CPA Disciplinary Actions: Grounds, Sanctions, and Appeals

CPA disciplinary actions can come from five different authorities — state boards of accountancy, the AICPA, the IRS Office of Professional Responsibility, the SEC, and the PCAOB — and their penalties range from mandatory continuing education and fines to permanent revocation of a license or a federal bar from practicing before an agency. Their jurisdictions overlap, so one act of misconduct can trigger parallel proceedings, and a sanction in one forum routinely cascades into others.

Who Can Discipline a CPA

Five bodies have direct authority over CPAs, and they do not coordinate their calendars.

The 55 U.S. boards of accountancy (all 50 states, the District of Columbia, and U.S. territories) are the primary licensing authorities. They evaluate applications, verify exam completion, oversee continuing education, and hear disciplinary cases for substandard practice or ethics violations. Their sanctions run from cease-and-desist orders and fines to full license revocation.¹

The American Institute of Certified Public Accountants enforces its Code of Professional Conduct through the Joint Ethics Enforcement Program, a cooperative arrangement with virtually all state CPA societies. AICPA sanctions affect membership status rather than the license itself, but an expulsion is a serious professional stain.²

The IRS Office of Professional Responsibility (OPR) has exclusive authority over tax practitioner discipline under Treasury Circular 230. It can censure, suspend, disbar, or impose monetary penalties on any CPA who practices before the IRS.³

Under Rule 102(e) of its Rules of Practice, the SEC can censure an accountant or temporarily or permanently deny the privilege of appearing or practicing before the Commission.⁴

The Public Company Accounting Oversight Board (PCAOB) oversees registered firms that audit public companies. It can revoke registrations, bar individuals, impose civil money penalties, and order remedial measures.⁵

What Conduct Triggers Discipline

The Uniform Accountancy Act, now in its 9th edition, is the model framework most state boards use. Section 10(a) lists ten categories of disciplinable conduct, and most real cases fall into a handful of recurring patterns.⁶

Fraud, Dishonesty, and Gross Negligence

Dishonesty, fraud, or gross negligence in performing professional services is the broadest and most frequently invoked ground. It reaches everything from fabricating audit workpapers to filing personal tax returns fraudulently. The UAA also treats dishonesty in obtaining the license itself as a separate, standalone violation.

Criminal Convictions

A felony conviction under federal or state law is grounds for discipline whether or not the crime relates to accounting. So is any conviction where dishonesty or fraud is an element. Embezzlement, tax evasion, and wire fraud almost always draw board action, but insurance fraud and other white-collar convictions unrelated to client work do too.

Independence Violations

For auditors, independence is not optional. A financial relationship with an audit client — a loan, an investment, or a family member in a key management role — can disqualify the entire engagement. SEC rules prohibit any loan between a covered person (including audit team members and their immediate families) and the audit client, its officers and directors, or significant equity holders. Narrow exceptions exist for routine consumer loans like auto financing and mortgages obtained before the covered relationship began, and those exceptions get heavy scrutiny.⁷

Practicing Without a Valid License

Working as a CPA with a revoked, suspended, or expired license is a direct violation that can trigger both state board action and criminal penalties. Practicing in a state where your right to practice has been denied or revoked is separate grounds for discipline in your home state.

Withholding Client Records

One complaint often surprises CPAs: refusing to return a client’s records during a fee dispute. Under the AICPA’s Acts Discreditable Rule, a CPA must return client-provided records within 45 days of the request, regardless of whether the client owes money. Reasonable copying and shipping fees are allowed; holding the records hostage for unpaid fees is not. Stricter state rules override the AICPA standard, and violating either is a disciplinary matter.

Sanctions State Boards Can Impose

State penalties vary by jurisdiction but generally escalate with severity. Most boards can impose any combination of the following:

Administrative fines set by each state’s statutes or regulations.
Public censure or reprimand, which becomes a permanent part of the CPA’s professional record.
Additional continuing education, often targeting the specific area where the CPA fell short.
Practice monitoring or peer review, typically at the CPA’s expense.
Probation with conditions restricting practice or requiring periodic reporting.
Suspension, usually running from months to several years.
Revocation, reserved for the most serious violations.

