When a 501(c)(3) organization’s money or property is used for anything other than its exempt purpose, the diversion of nonprofit assets can trigger IRS excise taxes on the people who benefited, personal penalties on the board members who approved the deal, mandatory public disclosure on the next Form 990, revocation of tax-exempt status, a state attorney general investigation, and in intentional cases federal criminal prosecution with court-ordered restitution. Every dollar a charitable organization takes in is legally earmarked for its mission, and federal law gives the IRS, state regulators, and federal prosecutors independent authority to go after the money and the individuals responsible.1Office of the Law Revision Counsel. 26 USC 501 – Exemption From Tax on Corporations, Certain Trusts, Etc.
What Counts as Diversion
Federal tax law reaches diversion through two overlapping prohibitions. Private inurement targets insiders: the statute granting 501(c)(3) status flatly forbids any part of an organization’s net earnings from benefiting a private shareholder or individual.1Office of the Law Revision Counsel. 26 USC 501 – Exemption From Tax on Corporations, Certain Trusts, Etc. Private benefit is broader and applies even when no insider is involved: a nonprofit must serve a public interest, and if private parties gain more than an incidental advantage, tax exemption can be denied or revoked regardless of how much legitimate charitable work the organization performs.2Internal Revenue Service. Private Benefit Under IRC 501(c)(3)
In practice, diversion tends to show up in three patterns. Excessive compensation is the most common: pay, bonuses, retirement contributions, housing allowances, and other perks that push total compensation past what comparable organizations pay for similar roles. Self-dealing transactions are next — a construction company owned by a director’s family winning a renovation bid, a board member landlord charging above-market rent, a management company controlled by an insider collecting outsized fees. The third pattern is personal use of organizational assets: nonprofit credit cards used for personal travel, vehicles used for personal errands without reimbursement, or organization-owned property occupied at below-market rent. The IRS treats small diversions seriously because they often signal a culture where larger ones go unchecked.3Internal Revenue Service. Governance and Related Topics – 501(c)(3) Organizations
Who Can Be Held Personally Responsible
The intermediate sanctions in Section 4958 reach “disqualified persons” — anyone who could exercise substantial influence over the organization’s affairs at any point in the five years before the transaction. Voting board members, the CEO or executive director, the CFO or treasurer, and anyone with ultimate responsibility for management decisions all qualify automatically. For others, the IRS looks at whether the person founded the organization, is a major donor, controls a significant share of the budget, or manages a large program area. Outside consultants providing professional advice without decision-making authority generally do not qualify.4eCFR. 26 CFR 53.4958-3 – Definition of Disqualified Person
Family members of disqualified persons and entities they control are also covered. That is where many self-dealing arrangements get caught: the board member does not personally receive a payment, but a spouse’s business or a related company does.
Excise Taxes When Someone Gets an Excess Benefit
When a disqualified person receives more from the nonprofit than the value of what they provided in return, the IRS treats the difference as an excess benefit and taxes it under Section 4958. The initial tax is 25 percent of the excess benefit, paid by the disqualified person. If the transaction is not corrected during the taxable period, an additional 200 percent tax applies. The taxable period runs from the date of the transaction until the earlier of the IRS mailing a notice of deficiency for the initial tax or assessing that tax.5Office of the Law Revision Counsel. 26 USC 4958 – Taxes on Excess Benefit Transactions Once the IRS acts, the window closes.
Correction is more than returning the money. The disqualified person must repay the full excess benefit plus interest at no less than the applicable federal rate, in cash or cash equivalents, restoring the organization to the position it would have occupied if the deal had been at arm’s length.6Internal Revenue Service. Intermediate Sanctions – Excess Benefit Transactions
Managers who knowingly approved the transaction have their own exposure: a 10 percent excise tax on the excess benefit, capped at $20,000 per transaction. A manager avoids that penalty only by showing the approval was not willful and resulted from reasonable cause.5Office of the Law Revision Counsel. 26 USC 4958 – Taxes on Excess Benefit Transactions On top of the individual penalties, the IRS can revoke the organization’s exempt status when diversion is systemic. Revocation means the nonprofit owes corporate income taxes on its revenue and can no longer offer tax-deductible donations.7Internal Revenue Service. How to Lose Your 501(c)(3) Tax-Exempt Status (Without Really Trying)
The Rebuttable Presumption of Reasonableness
Boards can shift the burden of proof to the IRS by following a three-step process before approving compensation or a property transfer. All three steps must be met:
- Approval in advance by an authorized body made up entirely of individuals with no conflict of interest in the transaction.
- Reliance on appropriate comparability data showing what similar organizations pay for similar roles or what similar property sells for.
- Contemporaneous documentation of the decision, including the data relied on, the terms of the transaction, who was present, and how conflicts were handled.
Meeting all three does not make a transaction untouchable, but it forces the IRS to produce contrary evidence. Without them, the IRS evaluates the deal on the facts with no presumption favoring anyone.8Internal Revenue Service. Rebuttable Presumption – Intermediate Sanctions The compensation may in fact be reasonable, but without documentation the organization has no defense when the IRS asks.
