HUD Audit Fraud Risk
HUD reminds multifamily owners to confirm auditors follow required guidance and address fraud risks during annual audits.
HUD has issued a new reminder about HUD audit fraud risk responsibilities for multifamily housing owners and management agents. The July 23, 2026, memorandum does not create a new audit requirement. Instead, it reinforces an existing mandatory standard. You can view the new memo here.
Auditors must use HUD’s Consolidated Audit Guide when auditing profit-motivated entities subject to HUD’s financial reporting standards.
HUD issued the reminder because strong audits help detect fraud and protect federal housing resources. The memorandum specifically highlights embezzlement, theft, and false certifications.
Owners should not treat this requirement as an issue that belongs only to their auditors. Owners select the auditor, provide records, certify information, and respond to findings.
Therefore, owners and agents should confirm that their audit process addresses HUD’s requirements from the beginning.
Key Takeaways
Confirm your auditor follows HUD’s Consolidated Audit Guide.
Strengthen internal controls and maintain complete, accurate records.
Address findings quickly to avoid corrective action, increased monitoring, or fraud referrals.
HUD Audit Fraud Risk Requirements
HUD’s Consolidated Audit Guide applies to audits of for-profit participants covered by HUD’s uniform financial reporting standards. The required audit includes two main components:
- A financial statement audit of the entity.
- A compliance audit of the entity’s major HUD programs.
The auditor must follow generally accepted auditing standards and government auditing standards. However, those standards alone do not replace HUD’s program-specific requirements. Auditors must address each applicable compliance requirement that could materially affect a major HUD-assisted program. An auditor may determine that a specific procedure does not apply. However, the auditor must explain and document that decision within the audit records.
Owners should discuss these requirements with their independent auditors before fieldwork begins.
Ask the auditor to confirm:
- The audit will follow the current Consolidated Audit Guide.
- The engagement includes required HUD compliance testing.
- The auditor understands the project’s HUD programs and agreements.
- The auditor will evaluate applicable internal controls.
- The auditor will document any excluded procedures.
- The final report will include required findings and schedules.
Owners with several HUD-assisted properties should also discuss how the auditor will select and test projects.
HUD allows limited group-project-based sampling in certain compliance areas. However, specific conditions must exist before an auditor uses that approach.
Additionally, most other compliance sections require testing for each individual project.
HUD Audit Fraud Risk Action Steps
Owners and agents should take several practical steps before the annual audit begins. First, confirm the auditor’s qualifications and planned approach. Do not assume every independent auditor regularly performs HUD program audits.
Ask direct questions about the firm’s HUD multifamily experience. Also, confirm which version of the Audit Guide the firm will use. Document the auditor’s response within your audit planning records.
Next, review the project’s internal controls.
Strong internal controls help prevent unauthorized transactions and identify irregular activity sooner.
Review who can:
- Collect and deposit rental receipts.
- Approve invoices and payments.
- Sign checks or initiate electronic transfers.
- Use project credit cards.
- Add employees or vendors.
- Process payroll.
- Change accounting records.
- Certify occupancy or unit conditions.
Whenever possible, separate these responsibilities among different employees. One person should not collect funds, record transactions, reconcile accounts, and approve adjustments without independent review.
For more context, review Navigate’s article on internal controls and rental assistance program integrity.
Then, prepare complete and reliable records.
Owners should provide the auditor with accurate records, contracts, bank information, tenant data, certifications, and supporting documentation. Incomplete records can delay the audit. Inconsistent records may also increase the auditor’s risk assessment.
Before fieldwork, reconcile bank accounts, tenant ledgers, security deposits, payroll, vendor payments, and project expenses. Also, verify that supporting documents match the transactions recorded within the accounting system.
Finally, review fraud reporting procedures with staff.
Employees should know how to report suspicious activity without alerting the person involved. HUD OIG encourages owners and managers to report suspected crime, fraud, waste, and abuse through its official hotline. HUD OIG also asks owners to share anti-fraud information with staff. Review the HUD OIG common fraud schemes with accounting, management, maintenance, and compliance teams.