Many boards also require the disciplined CPA to reimburse the state for investigation costs, which land on top of any fine. Reinstatement after suspension or revocation is not automatic. Most states require the applicant to petition the board, pay delinquent and reinstatement fees, complete the CPE hours missed during the inactive period, and demonstrate fitness to return to practice.¹

AICPA Membership Sanctions

AICPA sanctions do not directly affect a state license, but they carry professional weight. The AICPA can expel or suspend a member without a hearing when a state revokes the member’s CPA certificate, or when the member is convicted of a crime punishable by more than one year of imprisonment, willful failure to file a tax return, or filing a fraudulent return. Expulsions and suspensions are published publicly. For less severe violations, the ethics committee can issue a required corrective action directing the member to complete additional CPE, submit future work for review, or undergo pre-issuance review of reports and workpapers.⁸

Federal Sanctions

CPAs who represent clients before the IRS or work on public company audits face an additional layer of federal oversight with its own penalties.

IRS Office of Professional Responsibility

The OPR enforces Circular 230, which governs all practice before the IRS. “Disreputable conduct” triggering OPR discipline includes conviction of a tax crime, giving false information to the Treasury Department, willfully failing to file your own returns, misappropriating client funds intended for tax payments, and counseling clients to violate federal tax law.⁹

OPR sanctions include censure, suspension from practice before the IRS, permanent disbarment, and monetary penalties. The monetary penalty for a single violation is capped at the gross income the practitioner earned from the conduct that triggered the penalty, so financial exposure scales with the size of the engagement.¹⁰

SEC Enforcement

The SEC can censure an accountant or deny the privilege of practicing before the Commission, temporarily or permanently. The bar for improper professional conduct is lower than outright fraud. A single instance of highly unreasonable conduct in circumstances where the accountant should have known heightened scrutiny was warranted can be enough, as can repeated instances of unreasonable conduct that demonstrate a lack of competence.⁴

One provision catches many CPAs off guard. If a state license is revoked or suspended, the CPA is automatically suspended from practicing before the SEC. The suspension takes effect the moment the state board enters its order, even with an appeal pending. The CPA can petition the SEC within 30 days to lift the suspension, but until that petition succeeds, no audit reports and no SEC-facing client work.

PCAOB Enforcement

The PCAOB has broad authority to investigate and sanction registered firms and their associated persons for violations of federal securities laws, PCAOB rules, or professional standards. Available sanctions include revoking a firm’s registration, barring an individual from associating with any registered firm, civil money penalties, censure, additional education, and ordering the firm to engage an independent compliance monitor.

Statutory penalty caps are significant. Standard violations can draw fines up to $100,000 per violation for an individual or $2,000,000 for a firm. For intentional, knowing, or repeated violations, those caps jump to $750,000 per individual and $15,000,000 per firm, subject to periodic inflation adjustments.⁵ A firm that refuses to cooperate faces separate exposure: the Board can suspend or revoke a firm’s registration, or bar the uncooperative individual, solely for the failure to cooperate.

How One Action Cascades Across Authorities

A disciplinary action in one place does not stay there. The UAA lists discipline imposed by another jurisdiction as independent grounds for action by the CPA’s home board, and revocation or suspension by any state or federal authority, including the PCAOB, is a separate ground for discipline.⁶

NASBA maintains the Accountancy Licensee Database to make this cross-jurisdictional enforcement practical. When one state disciplines a CPA who also holds a license or practices under mobility privileges elsewhere, the disciplining state can submit that information to the database, where it becomes visible to every participating board.¹¹

The pattern runs both directions. A CPA disciplined by a state board can face automatic SEC suspension, OPR proceedings under Circular 230, and reciprocal discipline from every other state where the CPA holds a license or practices under mobility rules. Federal discipline by the PCAOB or SEC gives state boards their own grounds to open a case. A state-level revocation also qualifies as disreputable conduct under Circular 230, an independent basis for OPR to act.⁹

How the Disciplinary Process Works

Procedures differ by agency, but most tracks share a common structure: complaint or referral, investigation, notice of charges, opportunity to respond or settle, hearing, and final decision.

A state case usually starts when the board receives a complaint through its online portal or by mail. Staff screen for jurisdiction, investigators examine the evidence, and if the facts support a violation the board files a formal accusation. Most boards then offer the CPA a chance to negotiate a consent agreement. If no settlement is reached, the case goes to an administrative hearing, an administrative law judge issues a recommended decision, and the full board votes on the final order. The order becomes a public record. A practitioner can also voluntarily surrender the license, which typically carries the same practical effect as revocation.

