Client Trust Account Rules in California: CTAPP, IOLTA, and Compliance

California client trust account rules are set out in Rule 1.15 of the California Rules of Professional Conduct, and they require any attorney who receives or holds money for a client or third party to keep those funds in a separately labeled trust account at an IOLTA-eligible financial institution, never mixed with personal or firm money. The rule covers how the account is opened, what goes into it, how it must be documented, when money can come out, and what the attorney owes the client along the way. The State Bar enforces compliance through the Client Trust Account Protection Program, and violations are treated as among the most serious ethical breaches a California lawyer can commit.

Where the Account Must Be Held

A client trust account must be opened at a bank or financial institution that participates in the State Bar’s Interest on Lawyers’ Trust Accounts program. The account has to be maintained in California, with one exception: an attorney may hold the account in another jurisdiction if the client gives written consent and has a substantial connection to that jurisdiction through business or personal affairs. The account must be labeled “Trust Account” or something clearly equivalent so there is no doubt about what it holds.¹

IOLTA enrollment is mandatory for any attorney handling client funds. Under Business and Professions Code section 6211, client money that is too small to earn net interest for the individual client, or that will be held only briefly, goes into a pooled IOLTA account. Interest on the pooled account is forwarded to the State Bar, which distributes it to organizations providing free or low-cost legal services. When funds are large enough or will be held long enough to earn meaningful interest for the client, the attorney must instead place them in a separate interest-bearing account where the client receives the earnings.²

What Must Go Into the Trust Account

Rule 1.15(a) requires deposit of all funds received or held for the benefit of a client or any other person to whom the attorney owes a legal duty. That covers settlement proceeds, advances for costs and expenses, fees paid before the work is done, and money owed to third parties such as medical providers holding liens. The rule reaches funds held for non-clients, so an attorney holding money for a lienholder follows the same protocols as if it belonged to the client.¹

Keeping Personal Money Out

Commingling attorney money with client funds is prohibited, with two narrow exceptions. An attorney may deposit enough personal money to cover bank service charges, so the bank does not draw fees from client funds. And when a single deposit contains money belonging partly to the client and partly to the attorney, the full amount is deposited into the trust account, but the attorney’s share must be withdrawn at the earliest reasonable time after it becomes fixed. Outside those two situations, no attorney money belongs in the account.¹

Flat Fees Versus True Retainers

A true retainer is paid to secure the attorney’s availability and belongs to the attorney the moment it is received. It does not go into the trust account. A flat fee paid in advance for legal services is different: it is an advance against work not yet done, and it must be deposited into the trust account until earned.

There is one carve-out for flat fees. An attorney may deposit a flat fee directly into the operating account if the attorney gives the client a written disclosure stating two things: that the client has the right to require the fee be held in trust until earned, and that the client is entitled to a refund of any unearned portion if the representation ends early. When the flat fee exceeds $1,000, the client must sign that written disclosure for it to be effective. Without the signature on a fee above the threshold, the money belongs in the trust account.¹

Telling the Client and Keeping Records

When an attorney receives funds in which a client or third party has an interest, Rule 1.15(d)(1) requires notification of that person within 14 days absent good cause for delay. The attorney must also promptly provide a written accounting showing what was received, what was disbursed, and why. Securities and other property must be labeled, identified, and stored securely as soon as practicable after receipt.¹

For each trust account, Rule 1.15 requires:

A separate written ledger for every person whose funds are in the account, showing dates, amounts, sources of deposits, payees and purposes of disbursements, and a running balance.
A written journal for the bank account itself, recording each debit and credit with the affected client identified, along with the current balance.
All bank statements and canceled checks.
A documented monthly reconciliation comparing the client ledgers, the account journal, and the bank statement.

The monthly reconciliation is often called a three-way reconciliation. Done correctly, the total of all individual client ledger balances equals the account journal balance, and both match the adjusted bank statement balance. Any discrepancy must be investigated and resolved immediately.¹

All trust account records must be preserved for at least five years after the funds or property are finally distributed. The retention clock runs from the date of distribution, not the date of receipt. Records for a matter that takes three years to resolve must be kept for five years after the final disbursement.¹

When Money Can Come Out

Money may only be withdrawn from the trust account when the attorney’s right to it has become fixed. For earned fees, that means the work has been completed and billed. For costs, it means the expense has been incurred. Once the attorney’s share is no longer in dispute, it must be pulled out at the earliest reasonable time. Leaving earned fees sitting in the trust account is itself a form of commingling, because the money no longer belongs to a client.¹

Disputed Portions Stay Put

When a client disputes the attorney’s right to a portion of the funds, the disputed amount stays in the trust account until the disagreement is formally resolved. The undisputed portion must still be promptly distributed. The same principle applies to third-party claims. If a medical provider holds a valid lien against settlement proceeds, the attorney cannot hand the full settlement to the client; the lienholder’s portion remains in trust until the claim is resolved.

