Auditing Residential Care Facilities Under HUD 232

Auditing a residential care facility under HUD Section 232 is a federally defined compliance exercise with its own deadlines, its own documentation requirements, and its own history of failure at the regulatory level, distinct from a standard healthcare or real estate audit, and that history matters because the volume of insured debt behind it keeps growing.

The Section 232 program's coverage and obligations

The program insures thousands of loans with an unpaid principal balance exceeding $32 billion, making it a substantial slice of federal housing credit risk. This is not a boutique lending niche; it is a program large enough that its failures appear in federal oversight reports with real financial consequences attached.

Financing or refinancing a property through Section 232 means accepting a set of reporting and compliance duties that start at closing and continue for as long as the loan exists. The obligations run on parallel tracks. Borrowers submit audited annual financial statements, but operators carry their own quarterly reporting duties, and the two sets of requirements don't overlap cleanly even when the borrower and operator are the same party.

The rules governing all of this changed recently. The updated Section 232 Handbook took effect January 5, 2026, and it applies to every new loan application and transactional request from that date forward. Owners entering the program now are working under stricter terms than the borrowers who came before them, and that gap between what older and newer loans require is itself a detail worth tracking, since portfolios that include loans closed before and after that date may be subject to different rules depending on when each loan originated.

What all of this adds up to is a basic reframing of what a HUD-insured loan actually is. A Section 232 loan is the start of an ongoing compliance relationship with HUD, not a one-time transaction followed by years of passive repayment, one that the audit obligation exists to enforce, and understanding the shape of that obligation is where the next section picks up.

What the HUD Section 232 audit requires

Not every borrower faces the same audit threshold. Multifamily non-profit projects trigger audit requirements once their annual expenditures cross a specified level, with the threshold for fiscal years beginning on or after October 1, 2024 set higher than it was for fiscal years before that date. So a non-profit operator's audit obligation can shift based solely on when its fiscal year begins relative to that October 2024 line, and you need to confirm fiscal year timing early rather than assume it from prior-year practice.

Once a borrower is in scope, the timeline is unforgiving. Audited financial statements are due within 90 days of fiscal year close, so a borrower with a December 31 fiscal year end owes HUD a completed audit by March 31. Operators run on a tighter clock still: quarterly statements are due within 60 calendar days of the quarter's end, and the fiscal year-end quarter gets a slightly longer window of 90 calendar days. Operator statements can usually be certified by the operator rather than independently audited, but that shortcut disappears the moment the operator is also the borrower, at which point a full audit applies regardless.

What the audit is actually checking is whether money moved the way the regulatory agreement said it could. Surplus cash calculations, reserve for replacement deposits, and distributions to owners all sit inside the scope of review, because these are the exact mechanisms through which a borrower could quietly extract cash from a property that cannot support it. Two concepts that recur later in this discussion start here: whether a project operates as a single-asset entity, and whether fund commingling across entities has created an opening for equity skimming. Both show up again once the discussion turns to actual audit findings, but they begin as structural requirements baked into the regulatory agreement itself.

Scoping the initial audit period for first-time borrowers

First-time borrowers routinely misjudge a basic fact: the first HUD Section 232 audit does not cover a full calendar year. The audit period begins on the exact day the HUD-insured mortgage closed and runs only through December 31 of that same year. A loan that closes in June is audited for roughly six months of activity, not twelve, and treating it as a standard annual audit is one of the more common setup errors borrowers make before fieldwork even begins.

There's an exception that confuses people in the opposite direction. If the closing date falls on or after September 1, the borrower automatically qualifies for a deferral, and the initial audit period stretches through December 31 of the following year instead of ending that same December. A loan that closes November 3, 2026, for instance, produces an audit period running from November 3, 2026, through December 31, 2027. Borrowers who don't know this rule exists sometimes prepare financials for the wrong window entirely, which creates rework at exactly the moment they can least afford it.

