If your payroll audit tells you it’s time to upgrade your software, use our Payroll Software Guide to find the tool that’s right for you.
In this article...
What should a payroll audit include?
Successful payroll audits analyze the following information in a company’s payroll processes:
When reviewing the data in the payroll audit, HR teams should double-check that their processes adhere to updated federal, state, or local laws and make adjustments or issue corrections as necessary. For example, many states update their minimum wage laws at the beginning of the year. HR leaders should make sure all affected employees’ pay rates are updated appropriately.
Additionally, HR teams should pay attention to errors in the records. Some errors could be as simple as a typo — such as transposing two numbers — while others could point to fraud, embezzlement, wage theft, or time theft. Thus, payroll audits benefit both employees and employers; employees’ pay records are double-checked for accuracy while employers’ accounts are protected from significant financial loss.
How do you audit payroll records?
To implement an effective payroll audit, companies must determine the parameters of their payroll audit, collect necessary employee pay data, and reconcile them with time records, tax payments, and financial ledgers. At the end of the audit, companies can then take measures to improve their payroll processes to mitigate future errors.
1. Determine the payroll audit timeframe and stakeholders
The first step in a payroll audit is understanding when the payroll audit should take place and who is involved.
When should companies conduct a payroll audit?
Payroll audits can be conducted at any time, but most businesses choose to run annual audits at the end of the fiscal year. Companies conducting their first payroll audit or needing to diagnose problems in their payroll processes should consider semiannual or quarterly payroll audits to resolve payroll inconsistencies sooner.
What is the ‘lookback’ period for a payroll audit?
Typically, the lookback period of a payroll audit is one year, but this could be longer or shorter depending on business preferences. The longer the lookback period, the longer the audit will take. However, the insights a company gains from a payroll audit into their payroll processes generally outweigh any productivity lost by conducting the audit.
Who should conduct the payroll audit?
It depends on the company. On the one hand, smaller companies may benefit from an unbiased outside auditor with no vested interest in employee salaries, benefits, or the business’s overall health. They can also remain objective and provide suggestions for improvement. On the other hand, larger employers with dedicated payroll and HR teams may wish to run the payroll audit themselves since they have the resources and could benefit from the cost savings.
HR, payroll, accounting, executive management, or any combination of the four can conduct internal payroll audits. As each auditor has access to different records, they must work together to complete the audit. Auditors should determine deadlines to complete certain aspects of their portion of the payroll audit to keep teams on track and provide timely results to executives.
Should companies notify their employees of the payroll audit?
Auditors may need to contact or work with employees to fix errors, such as incorrect employee deductions or missing overtime payments during a payroll audit. Therefore, employers should notify employees that they are conducting an audit to avoid catching an employee off-guard about any uncovered paycheck issue.
2. Generate reports and examine the data
Auditors should produce employee rosters, payroll registers, and other payroll reports covering the lookback period. These reports should cover information about employee start and termination dates, job titles, pay rates, deductions, taxes, and so forth. Most companies can produce this information quickly using their payroll or enterprise resource planning (ERP) software; even companies outsourcing their payroll can request such reports from their service providers.
With their employee roster in hand, employers should examine the data and consider the following:
Some errors in the employer roster could simply be the result of a user forgetting to deactivate an employee following termination; others could point to more serious issues. For example, one indication of fraud is the existence of “ghost” employees. These fake employees are listed on the employee roster and are getting paid but do not exist. Employers who carefully examine their employee roster can detect such occurrences and take corrective action, including legal ones.
With their payroll reports, employers should check the following items:
Although fixing these errors takes time, early identification allows employers to take steps to fix them before they become major labor law violations.
Depending on the amount of payroll data to review, employers should consider implementing a spot-checking strategy. A randomized selection of about 5–10% of the data provides employers with a representative sample size while ensuring the audit remains as unbiased as possible.
3. Confirm payments match hours worked
Auditors should pull time clock data and make sure all employees are being paid appropriately for their actual time worked during each pay period. For example, if an employee works 47 hours in a pay period when they normally work 35, auditors should investigate to understand why.
If the investigation reveals someone else clocking in on the employee’s behalf, this could be grounds for disciplinary action against both the employee and their “buddy” for time theft. HR teams can also modify policies and procedures or take advantage of certain software to make “buddy punching” more difficult. For example, Homebase reduces the likelihood of buddy punching by taking a picture of employees and requiring them to input a unique pin code when they clock in.
Next, auditors should double check overtime hours are being paid correctly. Generally, non-exempt employees must be paid at their time-and-a-half (overtime) rate for any hours worked over 40 hours in a week according to the Fair Labor Standards Act. However, this could differ depending on international, state, or local laws, collective bargaining agreements, or contracts.
For example, in California non-exempt employees must be paid at their overtime rate for any hours worked over 8 in a day and at their double time rate for any hours worked over 12 in a day. Employers should pay employees any owed overtime retro pay as soon as it is discovered.
4. Double-check that variable and atypical payments are correct
Variable payments are payments based on an employee or company’s overall performance and include factors like bonuses, commissions, shift differentials, or tips. Auditors should check that there is documentation in place to support these variable pay structures, such as a handbook policy or employment contract.
Each variable payment should be labeled differently for tracking purposes. Differentiating variable payments from regular or overtime rates demonstrates employers are adhering to tip laws since they differ across U.S. jurisdictions.
Paid time off (PTO) payments should also be labeled and paid correctly. This includes distinguishing payments like vacation, sick, holiday, bereavement, personal time, or jury duty according to company policies.
Auditors should label these payments separately from regular rates to promote accurate paid leave tracking and to effectively diagnose policy procedures in need of improvement. Say, for example, auditors discover the payroll department paid an employee for two weeks of vacation when they had only accrued one. One way HR teams could prevent this from happening again is to update their vacation policy to require signed employee and manager authorization before payment.
