Bank signatory controls determine who can authorize payments and move organizational funds. Weak controls can create fraud risk, delays, or dependence on one person. NGOs should align bank access with formal authority, staffing changes and donor requirements rather than allowing old signatories to remain indefinitely.
Separate banking access from general seniority
A senior job title does not automatically mean unrestricted banking authority. Define which roles can initiate, review and approve payments, and connect those permissions to the delegation-of-authority matrix. High-value transactions may require dual authorization or a second signatory.
Review who can do what
Online banking systems often allow different permissions such as viewing balances, creating beneficiaries, preparing transfers and authorizing payments. Use the minimum access needed. A staff member who prepares payments may not need authority to approve them.
Control beneficiary changes
New suppliers and changes to bank details can be high-risk. Where possible, require independent verification and separate approval before a beneficiary is added or modified. Keep evidence of significant changes.
Remove access immediately after staff changes
When a signatory leaves, changes role or loses authorization, update the bank and online banking access promptly. Do not wait for the next annual review. Include banking access in HR exit and role-change checklists.
Reconcile the bank independently
Bank reconciliation provides an additional check on payment activity. Where practical, someone who did not authorize the transactions should review the reconciliation. See grant bank reconciliation for a practical workflow.
Useful controls to document
- Authorized signatories.
- Transaction limits.
- Dual-approval thresholds.
- Who can create beneficiaries.
- Who can prepare payments.
- Who can authorize payments.
- Emergency or backup signatory process.
- Access review frequency.
Example
An NGO requires two approvals for payments above a defined value. One finance officer prepares the payment, the finance manager reviews it and an authorized director provides the second bank approval. When the director leaves, access is removed before the final employment date and a formally approved replacement is added.
Test access periodically
At least periodically, compare active bank users with the approved signatory list. Look for former employees, unnecessary administrator rights or users whose permissions exceed policy. This simple review can identify gaps before a transaction creates a problem.
What to do next
Use the Funding Readiness Self-Check to identify financial-control gaps that may weaken donor readiness.
For practical grant opportunities and funding intelligence, subscribe to Africads Grant News.
Document emergency access
Banking continuity matters when an approver is traveling, ill or leaves unexpectedly. Define how temporary or backup authorization works, who can activate it and what limits apply. Emergency access should be documented and time-bound rather than handled through shared credentials or informal password sharing.
Review unusual payment patterns
Signatory controls should also support oversight. Periodically review high-value transfers, repeated beneficiary changes, unusual payment times and transactions that required overrides. These patterns may be legitimate, but they deserve explanation and a clear audit trail.
At year-end or after major staffing changes, compare bank mandates, online banking users and the current authority matrix. Any mismatch should be corrected promptly.
Include bank access in audit preparation
Before an audit or major donor review, confirm that the current signatory list, banking mandates and online-user permissions are available and agree with policy. This helps the organization demonstrate that payment authority is controlled and current rather than reconstructed only after questions arise.
Also document any temporary or emergency signatory arrangements that were active during the grant period. Short-term arrangements can be legitimate, but they should still have clear approval and an end date.
Keep evidence of each periodic access review with the grant or finance-control file so later reviewers can see that banking authority was actively monitored.
Keep evidence of each periodic access review with the grant or finance-control file so later reviewers can see that banking authority was actively monitored.
Frequently asked questions
What should an NGO verify first when using bank signatory controls?
Start with the authoritative records, donor requirements, responsible owner, and the specific risk the process is intended to control.
Who should own the process?
Assign one accountable owner, then involve finance, program, MEL, operations, compliance, or leadership where their evidence or approval is required.
How often should it be reviewed?
Review it at the frequency that matches the risk and whenever a material change in scope, staffing, funding, partners, or donor requirements occurs.
What is a common failure point?
Weak documentation, unclear approval authority, inconsistent follow-up, and controls that exist on paper but are not used are common weaknesses.
How should leadership use the result?
Use it to decide whether to continue, correct, escalate, hold, or redesign, and preserve the decision in the authoritative grant record.
Conclusion
Grant Bank Signatory Controls should make grant operations easier to control and explain. Your organization should keep the evidence current, assign clear ownership, and act on material exceptions before they become donor or delivery problems.
