Bank Confirmation Letter (BCL)

A bank confirmation letter (BCL) is a bank’s written or electronic response confirming specified information about a customer relationship as of a stated date. In audit work, the more precise concept is an external bank confirmation controlled by the auditor; in commercial settings, BCL can also describe a bank reference or account-confirmation letter with a narrower purpose.

Key Takeaways

• The request and response must identify exactly what the bank is being asked to confirm.
• An audit confirmation is designed to obtain evidence from an external source, not merely to reproduce a client-provided statement.
• A confirmation can address cash balances, accounts, debt, credit facilities, guarantees, or other relationships when requested and supported by the bank’s records.
• The response is limited to its effective date, scope, assumptions, and disclaimers.
• A BCL is not automatically a promise to lend, a bank guarantee, or proof that funds remain available.

Two Common Uses of the Term

Audit bank confirmation

An auditor sends or controls a request to a financial institution and evaluates the response as external audit evidence. Depending on the engagement and identified risks, the request can address cash, accounts, loans, credit lines, collateral, guarantees, or other bank relationships.

For U.S. public-company audits, PCAOB AS 2310 requires confirmation procedures, or other relevant and reliable evidence obtained by directly accessing information maintained by a knowledgeable external source, for selected cash held by third parties. Other audit frameworks and jurisdictions have their own requirements.

Commercial or administrative confirmation

A customer may request a bank letter to confirm account existence, relationship length, balance information, or account details for a landlord, lender, visa process, transaction counterparty, or other recipient. The term is not universally standardized, and banks often use their own forms and limitations.

How an Audit Confirmation Works

1. The auditor determines the information and assertions to test.
2. The auditor selects the bank and accounts or relationships to confirm.
3. The request is authorized as required, then sent under the auditor’s control.
4. The bank or approved intermediary authenticates the request and prepares a response from bank records.
5. The response goes directly to the auditor or through a controlled electronic process.
6. The auditor evaluates authenticity, completeness, exceptions, nonresponses, and other evidence.

Client involvement may be necessary to authorize disclosure, but a confirmation routed only through the client is generally weaker evidence because the auditor has not maintained control over transmission and receipt.

Worked Example

An auditor’s records show that a company held $850,000 at Bank A on December 31 and had a $2 million revolving credit facility with $400,000 drawn. The auditor requests confirmation of both cash and borrowing information.

The bank confirms $850,000 of deposit balances but reports $425,000 outstanding on the facility. The $25,000 difference is a confirmation exception. It does not prove either record is wrong; the auditor investigates timing, accrued interest, fees, transfers, and cutoff before concluding.

What a Confirmation Can and Cannot Establish

Information to Check

• legal name of the customer and relevant entities
• bank and branch or processing unit
• account or facility identifiers, usually masked where appropriate
• balance or relationship being confirmed
• currency and effective date
• whether amounts include accrued interest or fees
• restrictions, liens, collateral, setoff rights, or compensating balances when relevant and requested
• response method, sender authentication, and intermediary controls
• qualifications, omissions, and disclaimers

Risks and Limitations

• Scope risk: The bank may answer only the accounts or facilities listed in the request.
• Cutoff risk: Transactions near the confirmation date can create legitimate differences.
• Authenticity risk: Altered letters, false contact details, and intercepted email can undermine evidence.
• Completeness risk: A balance confirmation alone may omit debt, guarantees, restrictions, or closed accounts.
• Terminology risk: “Bank report,” “bank reference,” and “BCL” can mean different documents across institutions and countries.
• Reliance risk: A recipient may assume the letter is a guarantee or credit commitment when it is not.

How to Evaluate a BCL

1. Define the purpose and information needed before requesting the letter.
2. Use the bank’s approved process or an appropriately controlled confirmation platform.
3. Verify the sender using independently obtained contact information.
4. Confirm the date, currency, account owner, and exact balance or facility definition.
5. Read every limitation and reconcile exceptions to source records.
6. Obtain professional guidance when the document supports an audit, legal transaction, loan decision, or fraud investigation.

Official Resource

• PCAOB AS 2310, The Auditor’s Use of Confirmation, explains confirmation objectives, auditor control, responses, exceptions, and additional considerations for cash in U.S. public-company audits.

This article provides general financial education, not audit, legal, lending, or fraud-verification advice. Required procedures and evidentiary weight depend on the engagement, document, institution, jurisdiction, and professional standard.

FAQs

Related Terms

• Bank Statement: Periodic record of posted account activity.
• Bank Certificate: Bank-issued certificate describing specified account or deposit information.
• Proof of Funds: Evidence intended to support that funds exist under stated conditions.
• Bank Reconciliation: Process for explaining differences between bank records and internal cash records.
• Compensating Balance: Deposit balance maintained in connection with a credit or service arrangement.