controls Every Church Should Have in Place
1. Separation of Duties
No single individual should control more than one stage of a financial transaction. Whoever receives cash should not be the same person who records it. Whoever approves an expense should not be the same person who issues the check. This separation is the single most effective deterrent against both fraud and accounting errors.
In small churches where staffing is limited, separation of duties can feel impractical. The solution isn’t to give one person everything — it’s to design oversight into the process. That might mean a deacon reviews the deposit log before it’s submitted, or a board member spot-checks vendor invoices monthly.
2. Dual Signatures on Disbursements
Require two authorized signatures on any check or transfer above a defined threshold. The IRS guidance on church financial accountability supports this kind of governance structure as part of responsible nonprofit operations. Set the threshold low enough to catch most discretionary spending — many churches use $500 as their floor.
3. Monthly Bank Reconciliation — by Someone Other Than the Bookkeeper
Reconciling the bank statement to the ledger is standard practice. What most churches miss is who does it. When the same person who keeps the books also reconciles the bank account, errors and irregularities can be hidden indefinitely. Assign this task to a board treasurer, a financial committee member, or a contracted CPA.
4. Annual Financial Review or Audit
Churches with annual revenues over $250,000 should at minimum commission an annual financial review from an independent CPA. Larger organizations — or those that receive government grants — may be subject to formal audit requirements under OMB Uniform Guidance. Even churches below these thresholds benefit from having an outside set of eyes on their books once a year.
Offering Collection: Where Most Church Fraud Begins
Cash collected during services is the highest-risk point in church finances. It changes hands quickly, exists briefly before being deposited, and is rarely counted by more than one person. Tightening this process has an outsized impact on your overall control environment.
Best practice is a two-person counting rule: all cash and checks from the offering should be counted by at least two unrelated people — not a spouse and partner, not close family members — immediately after the service. A counting sheet should be signed by both, kept on file, and reconciled against the bank deposit slip within 24 hours.
Drop safes, sealed offering envelopes, and electronic giving platforms all reduce the handling risk even further. If your church hasn’t yet implemented online giving, the transition to a platform like Pushpay or Planning Center Giving makes the entire donation trail auditable from contribution to deposit.
What Your Board Should Be Reviewing Every Month
Church boards carry fiduciary responsibility for the organization’s finances, but many operate without a clear reporting structure. According to the Evangelical Council for Financial Accountability, member organizations are expected to provide governing boards with timely, accurate financial information — not just at year-end, but throughout the year.
At minimum, your board or financial committee should receive a monthly financial package that includes: a balance sheet, an income and expense statement compared to budget, a bank reconciliation summary, and a report of any transactions above your dual-signature threshold. Reviewing these together — not in isolation — is how discrepancies get caught early.
If your board isn’t currently receiving monthly financials, that’s a gap in governance worth closing before anything else. Reliable nonprofit bookkeeping services can handle the preparation and formatting of these reports so your staff isn’t spending hours on it each month.
When to Bring In Outside Church Accounting Services
Some churches reach a size or complexity where volunteer-based financial management becomes a liability rather than a resource. Signs that it’s time to bring in professional church accounting services include: rapid growth in revenue or giving units, a staff payroll that exceeds your volunteer bookkeeper’s expertise, grant funding with compliance requirements, or an upcoming capital campaign.
A CPA firm with nonprofit experience can do far more than file your 990. They can design the internal control framework, train your staff on procedures, prepare monthly financial statements for board review, and provide the independent oversight that your congregation deserves.
Outsourced church CPA services also protect the organization in a different way: they create documentation. When financial questions arise — from a departing treasurer, a concerned donor, or an IRS inquiry — a properly maintained set of books with clear procedures is your strongest defense.
Frequently Asked Questions About Church Internal Controls
Do churches have to file taxes?
Most churches are automatically tax-exempt under Section 501(c)(3) of the Internal Revenue Code and are not required to file a Form 990. However, churches that pay employees, receive unrelated business income, or have certain financial activities may have separate filing obligations. Consulting a church CPA clarifies your specific requirements.
How many people should count the offering?
At least two unrelated individuals should count every offering, with both signing a counting log that reconciles to the bank deposit. This two-person rule is the single most widely recommended control for cash collection in religious organizations.
What’s the difference between a financial review and an audit?
A financial review provides limited assurance that your financials are free of material misstatement. An audit provides higher assurance through more extensive testing and verification. For most churches under $500,000 in annual revenue, a review is sufficient. Larger organizations — especially those receiving government grants — typically need an audit.
Can a volunteer handle church bookkeeping?
Volunteers can handle basic bookkeeping functions, but the oversight structure around them matters as much as their skills. Whoever does the books should not also approve expenditures, reconcile bank accounts, or have sole signatory authority. If your volunteer bookkeeper holds all of these roles, that’s the first gap to address.
Financial Accountability Is an Act of Stewardship
Congregations give in trust. They trust that the money they contribute will be used for the mission they believe in — not lost to administrative gaps, accidental errors, or opportunistic fraud. Internal controls are how a church honors that trust structurally, not just spiritually.
Building these systems doesn’t require a large staff or a big budget. It requires clear policies, assigned responsibilities, and consistent review. The churches that do this well aren’t the ones with the most resources — they’re the ones that treat financial accountability as part of their values.
MBS Accountancy Corporation works with churches and nonprofits throughout Central California to build financial systems that hold up. If your congregation needs help establishing internal controls, implementing nonprofit bookkeeping services, or preparing for an annual financial review, reach out to our team to get started.