The audit's starting point, the HUD opening trial balance, carries its own risk of error. It has to reflect the property's financial position after the debt issuance costs from the prior mortgage have been expensed, captured at the moment just before the refinance transaction closes, and getting this sequencing wrong is one of the single most common findings in a first audit. Three line items inside that opening trial balance cause most of the trouble. Cash balances have to reconcile to the transaction date across every bank account tied to the property, with no exceptions for dormant or secondary accounts. HUD expects borrowers to collect required lease payments on schedule, so outstanding lease receivables need full documentation, because any receivable still outstanding when the HUD period begins invites compliance questions that a clean collection record would have avoided. Interest paid at closing on the prior mortgage needs to be accrued properly so that expense doesn't bleed into the new HUD audit period, and misallocating it is a frequent finding in first-time nursing home audits specifically.

None of this can be resolved on the fly once fieldwork starts. The complete, signed HUD closing binder has to be assembled before auditors arrive, and it needs to include the regulatory agreements for both borrower and operator, the mortgage note, lease documents, the closing statement, and, where applicable, the Surplus Cash note covering any debt HUD converted or any accrued unpaid interest. Many first-time borrowers don't keep their own copy of this binder on hand. The moment an auditor requests it, someone is chasing down documents from the closing attorney or the lender instead of handing over a file that already exists. That delay compresses the runway toward the 90-day deadline, and a scramble for paperwork two weeks before the deadline is a very different position than having the binder organized from day one.

What audited financial statements are supposed to catch

The audited financial statements exist for a specific purpose: they are the primary mechanism by which HUD is meant to catch financial distress before it turns into default. The HUD OIG audit report, Report Number 2026-BO-0001, found that mechanism broken on both ends of the pipeline.

The OIG reviewed four portfolios made up of dozens of properties and loans, every one of them rated troubled as of June 2024, and the portfolios were chosen specifically because HUD-insured residential care facility loan defaults were climbing. The report documented three distinct failures. ORCF did not receive audited financial statements from all the borrowers required to submit them. ORCF did not confirm that borrowers who needed action plans, because risks threatened their properties' viability, had actually developed complete ones. And ORCF did not notify the Departmental Enforcement Center before borrowers defaulted on their HUD-insured loans, which is the exact notification step meant to trigger intervention ahead of default rather than after it.

The statements that did reach HUD were not ambiguous. They showed borrowers withdrawing funds from properties that had no surplus cash to distribute, properties running negative cash flow, and properties unable to service their existing debt, yet ORCF did not act on these disclosures with any urgency. The information needed to intervene was sitting in the paperwork. What failed was the chain of action that was supposed to follow it.

The audit is the only moment where financial distress gets documented in a form precise enough to force a response, even when HUD sometimes fails to act on it, and a borrower's best protection is making sure that documentation is accurate and submitted on time, regardless of whether HUD's internal process keeps pace on its end.

ORCF's declining capacity to act on audit findings

The 2026 OIG report traces the failure to a resource problem rather than a procedural one. ORCF's staff numbers dropped sharply between October 2024 and May 2025, and the caseload carried by each remaining staff member more than doubled over that same stretch. ORCF's own explanation to investigators was that the size and complexity of its portfolios had outpaced the manpower available to analyze whether borrowers had improperly pulled funds from their properties. The agency's workload structure compounded the problem: no single team held visibility over an entire borrower's full portfolio, which made spotting a pattern across multiple properties under common ownership close to impossible from inside the existing staffing model.

This is not a new failure mode for the program. A 2018 HUD OIG report, Report Number 2018-BO-0001, documented a strikingly similar set of breakdowns years earlier. HUD let four defaulted nursing homes sit in its portfolio unresolved, some for as long as 6½ years. It made a partial payment meant to return one nursing home to solvency, and that facility went bankrupt just 14 months later. It insured a nursing home that was not structured as a single-asset entity, and it failed to enforce the regulatory agreements at six separate nursing homes. The same 2018 report also found HUD had failed to act on ineligible expenses, unsupported expenses, and accrued expenses totaling more than $44.4 million. Eight years separate that report from the one issued in 2026, and the underlying pattern, a federal agency receiving warning signs and not acting on them in time, looks much the same in both.

