The Missing Receipt
Paying for goods and services never verified as received is, by federal definition, an improper payment. Yet most grant-funded organizations have no reliable system to document receipt. This guide explains the six 2 CFR 200 provisions that require proof of receipt — and how to close the gap before your next audit.
"Procurement is the single largest area of questioned costs in federal grants. Inadequate receiving documentation sits at the center of the problem."
— National Grants Management Association
Download Your Free Guide
Get instant access to the proof of receipt guide
The Cost of a Missing Receipt
Real enforcement actions from inadequate receiving documentation
$3.6M
HHS OIG finding at a California nonprofit — costs disallowed because the organization did not maintain adequate documentation to support costs claimed
$52.5M
In salary costs across 11 hospitals found unallowable because they "lacked supporting documentation" per HHS OIG
$7.6M
Settlement paid by Cleveland Clinic Foundation, plus Specific Award Conditions imposed on all grants for one year
HHS OIG's Fall 2024 semiannual report documented $7+ billion in expected recoveries and 1,548 enforcement actions in a single six-month period — more than double the prior period.
What's Inside the Guide
A complete framework for understanding and closing the receipt documentation gap
The Six Interlocking Provisions
No single line in 2 CFR 200 says "maintain receiving reports." The obligation emerges from six cross-referenced provisions — and this guide maps every one of them.
Three-Way Match Explained
Why a vendor invoice is the vendor's claim, not your verification — and how the three-way match (PO, receiving report, invoice) protects you under §200.501(h).
Services Documentation
The thorniest compliance challenge: five specific methods for documenting receipt of consulting, IT support, training, and other intangible services.
Small Org Compliance Gaps
How to implement compensating controls when you don't have enough staff to segregate ordering, receiving, and payment duties — as required by the GAO Green Book.
Auditor Red Flags
The exact warning signs auditors look for during procurement testing — including invoices used as sole proof of receipt and retroactively created documentation.
Technology Gap Analysis
Why 68% of organizations still manually process invoices, what that costs in audit exposure, and what a modern receiving workflow looks like for grant recipients.
Why "I Have the Invoice" Is Not Enough
Under §200.501(h), auditors test procurement, receipt, and payment as three separate compliance elements
Purchase Order
Authorization to buy. Created before the transaction by the person with budget authority.
Receiving Report
Independent confirmation that goods or services were actually received. Created by someone other than the person who ordered. This is the missing link.
Vendor Invoice
The vendor's claim that work was performed. Not your verification. Without steps 1 and 2, this alone is not adequate documentation.
The test auditors apply: "Three years from now, can I show what happened?" — DOJ/OJP Cost Documentation Guide Sheet. Receiving documentation must be contemporaneous — created at or near the time of actual receipt, not reconstructed weeks later.
Who This Guide Is For
Grant Managers
Program staff at federally funded nonprofits who oversee vendor contracts and need to ensure procurement is audit-ready from purchase through payment.
Finance Directors
CFOs and controllers responsible for maintaining internal controls over expenditures charged to federal awards under 2 CFR 200.303.
Compliance Officers
Internal auditors and compliance staff preparing for Single Audits who want to close documentation gaps before an external auditor finds them.