May 07 | News

What Is an NFA Audit and What Should You Expect?

NFA usually gives about two weeks’ notice by phone, though some exams arrive unannounced. Either way, the firms that handle…
single-blog-post-featured-image

You added futures or swaps to your fund’s strategy because the opportunity made sense. It could be a macro hedge, a commodity overlay, or a client wanting exposure you couldn’t ignore. Either way, you now hold commodity-interest positions, and somewhere in the regulatory fine print, that decision triggered NFA membership obligations. 

Which means an NFA audit is going to happen whether you like it or not.

Most fund managers don’t think about NFA examinations until a notification letter lands on their desk. By then, the timeline is set, the document requests are coming, and whatever shortcomings exist in your compliance and reporting infrastructure are about to become visible. 

That’s not a disaster. But it’s a much harder conversation than the one you could have had six months earlier.

To be clear, not every alternative investment firm faces an NFA examination. But if your firm is registered, holds NFA membership, or operates close enough to the line that a regulator might draw it for you, the process deserves your attention now.

That’s what this piece covers: what an NFA audit is, what happens before, during, and after one, and what separates firms that move through it cleanly from those that treat it like a fire drill.

What Is an NFA Audit?

The term gets thrown around loosely, and that looseness creates confusion right when clarity matters most. So before we get into preparation and process, let’s ground the basics.

A Plain English Definition

An NFA audit is a risk-based regulatory examination. The NFA conducts it to determine whether your firm complies with NFA rules and CFTC regulations. Think of it less like your year-end financial statement audit and more like a regulator pulling back the curtain on how you operate. 

Examiners may review your audited pool financials, books and records, and supporting schedules, but the scope goes well beyond accounting. They want to know whether your compliance infrastructure matches what you told them it would be.

Which Firms Should Care

Three categories sit squarely in the crosshairs:

  1. Commodity Pool Operators (CPOs): Firms that operate a commodity pool and solicit investor capital for it. 
  2. Commodity Trading Advisors (CTAs): Firms that provide trading advice on futures, swaps, or other commodity interests, often tailored to a client’s specific positions or circumstances. CTAs that exercise discretion over client assets face particular NFA scrutiny.
  3. Introducing Broker (IBs): Firms that solicit or accept orders for futures, swaps, or other commodity interests but route that business through a futures commission merchant rather than handling customer funds directly.

Here’s where it gets relevant for the rest of the room: plenty of private fund managers never set out to become CPOs, CTAs, or IBs. But once futures, swaps, or managed-futures exposure creeps into your strategy, NFA registration requirements can follow, whether you planned for them or not.

How Often It Happens and What the NFA Reviews

The NFA takes a risk-based approach to scheduling. CPOs, CTAs, and introducing brokers generally see an examination every three to four years, though timing varies based on risk profile and prior findings.

When examiners arrive, they cast a wide net. Expect them to look at areas like:

  • Corporate and organizational records
  • AML practices, where applicable
  • Cybersecurity protocols
  • Supervisory procedures and internal controls
  • Disclosure documents and promotional materials
  • Bank and trading records
  • Financial statements and supporting schedules

The list is broad on purpose. They want the full picture.

What Should You Expect?

Most firms learn about the NFA exam process the hard way: mid-exam, wishing they’d asked better questions six months earlier. So let’s walk through what happens before, during, and after, with enough detail that nothing catches you off guard.

Before the Exam

NFA usually gives about two weeks’ notice by phone, though some exams arrive unannounced. Either way, the firms that handle it well are the ones that didn’t wait for that call to get organized. Current books and records, an up-to-date Member Questionnaire, a documented annual Self-Examination Questionnaire review, and clean support for exemptions, disclosures, and internal controls should already be in place. 

Worth noting: newer firms can request a voluntary NFA educational visit. Nobody grades it. It simply gives your team a chance to understand expectations before the real thing shows up.

During Fieldwork

Examiners review records, observe how your controls and supervisory processes function in practice, interview key personnel, and discuss findings along the way. For CTAs, fieldwork typically runs about five days. CPO exams tend to stretch closer to two weeks, though scope and your team’s responsiveness can move that number in either direction. For dually registered firms, the NFA has indicated it coordinates with SEC staff where oversight overlaps, which is worth planning for if your fund carries both securities-law and commodities-law obligations.

