Client Trust Account Rules in California: CTAPP, Records, and Payouts

California’s client trust account rules require every attorney who holds money for a client or third party to keep those funds in a separate, properly labeled trust account at an IOLTA-participating bank, follow Rule 1.15 of the California Rules of Professional Conduct on deposits, records, and disbursements, and complete the State Bar’s annual Client Trust Account Protection Program requirements. The rules are strict, the recordkeeping is detailed, and the discipline for getting it wrong is severe.

Opening and Labeling the Account

The account has to be opened at a bank or financial institution that participates in the State Bar’s Interest on Lawyers’ Trust Accounts program. It must be maintained in California. An out-of-state account is allowed only if the client gives written consent and has a substantial connection to that jurisdiction through their business or personal affairs. The account must be labeled “Trust Account” or something clearly equivalent.¹

Enrollment in IOLTA is mandatory. Under Business and Professions Code section 6211, client funds that are too small to earn net interest for the individual client, or that will only be held briefly, go into a pooled IOLTA account. Interest on the pooled account is remitted to the State Bar and distributed to organizations providing free or low-cost legal services. When funds are large enough or held long enough to generate meaningful interest for the client, they instead go into a separate interest-bearing account where the client receives the earnings.²

What Goes Into the Account

Rule 1.15(a) requires deposit of all funds received or held for the benefit of a client or any other person to whom the attorney owes a legal duty. That includes settlement proceeds, advances for costs and expenses, fees paid before the work is done, and money owed to third parties such as medical providers holding liens. Because the rule reaches funds held for non-clients, a lienholder’s share follows the same protocols as a client’s share.¹

The Commingling Prohibition

Mixing personal or firm money with client funds is prohibited. There are two narrow exceptions. An attorney may deposit enough of their own money to cover bank service charges, so the bank does not draw on client funds to pay fees. And when a deposit contains money belonging partly to the client and partly to the attorney, the full amount is deposited into the trust account, but the attorney’s share must be withdrawn at the earliest reasonable time after it becomes fixed.¹

Flat Fees Versus True Retainers

A true retainer is paid to guarantee the attorney’s availability and belongs to the attorney the moment it is received. It does not go into the trust account. A flat fee paid in advance for legal services is different: it is an advance, and it must be deposited into the trust account until earned.

One exception applies to flat fees. The attorney may deposit a flat fee directly into an operating account if the client gets a written disclosure explaining two things: that the client has the right to require the fee be held in trust until earned, and that the client is entitled to a refund of any unearned portion if the representation ends early. When the flat fee exceeds $1,000, the client’s signature on that written disclosure is required. Without the signature on a fee above the threshold, the money should have been in trust.¹

Notifying Clients and Providing an Accounting

When an attorney receives funds in which a client or third party has an interest, Rule 1.15(d)(1) requires notification within 14 days absent good cause for delay. The attorney must also promptly provide a written accounting showing what was received, what was disbursed, and why. Securities and other property must be labeled, identified, and stored securely as soon as practicable after receipt.¹

Records You Must Keep

Rule 1.15 requires ongoing, detailed records for every trust account:

A separate written ledger for each person whose funds are in the account, showing dates, amounts, sources of deposits, payees and purposes of disbursements, and a running balance.
A written journal for the bank account itself, recording each debit and credit with the affected client identified, along with the current balance.
All bank statements and canceled checks.
A documented reconciliation each month comparing the client ledgers, the account journal, and the bank statement.

The monthly reconciliation is often called a three-way reconciliation because it compares three independent records. Done correctly, the total of the individual client ledger balances equals the account journal balance, and both match the adjusted bank statement balance. Any discrepancy has to be investigated and resolved immediately. Small discrepancies that go unresolved are how trust account problems become disciplinary cases.¹

All trust account records must be preserved for at least five years after the funds or property are finally distributed. The clock runs from the date of distribution, not the date of receipt.¹

Paying Money Out

Money may only be withdrawn from the trust account when the attorney’s right to it has become fixed. For earned fees, that means the work has been completed and billed. For costs, it means the expense has been incurred. Once the attorney’s share is no longer in dispute, it must be pulled from the account at the earliest reasonable time. Leaving earned fees sitting in trust is itself a form of commingling, because the money no longer belongs to a client.¹

Disputed Funds and the 45-Day Presumption

When a client disputes the attorney’s right to a portion of the funds, the disputed amount stays in trust until the disagreement is formally resolved. The undisputed portion must still be promptly distributed. The same principle applies to third-party claims: if a medical provider holds a valid lien against settlement proceeds, the lienholder’s portion remains in trust until the claim is resolved.