Navigate also offers guidance on understanding and preventing fraud in rental housing.
Why HUD Audit Fraud Risk Compliance Matters
HUD’s memorandum identifies two common fraud categories.
The first category involves embezzlement and theft.
Examples may include:
- Taking rental or laundry receipts.
- Writing unauthorized checks.
- Falsifying invoices.
- Misusing project credit cards.
- Creating false vendors.
- Adding ghost employees to payroll.
- Approving unauthorized bonuses.
- Using project staff or equipment for personal purposes.
The second category involves false certification.
For example, an owner might certify that a unit remains occupied when it does not. An owner might also falsely certify that a unit meets required housing standards.
False certifications weaken program integrity and may place residents, projects, and federal resources at risk.
Moreover, weak controls can allow smaller problems to grow before anyone detects them.
Fraud can divert resources away from maintenance, resident services, staffing, and property operations. It can also damage trust with residents and HUD.
For that reason, owners should view the annual audit as more than a filing obligation.
A well-managed audit can identify control gaps, improve documentation, and strengthen long-term project oversight.
Navigate’s Management and Occupancy Review resources can also help owners evaluate broader compliance readiness.
Consequences of Ignoring HUD Audit Requirements
HUD’s memorandum does not establish a new penalty schedule. However, ignoring the Audit Guide can still create serious consequences.
An incomplete audit may fail to support the required opinion about HUD program compliance. Additionally, auditors must report identified weaknesses and significant deficiencies when required by reporting standards.
Even nonmaterial noncompliance may appear within a management letter or other written communication.
Depending on the facts, consequences may include:
- Audit findings.
- Reported internal control deficiencies.
- Questioned or disallowed costs.
- Corrective action requirements.
- Additional documentation requests.
- Increased HUD monitoring.
- Delayed audit completion or acceptance.
- Damage to the owner’s compliance record.
- Referral of suspected fraud to HUD OIG.
These results are not automatic in every case. The facts, program requirements, contracts, and audit conclusions will determine the response.
However, suspected intentional fraud poses risks beyond those of a routine audit finding. Auditors may have duties to report fraud directly under applicable standards and HUD requirements.
Therefore, owners should address control weaknesses quickly and document every corrective action. Do not wait until the auditor returns next year. Assign responsibility, establish deadlines, and retain evidence showing that the project completed each correction.
Ultimately, HUD expects owners, agents, and auditors to protect program integrity together. Owners should confirm that auditors follow the mandatory guide. They should also maintain controls that support accurate records and truthful certifications. That preparation protects the project, residents, federal resources, and the long-term availability of affordable housing.
Frequently Asked Questions
Does HUD’s July 2026 memorandum create a new audit requirement?
No. The memorandum reminds owners about an existing requirement. Auditors must use the Consolidated Audit Guide for covered for-profit participants.
Who must follow the HUD Consolidated Audit Guide?
Independent auditors must use it when auditing profit-motivated entities subject to HUD’s applicable uniform financial reporting standards.
What should owners ask their auditors before the audit begins?
Owners should confirm HUD experience, Audit Guide use, compliance testing, internal control review, documentation standards, and reporting procedures.
Can an auditor skip a procedure listed in the Audit Guide?
The auditor may exclude an inapplicable procedure. However, the auditor must explain and document the reason within the audit documentation.
What fraud risks did HUD highlight?
HUD highlighted embezzlement, theft, and false certification. Examples include stolen receipts, false invoices, payroll fraud, and inaccurate unit certifications.
What happens when an audit identifies noncompliance?
The auditor may report a finding, an internal control deficiency, a questioned cost, or a management letter comment. HUD may require corrective action.
Does every audit finding result in a penalty?
No. The response depends on the finding, materiality, program requirements, contracts, corrective actions, and potential evidence of intentional misconduct.
Where should suspected HUD program fraud be reported?
Owners and employees may report suspected fraud, waste, abuse, or criminal conduct through the official HUD OIG hotline.
