How should an HOA board respond when an owner demands a forensic audit?

By OurHOA · General information · Revised October 18, 2026

How an HOA board answers an owner's forensic audit demand: what owners can legally force, audit vs forensic work, when to hire one, and a reply letter to copy.

Part of the HOA board handbook: treasurer and money.

The short answer

Answer in writing within a week, take the concern seriously, and separate two questions: what the owner is entitled to, and what the board should do about the worry behind the demand. In Texas, Florida and Colorado, no HOA statute gives a single owner the right to make the board pay for a forensic audit. Owners can inspect the books, and in some states a group of owners can force a review or an audit. A forensic engagement is something the board decides to buy when there is a specific reason to think money went missing. Most demands end once the owner sees the bank statements and the ledger side by side. Some do not, and those deserve a real investigation. State law and your governing documents control the details, so treat this as general education, not legal or accounting advice.

Audit and forensic work are different jobs

Owners often use "forensic audit" to mean "someone independent should check whether money is missing." Accountants use the words more narrowly. A compilation, review or audit reports on the association's financial statements as a whole. Our guide on the difference between an audit, a review and a compilation covers those three. An ordinary audit is not built to find every theft. The auditing standard written for public-company audits, AS 1015, says that because of collusion, forged documents and override of controls, even a properly planned and performed audit may not detect a material misstatement caused by fraud. Forensic work starts from a specific concern. The AICPA's Statement on Standards for Forensic Services No. 1, effective for engagements accepted on or after January 1, 2020, describes an investigation as work that responds to specific concerns of wrongdoing by collecting and analyzing evidence so the client can reach a conclusion. The standard also says the accountant does not give an opinion on whether fraud occurred. That call belongs to a judge or jury. The accountant reports what the evidence shows. That distinction shapes your reply. "Audit everything for fraud" has no end point and no fixed price. "Trace every deposit from the March special assessment" does.

What owners can actually require

Texas: Property Code 209.005(c) opens the books, financial records included, to an owner or to an agent, attorney or CPA the owner names in a signed writing. Chapter 209 sets no audit requirement for property owners' associations. Texas condominiums are different. Section 82.114(c) requires the association to get an independent audit of its records every year as a common expense, done by a CPA if the bylaws, a board vote or a majority of members voting at a meeting require it. Florida: 720.303(7) ties the annual financial report to revenue and requires an audit at $500,000 or more. Under 720.303(7)(c), if 20 percent of parcel owners petition for a higher level of reporting, the board must hold a member meeting within 30 days, and a majority of the total voting interests can raise the level for that year. Our guide on hiring a CPA firm for a review or audit lists the revenue tiers. Colorado: CCIOA 38-33.3-303(4)(b) lets owners of one-third of the units require a review, and require an audit only if the association has at least $250,000 in annual revenues or expenditures. The board can order either at any time. The word "forensic" appears in none of these statutes. Neither state regulator will step in either. Florida's Division of Florida Condominiums, Timeshares, and Mobile Homes says it has no authority to investigate complaints under Chapter 720, and the Colorado Division of Real Estate says it has no authority to intervene in owner disputes with associations.

Find out what the owner thinks happened

Before deciding anything, ask the owner what prompted the demand. You will get one of three answers. A vague distrust: "dues went up and nobody explains where the money goes." That is a reporting problem. Offer the bank statements, the general ledger and the budget-to-actual report for the period, and a meeting with the treasurer to walk through them. A specific item: a payment to a vendor nobody recognizes, a reserve balance that dropped, a check written to a director. Pull the invoice, the approval and the bank record for that item and show them. If you cannot explain it within a few days, you have moved to the third case. A real gap: deposits that do not match assessments billed, transfers without a board vote, missing statements, a treasurer who will not hand over the books. This is when a forensic accountant earns the fee. Whatever the case, honor the records request on time. Texas 209.005(e) and (f) give the association 10 business days, or a written notice by then setting a date within 15 more. Florida 720.303(5) allows 10 business days, with minimum damages of $50 a day for up to 10 days after that. Our guide on responding to a records request covers fees and what to withhold.

When the board should hire a forensic accountant

If the books do not reconcile and the explanation does not hold up, act quickly and in this order. 1. Lock down access. Remove online banking and signing authority from anyone whose work is in question, through the bank's own process, and require two board approvals for every payment until the review ends. 2. Preserve the records. Keep every bank statement, ledger file, invoice and email. Florida 720.303(5)(e) makes it a first-degree misdemeanor to knowingly destroy accounting records during the retention period with intent to harm the association. 3. Call the association's attorney and the insurance agent. Read the crime or fidelity policy for its notice deadline and proof-of-loss rules. Many boards hire the forensic accountant through counsel. Texas 209.005(d) keeps attorney work product and privileged communications out of owner inspection, and Colorado 38-33.3-317(3) allows them to be withheld. 4. Write a narrow scope. Name the accounts, the period, and the questions, such as: were all assessment deposits from January 2025 through June 2026 recorded and deposited, and was each payment over $1,000 supported by an invoice and an approval? 5. Ask two firms for a fixed fee or a not-to-exceed amount, and check the license and experience the way you would for an annual audit. Adopt the engagement by motion at a meeting. If part of the discussion involves possible claims against a person, follow your state's rules on what may be discussed in executive session, and vote in open session.

If the owners want to vote on it

Sometimes the board finds nothing wrong and a group of owners still wants an outside look. Paying for it is a common expense, so the owners are spending their own money either way. Two paths keep it orderly. Where a statute gives owners a petition right, as in Florida 720.303(7)(c) or Colorado 303(4)(b), follow that process exactly, including the notice, the meeting and the vote. Florida's statute says the board must amend the budget or adopt a special assessment to pay for the higher level of reporting. Where no statute applies, the board can put a scoped review on the agenda of a member meeting, with a quote attached, and let the owners decide. A defined engagement with a price usually gets a calmer vote than an open-ended "forensic audit."

A reply the board can adapt

Send this within a week of the demand, signed by the president for the board: "Dear [Owner], Thank you for your letter of [date] asking for a forensic audit. The board takes questions about the association's money seriously. You are entitled to inspect the association's financial records, and we have scheduled that for [date and place], or we can send copies under our records policy. The board's last [review/audit] by [firm] covered [period]; a copy is enclosed. So we can respond properly, please tell us which transactions, accounts or dates concern you. If those records do not resolve your question, the board will consider a targeted review by an independent accountant at its [date] meeting. Sincerely, [Name], President, for the Board of Directors." Record the demand and the reply in the next meeting's minutes, without the owner's personal details.

Timeline and the mistakes that make it worse

Day 0: demand arrives; log the date and treat any records request inside it as running on the statutory clock. Day 7: reply sent. Day 10: records produced or a written extension notice sent in Texas or Florida. Day 30: owner has inspected, board has answered the specific questions, and the board decides at a meeting whether a targeted review is needed. Mistakes that turn a question into a fight: - Ignoring the letter or answering only by phone. - Calling the owner a troublemaker in an email that later becomes a record. - Hiring a broad, open-ended engagement with no scope or price cap. - Letting the person whose work is in question gather the documents. - Promising the owner the result before the accountant reports. If the review finds nothing, publish a short summary to the owners. If it finds a loss, the board's job shifts to the insurance claim and recovery. Our guide on HOA fidelity bonds and embezzlement protection covers that coverage, and our guide on setting up an audit committee helps keep the next question from turning into a demand.

Sources

These guides are general education for HOA boards and residents, not legal, tax, or financial advice. Rules vary by state and by your community's governing documents - check with a professional for your situation.

More on dues & money

Or browse all hoa dues, fees & money guides.