Florida HOA Financial Controls: How to Protect Your Community From Fraud and Board Misconduct

In April 2026, a property management bookkeeper in Martin County, Florida turned herself in to face 124 felony charges. She had stolen nearly $200,000 from two homeowners associations and spent it on Disney World trips, a New York vacation, plastic surgery, and a wedding. The Martin County Sheriff described the outcome plainly: there is none left to claw back. She spent it all.

This was not an isolated case. Over $16 million was stolen from Florida HOAs in just a six-month period in 2025. In Aventura, the longtime president of a luxury condo association allegedly created a fictional security company, routed payments through his deceased mother's bank accounts, and stole more than $1.5 million while publicly talking about how he was improving the building's finances. In another Florida case, an association controller received $644,000 in fraudulent vendor payments over 47 months through shell companies registered under his own firm's name.

The common thread in every one of these cases is identical: the perpetrators had financial access, minimal oversight, and time. Not sophisticated hacking. Not elaborate schemes requiring technical expertise. Just access, opportunity, and an absence of controls that would have caught them early.

I want to be clear about something. The people running most Florida HOA associations are honest volunteers doing their best in a difficult role. The vast majority of board members and property managers are not stealing from their communities. But the absence of financial controls does not just enable the dishonest ones. It creates an environment where even well-intentioned boards make errors, miss problems, and fail to catch issues before they become crises.

Here is the system I run in my community and why every Florida association needs something like it.

The Criminal Penalties That Changed in 2024

Before getting into controls, every Florida board member needs to understand what the law now says about financial misconduct.

Under HB 1023 and HB 1203, signed by Governor DeSantis in 2024, Florida significantly expanded the criminal consequences for board misconduct. Any officer, director, or manager who knowingly solicits, offers to accept, or accepts a kickback from any person providing goods or services to the association commits a third-degree felony, carrying up to five years in prison. A board member convicted of this offense must be immediately removed from office.

Criminal charges now also apply to board members who engage in ballot forgery, theft or embezzlement of association funds, destruction of official records, obstruction of justice, and fraudulent voting activities. Intentionally destroying or failing to maintain required accounting records is a first-degree misdemeanor carrying up to one year in jail.

These are not threats on paper. Florida law enforcement is actively prosecuting these cases. Prosecutors take HOA fraud seriously because the victims are ordinary people who paid their dues in good faith and trusted their elected representatives with those funds.

The criminal penalties protect communities from bad actors. Financial controls protect communities from everyone else, including good-faith board members who make errors, miss problems, or create the appearance of impropriety even without intent.

The Three Controls Every Association Must Have

There is no financial control system so sophisticated that a determined and patient fraudster cannot defeat it. But the following three controls catch and deter the overwhelming majority of misappropriation in small to mid-size associations, and they cost nothing to implement.

Control one: Separate the payment function from the reconciliation function.

The person who processes payments should not be the same person who reconciles the bank statement. This is the single most important separation in association accounting. If one person controls both outgoing payments and the verification of those payments against bank records, that person can make unauthorized transfers and then alter the reconciliation to hide them.

In my community, the treasurer processes payments. The president independently reviews and signs off on the monthly bank reconciliation, comparing it directly against the actual bank statement, not just the treasurer's summary of what the bank statement says. That second set of eyes is what catches discrepancies before they accumulate into something serious.

Control two: Require multi-signature authorization for payments above a threshold.

In my community, any payment over $1,000 requires approval from the president, vice president, and treasurer before it is processed. For routine small payments like monthly vendor invoices within expected ranges, the treasurer can process independently. For anything unusual, anything large, or anything from a vendor the board has not previously used, three people have to agree.

This control means that embezzlement through authorized payments requires collusion among three board members. That is not impossible but it is dramatically less likely than one person acting alone. It also catches authorization errors from good-faith board members who might approve a payment without realizing something is off.

Set your threshold deliberately. If you set it too low, the three-signature requirement becomes burdensome for routine operations. If you set it too high, too many significant payments flow through without review. In a small community I recommend $500 to $1,000. In a larger community with higher routine expenses, $2,500 to $5,000 may be appropriate.

Control three: Have at least one board member who is not the treasurer review the actual bank statements every month.

Not the treasurer's report of the bank statements. The actual statements from the bank. This distinction matters because a treasurer who is concealing something can produce a report that does not match the bank statement. A board member who only ever sees the treasurer's report will never catch that discrepancy. A board member who reviews the actual bank statements monthly will catch it quickly.

I receive the bank statements directly from the bank. My email is registered as a secondary recipient. Every month I get the statement, I compare the closing balance to the ledger balance, and I review the transactions for anything unusual. This takes about fifteen minutes a month. In years of doing this I have found errors, not intentional fraud, but errors that would have compounded if uncorrected.

The Debit Card Prohibition

This is the one that catches boards off guard. Under the 2025 legislative changes, Florida condo associations are prohibited from using debit cards for any association expense.

This prohibition exists specifically to prevent embezzlement through small, hard-to-track purchases. Debit cards create a path to association funds that bypasses the authorization controls described above. A treasurer with a debit card can make purchases without triggering the multi-signature requirement. Those purchases are hard to monitor in real time and can be obscured in the ledger under vague categories.

