Accounts Payable Audit: Checklist and Procedures

An accounts payable audit is the part of the year that exposes how disciplined your AP process really is. When an auditor pulls a sample of invoices and starts tracing each one back to a purchase order, a receipt, and an approval, gaps that were invisible during a busy month become obvious fast. The good news is that an AP audit is predictable. Auditors test the same assertions, follow the same procedures, and look for the same red flags every time. This guide walks through what an accounts payable audit is, the procedures and assertions involved, a working checklist, what auditors look for, and how to prepare so the process is quick and clean.

What is an accounts payable audit?

An accounts payable audit is a structured review of a company's unpaid vendor obligations and the process that records and pays them, done to confirm that the payables balance is complete and accurate, that payments were properly authorized, and that controls are strong enough to prevent error and fraud. It can be run internally by your own finance team or externally by independent auditors as part of a financial statement audit.

The purpose is twofold. One goal is accuracy: does the accounts payable figure on the balance sheet reflect what the business actually owes, with nothing missing and nothing overstated. The other is control: can a single person create a vendor and pay it, are invoices matched before payment, and would a duplicate or fraudulent bill be caught. An audit tests both the numbers and the system that produces them.

How do you audit accounts payable?

You audit accounts payable by planning the scope and period, examining the internal controls around purchasing and payment, selecting a sample of transactions, tracing each one through its supporting documents (purchase order, receipt, invoice, payment), testing for completeness and proper cutoff, checking for fraud indicators, and then reporting the findings with recommendations. Each step builds evidence that the payables are real, accurate, and authorized.

In practice the work moves through a clear sequence:

Plan the audit: agree on the period under review and which records to prioritize, whether a full year or a single quarter, and assess where the risk is highest.
Examine internal controls: review approval workflows, vendor master maintenance, three-way matching, and segregation of duties to understand how much you can rely on the process.
Review transactions: pull a sample and trace each one across the purchase order, receiving document, invoice, and payment record to confirm it was ordered, received, approved, and paid correctly.
Verify completeness and cutoff: run cutoff tests, reconcile the AP subledger to the general ledger, and search for unrecorded liabilities near the period end.
Check for fraud: look for duplicate invoices, payments to unknown or near-duplicate vendors, round-number amounts, and charges with no purchase order.
Report findings: compile discrepancies, control gaps, and recommendations into a report for management.

What are the audit procedures for accounts payable?

The core audit procedures for accounts payable are vendor master review, three-way match testing, authorization and approval testing, a search for unrecorded liabilities, vendor statement and confirmation reconciliation, duplicate-payment testing, cutoff testing, and subledger-to-general-ledger reconciliation. Together these procedures test whether recorded payables are valid and whether liabilities the company owes have all been captured.

The procedures auditors rely on most:

Vendor master review: scan the vendor file for duplicates, missing or invalid tax IDs, and dormant accounts that could hide a ghost vendor.
Three-way match testing: confirm that sampled invoices agree with their purchase order and receiving report on quantity and price.
Authorization testing: verify that purchases were approved before the goods or services arrived and that invoice approvals matched the company's authority limits.
Search for unrecorded liabilities: examine payments and invoices received after period end to find obligations that belonged in the period but were not booked.
Confirmations and statements: reconcile vendor statements to your records and, where needed, send confirmation requests directly to suppliers.
Duplicate and cutoff testing: search for the same invoice paid twice and check that transactions were recorded in the correct period.

What are the audit assertions for accounts payable?

The audit assertions for accounts payable are completeness, existence (or occurrence), accuracy and valuation, rights and obligations, and cutoff. Completeness is usually the most important for payables, because the main risk is that real liabilities have been left out to make the financial position look stronger than it is.

Here is what each assertion means in an AP context. Completeness asks whether every liability the company owes is recorded, which is why auditors search for unrecorded liabilities. Existence asks whether each recorded payable is a real obligation, not a fictitious or duplicate entry. Accuracy and valuation confirm the amounts are right and properly calculated. Rights and obligations confirm the debts genuinely belong to the company. Cutoff confirms invoices were recorded in the correct accounting period rather than shifted across the year-end to manage results.

What is on an accounts payable audit checklist?

