Lottery audits are structured reviews that verify a state lottery is running honestly, securely, and in line with the law that created it. They check the finances, but they also examine ticket security, drawing integrity, vendor contracts, winner payouts, tax withholding, and whether the net proceeds reach the public programs they were promised to. Because lotteries move billions in public money, the auditing is layered: internal reviewers, independent accountants, and government oversight bodies each look at the operation from a different angle.
Who Conducts the Audits
Three layers of oversight work in parallel, and each one is designed to catch something the others might miss.
Inside the lottery itself, an internal audit department runs continuous reviews of daily operations. These auditors know the workflows intimately, which makes them well placed to notice when a procedure quietly drifts from written policy before the drift becomes a systemic problem.
Outside the agency, independent certified public accounting firms perform the annual financial statement audit. Their job is to confirm that reported revenue, expenses, and fund transfers are free from material misstatement. Independence is the whole point: they have no stake in making the numbers look good.
Above both sits governmental oversight. State auditors, comptrollers, and legislative audit committees conduct performance audits that go beyond whether the books balance. They ask whether the lottery is operating efficiently, spending wisely, and complying with every requirement the legislature imposed. When a legislative committee commissions one of these reviews, the resulting report is typically a public record, giving lawmakers and voters a direct view of how the agency is being managed.
What the Audits Cover
A full lottery audit touches nearly every function of the organization. Operational compliance is the base layer: auditors confirm that every procedure, from ticket printing to prize payouts, follows the state’s authorizing statute and regulatory code. Any deviation becomes a formal finding, and the lottery has to respond with a corrective action plan on a set deadline.
Security gets equal attention on the physical and digital sides. Physically, auditors examine how ticket stock is stored and tracked, how cash moves from retailers to the lottery, and who can access the data centers running the games. Digitally, they review network defenses, access controls, encryption, and backup procedures. The World Lottery Association’s Security Control Standard, now in its 2024 edition, is the industry’s international benchmark. It incorporates ISO/IEC 27001 information security requirements along with 62 gaming-specific controls and additional controls for system development and multijurisdictional games.1World Lotteries Association. WLA-SCS:2024 WLA Security Control Standard
Vendor management is another major focus, especially for the technology companies that run point-of-sale terminals and the central gaming systems. Auditors review contract terms, performance metrics, and whether vendor access to sensitive systems is properly restricted.
Multistate games like Powerball and Mega Millions add another layer. The Multi-State Lottery Association requires every member lottery to run two separate systems, a computer gaming system and an independent internal control system, and reconcile them daily. On drawing days, any imbalance between the two must be reported to MUSL’s Drawing Manager at least 30 minutes before the scheduled draw, and the drawing is delayed if the imbalance could affect security.2Multi-State Lottery Association. Multi-State Lottery Association Rules and Powerball Group Rules The WLA standard includes a dedicated annex of 11 controls specifically for multijurisdictional games.1World Lotteries Association. WLA-SCS:2024 WLA Security Control Standard
Auditing the Drawings
Drawings get the most intense scrutiny because public confidence depends on them. Random number generators and mechanical drawing equipment are verified through independent laboratory testing that confirms statistical randomness and checks for tampering. Firms like Gaming Laboratories International certify that the equipment meets technical standards for randomness, hardware integrity, and error detection.
Chain-of-custody reviews track every physical component used in a drawing, from the balls and machines to the security seals. Auditors confirm that only authorized personnel handled these items and that an unbroken custody record exists from storage, through the drawing, to post-event lockup.
During the drawing itself, security controls include multiple independent witnesses, continuous video recording, and strict access restrictions on the drawing room. These are audit checkpoints, not optional practices. A missing signature, an undocumented room entry, or a break in the video record will show up as a formal finding.
Winners, Taxes, and Prize Money
After a drawing, the audit trail follows every large prize from the winning ticket through verification, tax withholding, and final payout. Lottery staff validate the claimed ticket against the central gaming system’s data, check for signs of alteration, and screen winners against exclusion lists and security databases to catch fraud or insider activity.