If your association currently uses a debit card for any expenses, stop immediately. Use checks or ACH transfers that require the proper authorization process. Credit cards with tightly controlled authorization are permissible if properly managed, but debit cards directly connected to operating or reserve accounts are not allowed under current Florida condo law and represent a significant control gap for any association type.

Fidelity Insurance: When Controls Fail

Controls reduce the likelihood and early detection of fraud. Fidelity insurance recovers the money when controls fail and fraud occurs anyway.

Florida law requires associations to carry fidelity and crime insurance proportionate to the maximum funds at risk. The minimum coverage is at least equal to three months of assessments plus the total reserve balance. For a community collecting $5,000 per month with $200,000 in reserves, that means at minimum $215,000 in fidelity coverage.

This is not a generous minimum. If your reserve balance has grown significantly since you last set your fidelity coverage amount, the coverage may be inadequate. Review the fidelity coverage amount annually when you conduct your insurance review, and adjust it whenever the reserve balance changes materially.

The Martin County bookkeeper who stole $200,000 is facing criminal prosecution. Criminal prosecution does not put the money back. Insurance does. The community whose funds were stolen has a fidelity insurance claim path that criminal conviction alone does not provide.

Carry fidelity insurance at the legally required minimum at a bare floor, and review whether the minimum is actually adequate for your specific reserve balance.

Vendor Controls: Where Kickbacks and Bid Rigging Hide

Financial controls are not limited to bank accounts. Kickback schemes and bid rigging are forms of fraud that do not show up as unauthorized transfers. They show up as authorized payments to vendors who are overcharging because a board member or manager has a financial relationship with them.

The controls for vendor fraud are different from the controls for embezzlement but just as important.

Require a minimum of three competitive quotes for any job above a meaningful threshold. In my community that threshold is $1,000. The three-quote requirement means that a board member who wants to steer business to a preferred vendor has to at least go through the motions of competitive bidding, and the results of that bidding are documented and visible to all board members.

Require board members to disclose any financial relationship with any vendor being considered for association work. Under Florida law, a board member who has a financial interest in a contract being voted on must disclose that relationship before the vote. The approval of that contract then requires a two-thirds vote of the other directors present, not a simple majority. Document every such disclosure in the meeting minutes.

Under the 2024 and 2025 legislative changes, a rebuttable presumption of conflict of interest now exists whenever a board member or their relatives enter into contracts with the association without prior written notice. This shifts the burden of proof. Without advance disclosure, the board member is presumed to have a conflict. That presumption can be rebutted but it requires active effort. The easier path is disclosure before the fact.

Pay attention to vendor invoice patterns. A vendor who suddenly starts submitting invoices for services that are vaguely described, that lack corresponding work orders, or that arrive at unusual frequencies is a pattern worth investigating. Fraudulent invoices from shell companies are one of the most common mechanisms in HOA fraud cases. The shell company is often controlled by the board member or manager routing payments to it, and the invoices describe services that were either never performed or were massively overpriced.

The discipline of requiring a scope of work document, a signed completion acknowledgment, and a corresponding board authorization for every payment above your threshold creates a paper trail that makes shell company invoice fraud much harder to sustain and much easier to detect.

What Owners Can Do When They Suspect Fraud

This section is for owners who are reading this because something feels wrong in their community rather than board members looking to build controls.

The most important thing you can do if you suspect financial misconduct is request records. Florida law gives you the right to inspect and copy the association's financial records including bank statements, vendor invoices, contracts, and the general ledger. Submit a written records request specifying the documents you want. The association has ten business days to make them available.

If you are denied access, or if the records you receive raise additional questions, file a complaint with the DBPR. For condo associations, the DBPR Division of Condominiums has regulatory authority and can investigate financial misconduct complaints. For HOA fraud, the appropriate reporting path is local law enforcement, the State Attorney's office, and the Florida Attorney General. The DBPR has regulatory authority over licensed CAMs but does not have jurisdiction over HOA fraud under Chapter 720 directly.

If you believe criminal fraud has occurred, contact local law enforcement directly. HOA fraud involving theft above certain thresholds is a felony and law enforcement takes these cases seriously in Florida given the scale of the problem.

Document everything before you report. Keep copies of every record you received, every request you made, every response you got, and a clear timeline of the events that raised your concern. Investigators and prosecutors build cases from documentation. The more organized your evidence, the faster and more effective the response.

Building a Culture Where Controls Are Normal

The boards that implement the strongest financial controls are the ones that present them to owners not as suspicion of anyone on the board but as a standard of governance that protects everyone including the board members themselves.

When I explain my multi-signature system to new owners, I frame it this way: these controls protect you from the possibility that any board member could make a mistake or act in self-interest. They also protect me, because no one can ever credibly accuse me of misappropriating funds when every significant payment requires three approvals and the bank statements are reviewed independently every month.

Board members who resist financial controls, who argue that multi-signature requirements are burdensome or that independent bank reconciliation is an expression of distrust, are often the board members you should be most concerned about. Honest people welcome oversight because oversight confirms what they already know about themselves.

Controls are not about distrust. They are about accountability. And accountability is what makes the difference between a community that builds trust over time and one that ends up on the local news.

For a complete guide to running a Florida HOA or condo association including financial controls, compliance, vendor management, and the decisions every board faces, pick up a copy of Run the Board.