What a government credit card audit actually examines

A government credit card audit is a formal review of how federal, state, or local agencies use purchase cards — the government's version of corporate credit cards issued to employees. Auditors examine transaction records, receipts, and cardholder policies to verify that spending follows law and agency rules. The audit does not judge whether the card itself is a good product; it judges whether the people holding the cards used them correctly.

The Department of Defense, General Services Administration, and individual agency inspectors general run most federal audits. They look for three main problems: personal purchases mixed in with government spending, missing documentation that proves a purchase was legitimate, and transactions that violate the agency's own card policies. A state or local audit follows the same logic but applies that state's or city's rules instead.

Audits happen on a schedule — some agencies audit every cardholder annually, others every two years. A few trigger an audit only when a red flag appears: a single transaction over a certain dollar amount, a pattern of weekend purchases, or a complaint from a supervisor. The results are public records in most cases, though some details may be redacted to protect employee privacy.

Key Takeaways

  • Government credit card audits review whether employees followed spending rules and kept proper receipts, not whether the card program itself is well-designed.
  • Auditors look for personal purchases charged to government accounts, missing documentation, and violations of agency policy — the three most common findings across all levels of government.
  • Federal audits are conducted by agency inspectors general and the GSA; state and local audits follow the same framework but explore state or local rules.
  • Audit reports are typically public records, and major findings often appear in news coverage when they reveal systemic problems or high-dollar misuse.
  • The consequences of audit findings range from requiring the employee to repay the amount to suspension of card privileges or termination, depending on severity and intent.

Who conducts government credit card audits and how often

At the federal level, each agency's Office of Inspector General (OIG) is responsible for auditing its own employees' card use. The GSA, which manages the government-wide purchase card program, also publishes audit guidance and reviews trends across agencies. Some large departments like Defense and Veterans Affairs conduct continuous audits; smaller agencies may audit on a two-year cycle or only when a supervisor flags a concern.

State auditors general and local finance departments run audits for state and municipal employees. The frequency and rigor vary widely — a large city may audit all cardholders annually, while a smaller town might audit only when a transaction exceeds a threshold or when a department head requests it. County governments often follow state audit standards but set their own schedules.

Private auditing firms are sometimes hired to conduct the review, especially in larger jurisdictions, but the government agency itself remains responsible for the findings and any corrective action. The audit is separate from any criminal investigation; if an audit uncovers evidence of fraud, the case may be referred to law enforcement, but the audit itself is an administrative review.

What auditors look for in transaction records

Auditors start with the basic question: does the receipt match the transaction? They verify that a purchase actually happened, that the amount charged is correct, and that the item or service was delivered. Missing receipts are a common finding — an employee may have lost the receipt or never requested one, and the auditor will flag this as a documentation gap even if the purchase itself was legitimate.

The second check is whether the purchase falls within the employee's authorized use. A purchase card for office supplies should not show restaurant charges or personal items. Auditors look at merchant category codes (the codes that identify what type of business was charged) and the description of the purchase. A charge at a grocery store might be legitimate if the employee was buying refreshments for a meeting, or it might be personal spending — the receipt and the employee's explanation determine which.

Auditors also examine the pattern of spending: multiple small charges at the same merchant on the same day, weekend or evening purchases when the office is closed, or transactions in locations where the employee does not work. These patterns do not prove wrongdoing on their own, but they prompt the auditor to request documentation or an explanation from the cardholder.

Common audit findings and what they mean

The most frequent finding is inadequate documentation — a receipt is missing, incomplete, or does not clearly show what was purchased. This does not mean the purchase was wrong, only that the auditor cannot verify it met policy. The employee is typically asked to provide the missing receipt or a written explanation of the purchase within a set timeframe.

Personal use is the second most common finding. An employee charged a personal meal, a personal item, or a family expense to the government card. The severity depends on the amount and whether it appears to be a one-time mistake or a pattern. A single $15 coffee charge may result in a warning and repayment; repeated personal charges may lead to card suspension or disciplinary action.

Policy violations are findings where the purchase itself was legitimate but broke an agency rule — for example, buying from a vendor not on the approved list, exceeding a single-transaction limit, or making a purchase without the required pre-approval. These are administrative violations, not fraud, but they still appear in the audit report and may require corrective action.

Fraud findings are rare but serious. These involve intentional misuse: forging receipts, charging personal expenses and lying about them, or using the card for prohibited purposes. Fraud findings are reported to law enforcement and typically result in termination and criminal prosecution.

