How “Routine” Audits Ended in PCAOB Sanctions

The audit report looked clean. Too clean. That is usually how these stories start. Not with a smoking gun, but with paperwork that felt finished before the work really was. Over the past few weeks, the PCAOB has dropped a cluster of enforcement orders that read less like random one-offs and more like a pattern forming in real time. Different firms. Different states. Same theme. Corners cut, controls skipped, and filings treated like an afterthought. Let’s rewind, take stock of where things stand now, and talk about where this heads next.

Shortcuts Add Up

The earliest chapter is familiar. Smaller firms are chasing public company work. Lean teams. Tight deadlines. Lots of trust is placed on partners to “handle it.” In the Crofoot and Fruci case, that trust went too far. Between 2022 and 2023, audit reports were issued on four public companies without adequate procedures on material accounts. In some cases, there were no procedures at all. Engagement quality reviews were skipped. Documentation was finalized late or quietly changed after reports went out the door. That is not aggressive auditing. That is playing with matches near gasoline.

Then there is the Form AP saga. Beckles & Co. did the audits, signed the reports, and simply forgot to tell the PCAOB who actually worked on them. Nine Form AP filings. All late. All fixed only after the regulator came knocking. Filing deadlines are not vibes. They are rules. TPS Thayer’s situation pushed the issue offshore. A China-based firm did nearly half the audit work on several engagements without being registered. That participation was not properly supervised, not disclosed to audit committees, and not reported on Form AP. When 49% of your audit hours come from an unregistered firm, that is not a rounding error. That is the audit. Each case is different. The thread tying them together is discipline. Or the lack of it.

What the PCAOB Is Doing Now

Fast forward to December 2025, and the tone is blunt. The PCAOB barred an audit partner for three years. It fined firms from $35,000 to $100,000. It called out specific standards by name. AS 1215. AS 1220. Rule 3211. This was not vague scolding. This was chapter and verse. What stands out is how much emphasis the Board placed on quality control systems, not just individual mistakes. In Fruci’s case, weak QC allowed backdating and post-issuance edits. In TPS Thayer’s case, QC policies never addressed how to use other firms in a substantial role. In Beckles’ case, compliance relied on memory instead of process.

The PCAOB also made one thing crystal clear. Cooperation matters. Fruci avoided steeper penalties due to what the Board called extraordinary cooperation. That is the difference between a bad day and a career-defining one. If you are wondering whether this is a crackdown or just enforcement catching up, the answer is probably both.

What This Means for Audit Professionals

• Evidence is the whole point: Signing an opinion without performing procedures is not judgment; it is guesswork. If the work is not done, the opinion does not stand. Full stop.
• EQRs are a gate, not a courtesy: No concurring approval means no release. If your process lets reports slip out early, that is a systems failure, not a paperwork miss.
• Audit files are not living documents forever: AS 1215 deadlines exist to protect integrity. Locking the file late or tweaking workpapers after issuance is how small problems turn into enforcement orders.
• Form AP is disclosure, not clerical work: The PCAOB, audit committees, and investors want to know who actually did the audit. Miss the 35-day deadline once, maybe you get a grace. Make it a habit, you get fined.

If another firm is doing 20% or more of the work, registration, oversight, and disclosure are mandatory. If you cannot supervise them, you should not be using them. In plain terms, this is blocking and tackling. Do the work. Review the work. Lock the file. File the form. None of it is flashy, but it is how firms stay out of trouble and partners keep their licenses intact.

What Comes Next

Do not expect this to slow down. The PCAOB has been clear that audit quality is back at the top of its list. Smaller firms with public clients are squarely in the crosshairs, not because of size, but because controls tend to loosen when resources are stretched thin. The Board is also laser-focused on transparency. Who worked on the audit? Where the work was done. When the file was finalized. Technology will not save anyone here. Fancy tools do not replace supervision. Checklists do not replace judgment. And hoping nobody notices is not a strategy.

If anything, expect more enforcement tied to documentation timing, offshore participation, and engagement reviews. The low hanging fruit is gone. Now inspectors are reading the fine print. One old accounting saying fits perfectly. Trust, but verify. The PCAOB is doing the verifying now. For firms and partners, the message is simple. Do the work. Lock the file. File the form. If that sounds boring, good. Boring audits are usually the ones that hold up when someone looks under the hood.