HOA Embezzlement: Spot & Report It

HOA embezzlement is the theft of association money by someone the community trusted to manage it. It is one of the most damaging things that can happen to a homeowners association, and it is more common than most owners realize.

This guide explains what embezzlement looks like inside an HOA, how to build the paper trail, and the formal steps for reporting and recovery. It is informational only — a licensed attorney in your state should review your specific facts before you take legal action.

What HOA embezzlement actually looks like

Embezzlement is the misuse of money by a person who was entrusted with it. In an HOA, that person is usually the treasurer, president, or a professional community manager. The theft rarely looks like someone walking off with a bag of cash. It looks like small, ordinary transactions repeated over months or years.

A treasurer pays a personal credit-card bill from the operating account and codes it as “office expense.” A manager sets up a landscaping vendor that is really a shell company they control, then approves monthly invoices to that company. A president approves inflated invoices from a friend’s contracting business and receives a quiet kickback. An attacker impersonates a legitimate vendor by email, sends new banking instructions, and the treasurer wires the next payment to a criminal account.

All four patterns show up in HOA fraud cases every year. The last one — vendor-impersonation wire fraud — has grown fastest because it does not require an insider at all. It only requires one board member who does not verify banking changes.

Warning signs the board or manager is stealing

Fraud thrives in the dark. When you cannot see the money move, you cannot spot a problem. Watch for these signals.

• Bank accounts are not reconciled monthly. Reconciliation is the basic control that catches theft. If no one is comparing the bank statement to the ledger every month, no one is watching.
• The board refuses to share monthly financials. Owners are entitled to see balance sheets, income statements, and bank statements. Refusal is a red flag on its own.
• Invoices go “missing” when owners ask to see them. Real invoices exist. Missing ones usually mean the payment did not go where it should have.
• One person has sole signature authority on checks or wires. Dual signatures are the single most effective anti-fraud control an HOA can adopt.
• Vendors have PO-box or residential addresses, or no website. Shell companies rarely maintain a real business presence.
• Petty cash is never counted. Small unmonitored amounts are where new schemes begin.
• The board refuses to allow member records inspection. State law usually gives you the right — refusal is often a symptom of something the board does not want found.
• The annual audit is skipped, delayed, or performed by a friend of the board. A real independent audit is the single best defense against embezzlement.

None of these are proof of theft on their own. Two or three together are worth a formal inquiry. Our HOA audit requirements guide covers what a proper audit involves and when your state requires one.

Build the paper trail before you accuse anyone

Do not confront anyone publicly, do not post on Facebook, and do not send an angry all-owners email. Accusations without evidence create defamation exposure and let the target destroy records. Gather documents first.

Ask the board — in writing — for the following records for the last 12 months:

• All bank and investment account statements
• The vendor list with contact information and W-9s
• Board meeting minutes for the entire period
• The approved budget and actual spend by category
• Copies of every vendor invoice above $500
• The bank signature card showing who can sign
• The most recent independent audit, or a written explanation of why one was not performed

Put your request in a dated letter or email to the full board — not just the president. State the specific records you want and the statute that supports your right to inspect. Keep a copy of the request and every response.

Your legal right to inspect HOA records

State law gives homeowners real teeth when they ask for records. The exact statute depends on where you live.

• Florida condominiums: Fla. Stat. § 718.111(12) requires the association to make records available within 10 working days of a written request. Refusing without a legal basis can trigger daily statutory damages against the association.
• Florida HOAs: Fla. Stat. § 720.303(5) is the parallel provision for non-condo homeowners associations, with the same 10-working-day timeline.
• California: Cal. Civ. Code § 5200 through § 5240, the Davis-Stirling records-inspection provisions, require the association to produce most records within 10 business days and “enhanced association records” within 30 calendar days.

Other states have their own records statutes. Your governing documents may also expand these rights. Cite the statute in your request letter — it puts the board on notice that ignoring you has legal consequences.

Formal steps to report HOA embezzlement

Report to more than one authority in parallel. Each one has a different job, and no single channel will recover the money on its own.

Step 1: Written demand for an independent audit

Send the full board a written demand for an independent audit by a CPA the board does not already have a relationship with. Attach the specific transactions or patterns you have questions about. Ask for a written response within 30 days.

A demand letter alone often changes behavior. Once a suspected thief knows the auditors are coming, they usually stop — and sometimes resign. If the board refuses to audit, that refusal becomes evidence.

