Ginnie Mae Issuer Audit and Compliance Obligations

Ginnie Mae issuers must meet audit and compliance obligations by keeping their finances and operations in order all year and making an annual filing. For independent mortgage bankers, mortgage banking audit and compliance services must cover audited financial statements, regulatory schedules, agency standing certifications, and submission requirements. The right CPA firm understands how mortgage servicing data supports those obligations and, where relevant, how HUD healthcare lending adds a separate audit layer.

Why Ginnie Mae issuer compliance is a continuous obligation, not an annual filing

Ginnie Mae’s guarantee of mortgage-backed securities carries the full faith and credit of the U.S. government. Because the securities are backed by FHA, VA, USDA, and PIH loans, issuer financial failure can trigger a federal guarantee call. Financial and operational standards therefore protect more than the issuer’s own business. They also address the risk that its failure places on the federal government.

Ginnie Mae administers oversight through its Office of Issuer and Portfolio Management and Office of Enterprise Risk, using periodic financial and operational reviews as well as mandatory reporting. The annual audit supplies evidence within that system, rather than marking the only occasion on which compliance is assessed.

What the annual audited financial statement package must contain and when it is due

Every approved issuer must send in an annual audited financial statement package within 90 days of fiscal year-end, even if it had no securities or commitment authority outstanding during the year. For calendar-year issuers, the deadline is March 31 of the following year. Modernization Bulletin No. 78, dated February 20, 2026, specifies that the 2025 AFS and all corresponding data must be submitted through the GMC Financials Module in MyGinnieMae. The obligation covers both the package and the data entered into the module.

The package begins with the balance sheet, statement of operations, cash flow statements, notes to financial statements, and supplemental schedules required by the HUD OIG Consolidated Audit Guide. It also includes a Schedule of Adjusted Net Worth that reconciles GAAP equity to adjusted net worth by taking out unacceptable assets. A schedule of liquid assets and capital ratio worksheets provide further evidence of financial compliance. An internal controls report and a compliance report must be prepared by an independent CPA firm serving exclusively as the issuer’s independent auditor. Pease Bell is one of the firms that specialize in mortgage banking audits for this work, which calls for linking portfolio data to regulatory schedules as well as preparing financial statements.

Certification and submission authority are separate parts of the process. Authorized signers must be listed on HUD Form 11702 and be the CEO, CFO, or equivalent, while MyGinnieMae submission roles must be assigned in advance. An issuer needing an extension must request it before the due date with sufficient advance notice, and an approved request provides additional time. Housing Finance Agencies may get a longer extension than standard issuers. For parent-issuer reporting, Ginnie Mae accepts consolidated parent statements with consolidating schedules when the issuer represents a substantial share of its parent’s equity, but a corporate guarantee agreement is required when that share falls below the applicable threshold.

The financial thresholds an issuer must evidence — and maintain continuously

Single-family issuers must maintain base net worth plus basis-point add-ons tied to the size of their servicing portfolios. GAAP equity alone does not establish compliance because the calculation removes assets Ginnie Mae does not accept. Deferred Tax Assets, for example, may not be included in net worth. Ginnie Mae specifically assesses that exclusion when it receives audited financial statements.

Issuers must meet the liquidity requirements as well as the net worth requirements. Base liquidity must equal the greater of a minimum floor or the sum of basis-point charges on servicing portfolios. Large and medium issuers also face an additional liquidity charge on loans held for sale and interest rate lock commitments. The calculation therefore depends on the issuer’s servicing portfolio and, where applicable, those additional exposures. As those inputs change, a year-end calculation alone cannot demonstrate continuous compliance.

The Leverage Ratio compares total adjusted net worth with total assets, while the Risk-Based Capital Ratio uses a large risk-weighting multiplier on gross mortgage servicing rights, capped at adjusted net worth. Both must meet minimum thresholds. Firms such as Pease Bell need to know both mortgage servicing and GAAP to produce these schedules as part of mortgage banking audit and compliance work. The auditor must link the portfolio data to the basis-point add-ons and other calculations that show whether the issuer meets the standards.

Quarterly and monthly reporting obligations that run alongside the annual audit

Non-federally-regulated issuers must submit unaudited quarterly statements through the Web-based Mortgage Bankers Financial Reporting Form, HUD Form 11750. Large non-federally-regulated issuers with outstanding Ginnie Mae MBS above $50 billion must also submit an unaudited abbreviated monthly financial reporting form. For those issuers, the reporting calendar is materially more frequent than the annual audit cycle.

Issuers regulated by FDIC, NCUA, or the OCC are exempt from the quarterly MBFRF requirement. They must nevertheless provide the applicable reports promptly upon submission to their regulator. Because non-federally-regulated issuers must send in reports throughout the year, they must keep their financial close processes and controls working and their data accurate between audits.

Agency standing certifications the independent auditor must make each year

Financial capacity is only part of eligibility, because an issuer also depends on its standing with other agencies. MBS Guide Chapter 3 requires the independent auditor to certify good standing with FHA and report adverse FHA Mortgagee Review Board action. Such action includes letters of reprimand, probation, suspension or withdrawal of FHA lender or mortgagee approval, and fines. The same certification requirement applies to VA, RD, and PIH approvals where relevant. The audit package therefore reaches beyond the issuer’s accounts into the approvals that support its business.

