A CPA letter is a formal document in which a licensed Certified Public Accountant verifies specific financial information about you or your business for a named third party. Banks, mortgage brokers, immigration officers, courts, franchisors, and prospective business partners request them when they want independent confirmation that the numbers you’ve shown them are backed by real records. The type of letter you need, what it costs, and how long it takes all depend on how much scrutiny the requesting party is asking for.
When You Actually Need One
The most common trigger is a loan application from a self-employed borrower. A salaried applicant can produce a W-2 or a pay stub; a self-employed applicant usually cannot, because their earnings don’t appear on a single tidy document. Lenders may ask a CPA to confirm your self-employment status, verify the income coming from it, confirm your ownership percentage in a business, or address whether the business can keep operating if you pull money out for a down payment.
Immigration and visa filings are the next big category. USCIS Form I-134, for example, requires a sponsor to show “sufficient income or financial resources” to support a beneficiary’s temporary stay in the United States.1U.S. Citizenship and Immigration Services. I-134, Declaration of Financial Support USCIS doesn’t always require a CPA letter specifically, but one often accompanies the sponsor’s financial documentation and strengthens the application.
Outside of lending and immigration, CPA letters show up when a large vendor wants proof of financial health before offering favorable terms, when a franchisor wants confirmation of a prospective franchisee’s net worth, or when a regulator wants confirmation that a company meets a financial covenant. Courts request them too, in divorce, business disputes, or probate matters where one party’s finances are contested.
The Different Levels and What Each One Proves
Not every CPA letter carries the same weight. The work the CPA performs behind it determines how much the recipient can rely on it. Before you engage anyone, ask the third party which level they require, because that decision drives scope, cost, and timeline.
Preparation
The most basic service. The CPA organizes your financial data into properly formatted statements, but no report is issued and no assurance is given. Each page must carry a legend noting that no assurance is provided. Preparation is for internal use, or for a third party that just wants your numbers in a standard format without the CPA vouching for them.
Compilation
One step up. The CPA helps present your financial information as formal statements and issues a report, but the report explicitly states that the CPA did not audit or review the statements and expresses “an opinion, a conclusion, nor any form of assurance.” The CPA isn’t required to verify anything or run analytical procedures. Compilations tend to fit smaller privately held businesses seeking initial financing, or third parties with modest documentation requirements.
Review
A review provides what the profession calls “limited assurance.” The CPA asks management specific questions about the company’s financial position and applies analytical procedures to spot unusual relationships or trends.2AICPA & CIMA. AICPA SSARSs – Currently Effective The letter states that the CPA is not aware of any material changes needed for the statements to conform with the applicable reporting framework. That is a carefully worded negative statement, not an affirmative guarantee. A review fits mid-sized loans or equity investors who need more than a compilation but don’t need a full audit.
Agreed-Upon Procedures
Agreed-upon procedures (AUP) engagements take a different approach. The CPA, the client, and the third party agree in advance on specific procedures the CPA will perform. The CPA then reports only the factual findings from those steps, without drawing conclusions or providing assurance.3Public Company Accounting Oversight Board. AT Section 201 – Agreed-Upon Procedures Engagements The recipient draws their own conclusions. A lender might use one to confirm that a certain percentage of receivables are current; a franchisor might use one to confirm a specific bank balance on a specific date. AUPs are efficient because they target exactly what the third party cares about.
What the Letter Contains
Every CPA letter follows a predictable structure. It identifies the specific third party it is addressed to, names the client, and specifies the exact period or data covered. Getting any of these details wrong can render the letter useless, so confirm the addressee’s full legal name and the precise date range or data points before the CPA starts work.
A scope paragraph describes exactly what the CPA did, states whether the engagement was a compilation, review, or agreed-upon procedures, and references the professional standards followed. That paragraph exists to keep the recipient from assuming a higher level of work happened than actually did. A compilation report, for example, will explicitly note that the CPA did not audit or review the statements.
The findings section delivers the answer the third party is looking for. In a review, this is the limited assurance statement. In an AUP, this is a straightforward list of what the CPA tested and what they found. In a compilation, this section is absent because the CPA is expressing no conclusion.
Every formal CPA letter also includes usage restrictions and disclaimers, typically stating that the letter is intended solely for the named parties and cannot be relied upon by anyone else for any other purpose. That language is both a professional standards requirement and a legal protection for the CPA.
