Sometimes the Audit Starts in the Mailroom ⚠️

By Josiah S. Osibodu, CPA, CFE, Certified AI Consultant | 6-minute read


That sounds dramatic. But it is more accurate than most finance and legal leaders are comfortable acknowledging.

A Delaware VDA notice arrives at the registered agent. No emergency label. No urgent flag. Just another piece of corporate correspondence in a forwarding queue. What follows is entirely predictable — and entirely avoidable.

The most common trigger for Delaware unclaimed property audit exposure is not deliberate non-compliance. It is the organizational assumption that someone else is handling it, repeated quietly at each step of the internal routing chain until the 90-day voluntary window has expired and the only conversation remaining is how to respond to a state-initiated examination.


How the Window Disappears Without Anyone Noticing

The simple version: Delaware gives companies 90 days to voluntarily resolve their unclaimed property exposure. Most organizations spend more than 90 days deciding who should look at the letter.

The technical elaboration: Delaware’s VDA program is a defined-term offer. The 90-day clock starts from the date of the invitation letter — not the date the company’s CFO first sees it, not the date outside counsel confirms receipt, not the date the matter appears on the quarterly compliance agenda. The enrollment window does not pause for bandwidth constraints, competing priorities, or internal review cycles.

The business implication: A company that misses the enrollment window is automatically referred to the Delaware Department of Finance for a state-initiated unclaimed property examination. That examination operates on entirely different terms. The lookback covers 15 years of detailed accounting records. A contingency-fee auditor — compensated as a percentage of what it recovers — controls the scope, applies statistical estimation to years where records are incomplete, and proceeds without the penalty waiver that the VDA would have provided.

The financial difference between those two outcomes is not marginal. For a mid-size Delaware-incorporated company, it is frequently measured in multiples of the original underlying liability.


The Routing Chain That Consumes the Window 📬

No organization intentionally ignores a Delaware VDA notice. What happens instead is structural.

The letter arrives at the registered agent in Wilmington and forwards to outside counsel. Outside counsel routes it to the internal tax director with a note that it requires attention. The tax director adds it to the next compliance review cycle. That meeting moves. The matter waits. Finance is waiting for Legal’s assessment. Legal is waiting for Tax to quantify the exposure. Tax is waiting for Finance to confirm which entities are in scope.

Everyone assumes someone upstream has already assessed the urgency. Nobody has.

By the time a decision-maker with both authority and full context sees the letter, sixty or seventy days have elapsed. The remaining window is insufficient for meaningful enrollment. Retaining VDA counsel, preparing a preliminary exposure analysis, and formally submitting enrollment to Delaware each require time that no longer exists.

The company enters the state audit queue. Not because anyone made a wrong decision. Because the default routing process was never designed to handle a time-sensitive regulatory window.


What Organizations Handling This Correctly Are Doing ⚙️

The companies that navigate Delaware VDA notices well share one visible characteristic: they designate a single owner with authority from the moment the notice is identified — not after the internal review cycle concludes.

That ownership structure changes everything about how the timeline is managed. A single owner with authority does not wait for the next compliance meeting. They initiate a rapid exposure assessment within the first week. They brief leadership within the first two weeks. They make a deliberate enrollment decision — yes or no — with sufficient lead time to act on whichever direction the decision requires.

Three specific actions separate the organizations that preserve their VDA option from the ones that lose it.

Confirm receipt immediately. Contact the registered agent directly for copies of all forwarded legal correspondence since March. If receipt cannot be confirmed, contact Delaware’s Unclaimed Property Compliance unit to determine whether the company was included in the April mailing and what the applicable deadline is. The 90-day clock runs from the mailing date — not from the date the company determines it received the letter.

Designate one owner with authority. That person is not the routing stop in the chain. They are the decision-maker. They have authority to retain counsel, commission a rapid exposure analysis, and make the enrollment decision without waiting for consensus across departments.

Assess exposure before the deadline — not after. A formal quantitative analysis takes weeks. A structured qualitative assessment — examining state of incorporation, acquisition history, filing patterns, system conversion history, and entity complexity — produces a decision-useful risk profile in days. That is the assessment that informs the enrollment decision, not the one that documents the outcome after the fact.


The Question Every CFO Should Be Able to Answer Right Now 💡

Here is the most clarifying question in this entire discussion.

Would your organization know today if a Delaware VDA notice arrived 45 days ago?

