Who Should Actually Be a Signer on the HOA Bank Account

One signer is a convenience. It's also the whole control.

Two different questions: legal authority and internal control

Keep two questions separate. The first is authority — who is legally and contractually allowed to move the association's money, which is set by the statute, the governing documents, and the bank agreement. The second is internal control — how many approvals the association chooses to require before a payment goes out. Dual approval on larger transactions is widely treated as best practice, but it is mandatory only where a statute, the governing documents, the bank agreement, an insurer, or a lender actually requires it; otherwise it is a control the board adopts by resolution. A single-signer account is administratively simple but rests the entire control on one person's judgment and honesty, which is the exact feature most community-association embezzlement cases share.

Where dual signature actually earns its cost

Requiring two signatures on every transaction, no matter how small, is often impractical — it turns routine bill-paying into a bottleneck. The more common and more defensible approach sets a dollar threshold: transactions below it can go through with one authorized signer, while anything above it — a specific figure the board sets, informed by any state minimum — requires two. This concentrates the friction exactly where it matters most: the transactions large enough that an error or a bad actor could do real damage.

A vacant treasurer seat shouldn't leave the account with one live signer

The officer-vacancy gap discussed elsewhere in board governance has a direct financial-control version here: if the treasurer resigns and the association's practical signing authority narrows to a single remaining officer while the seat sits vacant, the association has drifted back into single-signer risk without anyone deciding that on purpose. Filling an officer vacancy promptly matters for exactly this reason, not just for governance tidiness.

Reserve accounts deserve a stricter standard than operating

Even associations comfortable with single-signer flexibility on routine operating expenses should think differently about the reserve account, which typically holds the association's largest cash balance and is meant to be touched far less frequently. A reserve account with dual-signature requirements on every withdrawal, regardless of amount, is a proportionate standard given how rarely legitimate reserve withdrawals should be happening in the first place — frequent single-signer reserve activity is itself a signal worth the board's attention.

A worked example: the signer nobody removed

A treasurer resigns and a new treasurer is elected the same meeting, properly minuted. Six months later, an audit or a routine bank statement review reveals the former treasurer is still listed as an authorized signer — nobody filed the paperwork with the bank to remove them after the transition, because updating the signature card wasn't anyone's specifically assigned task. This is a common and largely invisible gap: the board's own minutes are accurate, but the bank's actual records don't match, meaning a former officer retains real signing authority over association funds long after their governance authority ended. The fix costs nothing beyond attention — updating the signature card is a five-minute bank visit or online request, but only if someone owns the task as a checklist item tied to every officer change, not something remembered eventually.

A management company handling the checkbook doesn't eliminate the question

Boards that hand day-to-day bill-paying to a management company sometimes assume the signer question becomes the management company's problem rather than the association's. It doesn't — most management arrangements still route through an account the association owns, with board officers as the actual authorized signers even if the management company initiates routine payments on the board's behalf. The board should still know, by name, exactly who at the management company has been granted transaction authority, and should periodically confirm that list independently rather than assuming it hasn't changed since the contract was signed.

Backup signers prevent a different kind of gap

An association with exactly one authorized signer creates an operational risk distinct from the fraud-control question: if that person is unavailable — travel, illness, a sudden resignation — the association may be unable to pay bills or meet payroll obligations for a management company until a new signer can be added, which itself often requires board action and bank paperwork that takes time. Keeping at least two authorized signers at all times, even in a single-signer-threshold structure, avoids the association being one person's absence away from an operational freeze.

Online banking access is a separate question from check-signing

A board that carefully controls who can physically sign a check sometimes overlooks that the same account may have online banking users with the ability to initiate transfers or view full account details, and that access list can drift independently of the formal signer list on file with the bank. Reviewing who has active online credentials to the association's accounts — not just who's a paper signer — closes a gap that a signer-focused review alone can miss entirely, particularly for associations that moved to a new management company or online banking platform at some point without fully auditing legacy access.

What a complete signer-authorization file should contain

• Any state statute setting a minimum signer count or dual-signature threshold.
• The CC&Rs' or bylaws' own signer provision.
• The board resolution setting the dollar threshold for dual signature.
• The bank's current signature card, checked against the board's current officer roster.
• A checklist item tied to every officer transition confirming the bank was notified.

A self-managed association carries this risk most directly

A professionally managed association typically has the management company's own internal controls layered on top of the board's — an added check a self-managed association doesn't get for free, which is exactly why self-managed boards should treat signer discipline as a task nobody else is quietly backstopping on their behalf.

The fastest way to check who's actually authorized

The association's bank can usually confirm what's currently on file as authorized signers faster than reconstructing it internally — a periodic direct check with the bank, not just trusting the board's own records, is the most reliable way to catch a stale signer. A CPA conducting even a light annual review should be asked specifically to confirm the signature card matches current officers as part of that engagement.