Rule 1.15 creates a rebuttable presumption that the attorney has violated the disbursement rules if undisputed funds are not distributed within 45 days of becoming undisputed, unless the attorney and the client have a written agreement allowing continued holding. That 45-day clock is one of the most concrete enforcement triggers in the rule.¹

When two or more parties claim the same funds and the attorney genuinely cannot decide who owns them without risking liability, an interpleader action deposits the money with the court and asks a judge to sort ownership out. Once the court accepts the funds, the attorney is typically discharged from further liability. It is a last resort, not a routine tool.

Unclaimed Funds

Client funds do not become the attorney’s property just because no one claims them. The dormancy period for IOLTA-held property is three years, after which the funds must be reported and remitted to the State Controller’s Office under California’s escheat procedures. Senate Bill 134 established a dedicated Abandoned IOLTA Property Account within the Unclaimed Property Fund for these remittances.³

Annual CTAPP Compliance

The State Bar’s Client Trust Account Protection Program monitors compliance with Rule 1.15. With very few exceptions, every California attorney must complete the CTAPP requirements during their annual renewal. There are four components:

Annual trust account reporting, disclosing trust account activity for the year.
Annual registration of all IOLTA and non-IOLTA trust accounts with the State Bar, either individually or through a firm.
An annual self-assessment reviewing the attorney’s own trust account management practices.
An annual certification that the attorney understands and complies with Rule 1.15’s requirements.

⁴

Missing the CTAPP deadline triggers a noncompliance penalty. If the deficiency is not corrected, the attorney is enrolled as an inactive licensee and cannot practice law until they come back into compliance. The State Bar has indicated that later phases of the program will add compliance reviews conducted by certified public accountants.⁵

Discipline for Violations

Trust account violations are among the most serious ethical breaches in California. Intentional misappropriation of client funds almost always results in disbarment. Negligent mishandling, such as sloppy recordkeeping that produces accidental shortfalls, can result in suspension or other sanctions. The State Bar does not need to prove intent to steal; failure to safeguard client money is enough to trigger discipline. Attorneys must respond promptly to State Bar inquiries about trust account records, because stonewalling an investigation compounds the original problem.

The Client Security Fund

When an attorney’s dishonesty causes a client to lose money, the State Bar’s Client Security Fund may reimburse the victim. It covers losses from theft, embezzlement, failure to refund unearned fees, and other acts of intentional dishonesty. Reimbursement is capped at $100,000 per attorney for losses occurring on or after January 1, 2009. Applications must be filed within four years of when the client discovered or should have discovered the loss. The fund does not cover interest, consequential losses, or losses already covered by insurance or bonds. An applicant does not need a lawyer to file, and the application is submitted under penalty of perjury.⁶

Protecting the Account from Fraud

Trust accounts are frequent targets of wire fraud and cyberattacks. Rule 1.15 does not contain a specific cybersecurity provision, but broader duties of competence and confidentiality extend to protecting trust account information. ABA Formal Opinion 483 requires reasonable efforts to monitor for data breaches, stop any breach in progress, and notify affected clients when a breach involves or is substantially likely to involve material client information. The standard is reasonable efforts, not impenetrable systems, but doing nothing is not an option.

Practical safeguards include multi-factor authentication on trust accounts, verification of wire instructions through a separate communication channel before any transfer, and current antivirus and firewall protections on any device used to access trust account systems. An attorney who loses client funds to a phishing attack that basic precautions would have stopped will struggle to argue they met the duty of competence.

1
The State Bar of California. California Rules of Professional Conduct Rule 1.15 – Safekeeping Funds and Property of Clients and Other Persons
2
California Code. California Business and Professions Code 6211
3
California State Controllers Office. Notice to Holders – SB 134 IOLTA
4
The State Bar of California. Client Trust Account Protection Program
5
The State Bar of California. CTAPP FAQs
6
The State Bar of California. Client Security Fund Rules