Finally, atypical payments include retro-pay, backpay, reimbursements, signing bonuses, relocation, or contractor payments. Auditors should investigate why an employee suddenly makes more or less than they typically make in a pay period. For example, if an employee typically receives $1,000 every paycheck but suddenly starts receiving $2,000, auditors should check if the payment is from a pay rate increase, variable, or atypical payment. If not, this could be a case of payroll fraud.
5. Check the accuracy of tax withholdings and other deductions
One of the biggest responsibilities of an employer is properly withholding and remitting taxes to the appropriate government agency. In this step, employers should review the following questions:
Businesses are liable for failing to withhold and submit taxes properly. For example, failing to deposit federal income taxes may incur penalties; interest; and in extreme cases, prison time. Therefore, employers who notice and take measures to fix any tax issues from a payroll audit are more likely to save money on future fines and penalties.
Employee paycheck deductions range from paycheck deductions for the employee’s portion of health, dental, or vision insurance premiums to garnishments or retirement contributions for a 401(k). They could also encompass deductions following employee and employer contracts, such as company equipment or uniforms. Auditors should review whether these deductions were made timely and accurately and investigate any discrepancies.
Federal, state, and local laws place limits on employee paycheck deductions. Therefore, employers should seek legal counsel before withdrawing any missing funds from any employee’s paycheck due to a deduction inaccuracy, especially if it was the employer’s mistake.
6. Compare payroll records with the General Ledger and bank accounts
Auditors should pull the General Ledger (GL) from the lookback period and reconcile it with payroll records from the same time. Each payroll expense in the GL should match the auditors’ findings from the payroll audit. If they do not, auditors must investigate further. For instance, if an auditor notices an employee’s paycheck listed twice in the GL, it could either be a clerical error or an indication an employee was accidentally double paid.
To know for sure, auditors should repeat the same process as above, this time by comparing the payroll transactions in the GL with their payroll bank accounts. Does the bank account confirm the employee was actually paid twice? Are there any other transactions that were missed? What about uncashed payroll checks? Companies can use this time to correct internal documentation, void and reissue any stale checks, and update procedures to prevent double payments or fraudulent activity.
7. Take advantage of payroll software
Companies can speed up the payroll audit process by leveraging payroll software. Instead of compiling reports for the payroll audit lookback period by hand, payroll software can instantly assemble:
Moreover, payroll software automatically calculates complicated employee pay rates, from overtime rates for shift differentials to fluctuating workweeks. Many of these solutions also include code to prevent errors, reducing the risk that a payroll audit will uncover glaring issues.
ADP, for example, has safeguards in place to notify employers of critical issues, such as missing employee data, duplicate Social Security numbers, or unbalanced transactions. Employers can then fix these errors before they finalize payroll.
Meanwhile, companies looking to save time inputting or transferring payroll information into their accounting programs can benefit from an integrated solution. QuickBooks, for instance, allows companies to easily reconcile payroll reports with transactions in the GL with their combined account and payroll software.
Additionally, payroll software assists employers with labor law compliance, reducing the risk of uncovering major payroll law violations during a payroll audit. For instance, Paycor automatically updates federal, state, and local tax rates and withholding limits whenever they are enacted. Because they no longer have to research and make the new calculations themselves, employers can increase efficiency while ensuring employees’ tax withholdings remain accurate.
8. Address payroll processes in need of optimization
In addition to uncovering errors in need of correction, payroll audits can give businesses concrete action items that will help improve their processes, such as:
Failing to address and update payroll processes following the insights of a payroll audit will guarantee companies continue to make the same mistakes over and over again, costing companies future time and money.
9. Put a process in place for future payroll audits
Companies should make sure systems are in place for future audits and write a policy outlining a regular payroll audit timeline. Employers should consider the following questions when outlining their policy:
In addition to addressing the questions above, employers should prepare a payroll audit checklist to improve the efficiency of future audits.
Sample payroll audit checklist
Is the thought of conducting your own payroll audit daunting? Start with this payroll audit checklist to make the process easier.
Download our payroll audit checklist for free:
Why companies need payroll audit procedures
Because payroll is one of the core functions of any business, inefficient or inaccurate payroll processes can cost companies significant time and money to correct major payroll mistakes or mount defenses for payroll-related labor law violations. However, companies that implement a regular payroll audit process can address inefficiencies or fraudulent activity before they become serious problems.
Not only do payroll audits prevent the likelihood of future payroll mistakes or compliance issues, but they also ensure the integrity of payroll. Even companies with no computational or transactional errors in their payroll audits can utilize payroll audit data to correct any employee miscategorizations, unfair or discriminatory pay practices, or poor record-keeping procedures. Ultimately, failing to conduct a payroll audit costs companies in the long run, as they miss out on valuable insights to improve archaic payroll procedures.
If you’re ready to search for payroll software that will support a successful audit, check out our Payroll Software Guide for solutions.
Payroll can be a time-consuming, administrative task for HR teams. Paycor’s solution is an easy-to-use yet powerful tool that gives you time back in your day. Quickly and easily pay employees from wherever you are and never worry about tax compliance again. Key features like general ledger integration, earned wage access, AutoRun, employee self-service and detailed reporting simplify the process and help ensure you pay employees accurately and on time.
The role of HR has never been more complex, demanding, and essential to the success of your business. There are new ways - and even better tools - to personalize the employee experience using generative AI and other new technology. Engage your top talent now so you can build a workforce for the future with Paylocity's cutting-edge, people-first HR and payroll platform.
QuickBooks from Intuit is a small business accounting software that allows companies to manage business anywhere, anytime. It presents organizations with a clear view of their profits without manual work and provides smart and user-friendly tools for the business.