• Home
  • 9
  • Insights
  • 9
  • Best Practices for Church Financial Internal Controls That Protect Your Congregation’s Finances

Best Practices for Church Financial Internal Controls That Protect Your Congregation’s Finances

by | Jul 16, 2026

Office Collaboration

Key Takeaways

  • Church financial controls should split custody, approval, recording, and review so no one person can receive, spend, record, and reconcile funds without an independent check.
  • Small churches can still build meaningful controls by using trained volunteers, finance committee members, or board members as independent reviewers when paid staff is limited.
  • Offering, disbursement, credit card, petty cash, and online giving processes each need written procedures, clear approval thresholds, and retained support.
  • The governing board should approve the financial policy, while the finance committee monitors reports, reconciliations, and exceptions on a recurring schedule.
  • An independent audit, review, or agreed-upon procedures engagement can add outside accountability, but it should be chosen based on what the church needs and should not replace daily internal controls.

 

Sound financial stewardship is one of the most visible expressions of a congregation’s integrity.

The way a church handles money from the offering plate to the general ledger reflects the values it holds and the trust its members place in its leadership.

Financial internal controls protect your staff, your volunteers, and the mission your congregation has committed to funding.

This article outlines practical best practices for church financial internal controls.

Why Are Internal Controls for Churches Structurally Different?

Most church finance teams operate with a combination of part-time staff and committed volunteers. That environment creates structural conditions that make financial controls harder to implement than in a traditional business setting.

It’s not uncommon to see:

  • One bookkeeper handling receipts, disbursements, and reconciliation
  • A treasurer serving as the sole check signer
  • A pastor with direct account access without a secondary review

In situations like this, no single stage of the financial process has an independent check on it. That’s what church internal controls address.

They create a documented, repeatable structure around every financial transaction so that no single individual carries unchecked responsibility for church funds. This protects the organization and, equally important, it protects the individuals handling money.

Key Principles That Govern Church Financial Internal Controls

Effective internal controls for churches rest on two foundational principles: that financial responsibility is distributed across multiple people, and that leadership maintains consistent visibility into how those responsibilities are being carried out.

Segregation of Duties

Segregation of duties means that no single individual should control more than one stage of any financial transaction.

The person who receives cash should not record it. The person who records transactions should not reconcile the bank statement. The person who prepares checks should not sign them. These separations exist to make accountability visible and verifiable.

While important, this principle is often difficult to implement.

When a church has one part-time bookkeeper and a volunteer treasurer, achieving full segregation of duties across all functions is genuinely challenging. But you’re not out of options.

Consider:

  • Assigning a board member with financial expertise to perform monthly bank reconciliations
  • Ask a qualified volunteer from your congregation (such as a CPA or accountant) to conduct periodic internal reviews
  • Lean on a finance committee member to pre-approve all disbursements above a set threshold. Dual approval requirements for electronic transfers can be configured directly in most banking platforms at no cost.

The goal is meaningful separation at every critical control point. When gaps in segregation of duties are significant enough that internal workarounds cannot adequately address them, that is often the threshold at which an independent audit for your church becomes appropriate.

Structured Board Oversight

Churches need oversight structures that give leadership a reliable, timely picture of the organization’s financial position.

A written financial policies and procedures document, approved by the finance committee, is the foundation. It defines roles, establishes approval thresholds, and documents workflows so that controls are enforceable. Without it, even well-designed controls depend entirely on institutional memory, which changes whenever staff or volunteers turn over.

Monthly financial reports comparing actual activity to budget should be presented to the finance committee on a consistent schedule, with explanations for significant variances. This cadence creates the baseline visibility that makes exceptions detectable over time.

Your written policies document should also address records retention, specifically, how long financial records are kept and who is authorized to access them. The IRS provides recordkeeping guidance for tax-exempt organizations that gives church finance committees a reliable baseline for setting retention schedules.

How To Apply Internal Control Best Practices To Church Funding

Principles define what good controls look like, procedures determine whether they hold. Let’s look at the specific actions, roles, and checkpoints that put internal controls for churches into practice across every major funding category.

Cash Receipts and Offering Collections

The offering is the point of highest financial vulnerability in most congregations. Cash and checks change hands in an informal environment, often handled by rotating volunteers with no written protocol. Establishing clear procedures for this moment (and every step that follows) is where church internal controls for cash receipts begin.

At a minimum, have at least two unrelated individuals count all offerings together and remain with the funds until they are secured. Both counters should sign a count sheet documenting the total by category, such as cash, checks, and any other instruments, and that sheet should be retained as a permanent record.

Be sure to stamp all checks “For Deposit Only” immediately upon receipt, before anything else happens. This step prevents unauthorized endorsement and is one of the simplest, most effective internal controls for church finances available.

Deposit timing matters as well. Aim to deposit the funds on the same day when possible, or secure them in a bank night-drop box. Keeping cash at the church overnight or over a weekend introduces unnecessary risk.

Before any individual is assigned responsibility for handling funds, the finance committee should require a criminal and financial background check. This applies to paid staff and volunteers alike.

Also, be sure to rotate counting teams on a regular schedule so that the same individuals aren’t consistently handling funds together.

Church Disbursements

Disbursement controls govern how money leaves the church, whether through check, electronic transfer, credit card, or petty cash.

