Ask a treasurer at a 150-person church about internal controls and you will usually get a nervous laugh. They have read the diocesan audit guide, or the denomination's twenty-page finance manual, and quietly closed the tab. Segregation of duties across six roles, quarterly audit committee reviews, a fidelity bond, a finance subcommittee that meets separately from the elder board — none of it fits a church with four volunteers who also teach Sunday school and run the sound board.
The good news is that most of what actually prevents problems in a small church is a short list, not a binder. It is less about policy and more about arranging who touches money at each step so that no single person's honesty is the only thing standing between the offering plate and the bank statement. Here is the version that fits a church of 60 to 250 people, staffed by volunteers who have day jobs.
Why this matters even when nobody is stealing
Internal controls get framed as protection against theft, and occasionally that is exactly what they are for. But in most small churches the real risk is not a dishonest volunteer — it is an honest one, alone, tired, doing their best with no one to catch a mistake. A counting error of $40 goes unnoticed for eight months. A deposit gets made three days late because the counter was out of town and nobody else knew the process. A well-meaning treasurer “lends” the church $200 from the benevolence fund to cover a bounced check and means to pay it back, and does, but there is no record of the loan ever having happened.
None of that is a scandal. All of it is avoidable with controls that cost nothing but a little coordination. And when a new treasurer eventually replaces the one who has run things alone for nine years, controls are what let the transition happen without anyone having to reconstruct a year of history from memory.
Control one: nobody counts money alone
This is the single highest-leverage habit a small church can adopt. Two unrelated people count the offering together, every time, before it leaves the building. Not a husband and wife team, not a parent and their adult child — two people who would have to actively collude to misstate a number. They sign or initial a count sheet with the total, and that sheet is what gets handed to whoever records the deposit.
Rotate the pairing. If the same two people always count together, you have effectively built a team of one with a witness who has stopped paying attention. A rotating pool of four or five counters, paired differently each week, keeps everyone alert and spreads the job so no one burns out doing it every Sunday.
Control two: the person who counts is not the person who records
The count sheet goes to someone other than the counters for entry into the giving system. This is the control that catches the honest transposition — $250 counted, $520 entered — because a second person is comparing the sheet to what they are typing. It also means a counter cannot quietly adjust a number after the fact, because they no longer have access to the record once the sheet is handed off.
A church using software to log contributions should treat the count sheet as the source document and the software entry as a transcription of it, checked against it, not a replacement for it. If your church is still working out how giving gets recorded in the first place, tracking giving that respects the giver walks through the habits worth building alongside this control.
Control three: someone reconciles the bank statement who did neither of the above
Once a month, a third person — not a counter, not the one who entered the giving — pulls the bank statement and checks that deposits match what was recorded. This is the step that catches almost everything: a missed deposit, a duplicate entry, a bank fee nobody expected, an ACH payment that went out twice. It takes twenty minutes if it is done every month and becomes a miserable afternoon if it is done once a year.
If your church has three or fewer people who can plausibly do this rotation, the treasurer can do the reconciliation as long as they were not the one entering that month's giving. The rule is not “three different humans for every transaction forever.” It is “no one checks their own work.”
Control four: two signatures above a set dollar amount
Pick a number that makes sense for your budget — $500 is common for a church this size — and require two authorized signers on any check or transfer above it. Below that line, one signer is fine for the plumber invoice and the curriculum order. Above it, a second person has to actually look at what they are signing, not just initial a stack.
This one control has stopped more accidental overspending than almost anything else on this list, because it forces a second conversation before a large check goes out, not after.
Control five: giving records stay confidential, on purpose
Decide, explicitly, who can see individual giving records and who sees only totals. Most small churches keep the pastor out of individual records entirely — not because pastors are untrustworthy, but because knowing exactly what the Andersons give changes how a pastor sits across from them at a hospital bed, even unintentionally. A treasurer or a designated deacon can flag a household worth a gentle check-in without disclosing a number to anyone else.
This is a policy decision more than a software feature, and it is worth writing down which roles see what before your first new volunteer asks and everyone realizes you never actually agreed. SundayBridge keeps giving records with each household's profile, but who on your team has reason to look is still a decision your church makes, not the software.
Control six: a one-page policy, written down
You do not need a finance manual. You need one page that says: who counts, how they are paired, who enters the giving, who reconciles monthly, the two-signature threshold, and who can see individual records. Print it, keep it in the same binder as the building insurance policy, and hand a copy to every new volunteer who touches money.
The point of writing it down is not legal protection, though it helps with that too. It is that an unwritten rule survives exactly as long as the person who remembers it stays in the role. A written one survives the transition. If your church is generally disorganized about who owns which recurring task, a weekly admin rhythm is worth setting up alongside this, since financial controls tend to slip in the same churches where nothing has a fixed schedule.
What this looks like on a normal Sunday
Two counters, rotated from a pool of five, tally the plate together after the second service and both sign the count sheet. Monday morning, a third volunteer enters the total into the giving system, checking it against the sheet as they type. On the first Saturday of the month, the treasurer — who did not enter that month's giving — pulls up the bank statement and matches deposits to entries. A bill over $500 waits for the second signature before it goes out. Nobody's individual giving is visible to the pastor. The whole system runs on a page taped inside the finance binder.
That is not an audit committee. It is four or five people doing what they already do, arranged so that an honest mistake gets caught within a month instead of a year, and so that when one of them eventually moves away, the next volunteer can read the page and pick up exactly where they left off. If you are also trying to get a clearer read on giving trends once the numbers are solid, reading giving trends and year-end giving statements are the natural next steps once these controls are in place.