Step 2: File with your state HOA regulator

Some states have an agency that oversees HOA finances. In Florida, the Division of Florida Condominiums, Timeshares, and Mobile Homes inside the Department of Business and Professional Regulation (DBPR) handles condo complaints. In California, the Department of Real Estate (DRE) and the state Attorney General’s consumer-protection division are the usual entry points. Most other states route through the state AG.

Your complaint should include the records you gathered and the specific transactions you believe are improper.

Step 3: Local law enforcement and the FBI

Report check theft, forged endorsements, and cash losses to your local police department — these are ordinary property crimes handled locally. Report wire fraud, especially vendor-impersonation scams that move money across state lines, to the FBI’s Internet Crime Complaint Center at IC3.gov. The FBI’s field offices work these cases when the loss is significant, and IC3 reports feed the interagency task forces that recover wired funds.

Step 4: File a fidelity bond or crime insurance claim

The association’s fidelity bond or crime coverage is the policy that pays when an insider steals. This is almost always the fastest path to actually recovering money. Florida condos are required to carry fidelity coverage for anyone who controls or disburses funds under Fla. Stat. § 718.111(11)(h). California’s Davis-Stirling Act imposes a similar requirement under Cal. Civ. Code § 5806.

File the claim in writing as soon as the loss is documented. Insurers set short notice deadlines, and late notice can void coverage. Our guide to HOA D&O insurance explains how D&O and fidelity policies interact and what each one actually covers.

Step 5: Civil action for breach of fiduciary duty

If the association will not act, individual owners can sometimes bring a derivative suit on behalf of the HOA, or a direct action against the responsible board member. The claim is usually breach of fiduciary duty. Our HOA breach of fiduciary duty guide walks through what that claim requires.

An HOA attorney should evaluate whether a derivative or direct action is the right structure in your state before you file anything.

Can you sue an HOA board member personally?

Yes — but the analysis matters. Board members are protected by the business-judgment rule, which shields directors who acted in good faith, on reasonable information, and in what they believed was the best interest of the association. Honest mistakes are not personal liability.

Embezzlement is different. Theft, self-dealing, and intentional fraud fall outside the business-judgment rule entirely. A director who steals cannot hide behind a good-faith defense.

Directors and officers (D&O) insurance is not a backstop here either. Nearly every D&O policy excludes intentional dishonest acts. That means the individual’s personal assets are at risk. Fidelity coverage pays the association for the loss; the individual can still be sued civilly and prosecuted criminally.

The wire-fraud scenario: how one email drains an HOA

The fastest-growing category of HOA financial loss is not classic insider embezzlement. It is business email compromise. An attacker studies the association’s vendors — often through public meeting minutes or contractor lists — then sends a spoofed email that looks like it came from the landscaper, roofer, or reserve-study firm. The email says the vendor changed banks and provides new wire instructions. The next payment goes to a criminal account.

Three controls stop this cold:

• Require out-of-band confirmation of every banking change. Call the vendor at a phone number you already have on file — never one from the suspect email. Two minutes of verification prevents the loss.
• Require dual approval for any ACH or wire above a small threshold. One person alone should not be able to move association money.
• Ask your bank about positive pay and ACH block services. These bank-side controls flag or reject unauthorized transactions before they clear.

Combine these with a monthly reconciliation and an annual independent audit, and the association becomes a hard target.

What not to do

• Do not accuse anyone publicly before you have documentation. Defamation lawsuits are real, and premature public accusations can also tip off the suspect and give them time to destroy records.
• Do not withhold your dues in protest. Withholding creates a lien the association can enforce against your home, and it does not create a legal defense against the fraud.
• Do not conduct your own sting or hack into HOA accounts. Evidence has to be gathered legally to be usable. Records inspection under the statute is legal. Guessing the treasurer’s password is not.
• Do not delay the fidelity bond claim. Notice deadlines are short. Losing coverage because notice was late is one of the worst outcomes possible.

When to bring in an attorney

Any suspected embezzlement is a situation to run past a community-association attorney before you take formal action. The attorney can review your records, tell you which claims are strongest, coordinate the fidelity claim, and handle the litigation if it goes that far. Most offer a paid initial consultation for a few hundred dollars — a small cost compared to a wrong first move.

Your HOA is not a police department, an auditor, or a prosecutor. Homeowners who spot a problem should use the formal channels — records inspection, independent audit, insurance claim, regulator, law enforcement, and civil counsel — in that order. Boards that pair strong internal controls with an annual independent audit and a real fidelity bond rarely lose serious money to fraud.

For more guides on homeowner rights, fines, and how to push back when an HOA oversteps, browse the Can My HOA Do That? homeowner rights hub.