Not whether the letter was received at the registered agent. Not whether it was forwarded to outside counsel. Whether the right person — with authority and context — saw it, owned it, and initiated a response within the first week.

If the honest answer is uncertain, that uncertainty is itself the risk finding. The letter may have arrived. The clock may already be running. The remaining window may be shorter than anyone currently realizes.


The Takeaway

Delaware VDA notices do not announce themselves as urgent. They arrive as ordinary correspondence and become urgent through the passage of time — time that the internal routing process consumes without anyone realizing the cost.

The organizations that come out of this environment well are not the ones with the most sophisticated compliance infrastructure. They are the ones that answered a simple question on day one: who owns this, and what is the decision deadline?

That question is free to ask. The audit that follows when it is never asked is not.


👉 Your Next Step

Before another week passes — confirm your VDA status, assess your exposure, and determine whether you still have time to act.

✅ Free 5-minute qualitative risk assessment: EscheatAnalyzer.ai — instant results, no cost, no generic advice, no manual review delays.

✅ Free 60-minute consultation: moyerosibodu.com


❓ FREQUENTLY ASKED QUESTIONS

Q1: What is a Delaware VDA notice and what does it actually mean for my organization?

A Delaware VDA notice is a formal invitation from the Delaware Secretary of State’s office asking a company to enroll in the Voluntary Disclosure Agreement program and self-report any unreported unclaimed property. Receiving one means Delaware has already identified your organization as a likely holder of unreported exposure through data matching and corporate filing analysis. The notice initiates a 90-day enrollment window — during which the company controls the scope, timeline, and terms of its resolution. After the window closes, that control transfers entirely to the state.

Q2: Why do organizations consistently miss the Delaware VDA deadline if the stakes are this high?

The most common failure is not negligence — it is the absence of a designated owner at the moment the notice arrives. Most organizations route regulatory correspondence through a sequential chain that consumes weeks at each handoff: registered agent to legal counsel to tax to finance. Each party in the chain assumes someone upstream has assessed urgency. By the time a decision-maker with both authority and full context sees the letter, the window has frequently narrowed below the minimum lead time required to enroll effectively.

Q3: What specifically happens when the 90-day window closes without VDA enrollment?

The company is referred to the Delaware Department of Finance for a state-initiated unclaimed property examination. A contingency-fee auditor — compensated as a percentage of what it recovers — takes control of the scope, methodology, and timeline. The lookback covers 15 years of detailed accounting records. Statistical estimation applies to any year where records are incomplete. Penalties attach and the penalty waiver that the VDA would have provided is no longer available. The financial difference between a negotiated VDA settlement and a state-initiated audit assessment for the same underlying exposure is frequently a multiple of three to five times.

Q4: Our company files unclaimed property annually. Does the VDA notice still apply?

Annual filing history is relevant but does not automatically eliminate VDA exposure. Delaware’s targeting identifies companies whose reported volumes appear inconsistent with their size, industry, acquisition history, or entity complexity — meaning a company with consistent annual filings may still have unreported exposure in specific property types, acquired entities, or years affected by system migrations. The VDA process examines filing history specifically and may identify gaps that annual filings did not capture. A current-year filing that appears complete is not the same as a defensible filing history across a 12-to-15-year lookback period.

Q5: How do we confirm whether a Delaware VDA notice was actually received?

Contact your Delaware registered agent directly and request copies of all legal correspondence forwarded since March 2026. If the status is uncertain, contact Delaware’s Unclaimed Property Compliance unit directly to confirm whether your entity was included in the April mailing and what the applicable deadline date is. Do not assume that the absence of a forwarded copy means no letter was sent — registered agent forwarding delays of two to four weeks are routine, and the 90-day clock runs from the mailing date regardless of when the company received the document.

Q6: How do we assess our Delaware unclaimed property exposure quickly enough to make a VDA decision before the deadline?

The Escheat Risk Analyzer at EscheatAnalyzer.ai provides a free, 5-minute qualitative risk assessment that evaluates your organization across four dimensions — Jurisdictional, Compliance History, Transaction/Revenue, and Operational Complexity. It produces a structured risk profile in minutes rather than the weeks that a formal quantitative analysis requires, giving your finance and legal leadership a decision-useful baseline before VDA enrollment discussions begin. No manual review is required, no company name is collected, and results are delivered instantly — making it the appropriate first step before retaining counsel or preparing enrollment materials.