The Audit Starts Before the Audit Starts π¬
By Josiah S. Osibodu, CPA, CFE, Certified AI Consultant | 5-minute read
Most companies think an unclaimed property audit begins with a formal notice.
It doesn’t anymore.
States are now inserting new steps at the very beginning of the process β self-review requests, voluntary disclosure invitation, compliance questionnaires, and verified reporting or filing checks β before any formal audit ever opens. These early letters look administrative. They are not. They are the opening move in a much longer game. β οΈ
How you respond to the first letter shapes everything that follows.
π How the Process Actually Works Now
The old sequence was predictable. State identifies a target. Formal audit notice arrives. Auditor requests years of records. Examination begins.
The new sequence looks different:
Step 1 β The self-review request. “Please confirm your reporting history for 2015β2025. Provide record retention policy, scope legal entities, compile transaction level records, identify relevant unclaimed property, and provide due diligence documentation.”
Step 2 β The verified-report review. “Your recent filing shows inconsistencies. Provide supporting records within 90 days.”
Step 3 β The voluntary compliance nudge. “You qualify for our voluntary program. Respond by this date or we will initiate exam procedures.”
Each step is an evidence test. A weak response doesn’t just delay resolution. It tells the state something about your controls, your records, and your good faith. And states read that signal carefully. π
π¨ Four Ways Companies Get This Wrong
1. No single person owns the notice. State letters arrive by mail, email, and registered mail β and scatter across C-suite, legal, tax, treasury, and finance with no clear handoff. The result is missed deadlines and fragmented answers.
Ask yourself: if a self-review letter arrived this afternoon, who would see it first? And how long before the right person was assigned?
2. Treating it like a routine request. Self-review letters ask for the same evidence as a full audit β prior filings with proof of payments, system conversions, prior audits, list of legal entities, relevant unclaimed property, transaction level records, dormancy calculations, population reconciliations. Teams that treat them as light paperwork underestimate the data-gathering burden and run out of time.
3. Documentation that isn’t ready. States expect specific evidence: written procedures, record retention, prior filings with proof of payments, state-specific due diligence templates, reconciliations that tie back to filed reports. Generic processes and missing documentation turn a simple request into an escalation trigger. π
4. No escalation plan. At what point does this become a legal matter? When does tax need to loop in treasury? Without clear handoffs, coordination breaks down β and in unclaimed property, slow coordination is expensive.
π Delaware and California Are Showing Everyone Else How
Delaware now uses 90-day enrollment windows with hard cutoffs. Miss the window and voluntary compliance closes. Respond weakly and a formal exam opens. The state also uses data matching to identify non-filers before they come forward.
California runs a parallel playbook. The State Controller’s outreach campaign offers companies a clear choice: join voluntarily and avoid a 12% annual interest charge, or wait and be found through tax data matching.
Both states are sending the same message. The front end of the process is now the highest-risk moment. Evidence of good controls and genuine good faith is what determines how hard states push.
π‘ What Response-Ready Actually Looks Like
Four habits separate companies that handle these letters well from the ones that don’t.
One intake owner. Every unclaimed property notice routes to one person with authority to act.
Clear response timelines. Day 1: notice logged and owner assigned. Day 3: cross-functional team briefed. Day 7: evidence package substantially complete.
A pre-built evidence library. State-specific templates, mailing logs, prior filings, record retention policies, written accounting and unclaimed property procedures, dormancy calculations and reconciliations maintained on a quarterly basis β not assembled under pressure after a letter arrives.
Regular simulation. Pick one state. Run a mock notice. Time the full response. Find the gaps before a state auditor does. β±οΈ
π― The Bottom Line
Self-review letters are the new audit trigger.
Response discipline is the new risk metric.
Boards and audit committees are starting to ask about unclaimed property the same way they ask about data privacy and vendor risk β with specific questions about ownership, evidence readiness, and response speed.
The companies that come out ahead are not the ones with perfect records. They are the ones that built the right process before the first letter arrived.
That starts with knowing where your gaps actually are. π
β FAQ Schema Q&A Pairs
Q1: What is an unclaimed property self-review letter? An unclaimed property self-review letter is a formal request from a state asking a company to confirm its reporting history, scope its legal entities, compile transaction level records, identify relevant unclaimed property based on the business operations, perform due diligence, report past due property, and explain any inconsistencies in recent filings. Unlike a formal audit notice, self-review letters appear administrative but function as evidence tests β states use a company’s response quality to assess its internal controls and decide whether to escalate to a full examination.
Q2: What is a verified report review in unclaimed property? A verified report review is when a state pulls a sample of a company’s recent unclaimed property filings and requests the supporting documentation (including proof of payments) behind those numbers. If documentation gaps are found, the state can use those gaps to justify opening a full audit covering multiple prior years. A clean-looking filing does not protect a company if the underlying evidence is weak or missing.
Q3: How should a company respond to an unclaimed property self-review request? A company should treat a self-review request with the same urgency as a formal audit notice. The first step is to designate a coordinator with authority to coordinate across tax, legal, accounting, and IT. The company should then assess what documentation exists for the states and periods in question, identify any gaps, and build a response package that demonstrates consistent controls and good faith. Engaging an unclaimed property specialist early is strongly recommended.
Q4: What happens if you ignore or respond weakly to an unclaimed property self-review? A weak response β or no response β to an unclaimed property self-review typically accelerates the enforcement timeline. States interpret weak documentation as evidence of poor internal controls, which justifies opening a formal audit with a broader scope and longer lookback period. In some cases, it also closes the door to voluntary compliance programs that could have limited penalties and interest exposure.
Q5: Why are Delaware and California leading this enforcement trend? Delaware uses 90-day enrollment windows, verified-report reviews, and data-driven targeting to manage unclaimed property enforcement before any formal audit opens. California mirrors this approach through its Voluntary Compliance Program, offering interest relief to companies that act early while using tax data matching to identify those that don’t. Together these states have established the model other enforcement-active states are adopting.
Q6: How do I assess my company’s unclaimed property response readiness? The Escheat Risk Analyzer at EscheatAnalyzer.ai provides a free, 5-minute qualitative risk assessment that evaluates your organization risk profile across four risk dimensions β Jurisdictional, Compliance History, Transaction/Revenue, and Operational Complexity. It identifies your biggest gaps in documentation, escalation, and provides prioritized next steps. No cost, no manual review delays, and results delivered instantly.
π Your Next Step
Find out where your organization stands β before a state letter forces the question.
β Free 5-minute qualitative risk assessment: EscheatAnalyzer.ai β instant results, no cost, no generic advice, no manual review delays.
β Free 60-minute consultation: moyerosibodu.com
#EscheatRiskAnalyzer #UnclaimedProperty #EscheatCompliance #AuditDefense #CFOInsights #RiskManagement #FinanceLeadership #CorporateGovernance #InternalAudit #EnterpriseRisk #DelawareVDA #AIinFinance