Federal Reporting and Withholding
For 2026, the IRS has inflation-adjusted the minimum reporting threshold for Form W-2G to $2,000.3Internal Revenue Service. Instructions for Forms W-2G and 5754 Mandatory federal withholding starts at a higher threshold: when net proceeds from a state-conducted lottery exceed $5,000, the lottery must withhold federal income tax at 24% before paying the winner, and the full amount of the winnings is subject to withholding, not just the portion above $5,000.4eCFR. 26 CFR 31.3402(q)-1 – Extension of Withholding to Certain Gambling Winnings Auditors confirm these withholdings are correctly calculated and remitted, because errors create tax liability for both the winner and the agency. Most states layer their own withholding on top of the federal, with rates that vary widely, and a few states tax lottery prizes at nothing. Auditors verify the correct state rate is applied.
Debt Intercepts
Before a large prize reaches a winner, the lottery is required to check whether the person owes certain government debts. Unpaid child support, delinquent taxes, and other qualifying obligations can trigger an intercept that diverts part or all of the prize. Auditors review whether these checks are being run and whether the offset amounts are calculated correctly, because failing to intercept a legally required payment creates liability for the agency.
Unclaimed Prizes
Every state imposes a deadline to claim prizes, typically 180 days to one year depending on the jurisdiction. Auditors track unclaimed prizes to confirm the forfeited money is handled under the state’s statutory rules. In most states those funds flow back into the lottery, either into the prize pool or on to the designated public program. The audit verifies the transfers happen on schedule and in the correct amounts.
Winner Disclosure
About half of states now allow winners to remain anonymous, either fully or above a certain prize size, while the rest treat winner information as public record. Auditors verify that the agency’s disclosure procedures match the current statute, releasing only what the law requires and protecting what it doesn’t. Rules in this area have been changing frequently as more states adopt anonymity protections.
Following the Money to Its Destination
The financial audit confirms that every dollar flowing through the lottery is accounted for, starting at the retail counter and ending at the fund the legislature designated.
Revenue verification begins with reconciling every retailer transaction against the central gaming system. With thousands of retail locations generating sales daily, even small discrepancies can signal skimming, underreporting, or system errors that compound over time.
Expense review covers administrative costs, marketing, and retailer compensation. Lottery retailers earn a commission on every ticket sold, and across all U.S. lotteries, retailer commissions and incentives averaged 6.2% of sales in fiscal year 2024, with individual rates typically in the 5% to 8% range.5NASPL. FAQ Auditors confirm these payments match the terms of each retailer contract. Unusual administrative overhead or questionable marketing spending gets flagged for the oversight body.
The last financial checkpoint is the one most people care about: confirming that net proceeds reach their legally mandated destination. Every state’s authorizing law specifies where lottery profits go after prizes and operating costs. Education is the most common beneficiary, with some states directing 30% or more of total lottery revenue to public schools, though specific programs and percentages vary widely. Auditors trace the actual transfers against the statute to confirm the right amounts reached the right accounts on time.
Responsible Gaming Reviews
Audits increasingly cover how the lottery handles problem gambling. The World Lottery Association runs a certification framework that evaluates employee training, retailer education, game design safeguards, advertising standards, player education, treatment referrals, and research into gambling behavior. Lotteries seeking certification have to back up their claims with concrete data and documentation rather than generic policy statements, and the WLA specifically requires that submissions reflect actual practices and show measurable progress over time.6World Lotteries Association. The WLA Responsible Gaming Framework and Certification For auditors, those certification records provide a structured baseline to measure the lottery against.
How to See the Results
Most state lotteries publish their annual financial audits and performance audit results, either through the lottery’s own website or the state auditor’s office. When reports aren’t published proactively, you can usually request them through the state’s public records or freedom of information process. Many state gaming commissions also publish operational data through open data portals, with sales figures, prize data, and performance metrics available without a formal request.
Transparency is itself an audit checkpoint. Oversight bodies evaluate whether the lottery is meeting its disclosure obligations, and an agency that makes its audit reports hard to find or obtain can expect that fact to show up in the next performance review.