IRS cases begin with a referral to the OPR, often triggered by the assessment of specific tax penalties such as those for willful understatement of tax liability or promoting abusive tax shelters. OPR screens the referral and, if a sanction appears warranted, sends the practitioner an allegation letter describing the potential Circular 230 violations. The practitioner has 30 days to respond and can request a conference. Settlements are memorialized in a consent agreement that takes effect on the OPR Director’s signature. Contested cases go to an administrative law judge, either party can appeal to the Treasury Appellate Authority within 30 days, and the appellate decision is the final agency decision. Final actions are published in the Internal Revenue Bulletin.¹²

Across every forum, most cases end in settlement. A consent agreement lets a CPA accept a defined sanction — often a suspension period, additional CPE, and a fine — without admitting or denying all allegations. Consent orders are still public records and carry the same professional consequences as sanctions imposed after a hearing.¹³

Appealing a Disciplinary Decision

Every disciplinary body provides an appeals process, though the specifics and the odds of success vary.

State board decisions are typically subject to judicial review under the state’s administrative procedure act. Filing deadlines are strict and vary by state, often 30 to 60 days from the final order. Whether the sanction is stayed during appeal also varies. Some states stay the sanction automatically; others require the CPA to petition for a stay and show that immediate enforcement would cause irreparable harm.

PCAOB proceedings include a built-in safeguard. If a respondent petitions for SEC review of a Board-imposed sanction, or the SEC decides to review on its own, the sanction is stayed by law, and the PCAOB cannot publicly report the sanction until the SEC lifts the stay or the review period expires.¹⁴

For OPR cases, either party can appeal the administrative law judge’s decision to the Treasury Appellate Authority within 30 days. After the appellate decision becomes the final agency decision, the practitioner’s remaining recourse is federal court.¹²

Filing a Complaint or Checking a CPA’s Record

If you believe a CPA violated professional standards or caused you financial harm, the most direct step is filing a complaint with the CPA’s home state board of accountancy. For federal tax matters, you can also report a return preparer directly to the IRS.¹⁵

Before filing, gather the following:

The CPA’s full name, firm name, and license number if you have it. License numbers are searchable on CPAverify.org.
Dates services were provided, the scope of work, and copies of engagement letters or fee agreements.
Signed tax returns, audit reports, financial statements, correspondence, and any other records showing what the CPA did or failed to do.
A clear, chronological written account of what happened and how it affected you financially.

Most state boards post complaint forms in the enforcement or consumer protection section of their websites, and complaints can usually be submitted online or by certified mail. One boundary worth naming: board disciplinary proceedings address the CPA’s professional conduct and licensing status. They do not award money damages. Financial recovery generally requires a separate civil malpractice claim, though the board’s findings can become useful evidence there.

To check a CPA’s current standing, CPAverify.org is a free national database maintained by NASBA and populated with official licensing data sent directly from the boards. With 53 participating jurisdictions, it includes markers for enforcement actions, non-compliance, and disciplinary sanctions.¹⁶ State board websites, the Internal Revenue Bulletin, and the PCAOB’s enforcement actions page round out the public record for anyone verifying a CPA’s history.

1
National Association of State Boards of Accountancy. What is the State Board Responsible for?
2
AICPA & CIMA. Ethics Enforcement
3
Internal Revenue Service. Office of Professional Responsibility and Circular 230
4
eCFR. 17 CFR 201.102 – Appearance and Practice Before the Commission
5
Office of the Law Revision Counsel. 15 USC 7215 – Investigations and Disciplinary Proceedings
6
National Association of State Boards of Accountancy. Uniform Accountancy Act 9th Edition
7
U.S. Securities and Exchange Commission. Auditor Independence With Respect to Certain Loans or Debtor-Creditor Relationships
8
AICPA & CIMA. Explanations of Sanctions
9
eCFR. 31 CFR 10.51 – Incompetence and Disreputable Conduct
10
Internal Revenue Service. Treasury Department Circular No. 230
11
National Association of State Boards of Accountancy. Mobility/Practice Privilege Discipline and NASBAs Accountancy Licensing Database
12
Internal Revenue Service. Processing Circular 230 Disciplinary Cases
13
eCFR. 31 CFR Part 8 Subpart E – Disciplinary Proceedings
14
Public Company Accounting Oversight Board. Enforcement Actions
15
Internal Revenue Service. Make a Complaint About a Tax Return Preparer
16
National Association of State Boards of Accountancy. All About CPAverify