A mortgage custodial account audit verifies that a servicer or issuer is holding borrower funds correctly, keeping principal and interest separate from taxes and insurance, and reconciling those balances to investor records. For lenders that sell or service loans through Ginnie Mae, Fannie Mae, or Freddie Mac, this examination is not optional. It confirms that money belonging to borrowers and investors is segregated, insured, and fully accounted for at every reporting cutoff.
Quick answer: A custodial account audit tests whether a mortgage servicer keeps borrower escrow and investor principal-and-interest funds in properly titled, federally insured custodial accounts; whether those funds are never commingled with corporate operating cash; and whether monthly reconciliations tie the bank balances to the loan-level trial balance. Auditors examine custodial agreements, depository eligibility, bank reconciliations, RESPA escrow analyses, and the timeliness of remittances to investors.
Servicers carry a fiduciary responsibility for cash they never own outright. Borrowers send escrow deposits for property taxes and hazard insurance, and they pay down principal and interest each month. Those dollars belong to the borrower or the investor until they are disbursed, and the custodial account is the legal mechanism that keeps them safe. An audit exists to prove that mechanism works as designed.
Why Custodial Account Verification Matters
Custodial funds are held in trust, not earned as revenue. A servicer that mixes these balances with its own operating cash creates a direct risk to borrowers, investors, and the agencies that guarantee the underlying securities. Verification protects all three parties at once.
Agency programs treat segregation as a baseline condition of doing business. Under the Fannie Mae Servicing Guide, principal-and-interest funds and tax-and-insurance funds must not be commingled in the same custodial account regardless of remittance type, and tax-and-insurance balances must never mix with the servicer’s general corporate funds or with funds held for other investors. A failure here is not a clerical issue. It can trigger sanctions, repurchase demands, or loss of approved-servicer status.
The audit also matters because the dollar amounts are large and the cutoffs are unforgiving. Servicers report custodial balances monthly, and investors rely on those figures to confirm that remittances will arrive in full and on time. Independent verification gives investors and agencies confidence that what the servicer reports actually sits in the bank.
There is a reputational dimension as well. A servicer that earns a clean opinion year after year signals operational maturity to the agencies, to warehouse lenders, and to counterparties evaluating servicing transfers. A history of exceptions does the opposite, inviting closer scrutiny and tighter oversight on every future transaction.
For mortgage banking firms that need this work performed by a qualified independent CPA, our mortgage banking advisory and assurance team understands the specific agency frameworks that govern these accounts. The procedures below describe what a thorough engagement covers.
What Auditors Test in a Custodial Account Audit
A custodial account audit follows the money from the borrower’s payment through the bank account and out to the investor. Each step has a control that the auditor evaluates and a record that the auditor inspects. The objective is to confirm that funds are properly held, properly titled, and fully reconciled.
Account Titling and Custodial Agreements
The first procedure confirms that each custodial account exists under a valid agreement and is titled to reflect its fiduciary nature. Ginnie Mae issuers, for example, must execute a Master Agreement for the Servicer’s Principal and Interest Custodial Account (Form HUD 11709) and a Master Agreement for the Servicer’s Escrow Custodial Account (Form HUD 11720). These forms identify the depository, the account number, and the funds the account may hold.
Auditors verify that the accounts on file match the agreements, that the titling identifies the funds as held in trust, and that current agreements are on record with the agency. Ginnie Mae requires these Master Agreements to be recertified annually, so the auditor checks that the issuer met that obligation within the required recertification window.
Titling is more than a formality. Correct trust titling is what legally insulates borrower and investor funds from the servicer’s creditors if the servicer fails, so an account that holds custodial money but reads as a general corporate account is a finding even when the balance reconciles perfectly. Auditors also confirm that the depository signed the agreement and acknowledged the custodial nature of the funds, because an agreement the bank never countersigned does not give the agency the protection it requires.
Depository Eligibility
Custodial funds may only sit in a bank that meets agency rating standards. Under the Fannie Mae Servicing Guide, a custodial depository must hold accounts insured by the FDIC or the NCUSIF and be rated as well capitalized by its federal or state regulator. Larger institutions must also carry a qualifying short-term rating from a recognized agency such as S&P or Moody’s, while smaller institutions must meet a minimum IDC Financial Publishing or KBRA threshold.
The auditor obtains evidence that each depository met the required ratings throughout the period. Fannie Mae directs servicers to use financial ratings issued within the past three months and to confirm those ratings every three months thereafter, so the auditor expects dated rating evidence at regular intervals rather than a single check at account opening. If a bank fell below the threshold, the servicer was obligated to move the funds, and the auditor tests whether that happened on time.
Eligibility is a continuing condition. A bank that qualified in one quarter can be downgraded in the next, so the auditor expects the servicer to monitor its depositories on the schedule the rating agency uses for publishing changes and to keep dated evidence of each rating it relied on.
Separation of P&I and T&I Funds
Segregation is the heart of the engagement. Auditors confirm that principal-and-interest balances and tax-and-insurance balances live in separate accounts and that neither account holds corporate money. For servicers using scheduled remittance, Fannie Mae requires at least two P&I custodial accounts so that funds for mortgage-backed security pools are not commingled with funds for portfolio loans.