How audit results affect the cardholder and the agency

The consequences depend on the finding's severity and the employee's history. A first-time documentation gap usually results in a letter asking for the missing receipt and a note in the employee's file. Repeated documentation problems may lead to additional training or closer monitoring of future purchases.

Personal use findings typically require the employee to repay the amount within 30 days. If the employee disputes the finding, there is usually an appeal process through the agency's finance or human resources department. Repeated personal use findings can result in suspension of card privileges, reassignment, or termination depending on the amount and the employee's position.

For the agency, audit findings inform policy changes. If many employees are missing receipts, the agency may require digital receipt submission or lower the threshold for required documentation. If a pattern of personal use emerges in one department, the agency may increase oversight or provide additional training to that group.

Audit reports are summarized in the agency's annual financial statement or inspector general report, which is public. Major findings — especially those involving large amounts or systemic problems — often attract news coverage and can prompt congressional or legislative inquiry.

How to read a published government credit card audit report

Audit reports are organized by finding type: documentation gaps, policy violations, personal use, and fraud. Each section lists the number of transactions reviewed, the number of findings, and the dollar amount involved. A report might say "auditors reviewed 5,000 transactions and found 47 instances of inadequate documentation totaling $3,200" — this tells you the finding rate and the scale of the problem.

Reports also include management's response: what the agency says it will do to prevent the problem in the future. This might be new training, a policy change, or closer monitoring. The auditor's assessment of whether the response is adequate is sometimes included.

Look for the distinction between findings and questioned costs. A questioned cost is a dollar amount the auditor believes should not have been charged to the government card. Not all findings result in questioned costs — a documentation gap might be resolved by providing the receipt, with no money owed back.

Federal audit reports are available through the agency's website or through SAM.gov (the System for Award Management). State and local reports are usually posted on the state auditor's website or the municipality's finance department page. Searching "[agency name] credit card audit" will typically lead to the most recent report.

Differences between federal, state, and local audit standards

Federal audits follow the standards set by the GSA and the Office of Management and Budget (OMB). These standards explore to all federal agencies and are consistent across departments. The GSA publishes a Federal Purchase Card Program Guide that defines what is and is not allowed, and auditors use this as the baseline.

State audits follow state law and the state auditor general's standards. Some states have stricter rules than the federal government — for example, a state might prohibit any personal use even if the employee repays it when ready, while the federal standard allows repayment to resolve the issue. Other states are less prescriptive and allow individual agencies more flexibility in setting their own policies.

Local audits vary the most. A city or county may adopt the state's standards, create its own, or use a hybrid approach. Some municipalities require pre-approval for all purchases over a certain amount; others only require documentation after the fact. The audit report should explain which standard was applied.

One consistent difference: federal audits are more likely to be published in full, while state and local reports may be summarized or redacted more heavily to protect employee privacy. However, the trend is toward greater transparency at all levels.

Frequently Asked Questions

Can an employee appeal an audit finding?

Yes. Most agencies have a formal appeal process where the employee can submit additional documentation or a written explanation. The appeal goes to the finance department or inspector general's office, and a decision is made within 30 to 60 days. If the employee disagrees with the appeal decision, some agencies allow escalation to a higher level, though this is less common.

What happens if an audit finds fraud?

Fraud findings are reported to law enforcement and the agency's legal department. The employee is typically suspended pending investigation, and if the investigation confirms fraud, the employee is terminated and may face criminal charges. The agency also pursues repayment of the full amount through civil recovery or wage garnishment.

Are audit reports public, and can I see one?

Federal audit reports are public records and available through the agency's website or SAM.gov. State and local reports are usually public but may have employee names and some details redacted. You can request a report through the agency's public records office or the state auditor's website. Response times vary from a few days to several weeks.

Do audit findings affect an employee's credit score?

No. An audit finding is an administrative matter between the employee and the government agency. It does not appear on a credit report and does not affect personal credit. However, if the employee is required to repay money and does not, the agency may pursue collection, which could eventually affect credit if it reaches that stage.

How often do audits catch fraud versus honest mistakes?

The vast majority of findings are honest mistakes or documentation gaps, not fraud. Fraud findings typically represent less than 5 percent of total findings across most agencies. Most employees who receive a finding are asked to provide missing documentation or repay a small amount; serious consequences are rare and reserved for repeated or intentional misuse.