If the issuer is an approved Fannie Mae or Freddie Mac mortgage servicer, its annual audit reports must also certify that it remains in good standing with those agencies. Adverse action, including forced transfer of servicing rights, must be disclosed. The annual reporting requirement does not defer the issuer’s duty to notify Ginnie Mae immediately when adverse agency action occurs or becomes pending. Failing to give notice on time may itself be an event of default under the Guaranty Agreement.

For an independent mortgage banker or regional lender selecting a CPA firm, the useful question is what the auditor understands beyond the financial statement opinion. Relevant knowledge includes the agency approvals the issuer holds, the standing certifications required, and the adverse actions that must be reported. Familiarity with Fannie Mae and Freddie Mac seller-servicer requirements matters in that wider setting. A general ability to audit GAAP financial statements does not, by itself, establish familiarity with these compliance attestations.

What sanctions and monitoring look like when an issuer falls short

Ginnie Mae conducts periodic financial, operational, and compliance reviews of all issuers to assess risk to its MBS guarantee program. The annual submission informs that monitoring, but does not define its limits. Consequences can also arise from the issuer’s relationships with approving agencies, including the adverse actions that must appear in audit reports. Missing a notification can cause a separate problem even when the agency action is already known elsewhere.

The February 2026 GAO report, GAO-26-107436, provides a broader signal of the direction of oversight. GAO examined how Ginnie Mae and FHFA assess the financial condition of nonbank mortgage companies and concluded that both agencies could enhance their financial monitoring. That finding adds pressure for closer scrutiny but does not itself set a new issuer requirement. The Financial Stability Oversight Council’s May 2024 report identified that nonbanks could pose risks to the broader financial system in a stress scenario. Together, these findings explain why issuer financial discipline is treated as a systemic concern.

How Section 232 healthcare lending adds a parallel audit layer for issuers active in that market

That layered structure becomes more demanding when an issuer participates in healthcare facility lending. HUD-insured Section 232 loans are routinely pooled into Ginnie Mae certificates. An FHA-approved lender that makes loans for skilled nursing and residential care must meet Ginnie Mae issuer requirements and Section 232 program obligations at the same time. These requirements cover different parties and what each must do within the same financing activity.

Under 24 CFR § 232.1009, the borrower must provide HUD and the lender with an audited annual financial report based on an examination of its books and records. The report must meet HUD’s requirements under 24 CFR 5.801 and 24 CFR 200.36. This is a borrower reporting obligation, distinct from the lender’s own Ginnie Mae issuer package. That distinction matters because completing one audit does not discharge the other obligation. The overlap calls for an understanding of both mortgage banking compliance and the HUD healthcare facility framework.

FHA issued a record $8.1 billion in Section 232 firm commitments in FY 2025, almost doubling the prior year’s firm commitments. The program also closed billions more across hundreds of loans for residential care facilities. HUD OIG is conducting an audit of HUD’s oversight of Section 232 nursing home portfolios under Report No. BO 25 0001. Its objective is to assess how the Office of Residential Care Facilities identifies and mitigates risks across a large loan portfolio. The volume of activity and the oversight audit make this intersection consequential to the issuer compliance discussion.

What Ginnie Mae's own audit record reveals about the standard issuers are held to

HUD OIG contracted with Sikich CPA LLC to audit Ginnie Mae’s financial statements for the fiscal years ending September 30, 2025 and 2024. Audit Report 2026-FO-0001 describes work under U.S. GAAS, OMB audit requirements, and the Financial Audit Manual of the GAO and the Council of the Inspectors General on Integrity and Efficiency. Sikich reported that the fiscal year 2025 statements were presented fairly in all material respects. It identified no material weaknesses or significant deficiencies in internal control over financial reporting.

Auditors nevertheless identified internal control deficiencies during the 2025 engagement, and Ginnie Mae management responded formally. The guarantor’s audit and issuer audits have their respective requirements, but this result illustrates the seriousness of independent examination. For issuers, responding to findings is part of a rigorous audit process.

Building an audit-ready operation that treats compliance as a standing discipline

The practical response is an operation that supports each reporting frequency without a separate mobilization effort. Adjusted net worth and liquidity calculations should be maintained on a live basis. Agency standing information should remain current so the independent auditor can certify it without discovering gaps during fieldwork. MyGinnieMae access roles and authorized signers should be assigned and current before the 90-day window opens. Extension requests belong in the calendar as a contingency, with a hard internal deadline well before the submission due date.

The auditor relationship must support the full engagement, including compliance attestations, adjusted net worth schedules, capital ratio worksheets, and agency standing certifications. For Section 232 participants, the relevant capabilities also include familiarity with parallel HUD audit requirements and skilled nursing facility accounting. Among specialized CPA options, Pease Bell brings mortgage banking audit and compliance experience, HUD 232 and multifamily housing audit expertise, and skilled nursing facility accounting. Those are concrete capabilities for assessing firms in relation to an issuer’s activities.