ATM Surprise Balance Audit
Use this unannounced ATM balance audit template to verify cash on hand against system totals, document variances, and confirm segregation of duties during the count.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Banking And Financial Services · Retail Cash Operations · Atm Service Providers · Credit Unions
Overview
This template is for an unannounced ATM balance audit that verifies cash on hand against the system balance at a specific machine. It walks the inspector through setup, access control, physical cash counting by denomination, reconciliation, variance review, and sign-off so the result is defensible and easy to trace.
Use it when you need to confirm that replenishment, cash handling, and system records agree without giving the replenisher advance notice. It is especially useful for routine control testing, variance investigations, and segregation-of-duties checks where the audit trail matters as much as the count itself.
Do not use it as a replacement for scheduled maintenance, service diagnostics, or a full fraud investigation. If the ATM is out of service, the cassette configuration is unknown, or the site cannot support dual custody, pause the audit and document the exception rather than forcing a partial count. The template is built to surface concrete issues such as missing access control, incorrect cassette expectations, uncounted reject bins, and unresolved variances that need escalation.
Standards & compliance context
- This template supports segregation of duties, dual custody, and documented reconciliation controls commonly expected in financial compliance programs and internal audit frameworks.
- If your organization maps cash controls to ISO 9001:2015 or similar QMS practices, the template provides evidence of monitored process performance and non-conformance follow-up.
- Where physical security or site access is governed by internal policy, the access-control section helps document controlled entry and any exceptions for review.
- If the audit is part of a regulated cash-handling environment, align corrective-action handling with your organization’s formal incident, loss-prevention, or fraud-response procedure.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Audit Setup and Unannounced Verification
This section proves the audit was truly surprise-based and tied to the correct ATM before any cash handling begins.
-
ATM identifier matches the audit assignment
Verify the ATM ID, location, and terminal number match the audit work order or assignment.
-
Audit was initiated without prior notice to the replenisher
Confirm this is an unannounced balance audit and that the replenisher was not given advance notice.
-
Audit date and start time recorded
Record the date and time the audit began.
-
Audit scope documented
Document whether the audit covers all cassettes, reject bin, deposit module, and any suspense or overflow cash areas.
-
Two-person audit team present
Confirm at least two authorized staff are present for the count and reconciliation.
Access Control and Segregation of Duties
This section documents who had access and whether the control environment prevented one person from both loading and balancing cash.
-
Balancer and replenisher are different individuals
Confirm the person performing the balance verification is not the same person who replenished the ATM.
-
Dual custody maintained during ATM access
Verify the ATM is opened and cash is handled under dual custody or equivalent controlled procedure.
-
Keys, codes, or access credentials controlled
Confirm access devices, keys, PINs, or codes are controlled and not shared improperly.
-
Area secured during audit
Verify the ATM area is controlled to prevent unauthorized access during the count.
-
Any access exceptions documented
Record any deviation from normal access control procedures.
Physical Cash Count and Denomination Verification
This section captures the actual cash count in a way that can be checked against cassette configuration and bin contents.
-
Cash counted by denomination
Record the count of each denomination found in the ATM.
-
Cassette count matches expected configuration
Verify the number of cassettes present matches the machine configuration and audit scope.
-
Reject bin or exception bin counted separately
Count and record any notes, damaged bills, or rejected items separately from dispense cash.
-
Cash condition acceptable
Confirm counted cash is not excessively damaged, mutilated, or otherwise unfit for normal processing.
-
Physical count total recorded
Enter the total physical cash counted during the audit.
System Reconciliation and Variance Review
This section turns the count into a control result by comparing physical cash to the system balance and recording any difference.
-
System balance captured before reconciliation
Record the ATM host or system balance used for reconciliation.
-
Physical count reconciles to system balance
Confirm the physical cash total matches the system balance within approved tolerance.
-
Variance amount recorded
If there is a difference, record the overage or shortage amount.
-
Variance explanation documented
Provide a clear explanation for any discrepancy, including counting error, cassette misload, system timing issue, or suspected loss.
-
Escalation initiated for unresolved variance
Confirm unresolved discrepancies were escalated per procedure to operations, security, or finance leadership.
Corrective Action, Safety, and Sign-Off
This section closes the loop by assigning follow-up, noting any immediate hazard, and recording accountability for the audit outcome.
-
Corrective actions assigned for deficiencies
Document any corrective actions, owners, and due dates for identified deficiencies or non-conformances.
-
Work area free of immediate safety hazards
Confirm the inspection area is free of immediate hazards that could affect staff safety during the audit, such as trip hazards, blocked egress, or unsafe access conditions.
-
Inspector signature
Inspector attestation that the audit was completed accurately and in accordance with procedure.
How to use this template
- 1. Confirm the ATM identifier, audit scope, and start time, then begin the audit without notifying the replenisher in advance.
