Trust money is different from almost every other type of money that moves through a law firm.

It does not belong to the practice.

It is money being held on behalf of clients or other people, and with that comes a significant responsibility to ensure it is received, recorded, protected and disbursed correctly.

That is why discovering something unusual within a trust account should never be treated as simply an accounting discrepancy.

Perhaps a reconciliation does not balance.

A payment appears that nobody can immediately explain.

An authorisation is missing.

A transaction has been processed differently from the firm’s usual procedure.

Or a principal begins to suspect that a staff member may be handling client money improperly.

At that point, the firm’s response matters enormously.

The objective is not to panic.

It is to act carefully, preserve information, protect client funds and follow the firm’s regulatory obligations.

Start With the Facts, Not the Accusation

An irregularity does not automatically mean dishonesty.

Human error happens.

A transaction may have been posted incorrectly. A payment may have been allocated to the wrong ledger. A procedural step may have been missed.

But unexplained irregularities should never simply be ignored because there might be an innocent explanation.

The first priority should be establishing what happened.

That means reviewing the relevant records, identifying affected transactions and preserving the information needed to understand the situation.

This is where good trust accounting systems become extremely important.

A firm should be able to determine:

• What transaction occurred
• When it occurred
• Who initiated or authorised it
• Which client ledger was affected
• What supporting documentation exists
• Whether other similar transactions have occurred

Good systems give leadership facts.

Poor systems leave leadership guessing.

Secure the Situation

If there is a genuine concern that client money may be at risk, the firm should immediately consider what controls are necessary to prevent further unauthorised activity while the situation is investigated.

That may include reviewing access permissions, banking authorities, passwords and trust-account authorisations.

The key is to do this thoughtfully and in accordance with the firm’s legal and employment obligations.

Do not start deleting access logs, changing records or “cleaning up” the accounting system.

Preserving an accurate audit trail is critical.

In NSW, for example, general trust accounts are subject to strict controls over who may operate them, and law practices must maintain accurate records that can be inspected.

Understand Your Reporting Obligations

This is one area where waiting for absolute certainty can be a serious mistake.

Under the Legal Profession Uniform Law in NSW, both actual and suspected trust account irregularities must be reported as soon as practicable. The Law Society specifically identifies matters such as unauthorised withdrawals, intermixing of funds, fraud, cybercrime and errors or deficiencies as reportable irregularities.

Requirements vary between jurisdictions, so firms should immediately check the rules that apply to their practice and seek appropriate professional or regulatory guidance.

The important operational lesson is simple:

Your response procedure should already exist before you need it.

A principal should not be searching the internet at 5.30pm trying to work out who needs to be contacted after discovering a suspicious transaction.

Protect Clients First

If money is missing or appears to have been improperly transferred, protecting affected clients must remain central to the firm’s response.

That may require specialist legal, accounting, insurance or regulatory advice depending on the circumstances.

It may also require determining whether the issue extends beyond one transaction.

That question matters.

If one unauthorised payment has occurred, leadership should not assume it is isolated without checking.

Review related transactions.

Review permissions.

Review unusual adjustments.

Review who had access.

Review whether normal controls were bypassed.

The goal is not merely to correct one number.

It is to understand whether the firm’s system has a wider vulnerability.

Avoid the “One Trusted Person” Problem

Trust accounting risk often reveals a broader operational weakness.

Too much control may sit with one person.

Perhaps the same person enters transactions, authorises payments and reconciles accounts.

Perhaps nobody regularly reviews access permissions.

Perhaps a long-term employee has accumulated banking access that nobody has reconsidered in years.

Trust is important.

Controls are still necessary.

Strong governance is not an accusation against employees.

It protects employees as much as it protects the firm.

Clear authorisations, separation of duties, regular reconciliations and visible audit trails make it easier to identify honest mistakes and considerably harder for inappropriate activity to go unnoticed.

Review the System After the Immediate Issue

Once the immediate concern has been addressed, leadership should ask a bigger question:

How was this able to happen?

Was there inadequate oversight?

Were permissions too broad?

Was reconciliation inconsistent?

Were procedures undocumented?

Did the firm rely too heavily on one employee?

Could unusual activity have been identified sooner?

This is where an incident becomes an opportunity to strengthen the practice.

The Law Society of NSW’s practice-management guidance specifically treats trust-account irregularities, record keeping, reconciliation, external examination, fraud risk and cyber awareness as important elements of financial management for law practices.

Strong Controls Protect Strong Firms

Nobody wants to believe that someone inside their practice might mishandle client money.

But strong leadership means building systems for difficult possibilities, not simply comfortable ones.

At Wise Owl Legal, we believe critical financial and compliance processes should be visible, structured and properly documented.

The right systems help firms maintain clearer records, create stronger workflows and improve oversight across the practice.

Because when client money is involved, “we trust the person handling it” is not a control.

Good systems are.