How Arizona CPAs Actually Get in Trouble

Lessons From the Arizona State Board of Accountancy

Most CPAs do not begin their careers expecting to face professional discipline.

They pass the CPA examination. They satisfy experience requirements. They complete continuing professional education. They work hard to serve clients and employers.

Then something goes wrong.

Sometimes it involves a major ethical failure.

Sometimes it involves poor professional judgment.

Sometimes it is much less dramatic: deficient CPE records, failure to respond to the Arizona State Board of Accountancy, a peer-review problem, failure to follow a professional standard, mishandling client records, or inappropriate use of the CPA designation.

The important lesson for Arizona CPAs is this:

You do not have to commit a spectacular fraud to create a licensing problem.

The Arizona State Board of Accountancy has a broad mandate to protect the public from unlawful, incompetent, unqualified, or unprofessional CPAs. It does that through certification and regulation, monitoring CPE and peer-review compliance, and investigating complaints.

Understanding how CPAs actually get into trouble can therefore be considerably more useful than another abstract discussion of professional ethics.

What Can the Arizona Board Investigate?

The Arizona State Board of Accountancy identifies several categories of conduct within its investigative jurisdiction.

These include:

• Independence, integrity, and objectivity

• Competence and adherence to technical standards

• Confidentiality and disposition of records

• Violations involving accountancy rules, fiduciary duty, or trust

• Advertising and solicitation

• Form of practice and use of the CPA designation

• Ethical or moral violations

• Felony convictions and other crimes reasonably related to accounting practice

That list tells Arizona CPAs something important.

Professional discipline is not exclusively about whether the CPA stole money.

The Board is also concerned about how the CPA practices accounting.

1. CPE: One of the Simplest Ways to Get Into Trouble

Let's start with something that should be completely preventable.

Continuing Professional Education.

Arizona requires active CPAs to satisfy continuing professional education requirements.

But completing CPE is only part of the obligation.

The CPA also needs to be able to prove it.

The Arizona Board specifically warns that CPE deficiencies discovered during an audit can result in discipline ranging from administrative penalties to suspension until the deficiency is cured. Arizona law provides for suspension when a registrant fails to demonstrate compliance with the applicable CPE requirements.

That creates a straightforward internal-control lesson for CPAs:

Your CPE documentation is your evidence.

If you cannot prove you completed the required CPE, telling the Board that you remember attending the course is not much of a control.

Maintain:

• CPE certificates

• Dates

• Course titles

• Subject classifications

• Number of credits

• Ethics credits

• Provider information

Think like an auditor.

No evidence = a problem.

2. Ignoring the Board Can Make the Situation Worse

Another surprisingly basic problem is failing to respond.

The Board's CPE guidance notes that, when requested, registrants must provide written responses to Board communications within the required timeframe.

Imagine the progression.

The CPA has a relatively manageable CPE documentation problem.

The Board sends a request.

The CPA gets busy.

The CPA doesn't respond.

Another communication arrives.

The CPA avoids that one too.

The original problem has now been joined by a second problem: failure to cooperate with the regulator.

This is an important ethical lesson far beyond Arizona accountancy regulation.

When a regulator contacts you:

Deal with it.

Do not assume silence makes the problem disappear.

3. Competence Is an Ethical Requirement

Professional ethics is sometimes treated as a discussion about honesty.

Honesty is obviously essential.

But professional competence is also an ethical obligation.

The Arizona Board expressly includes competence and adherence to technical standards among the matters within its investigative jurisdiction.

That means the question is not merely:

“Was the CPA trying to do the right thing?”

It can also be:

“Was the CPA competent to perform the engagement?”

Consider a CPA accepting an engagement involving a highly specialized area in which the individual has little experience.

Maybe it involves:

• Governmental accounting

• Employee benefit plans

• Broker-dealers

• Complex tax matters

• SOC examinations

• Digital assets

• Specialized financial reporting

• PCAOB auditing

There is nothing unethical about learning something new.

The ethical problem arises when the CPA accepts professional responsibility without obtaining the knowledge, expertise, supervision, consultation, or assistance necessary to perform competently.

4. Professional Standards Are Not Suggestions

Arizona's regulatory framework incorporates professional conduct and technical standards into the expectations imposed on registrants. The Board's administrative rules specifically address professional conduct, competence, technical standards, responsibilities, practices, and records disposition.

The Board has also explained that registrants performing professional services may be required to comply with standards promulgated by organizations such as:

• FASB

• GASB

• PCAOB

• Auditing Standards Board

• Accounting and Review Services Committee

• Other applicable professional standard setters

That means poor-quality professional work can become more than a client-service issue.