The auditor traces a sample of deposits to confirm each dollar landed in the correct account. Commingling, even temporarily, is one of the most common and most serious findings, so the testing here is deliberate and detailed.
A frequent trouble spot is the handling of incoming payments before they are posted. If borrower funds pass through a clearing or suspense account that also carries corporate cash, the servicer can create commingling without intending to, and the auditor pays particular attention to how quickly funds move from intake into the correct custodial account. The auditor also reviews how the servicer handles unidentified or partial payments, because money parked in suspense for too long can mask both a reconciliation problem and a segregation problem at the same time.
Bank Reconciliations and the Loan-Level Trial Balance
Reconciliation testing confirms that the cash in the bank equals the cash the servicer owes. The auditor compares the month-end custodial bank statement to the servicer’s trial balance of individual loan escrow and P&I balances and investigates any difference. A reconciled difference is acceptable only if it is identified, documented, and resolved quickly.
Auditors look closely at reconciling items that linger across multiple months, because an aged unreconciled balance can hide a shortfall or a misappropriation. They also confirm that the servicer’s status report of custodial funds, which Fannie Mae requires at the end of each month, agrees with the supporting records.
The quality of the reconciliation process itself is part of the review. The auditor expects reconciliations to be prepared promptly after month-end, reviewed by someone other than the preparer, and supported by an itemized list of open differences rather than a single unexplained plug figure. Segregation of duties matters here: when the same person collects payments, records them, and reconciles the account, the control environment is weaker, and the auditor weighs that when deciding how much testing the balances require.
RESPA Escrow Analysis
Because escrow custodial accounts hold borrower money for taxes and insurance, the audit intersects with consumer protection rules. Regulation X under RESPA requires servicers to perform an escrow account analysis using the aggregate accounting method and to send the borrower an annual escrow account statement within 30 calendar days of the end of the escrow computation year, as set out in 12 CFR 1024.17.
Auditors verify that the servicer ran the analysis correctly, applied any cushion within the regulatory limit, and disbursed tax and insurance payments on schedule. Late disbursements can expose borrowers to penalties and the servicer to liability, so timeliness is part of the test. The auditor also checks that shortages, surpluses, and deficiencies identified in the analysis were handled the way the regulation prescribes, since a correct calculation followed by an incorrect adjustment still harms the borrower.
Remittance Timeliness
The final procedure follows funds out to the investor. Auditors confirm that principal and interest collected from borrowers reached the investor or the security holders on the required remittance dates and in the correct amounts. A pattern of late or short remittances signals a cash-flow or controls problem that the audit is designed to surface. The auditor typically selects remittance cycles across the period rather than a single month, because a problem that surfaces only at quarter-end or year-end can be missed by a narrow sample.
How the Findings Are Reported
The deliverable depends on the framework the servicer operates under. Many agency programs require an annual report from an independent public accountant covering compliance with custodial account requirements, often performed under attestation standards rather than a financial-statement audit. The report states whether the servicer complied with the applicable custodial rules during the period.
Findings are typically grouped by control area: titling and agreements, depository eligibility, segregation, reconciliation, and remittance. Each finding identifies the requirement, the exception, and the population affected so that management can correct the issue and the agency can assess severity. A clean report supports the servicer’s continued approval, while exceptions may require a corrective action plan.
The audit is also a planning exercise, not only a backward-looking review. Where the auditor sees a control that worked but worked narrowly, that observation can guide the servicer toward process changes that prevent a future exception before it ever reaches a reportable threshold. Servicers that treat the report as a roadmap, rather than a grade, tend to see fewer findings in the years that follow.
Pease Bell performs this work as part of our broader audit and assurance services, pairing agency-specific knowledge with the documentation standards these engagements demand. Servicers that prepare reconciliations cleanly and retain depository rating evidence throughout the year make the audit faster and reduce the chance of findings.
Frequently Asked Questions
What is the difference between a P&I and a T&I custodial account?
A P&I custodial account holds the principal and interest borrowers pay each month, which is owed to investors or security holders. A T&I custodial account holds the tax and insurance escrow funds collected from borrowers. The two must be kept in separate accounts and neither may be commingled with the servicer’s own corporate funds.
Who requires a mortgage custodial account audit?
The agencies and investors that guarantee or purchase the loans require it, including Ginnie Mae, Fannie Mae, and Freddie Mac. Each maintains custodial account rules in its issuer or servicing guide, and an independent accountant typically reports annually on the servicer’s compliance with those rules.
What are the most common findings in a custodial account audit?
Commingling of P&I and T&I funds, aged or unexplained reconciling items between the bank balance and the loan-level trial balance, use of a depository that no longer meets the required rating, and late investor remittances or late tax and insurance disbursements. Most stem from weak monthly reconciliation discipline.
How often must custodial accounts be reconciled and reported?
Servicers reconcile custodial accounts monthly and report custodial fund balances to the investor or agency at the end of each month. Escrow account analyses follow the borrower’s annual escrow computation year, with the annual statement due within 30 calendar days of the end of that year under RESPA.
A custodial account audit protects the people whose money the servicer never truly owns. By confirming segregation, depository eligibility, accurate reconciliations, and timely remittances, the engagement gives borrowers, investors, and agencies the assurance that funds held in trust are exactly where they belong.