Rule 1.15 creates a rebuttable presumption that the attorney has violated the disbursement rules if undisputed funds are not distributed within 45 days of becoming undisputed, unless the attorney and client have a written agreement allowing continued holding. That 45-day window is one of the most concrete triggers in the rule, and it puts the burden on the attorney to explain any delay.¹

When Two Parties Both Claim the Same Money

Sometimes an attorney holds trust funds that two or more parties claim, and the attorney cannot determine who is entitled to them without risking liability to one side or the other. In that situation, the attorney can file an interpleader action, depositing the disputed funds with the court and asking a judge to decide ownership. Once the court accepts the funds, the attorney is typically discharged from further liability, and the competing claimants litigate ownership among themselves.

Unclaimed Trust Funds

Client funds do not become the attorney’s property because no one claims them. When money sits unclaimed in an IOLTA account, California’s unclaimed property laws eventually apply. The dormancy period for IOLTA-held property is three years, after which the funds must be reported and remitted to the State Controller’s Office under the state’s escheat procedures. Senate Bill 134 established a dedicated Abandoned IOLTA Property Account within the Unclaimed Property Fund for these remittances.³

Annual Compliance Through CTAPP

The State Bar’s Client Trust Account Protection Program requires nearly every California attorney to complete four tasks each annual renewal period:

Annual trust account reporting, disclosing trust account activity for the year.
Annual trust account registration of all IOLTA and non-IOLTA trust accounts with the State Bar, either individually or through a firm.
An annual self-assessment of trust account management practices.
An annual certification declaring that the attorney understands and complies with Rule 1.15.

⁴

Missing the CTAPP deadline triggers a noncompliance penalty. If the deficiency is not corrected, the attorney is enrolled as an inactive licensee and cannot practice law until compliance is restored. The State Bar has indicated that later phases of the program will include compliance reviews conducted by certified public accountants.⁵

What Happens When the Rules Are Broken

Intentional misappropriation of client funds almost always results in disbarment. Even negligent mishandling, such as sloppy recordkeeping that leads to accidental shortfalls, can result in suspension or other sanctions. The State Bar does not need to prove the attorney intended to steal; the failure to safeguard client money is enough to trigger discipline. Attorneys must respond promptly to any State Bar inquiry about trust account records, and stonewalling an investigation typically makes the discipline more severe.

The Client Security Fund

When an attorney’s dishonesty causes a client to lose money, the State Bar’s Client Security Fund may reimburse the victim. The fund covers losses from theft, embezzlement, failure to refund unearned fees, and other acts of intentional dishonesty, with these limits:

Maximum reimbursement of $100,000 per attorney, for losses occurring on or after January 1, 2009.
Applications must be submitted within four years of when the client discovered or should have discovered the loss.
The fund does not cover interest, consequential losses, or losses already covered by insurance or bonds.

⁶

An applicant does not need a lawyer to file a claim, and the application is submitted under penalty of perjury.

Protecting the Account From Wire Fraud

Rule 1.15 does not include a specific cybersecurity provision, but California attorneys are bound by broader duties of competence and confidentiality that extend to protecting trust account information. ABA Formal Opinion 483 states that attorneys must take reasonable steps to monitor for data breaches, stop any breach in progress, and notify affected clients when a breach involves or is substantially likely to involve material client information. The opinion applies a reasonable-efforts standard rather than requiring impenetrable systems.

Practical safeguards include enabling multi-factor authentication on all trust accounts, verifying wire instructions through a separate communication channel before transferring funds, and maintaining current antivirus and firewall protections on any device used to access trust account systems. An attorney who loses client funds to a phishing attack preventable with basic safeguards will have difficulty arguing the duty of competence was met.

1
The State Bar of California. California Rules of Professional Conduct Rule 1.15 – Safekeeping Funds and Property of Clients and Other Persons
2
California Code. California Business and Professions Code 6211
3
California State Controllers Office. Notice to Holders – SB 134 IOLTA
4
The State Bar of California. Client Trust Account Protection Program
5
The State Bar of California. CTAPP FAQs
6
The State Bar of California. Client Security Fund Rules