Start every disbursement with written authorization before any payment. You need a three-way match:

  • An approved purchase request
  • A valid invoice or receipt
  • A confirmation of goods or services received

Each of these leaves a trail for accurate recordkeeping and accountability to the finance committee.

Here’s how to handle checks. Keep blank checks in a locked location with restricted access. Don’t pre-sign or sign with a stamp, as both practices effectively remove the human review step that signing is designed to provide.

Similar to collecting cash, get dual signatures on any check above a defined dollar threshold (usually set by the finance committee and documented in church policy). In keeping with the segregation of duties rule, the person who prepares a check should not be the same person who signs it.

Credit and debit card use requires original receipts, not just statements, for every transaction. Cards should have board-approved spending limits, and statements should be reviewed monthly by someone other than the cardholder.

If you have petty cash funds, keep them small, documented, and reconciled on a regular schedule. Petty cash is typically not an appropriate mechanism for paying vendors or contractors.

Direct bank statements to someone who is not involved in check preparation or cash handling. That individual should scan the statements for anomalies before passing them along for reconciliation. This simple structural step creates an independent first look at every outgoing transaction.

Online Giving Platforms

Online giving platforms require their own set of controls. Limit administrative access to the platform, monitor who has the ability to change bank account routing information, and regularly reconcile platform-generated reports against actual bank deposits.

As more congregations shift toward digital giving, these controls deserve the same attention as physical cash handling. For a broader look at how fund accounting intersects with these processes, church accounting basics provides helpful context on the underlying financial structure.

Strengthen Your Church’s Financial Controls with Rea

Strong church internal controls are built in layers; cash receipt procedures, disbursement policies, segregation of duties, and consistent financial reporting each play a distinct role.

Together, they create the accountability infrastructure that protects congregational funds, supports the people responsible for managing them, and gives donors and leadership confidence that stewardship is being taken seriously.

If your congregation is ready to strengthen its financial controls or explore what an independent review looks like in practice, contact Rea’s not-for-profit team to start the conversation.

 

About the Author

Sophia Sedensky is an Audit Supervisor at Rea, where she works with not-for-profit organizations and other clients to strengthen financial accountability and internal control practices. With a background in public accounting, Sophia brings a practical, relationship-oriented approach to audit and advisory work — helping organizations like churches and community groups build the financial structures they need to operate with confidence and integrity.

To connect with Sophia or learn more about Rea’s not-for-profit services, contact our team directly using this form.

 

Frequently Asked Questions

Do small churches really need formal internal controls?
Yes — and in many ways, smaller congregations need them more. When fewer people handle financial responsibilities, the risk of undetected errors or misuse is higher, not lower. Formal controls don't require a large staff or a complex accounting system. Even basic procedures — dual counting of offerings, written disbursement authorization, and a board member reviewing bank statements — create meaningful accountability. The goal isn't bureaucracy; it's protection for your congregation, your staff, and the people who volunteer their time and trust.
What's the minimum number of people needed to properly segregate duties?
At minimum, two people should be involved in any financial transaction — one to handle or initiate it, and one to review or authorize it independently. Ideally, you want three touchpoints: one person to receive or prepare, one to record, and one to reconcile or approve. In small congregations where paid staff is limited, qualified volunteers with financial backgrounds — such as a CPA or accountant from your membership — can fill oversight roles effectively, provided they pass a background check and rotate responsibilities regularly.
How often should a church have an independent audit or financial review?
That depends on congregation size, complexity, and any denominational requirements. As a general guideline, larger congregations with significant annual revenue or multiple funds should consider an annual independent audit conducted by a CPA not involved in day-to-day operations. Smaller churches may find that an annual review or agreed-upon procedures engagement provides sufficient external oversight without the full cost of an audit. When internal controls have significant gaps that cannot be addressed through volunteers or board oversight alone, an independent audit becomes the appropriate next step.
Are online giving platforms subject to the same internal control requirements as cash offerings?
Yes, and they carry their own specific risks. With digital giving, the vulnerabilities shift from physical cash handling to administrative access and account configuration. Limit the number of people who can change bank routing information on your giving platform, reconcile platform reports against actual bank deposits regularly, and review access permissions at least annually. As more congregations move toward cashless giving, these digital controls deserve the same rigor and attention as your physical offering procedures.
What should a church's written financial policies document include?
At minimum, it should define who is authorized to approve expenditures and at what dollar thresholds, establish dual-signature requirements for checks above a set amount, outline procedures for cash receipt handling and deposit timing, specify how credit cards and petty cash are managed and reconciled, and address records retention — including how long financial documents are kept and who can access them. The document should be approved by the finance committee and reviewed annually. It doesn't need to be lengthy, but it does need to exist in writing. Institutional memory is not a financial control.

Latest Insights

Disclaimer: The information contained within this article is provided for informational purposes only and is not intended to be a substitute for obtaining accounting, tax, legal, investment, or financial advice from a qualified professional. Consulting a qualified professional is crucial before making any decisions based on this information, as individual circumstances vary. While we use reasonable efforts to furnish accurate and up-to-date information, we do not warrant that any information contained in this article is accurate, complete, reliable, current, or error-free. We assume no liability or responsibility for any actions taken or not taken based on the content of this article. In no way does this article create a client relationship.

Categories