Common Subrecipient Audit Failures and Prevention

Why subrecipient failures keep appearing in audits

At the Pass-Through Entity Desk, I see the same pattern repeatedly: the audit issue is rarely a single bad invoice. The root cause is usually a weak control chain between the subaward agreement, the payment review, and the supporting records. When a PTE cannot show how it evaluated costs, certifications, credits, and exceptions, auditors often conclude that monitoring existed on paper only.

The prevention standard starts with the cost principles. Under 2 CFR 200.403, allowable costs must be necessary, reasonable, allocable, consistent with policy, consistently treated, determined under GAAP where applicable, not used twice, and “adequately documented.” That final phrase drives many findings. If documentation is thin, auditors often treat the cost as unsupported even when program staff believe it was valid.

For a broader PTE control framework, start with Pass-Through Entity Responsibilities: A Complete Checklist and align your subaward language with Essential Clauses in Subaward Agreements: A PTE Compliance Guide.

Failure 1: Weak subaward terms and missing certification flow

What auditors find

A common failure is a subaward that says what the subrecipient will do, but not what it must prove when requesting funds. That gap leads to incomplete invoices, vague budget categories, and unsupported cash draws. Another frequent weakness is the absence of a documented certification process at the point of payment request and financial reporting.

How to prevent it

Build the certification requirement into the subaward and every reimbursement template. 2 CFR 200.415 requires subrecipients to certify to the PTE whenever applying for funds, requesting payment, and submitting financial reports: “I certify to the best of my knowledge and belief that the information provided herein is true, complete, and accurate.” If your workflow does not capture and retain that certification, you are leaving an avoidable audit gap.

Strong agreements also define documentation standards by cost type: payroll support, allocation methodologies, indirect cost basis, proof of credits, and prior approval artifacts where needed. If your forms only ask for totals, the audit file will only contain totals.

Failure 2: Paying costs that fail allowability tests

What auditors find

Many subrecipient findings trace back to costs approved without a structured allowability review. Auditors often question charges that do not clearly support award objectives, fall outside award limits, or lack contemporaneous backup. Advertising and public relations are a classic example because not every outreach expense is allowable.

How to prevent it

Train invoice reviewers to test costs against 2 CFR 200.420 and the baseline criteria in 2 CFR 200.421 only where outreach is specifically allowable. More broadly, use a short allowability checklist built from Mastering Allowable Cost Determination: 2 CFR 200.403 Explained: Is the cost necessary? Is it consistent with policy? Is it documented? Was it incurred in the approved budget period?

A practical control is to require a written purpose statement for any cost category that routinely draws scrutiny. If the subrecipient cannot explain the program benefit in one or two sentences, the PTE should pause payment and request clarification.

Failure 3: No real test of reasonableness

What auditors find

Some PTE reviews check whether an expense was budgeted but never ask whether the amount itself was prudent. That is not enough. 2 CFR 200.404 says a cost is reasonable only if it does not exceed what “a prudent person would incur under the circumstances prevailing when the decision was made.”

How to prevent it

Require reviewers to document one or more reasonableness factors from the regulation: market price comparisons, arm’s-length bargaining, written policies, and whether the decision-makers acted with prudence. This does not always require a formal procurement file. It does require evidence that someone tested the amount, not just the math.

For example, if a subrecipient charges unusually high travel or consultant costs, the file should show why the price was acceptable in that geographic area and why the service was necessary. When reviewers cannot articulate that, auditors often infer weak oversight.

Failure 4: Bad allocation methods and cost shifting

What auditors find

Allocation errors are among the most cited and most expensive failures because they can affect many transactions at once. Under 2 CFR 200.405, a cost is allocable only if it is assignable to the award in accordance with the relative benefits received. Auditors look for unsupported split percentages, flat percentages with no methodology, and shifting costs to a Federal award to cover shortfalls elsewhere.

The rule is explicit: a cost allocable to one Federal award may not be charged to another to overcome fund deficiencies or avoid restrictions. That is why weak allocation logic can quickly become a questioned-cost problem rather than a minor paperwork issue.