What should a borrower take from two reports, eight years apart, describing the same structural failure? ORCF cannot be relied upon to catch financial trouble on a borrower's behalf, so a compliant borrower has no built-in way to stand apart from a noncompliant one except through the audit record itself. If the paperwork is thorough, accurate, and submitted on schedule, it becomes the evidence of good standing that HUD's own internal process may be too stretched to generate independently. That puts real weight on how the next section's findings get documented, since those findings are precisely what an under-resourced ORCF is struggling to catch on its own.

The compliance findings that recur in Section 232 audits

The 2026 OIG report's clearest finding was concrete: borrowers inside troubled portfolios withdrew funds from properties that had no surplus cash available to distribute. That is the operational definition of an unauthorized distribution, and documenting it, catching it before it compounds, is a core function the audit is built to perform.

If a nursing home is leased, auditors have to confirm four separate conditions before the lease arrangement can pass review. Lease payments in total need to be sufficient to cover debt service, including tax and insurance escrows, along with reserve for replacement deposits. The owner has to actually receive those lease payments on a timely basis, not simply be owed them on paper. The project has to be maintained to housing quality standards throughout the period under review. And any major change to the project needs to have received HUD approval before it was carried out, not after.

Single-asset entity status sits near the center of this recurring risk. The 2018 OIG report found HUD had insured a nursing home that was not operating as a single-asset entity, a structural gap that lets project funds mix with money from other enterprises the same owner controls, and that commingling is the specific condition that makes equity skimming possible. A single-asset requirement exists precisely to prevent a property's cash from quietly subsidizing a borrower's other ventures, and auditors treat violations of that structure as a serious finding rather than a technicality.

These risks are not confined to historical reports. HUD OIG opened a review on April 30, 2026, Report Number BO 26 0007, examining a New York facility that owns and manages a long-term care facility, a senior apartment residence, and retirement community programs, carrying an unpaid principal mortgage balance above $8 million as of December 31, 2025, to check whether it operated in accordance with its regulatory agreement. A second active review, Report Number BO 26 0008, announced June 12, 2026, covers a not-for-profit operator running a skilled nursing facility in New York City with a substantial unpaid principal mortgage balance as of December 31, 2025, under that same audit objective. Two live investigations opened within six weeks of each other are a signal that these compliance questions, surplus cash, single-asset structure, lease payment adequacy, are being actively tested right now, not just catalogued from past cases.

Medicare payment pressure and staffing mandates in the skilled nursing audit environment

The financial conditions surrounding Section 232 audits are getting harder to navigate, independent of anything specific to HUD's own oversight. MedPAC's March 2025 report to Congress recommended cutting skilled nursing facility Medicare base payment rates, which reduces the revenue figures recorded in audited financial statements and feed straight into surplus cash calculations. Lower base payments leave less room above the break-even line, where surplus cash determinations live.

At the same time, new CMS staffing requirements carry a compliance cost estimated in the billions of dollars annually across the sector, and while a large share of skilled nursing facilities may qualify for exemptions from the staffing ratios depending on which specific requirement applies, many operators are still facing new costs that will compress margins further. Lower revenue on one side and higher mandated staffing costs on the other leave less room for the kind of error tolerance that thinner margins used to allow.

That combination changes what a surplus cash determination means in practice. When a facility is operating with little or no surplus cash available, any distribution out of the property, even one the operator genuinely believes the regulatory agreement permits, becomes a transaction auditors will scrutinize closely, because the margin for interpretation has narrowed to the point where a borderline call is far more likely to become a documented finding, which is precisely why operators in this space increasingly turn to firms like Pease Bell, a Cleveland-based CPA practice that focuses on HUD 232 and skilled nursing facility audits rather than treating them as an occasional engagement, to bring the regulatory fluency those determinations now demand.