Michigan Man Faces Felony for Pretending to Be a CPA

It’s one thing to forget your license renewal notice. It’s another to Photoshop one. In a small Michigan town better known for quiet weekends than felony arraignments, 30-year-old Joseph Vanator of Olivet allegedly did just that, cooking up a counterfeit “Certificate to Practice Public Accounting” and hanging it where clients could see. Not quite what the AICPA means by “display professionalism.”

Trust in the Air

For decades, accounting credentials were as simple as a framed certificate and a handshake. That symbol, the tidy script, the embossed seal, told clients they were in capable hands. On October 24, 2025, that illusion cracked a little. Michigan Attorney General Dana Nessel charged Vanator with one count of accounting violations, a felony carrying up to five years in prison. He was working at Vanators & Associates in Eaton County when state regulators say he whipped up a fake license that mimicked the one issued by Michigan’s Department of Licensing and Regulatory Affairs (LARA). The case was sent from LARA to the AG’s office for prosecution. “Issuing certified public accountant licenses helps ensure residents can trust that those providing financial services have the necessary training and expertise,” Nessel said. Translation: don’t fake it till you make it. That framed paper, meant to signal integrity, had turned into a warning label.

Small Gaps, Big Headache

The profession runs on trust; clients trust firms, firms trust credentials, and credentials trust systems that aren’t always airtight. Most states have separate verification portals, some clunky, some hidden behind paywalls. Firms still rely on PDFs, onboarding checklists, and someone saying, “Yeah, I checked LARA last year.” That’s like saying you changed the oil last tax season and calling it maintenance. You can picture how it happens. It’s busy season. Deadlines blur. Someone joins with an impressive résumé and a shiny certificate. Nobody questions it because who wants to slow the train? Then one day, the phone rings from the AG’s office. Yikes.  As the saying goes, “Trust, but verify.” In accounting, that should be stapled to every monitor.

Fun fact: the average state board updates CPA records daily. The problem? Most firms only check once, when someone’s hired. After that, it’s out of sight, out of compliance.

Click to Verify, Not Hope and Pray

Here’s the reality check. Fraud like this isn’t new, but it’s avoidable. The fix isn’t fancy; it’s smarter plumbing. Imagine if every firm could run an instant license check tied directly to each state’s database. No screenshots. No PDFs. Just a clean, verifiable API feed that says “Active” or “Nope.” That’s the future. Picture this: QR codes on every real CPA certificate that link to a live state record. Clients scan, confirm, and move on. Fake ones? Busted instantly.  Continuous monitoring could flag suspensions or lapsed CPE in real time. You know, the kind of automation firms already use to track timesheets and expenses. If we can chase down missing receipts from 2019, we can verify a license in 2025. A question for every managing partner: if your firm had to prove today that every CPA on payroll is properly licensed, how long would it take? If you just winced, there’s your sign.

What should regulators do now?

• AICPA: The Institute could lead the charge with a model “License Assurance Framework” that’s practical, not preachy. Require pre-hire identity proofing, direct state verification before anyone touches client work, and quarterly rechecks. Add a short “trust mark” certification that firms can display if they follow the protocol. It’s not glamorous, but neither is audit documentation, and that’s the point.
• State Boards: Let’s be real, half the country’s verification systems look like they were built during the Windows XP era. Modernize them. Provide open, free data endpoints with uniform fields: name, license number, expiration, and disciplinary flags. Slap a QR code on the physical certificate that leads to the state’s site. No more fakes that “look official” after a few hours in Photoshop.
• IRS:  Tax pros claiming CPA status in PTIN registration or e-file systems should face automatic license checks. Flip the switch every quarter. If a license goes inactive, the system should flag it before returns go out. The IRS already matches billions in income data, verifying a few thousand licenses is child’s play.

And while we’re at it, the three bodies should share a unified reporting portal for suspected credential fraud, offering safe harbor to firms that report in good faith. Think of it as the “tip line for fakes,” but with CPE credit for doing the right thing. (Okay, maybe not that last part, but a CPA can dream.)

The Takeaway

Let’s keep perspective, Vanator’s case is still an allegation, and the courts will decide. But the lesson isn’t about one person; it’s about the hole in the process.  In an industry built on verification, it’s ironic how rarely we verify our own. We obsess over depreciation schedules and revenue recognition minutiae, yet miss the simplest internal control: confirming someone’s credentials. That’s like auditing inventory and forgetting to count the shelves. Clients don’t expect perfection; they expect honesty and competence backed by real oversight. The AICPA and state boards don’t need another task force; they need a cleaner checklist. The IRS doesn’t need a new division, just a smarter connection to what already exists. At the end of the day, integrity is not the paper in the frame. It’s the system behind it.

So, next time someone flashes a certificate, maybe take a minute to scan the QR, check the state site, or ask one more question. In this business, a little skepticism is a professional asset. As every auditor knows: trust is good, but evidence is better.