How to prevent it

Require every shared-cost charge to carry its allocation basis with the invoice or ledger support. If the basis is payroll effort, square footage, transaction volume, or participant counts, the file should show the calculation. For more complex structures, use the framework in Cost Allocation Plans: Documentation That Holds Up. If a methodology changes mid-award, require written justification and effective dates.

Failure 5: Direct versus indirect cost confusion

What auditors find

Another recurring failure is inconsistent treatment of the same cost in like circumstances. 2 CFR 200.412 and 2 CFR 200.413 require consistent classification to avoid double-charging. A cost may be direct in one context and indirect in another, but the subrecipient must be able to explain why the circumstances differ.

Administrative and clerical salaries create particular exposure. Under 2 CFR 200.413, they should normally be treated as indirect unless the services are integral to the Federal award, the individuals can be specifically identified with that award, and the costs are not also recovered indirectly.

How to prevent it

Ask two questions before approving direct charges that look administrative: What makes this activity integral, and where is the evidence that the same function is not already in the indirect pool? If the subrecipient has a negotiated rate, the PTE should also review how the direct charge interacts with that rate. For higher education issues, see Mastering F&A Rates in Higher Education: A 2 CFR 200 Guide and, where payroll support is central, Effort Certification Under Uniform Guidance for IHEs.

Failure 6: Ignoring credits, refunds, and prior approval triggers

What auditors find

PTEs sometimes review gross costs but fail to confirm whether rebates, discounts, insurance recoveries, or overpayment adjustments reduced the true net charge. 2 CFR 200.406 requires applicable credits to be credited to the Federal award as a cost reduction or cash refund, as appropriate. If those credits are missing, the award can be overcharged even when the original purchase was allowable.

Another repeat issue is assuming a budget line equals blanket approval. 2 CFR 200.407 explains that some costs require prior written approval under specific circumstances. Auditors will ask for that approval when the item of cost or award terms demand it.

How to prevent it

Add two invoice fields: one for applicable credits and one for prior approval reference numbers. Then test those fields. If no credits apply, require the subrecipient to say so. If prior approval is needed, do not release funds until the file contains the approval and the approved scope matches the charge.

Also remember 2 CFR 200.408: costs above a statutory maximum are unallowable to the extent they exceed the cap.

Failure 7: Weak recovery of unallowable costs

What auditors find

Some PTEs identify questioned charges but never complete the recovery process. That creates a second finding: the original overcharge plus ineffective corrective action. Under 2 CFR 200.410, payments for unallowable costs determined by the Federal agency, cognizant agency, or PTE must be refunded with interest to the Federal Government, following the instructions of the determining entity.

Indirect cost rates create added risk. 2 CFR 200.411 requires rate adjustments or refunds when negotiated indirect cost rates were based on proposals that included unallowable or nonallocable costs.

How to prevent it

Your monitoring program should include a formal disallowance and recovery protocol: notice to subrecipient, deadline, interest treatment, ledger correction, and confirmation of final disposition. If the issue affected an indirect cost proposal, escalate immediately. Repeat finding control design is covered in Remediating Repeat Single Audit Findings: A Complete Guide.

Failure 8: Missing records, weak closeout, and ignored whistleblower notices

What auditors find

Records fail when organizations treat closeout as an administrative afterthought. 2 CFR 200.403 allows administrative closeout costs until the due date of the final reports, but other costs must be incurred during the approved budget period. PTEs get cited when subrecipients submit late cleanup charges with no basis for allowability.

Auditors also review whether required employee notices exist. 2 CFR 200.217 states: “The recipient and subrecipient must inform their employees in writing of employee whistleblower rights and protections.” If a PTE never checks for that written notice, it can miss a straightforward compliance obligation.

How to prevent it

Use a closeout checklist that ties final costs to the budget period, final certifications, credit adjustments, and required notices. A solid companion resource is Audit Readiness Checklist: What Auditors Look For First. For staffing and ownership of these tasks, see Building a Grants Compliance Team From Scratch.

Build a prevention system, not a hero culture

The strongest PTEs do not rely on one expert reviewer catching everything. They create a repeatable monitoring architecture: clear subaward clauses, standardized invoice templates, documented allowability and allocability tests, certification capture, exception logs, and recovery workflows. That system is what reduces repeat findings and supports defensible decisions when auditors sample transactions months later.