A CPA letter is a signed document from a licensed Certified Public Accountant that verifies specific financial information about you or your business for a third party who wants independent confirmation of your numbers. Banks ask for one when a self-employed borrower applies for a mortgage. Immigration officers accept them alongside sponsorship paperwork. Vendors, franchisors, and courts request them when someone’s financial position matters to a decision they’re about to make. What the letter actually proves, and what it costs, depends on how much work the CPA agrees to do before signing it.
When Someone Will Ask You for One
The most common trigger is a loan application from a self-employed borrower. A salaried worker can hand over a W-2 or a pay stub; a self-employed applicant’s income doesn’t sit on a single tidy document, so the lender asks a CPA to vouch for it. Mortgage brokers and lenders may ask the CPA to confirm your self-employment status, verify the income from that self-employment, confirm your ownership percentage in a business, or assess whether the business can keep running if you pull money out for a down payment.
Immigration is the next most frequent setting. USCIS Form I-134 requires a sponsor to show “sufficient income or financial resources” to support a beneficiary’s temporary stay in the United States.1U.S. Citizenship and Immigration Services. I-134, Declaration of Financial Support USCIS doesn’t always demand a CPA letter by name, but one confirming income or asset levels is a common addition that strengthens the file.
Outside lending and immigration, CPA letters surface in business-to-business situations. A large vendor may want proof of financial health before extending favorable payment terms. A franchisor may want confirmation that a prospective franchisee meets a net worth threshold. A regulator may need confirmation that a company meets specific financial covenants. Courts request them in divorce proceedings, business disputes, and probate matters where one party’s finances are contested.
The Four Engagement Types and What Each One Proves
Not every CPA letter carries the same weight. The level of work the CPA agrees to perform is what gives the letter its force, and it’s the first thing to pin down with whoever is asking you for one. These engagements are governed by the Statements on Standards for Accounting and Review Services for non-public entities and by the Statements on Standards for Attestation Engagements for attestation work.2AICPA & CIMA. AICPA SSARSs – Currently Effective
Preparation
The most basic service. The CPA helps you organize financial data into properly formatted statements, but no report is issued and no assurance is given. Each page carries a legend saying no assurance is provided. Preparation suits internal use or a third party who just wants your numbers in a standard format.
Compilation
One step up. The CPA assists you in presenting your financial information as formal statements and issues a report, but the report says plainly that the CPA did not audit or review the statements and provides “an opinion, a conclusion, nor any form of assurance.” No verification, no analytical procedures. Compilations fit smaller private businesses seeking initial financing or satisfying a third party with modest documentation requirements.
Review
A review gives what the profession calls limited assurance. The CPA asks management specific questions and applies analytical procedures to spot unusual relationships or trends.2AICPA & CIMA. AICPA SSARSs – Currently Effective The resulting letter states that the CPA is not aware of any material changes needed for the statements to conform with the applicable reporting framework. That’s a carefully worded negative statement, not an affirmative guarantee. No testing of internal controls, but real professional work, which makes reviews appropriate for mid-sized loans or equity investors who need more than a compilation but don’t require an audit.
Agreed-Upon Procedures
An agreed-upon procedures (AUP) engagement works differently. The CPA, you, and the third party agree in advance on specific procedures the CPA will perform. The CPA reports only the factual findings from those steps, without drawing conclusions or offering assurance.3Public Company Accounting Oversight Board. AT Section 201 – Agreed-Upon Procedures Engagements The recipient draws their own conclusions. A lender might use an AUP to confirm that a given percentage of your accounts receivable are current; a franchisor might ask for verification that a particular bank balance existed on a specific date. AUPs are efficient because they target exactly what the third party cares about.
What the Letter Actually Says
Every CPA letter follows a predictable structure. It names the specific third party it’s addressed to, identifies the client, and specifies the exact time period or financial data covered. Any mistake in those details can make the letter useless, so confirm the addressee’s full legal name and the precise date range or data points before the CPA starts work.
The scope paragraph describes what the CPA did and references the professional standards followed. This section exists to prevent the recipient from assuming more work was performed than actually was. A compilation report, for example, will say outright that the CPA did not audit or review the statements.
The findings or conclusion section delivers the answer the third party wants. In a review, that’s the limited assurance statement. In an AUP, it’s a straightforward list of what the CPA tested and what they found. In a compilation, this section is absent because the CPA isn’t expressing any conclusion at all.