Mandatory Disclosure on Form 990
The IRS requires nonprofits to disclose significant diversions on the annual Form 990. Part VI, Line 5 asks whether the organization became aware of any significant diversion during the tax year, regardless of when it actually occurred. If the answer is yes, Schedule O must explain the nature of the diversion, the amounts or property involved, and the corrective actions taken. The instructions specifically prohibit naming the individuals responsible.9Internal Revenue Service. Instructions for Form 990
Reporting is required when the gross value of the diversion exceeds the least of three thresholds: 5 percent of gross receipts for the tax year, 5 percent of total assets at year-end, or $250,000. The IRS uses the gross amount, without subtracting restitution, insurance recoveries, or similar offsets.9Internal Revenue Service. Instructions for Form 990 Form 990 is public. Donors, watchdogs, and regulators can see the disclosure, and signing a return that omits or misrepresents a known diversion exposes the signers to penalties for filing a false return.
Whistleblower Protection
Employees and volunteers who report suspected diversion are protected against retaliation. The Sarbanes-Oxley whistleblower provision reaches all entities, including nonprofits, because it amends the federal criminal code rather than limiting itself to publicly traded companies. Firing, demoting, suspending, or harassing someone for reporting suspected financial misconduct is a federal crime, and the employee does not need to prove that actual fraud occurred — a reasonable belief that something improper is happening is enough to trigger protection.10Office of the Law Revision Counsel. 18 USC 1513 – Retaliating Against a Witness, Victim, or an Informant An anonymous reporting channel monitored by an independent board member makes it harder for insiders to suppress evidence before it reaches anyone with authority to act.
Criminal Exposure
When diversion crosses into intentional theft, federal prosecutors have several statutes available. Wire fraud applies whenever electronic communications are used to execute a scheme to defraud a nonprofit, carrying penalties of up to 20 years in prison.11Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television For nonprofits receiving more than $10,000 in federal grants, contracts, or other federal funds in a year, a separate federal theft statute reaches anyone who steals or embezzles property worth $5,000 or more from the organization, with penalties of up to 10 years.12Office of the Law Revision Counsel. 18 USC 666 – Theft or Bribery Concerning Programs Receiving Federal Funds
Criminal convictions carry a second consequence for the organization: court-ordered restitution. Federal courts must order defendants to repay victims the full amount of their losses, and those orders are enforceable as liens against the defendant’s property. The court considers the defendant’s finances in setting a payment schedule, but the total is fixed by the victim’s loss, not the defendant’s ability to pay.13Office of the Law Revision Counsel. 18 USC 3664 – Procedure for Issuance and Enforcement of Order of Restitution For a nonprofit that lost hundreds of thousands to an embezzling executive, a restitution order is often the most practical path to recovering funds.
State Attorney General Enforcement
State attorneys general are the primary regulators of charitable assets. In most states, only the attorney general has standing to investigate and challenge misuse of nonprofit funds, drawing on the state’s authority to protect the public interest in charitable assets.14National Association of Attorneys General. State Attorneys General Powers and Responsibilities – Chapter 12: Protection and Regulation of Nonprofits and Charitable Assets
An investigation usually opens with subpoenas for bank records, meeting minutes, contracts, and internal financial reports. Current and former board members may be interviewed about how decisions were made and who authorized them. If the state finds wrongdoing, it can sue to remove directors, freeze accounts, or appoint a receiver to manage assets while the case is resolved. The remedies focus on getting diverted money back into charitable use.
Donors generally lack standing to bring these claims themselves. More than two-thirds of states have adopted the Uniform Trust Code, which gives the settlor of a charitable trust the power to sue, and some states have donor-intent statutes that expand donor rights, but in most situations a donor who suspects diversion should report the concern to the state attorney general’s office rather than trying to litigate directly.
Controls That Prevent Diversion
The most effective safeguard is segregation of duties: no one person should control two or more phases of any financial transaction. The person who receives cash should not record the deposit, the person making accounting entries should not sign checks, and someone independent of both should review the bank statements each month. Every disbursement should be approved by someone other than the person paying, credit card statements should be reviewed monthly by a non-cardholder, reimbursable expenses should be preauthorized with original receipts, and no one should ever write their own reimbursement check.
A written conflict of interest policy is equally important. The IRS asks about it on Form 1023 when an organization applies for exempt status and provides a sample policy in the instructions. The core components are a duty to disclose financial interests in any transaction, a requirement that conflicted members leave the room during discussion and voting, and periodic reviews confirming that compensation and contracts remain reasonable.15Internal Revenue Service. Instructions for Form 1023 Every director should sign an annual statement confirming they have read and agree to follow it. These practices are also what the rebuttable presumption requires: an organization that documents its decisions, uses comparable data, and excludes conflicted parties from votes is both harder to exploit and easier to defend when the IRS or a state regulator comes asking.