It can become a regulatory issue.

A CPA performing an audit cannot simply say:

“This is how our firm has always done it.”

The question is:

Did the work comply with the applicable professional standards?

5. Independence, Integrity, and Objectivity

The Board specifically identifies independence, integrity, and objectivity as a complaint category.

These concepts are fundamental to the profession.

But threats are not always obvious.

A CPA can face pressure because of:

• A significant client relationship

• Fear of losing an engagement

• Personal relationships

• Financial interests

• Familiarity with management

• Career opportunities

• Management intimidation

• Pressure to meet a reporting deadline

Consider an audit client that represents a substantial percentage of a small CPA firm's annual revenue.

Management aggressively disputes an audit adjustment.

The client then says:

“If you insist on this, we'll find another CPA firm next year.”

At that moment, independence stops being a chapter in an ethics textbook.

It becomes a business decision.

That is when professional ethics actually matters.

6. “The Client Wanted It That Way” Is Not a Defense

CPAs sometimes find themselves caught between professional requirements and client demands.

A client may want:

• An aggressive accounting position

• A questionable tax treatment

• A misleading presentation

• An unsupported estimate

• A disclosure removed

• An audit adjustment waived

The CPA's responsibility is not to make the client happy at any cost.

The CPA is providing a professional service governed by professional standards.

A client cannot authorize the CPA to violate those standards.

The more powerful the client, the more important that principle becomes.

7. Peer Review Can Expose Problems the Client Never Sees

Peer review is another important Arizona compliance issue.

Arizona requires firms performing attest or compilation services to comply with applicable peer-review requirements.

Peer review can identify weaknesses involving:

• Engagement performance

• Documentation

• Quality management

• Technical compliance

• Reporting

• Supervision

• Firm methodology

This matters because a client may be perfectly satisfied with a CPA firm's work.

That does not establish that the work satisfies professional standards.

The client may not know what the standards require.

Peer review provides another set of professional eyes.

8. Arizona Increased Its Visibility Into Peer Review

This issue became even more significant in 2025.

Effective May 7, 2025, Arizona updated its peer-review rules to allow the Board to see additional objective information regarding registrant firms' progress in the peer-review program. The changes also updated incorporation of the AICPA peer-review standards and Code of Professional Conduct.

That is an important regulatory development.

A CPA firm should not view peer review as an isolated administrative exercise that occurs every few years.

The results—and the firm's progress through the process—can have regulatory significance.

For firm leadership, that means peer-review deficiencies deserve:

• Root-cause analysis

• Corrective action

• Accountability

• Follow-up

• Documentation

In other words:

Treat peer-review findings like audit findings.

9. Client Confidentiality Can Create Serious Problems

The Board also identifies confidentiality and records disposition among the areas within its jurisdiction.

CPAs routinely possess highly sensitive information:

• Tax returns

• Payroll information

• Bank records

• Financial statements

• Social Security numbers

• Business plans

• Litigation information

• Employee information

• Fraud allegations

The CPA's ethical responsibility does not disappear because sharing information has become technologically easy.

Email, cloud storage, file-sharing platforms, mobile devices, and now generative AI create new ways to mishandle confidential information.

Before placing client information into an AI system, for example, a CPA should understand the firm's policies, confidentiality obligations, data-security requirements, contractual restrictions, and the AI platform being used.

Convenience does not override confidentiality.

10. Client Records Can Become an Ethical Issue

A dispute over fees can quickly turn into a dispute over records.

The Arizona administrative rules contain specific provisions addressing records disposition.

CPAs therefore need to understand the distinction among:

• Client-provided records

• CPA-prepared records

• Workpapers

• Supporting documentation

• Records subject to retention requirements

When the professional relationship deteriorates, emotion can interfere with judgment.

That is precisely when the CPA should rely on established firm policy and applicable professional and regulatory requirements.

11. Do Not Misuse the CPA Designation

Arizona is a title state, meaning it regulates CPAs and use of the CPA designation.

The Board specifically states that holding oneself out as a CPA without being entitled to do so violates Arizona law.

That makes seemingly simple matters important:

• Business cards

• Websites

• Email signatures

• Advertising

• Firm names

• Social-media profiles

The letters CPA have regulatory meaning.

They are not simply a marketing credential.

12. Fraud, Dishonesty, and Breach of Trust Are Obviously Serious

Then we reach the more serious end of the spectrum.