Finally, the letter includes usage restrictions stating that it’s intended solely for the named parties and cannot be relied on by anyone else. That language is both a professional standards requirement and a legal protection.
What to Have Ready
Before a CPA can write your letter, you’ll need to hand over the underlying documentation. What you’ll need varies with the engagement type and the question being answered, but the common items are:
- Personal or business tax returns, usually the most recent one to three years
- Bank statements showing income deposits or balances as of specific dates
- Profit and loss statements, balance sheets, or other internal accounting records
- 1099s or payment records for self-employment income
- Supporting schedules such as depreciation schedules or loan amortization tables
The CPA will issue an engagement letter before any work begins. It’s a contract that defines the scope, identifies the client, sets fees, and lays out expectations on both sides. Read the description of what’s outside the scope carefully, because later additions almost always mean additional fees. For a review, the CPA will also ask you to sign a management representation letter confirming that what you’ve provided is complete and accurate. Refusing to sign it ends the engagement; the CPA cannot issue the review report without it.
What a CPA Letter Cannot Do
None of these engagements is an audit. An audit provides what’s called reasonable assurance that financial statements are free of material misstatement, whether caused by error or fraud, and involves extensive testing of internal controls, source documents, and third-party confirmations.4Public Company Accounting Oversight Board. PCAOB AU 230.10 – Due Professional Care Compilations, reviews, and AUPs do none of that. If a third party tells you they need an “audited” letter, that’s a different and much more expensive engagement.
A CPA also cannot guarantee your future performance or solvency. Attestation standards direct practitioners not to provide any form of assurance that a business is solvent, will remain solvent, or can pay its debts as they come due. Lenders sometimes push for exactly that kind of forward-looking statement. A CPA can confirm that your business earned a specific amount last year; they cannot promise it will earn the same next year, and an ethical CPA will refuse any request that boils down to guaranteeing unverified or speculative information.
These letters also are not designed to detect fraud. An audit includes specific fraud-risk procedures, and even then detection isn’t guaranteed.5U.S. Securities and Exchange Commission. The Auditors Responsibility for Fraud Detection Compilations and reviews have no fraud detection component at all. If fraud is the concern, you need an audit or a forensic examination, not a CPA letter.p>
Who Can Rely on the Letter
The usage restrictions aren’t boilerplate. They define who can legally rely on the document and, in turn, who can hold the CPA accountable if the information turns out to be wrong. Under the legal doctrine of privity, a CPA’s liability for negligence generally extends only to the client and the specific third party named in the letter. Courts have reinforced that boundary consistently, holding that an accountant is not liable to unnamed third parties who happen to rely on the statements.
In practice, if you share the letter with a party who isn’t named in the addressee block, that party usually has no legal recourse against the CPA even if the numbers prove wrong. States apply slightly different standards for how far liability stretches, but the core principle holds. If you need the letter for multiple recipients, tell your CPA upfront so everyone can be named.
CPAs are also bound by professional integrity rules that prohibit knowingly making or permitting materially false or misleading entries, or signing documents containing materially false or misleading information.6Public Company Accounting Oversight Board. ET Section 102 – Integrity and Objectivity The letter carries less weight than an audit, but the CPA’s license and reputation still back every signature.
Confirm the CPA Is Actually Licensed
Before paying for a letter, confirm that the person signing it holds an active CPA license. A letter from an unlicensed accountant won’t satisfy a lender or government agency that specifically requires a CPA.
The National Association of State Boards of Accountancy maintains a public search tool called CPAverify at ald.nasba.org that covers most U.S. jurisdictions.7National Association of State Boards of Accountancy. CPAverify Public Search Pick the state, enter the last name, and the status shows up. You can also verify through your state board of accountancy’s website. Either check takes about two minutes.
What It Costs and How Long It Takes
Price turns on the engagement type, the complexity of your finances, and the CPA’s hourly rate. A straightforward income verification for a mortgage sits at the low end. A review for a business with several revenue streams and complex accounting runs considerably higher. As a rough guide, simple verification letters can run a few hundred dollars, compilations typically cost more because of the report requirement, and reviews can reach the low thousands for a small business.
Timing follows the same curve. A simple verification from a CPA who already handles your tax returns might be ready in a few business days because your records are already in the file. A compilation or review from a CPA seeing your books for the first time takes longer, because they need to gather and understand your documentation before signing anything. If you know a letter is coming, pull your documents together early and contact your CPA before the deadline is on top of you. Rush fees are real, and CPAs have the least availability during tax season.