An accounts payable audit checklist covers vendor master integrity, purchase order and approval documentation, three-way match coverage, duplicate-payment screening, segregation of duties, accrual and cutoff completeness, subledger-to-ledger reconciliation, and bank-detail change controls. Working through each area systematically gives an auditor (or an internal reviewer preparing for one) confidence that the payables are clean.

A practical checklist to work through:

Confirm the vendor master file has no duplicate or dormant records and that tax IDs and bank details are valid.
Verify that sampled invoices have a matching purchase order, receiving document, and documented approval.
Test that approvals respected dollar thresholds and authority levels, with no invoices skipping the match.
Screen for duplicate invoices by invoice number, vendor, and amount.
Check that creating a vendor, approving an invoice, and releasing payment are handled by different people.
Reconcile the AP subledger to the general ledger and investigate differences.
Run cutoff tests and search for unrecorded liabilities around the period end.
Confirm any changes to vendor bank details were verified through a known, independent contact.

What do auditors look for in accounts payable?

Auditors look for accuracy, proper authorization, strong segregation of duties, and signs of fraud. Specifically, they want every transaction to follow the company's approval workflow with documentation behind it, invoices to match their purchase orders and receipts, and clear separation between the people who approve and the people who pay. Anything that breaks those patterns gets a closer look.

The red flags that draw scrutiny are familiar: duplicate or out-of-sequence invoice numbers, payments to vendors not in the approved master file, round or unusually high amounts, invoices with no purchase order, and recent changes to a vendor's bank account. Auditors often investigate high-value or irregular transactions individually and use data analysis to spot patterns across the full population, not just the sample. A clean, well-documented process where these patterns simply do not appear is what shortens an audit.

How do you prepare for an accounts payable audit?

You prepare for an accounts payable audit by reconciling the AP subledger to the general ledger, gathering supporting documents for each transaction (purchase orders, receipts, invoices, approvals), cleaning up the vendor master file, confirming accruals and cutoff are correct, and organizing everything so it can be retrieved quickly. The more your records are already matched and complete, the faster and cheaper the audit goes.

The preparation that pays off most is making your data easy to pull and compare. Auditors will request samples and expect the backup behind each one within a reasonable time. If your invoices live as a stack of PDFs and emails, assembling that backup is slow and error-prone. If the same data is already captured in spreadsheets with vendor, invoice number, dates, totals, and line items in their own columns, you can filter, sort, and produce support in minutes. Standardizing how invoices are captured ahead of the audit is one of the simplest ways to reduce friction. For the broader system the auditors will examine, having documented accounts payable internal controls and a consistent accounts payable process flow in place means the control testing goes smoothly.

What is the difference between an internal and external accounts payable audit?

An internal accounts payable audit is run by the company's own staff to find and fix process weaknesses before they cause problems, while an external audit is performed by independent auditors, often as part of the annual financial statement audit, to give an objective opinion to outside parties like lenders, investors, and regulators. Internal audits are about improvement; external audits are about independent assurance.

The two reinforce each other. Regular internal audits keep the vendor file clean, catch duplicate payments early, and confirm controls are working, which means there are fewer surprises when external auditors arrive. External audits, in turn, validate that the internal process holds up to independent scrutiny. Many finance teams run a light internal AP review every quarter and a deeper one ahead of the external audit so the year-end review is a confirmation rather than a scramble.

Clean invoice data makes the audit faster

Almost every audit procedure comes back to the same need: pull a transaction, find its supporting documents, and compare the numbers. That is far easier when your invoice data is already structured. InvoiceXLSX turns PDF and image invoices into clean Excel or CSV with the vendor, invoice number, dates, totals, and every line item in its own column, so when an auditor asks for a sample you can filter to it instantly instead of digging through files. From there you can extract invoice data to Excel, pull full invoice line item data for three-way match testing, and run a backlog through AI invoice data extraction so duplicate and cutoff checks run against accurate data. Structured data also lowers the cost of every review, which is part of how teams reduce invoice processing costs overall. Two checks auditors care about most, duplicate invoice detection and three-way matching, both start from clean line items. And when a team wants the full detect-route-approve-pay cycle with audit trails built in, a dedicated accounts payable automation platform keeps the documentation an auditor will ask for in one place.