What to Have Ready Before You Call
Before a CPA can write your letter, you need to provide the underlying documentation. What exactly depends on the engagement type and what the letter must verify, but commonly requested items include:
- Tax returns, typically the most recent one to three years of personal or business returns.
- Bank statements showing regular income deposits or account balances as of specific dates.
- Financial statements, such as profit and loss statements and balance sheets.
- Pay records or 1099s showing payments received from clients, for self-employment verification.
- Supporting schedules such as depreciation schedules or loan amortization tables.
The CPA will issue an engagement letter before starting. That is essentially a contract defining the scope of services, identifying who the client is, setting fees, and setting expectations for both sides. Read the description of what falls outside the scope, because additional requests later will usually mean additional fees. For a review engagement, the CPA will also ask you to sign a management representation letter confirming that the information you’ve provided is complete and accurate. If you refuse to sign it after the CPA has asked, the CPA cannot issue the review report and the engagement effectively ends there.
What a CPA Letter Cannot Do
The most important limitation to grasp is that none of these engagements is an audit. An audit provides “reasonable assurance” that financial statements are free of material misstatement, whether caused by error or fraud, and involves extensive testing of internal controls, verification of source documents, and confirmation of balances with third parties.4Public Company Accounting Oversight Board. PCAOB AU 230.10 – Due Professional Care Compilations, reviews, and AUP engagements do none of that. If a third party tells you they need an “audited” letter, they are asking for something fundamentally different and considerably more expensive.
A CPA also cannot guarantee your future performance or solvency. Attestation standards direct practitioners not to provide assurance that a business is solvent, would remain solvent under proposed conditions, or can pay its debts as they come due. Lenders sometimes push for exactly that kind of forward-looking reassurance, and the answer is no. A CPA can verify what your business earned last year; they cannot promise what it will earn next year. An ethical CPA will refuse to sign a letter that essentially guarantees speculative or unverified information.
These letters also are not designed to detect fraud. Even an audit does not guarantee fraud detection.5U.S. Securities and Exchange Commission. The Auditors Responsibility for Fraud Detection Lower-level engagements have no fraud detection component at all. If you’re worried about fraud in a business you’re acquiring or investing in, you need an audit or a forensic examination.
Who Can Actually Rely on the Letter
The usage restriction in a CPA letter is not boilerplate. It defines who can legally rely on the document and, in turn, who can hold the CPA accountable if something is wrong. Under the doctrine of privity, a CPA’s liability for negligence generally extends only to the client and the specific third party named in the letter. Different states apply slightly different standards for how far that liability reaches, but the core principle holds: the restriction-of-use language is a real legal boundary. If you share the letter with someone not named in the addressee block, that party generally has no legal recourse against the CPA even if the information turns out to be wrong. If you need the letter for multiple recipients, tell your CPA up front so all of them can be named.
CPAs also work under strict integrity and objectivity rules. The professional code prohibits a CPA from knowingly making or permitting materially false or misleading entries in financial records, or signing documents that contain materially false or misleading information.6Public Company Accounting Oversight Board. ET Section 102 – Integrity and Objectivity A CPA letter carries less weight than an audit, but the CPA’s license and reputation are on the line every time they sign one.
Verifying the CPA’s License
Before you pay anyone, confirm they hold an active CPA license. An unlicensed accountant’s letter carries no professional weight and will not satisfy a lender or government agency that specifically requested a CPA. The National Association of State Boards of Accountancy runs a public search tool called CPAverify at ald.nasba.org, which covers most U.S. jurisdictions.7National Association of State Boards of Accountancy. CPAverify Public Search Select the state, enter the CPA’s last name, and the tool returns their license status. You can also verify directly through your state’s board of accountancy. Either search takes about two minutes.
Cost and Timeline
What you pay depends on the engagement type, the complexity of your finances, and the CPA’s hourly rate. A straightforward income verification letter for a mortgage application sits at the low end. A review engagement for a business with multiple revenue streams and complex accounting will cost substantially more. As a rough guide, simple verification letters may run a few hundred dollars, compilations typically cost more given the report requirement, and reviews can reach into the low thousands for a small business.
Turnaround follows the same pattern. A simple verification letter from a CPA who already handles your tax returns might be ready in a few business days, because they already have your records. A compilation or review from a CPA seeing your books for the first time will take longer, since they have to gather and understand your documentation before doing any work. If you know a third party will ask for a CPA letter, start collecting documents early and reach out before the deadline is close. Rush fees are real, and CPAs are hardest to reach during tax season.