The Board's jurisdiction extends to matters involving fiduciary duty, trust, ethical violations, and certain criminal conduct.

For a CPA, dishonesty can be particularly damaging because the profession itself depends upon trust.

A CPA may have access to:

• Cash

• Tax payments

• Client accounts

• Payroll

• Investment information

• Confidential records

• Financial reporting systems

That access creates opportunity.

And opportunity is one component of the classic Fraud Triangle.

A professional credential does not eliminate fraud risk.

Sometimes it increases the opportunity because people place greater trust in the credential holder.

13. Ethical Problems Frequently Begin Small

One of the most useful lessons for CPAs is that serious ethical problems do not always begin with a major decision.

They can begin with:

“Just do it this once.”

Then:

“We've done it before.”

Then:

“Everybody knows about it.”

Then:

“This is simply how we do business.”

The ethical boundary moves gradually.

That is why organizational culture matters.

The greatest protection is not simply having ethical employees.

It is creating an environment where employees can say:

No.

14. Your Documentation May Eventually Speak for You

When professional work is challenged months or years later, memories become unreliable.

People leave.

Clients remember events differently.

The engagement file remains.

That is why documentation is so important.

A CPA should ask:

If the Arizona Board reviewed this file two years from now, would the documentation explain what I did, why I did it, what evidence I considered, and how I reached my conclusion?

That is a powerful quality-control question.

Documentation does not turn poor professional judgment into good judgment.

But good professional judgment without adequate documentation can be difficult to demonstrate later.

15. Complaints Can Become Public

Arizona's process also contains an important reputational dimension.

The Board explains that complaints and investigations initially receive statutory confidentiality protections, but once an investigation is opened, the existence and nature of the complaint can become public. If discipline ultimately results, that discipline is a public record.

The Board's CPA Directory provides current and historical disciplinary information dating back to 2001.

That means professional discipline can affect more than a license.

It can affect:

• Reputation

• Client relationships

• Employment

• Firm relationships

• Future engagements

• Public trust

The Internet gives disciplinary history a long memory.

What Can Happen to an Arizona CPA?

The Arizona Board identifies a range of potential outcomes when an investigation establishes violations.

Depending upon the circumstances, discipline may include:

• Probation

• Suspension

• Relinquishment

• Revocation

• Restitution

• Administrative penalties

• Additional CPE

• Reimbursement of investigative costs

• Other corrective sanctions

Not every complaint results in discipline.

The Board can dismiss a complaint, and it may also issue a confidential, non-disciplinary administrative letter of concern.

That distinction is important.

A complaint is an allegation.

It is not proof that the CPA did something wrong.

A Practical Ethics Checklist for Arizona CPAs

Before accepting or completing significant professional work, ask yourself:

• Am I competent to perform this engagement?

• Do I understand the applicable professional standards?

• Is my independence or objectivity threatened?

• Have I protected confidential information?

• Is my documentation sufficient?

• Have I satisfied my CPE requirements and retained evidence?

• Is my firm complying with peer-review requirements?

• Am I using the CPA designation appropriately?

• Have I responded to regulatory communications?

• Would I be comfortable explaining this decision to the Arizona State Board of Accountancy?

That final question is worth remembering.

Ethics Is Really About Decisions

Ethics CPE sometimes focuses too heavily on memorizing rules.

Rules matter.

But ethical failures happen when people make decisions.

A CPA is presented with:

Pressure

• 
  

Opportunity

• 
  

Uncertainty

• 
  

A decision

The professional code provides boundaries.

Technical standards provide requirements.

Internal controls provide safeguards.

But ultimately, the CPA must choose what to do.

That is why ethics training should focus on situations where the answer is uncomfortable.

The Most Important Lesson: Protect the Credential

The CPA designation has value because other people trust what it represents.

• Clients trust it.

• Employers trust it.

• Banks trust it.

• Investors trust it.

• Regulators trust it.

• The public trusts it.

Arizona's regulatory system exists to protect that trust. The Board describes its primary duty as protecting the public from unlawful, incompetent, unqualified, or unprofessional CPAs.

The practical lesson for Arizona CPAs is straightforward:

Your CPA certificate is an asset. Manage the risks surrounding it just as carefully as you would manage any other significant professional asset.

Maintain your competence.

Complete and document your CPE.

Follow professional standards.

Protect confidentiality.

Maintain objectivity.

Take peer review seriously.

Respond to regulators.

Document your professional judgment.

And when somebody asks you to cross an ethical boundary because “it's not really a big deal,” recognize that it may eventually become a very big deal indeed.