- 2. Assign two different people to the balancer and replenisher roles and verify that dual custody is maintained before any access is opened.
- 3. Record the system balance, open the machine under controlled access, and count all cash by denomination while keeping reject or exception bins separate.
- 4. Compare the physical total to the system balance, document any variance amount, and capture a clear explanation if the numbers do not match.
- 5. Assign corrective actions for any deficiency, escalate unresolved variances through the required control channel, and complete the inspector sign-off.
Best practices
- Record the ATM ID, cassette configuration, and audit start time before opening the machine so the count can be traced to one specific event.
- Keep the balancer and replenisher as separate people for the entire audit, including access, counting, and sign-off.
- Count each denomination separately and write the subtotal immediately instead of relying on memory at the end of the walk-through.
- Count reject bins, exception bins, and any loose cash separately so they do not distort the main reconciliation.
- Photograph or otherwise preserve evidence of any variance, access exception, or damaged cash condition at the time it is found.
- Treat unresolved variances as a control issue, not just a math issue, and escalate them through the documented review path.
- Document any temporary access exception, such as a missing key holder or site restriction, so the audit result is not mistaken for a clean pass.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What does this ATM Surprise Balance Audit template cover?
It covers the full unannounced balance check for an ATM, from confirming the machine ID and audit start time to counting cash by denomination and reconciling the physical total to the system balance. The template also documents dual custody, access control, variance explanations, and corrective actions. It is designed to produce a clear audit trail when cash on hand does not match the recorded total.
When should this audit be used?
Use it when you need an independent, surprise verification of ATM cash integrity, such as during routine controls, after a variance trend, or as part of a fraud-prevention program. It is also useful after replenishment activity when you want to confirm that cash handling and system postings align. It is not a substitute for scheduled maintenance or a full security review of the ATM environment.
Who should run the audit?
A two-person team should run it, with one person acting as the balancer and a different person acting as the replenisher or access holder. That separation supports segregation of duties and reduces the risk of self-checking. If your organization uses internal audit, cash operations, or field service teams, assign the roles so the people handling the count are not the same people responsible for replenishment.
How often should an ATM balance audit be performed?
The cadence depends on your risk level, transaction volume, and prior variance history. Many teams use it on a surprise basis within a recurring control program rather than on a fixed public schedule. If you are seeing repeated unexplained variances, increase the frequency until the root cause is identified and corrected.
What regulations or standards does this relate to?
This template supports internal control and audit practices rather than a single industry law. It aligns well with segregation-of-duties expectations, documented reconciliation controls, and evidence-based corrective action used in compliance programs and financial operations. If your organization also has physical security or workplace safety requirements, you can extend the template to reflect those policies.
What are the most common mistakes when using this template?
Common mistakes include announcing the audit in advance, letting the same person replenish and balance the ATM, and recording only a yes/no result instead of the actual cash total and variance. Another frequent issue is failing to count reject or exception bins separately, which can make the reconciliation inaccurate. Teams also sometimes skip documenting the explanation and escalation path when a variance remains unresolved.
Can this template be customized for different ATM models or cash cassettes?
Yes. You can add fields for cassette count, denomination mix, reject bin handling, access method, and model-specific notes so the audit matches your equipment. If your fleet includes different ATM configurations, create a version that lists the expected cassette layout and any model-specific exceptions. That makes the count faster and reduces ambiguity during the walk-through.
How does this fit with other controls like replenishment logs or incident reports?
This audit works best when linked to replenishment logs, cash settlement records, and incident or exception reports. The audit captures the independent verification, while the other records explain who loaded the cash, when it was loaded, and whether any access issues occurred. Connecting those records helps you trace a variance from discovery to resolution without relying on memory.
What should I do if the physical count does not match the system balance?
Record the variance amount immediately, document any plausible explanation, and escalate unresolved differences according to your cash-control procedure. Do not adjust the result without a review trail that explains the discrepancy and who approved the next step. If the variance suggests a process failure or access issue, preserve the evidence and open a corrective action item.
Related templates
Go deeper on the topic
-
Predictive scheduling laws — also called fair workweek laws or secure scheduling — require employers in covered industries to publish employee schedules...
-
Overtime calculation is the process of applying federal, state, local, and contractual rules to hours worked to determine the correct pay — including...
-
A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
-
Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
-
See how bank branch managers use MangoApps scheduling to fill shifts, communicate policy updates, and eliminate last-minute coverage chaos.
-
See how connected 1:1 tracking, employee audit history, and LMS completion records turn scattered processes into verifiable workforce documentation.
-
See how customers use MangoApps Projects Module to collaborate, track progress, and share knowledge across teams.
-
MangoApps in Okta Integration Network automates user provisioning, SSO, and access management for stronger security and less admin work.
Ready to use this template?
Get started with MangoApps and use ATM Surprise Balance Audit with your team — pricing built for small business.