What Examiners Focus on Now

Certain areas draw consistent attention across exams:

  • Member Questionnaire Accuracy: Examiners want to see that it reflects current operations and that your firm updated it promptly after material changes.
  • Self-Examination Questionnaire: They check whether your annual review was completed and retained, not just filed.
  • Third-Party Oversight: Outsourced regulatory functions get scrutiny, particularly around who is supervising the vendor.
  • Cybersecurity: A written ISSP, staff training records, and incident notification protocols come up in nearly every exam now.
  • Exemptions and Filings: Expect questions around 4.7 exemption handling, pool financial reporting, PQR filings for CPOs, Form PR filings for CTAs, and account statement timing.

CPOs should keep a few deadlines front of mind:

  • Annual reports are generally due within 90 days.
  • Certain event notices must reach NFA by 5 p.m. CT the next business day.
  • The NFA requires notification if your independent CPA changes.

After the Exam

The process wraps with an exit interview, followed by an exam report. Firms typically submit a written response outlining root causes, corrective actions, and any internal-control changes. One important distinction, though: even a clean exam does not mean the NFA “approved” your firm or its practices. Serious or repeated findings can also trigger an enforcement referral.

How Michael Coglianese, CPA, P.C., Helps You Stay Ready

An NFA audit tests more than your compliance files. It tests whether your accounting, reporting, and operations work as a system or fall apart under scrutiny. That disconnect between “we have it” and “we can produce it clean under pressure” is exactly where Michael Coglianese, CPA, P.C., lives. Our firm has spent over 35 years working exclusively with alternative investment firms, and our managing partner started his career as an NFA compliance auditor. We’ve sat on both sides of the exam table, and we bring that perspective to every engagement.

  • NFA Scope and Registration Assessment: We help you determine whether your fund’s commodity interest exposure triggers NFA registration and whether your current structure, filings, and exemptions support that status. Plenty of managers find out they crossed the line after a regulator points it out. We’d rather you know before they do.
  • Records Organization and Financial Statement Support: Examiners expect clean reconciliations, valuation documentation, fee and allocation support, reporting calendars, and evidence of review. We organize the records your team and auditors need, so two weeks’ notice feels like plenty of time, not a countdown.
  • Coordination Across Your Service Providers: Fund operations involve internal finance staff, administrators, outside counsel, compliance consultants, and independent auditors. When those parties don’t talk to each other well, exam prep suffers. We sit at the center and keep everyone pulling in the same direction. 
  • Mock NFA Audits That Mirror the Real Thing: Our team includes former NFA examiners who run the same playbook real auditors use. You get a full deficiency list while you can still fix things quietly, not after they show up in a report.
  • Ongoing Compliance Infrastructure: We help turn NFA audit readiness from a one-time panic into a year-round operating discipline. That means current questionnaires, timely filings, documented reviews, and a team that can answer examiner questions without looking at the ceiling. Your compliance calendar should protect your bandwidth and your investors’ confidence, not drain both.

Prepare Like a Professional 

An NFA audit is a controls test. Examiners aren’t trying to trick you. They want to know whether your firm runs the way your filings say it does. Current books, timely questionnaires, documented supervision, clean reconciliations, and real oversight of every vendor touching a regulatory function. None of that is exotic. But the firms that have it organized before the call comes in look very different from the ones stitching it together in two weeks.

We work with CPOs, CTAs, introducing brokers, and private fund managers who’d rather build that infrastructure once and maintain it than rebuild it every time a regulator shows up. Our team includes former NFA compliance auditors and Big Four alums who have spent over 35 years doing exactly that for alternative investment firms. We know what examiners look for because we used to be the ones looking.

Contact Michael Coglianese CPA, P.C. to assess your NFA readiness, tighten your reporting process, and fix the gaps before an examiner finds them for you.

Partner with a team you can count on, year after year.

We’re here to serve you as your partner. To get started, fill out this form, and we’ll be in touch with you soon.

Lincolnshire Office

Michael Coglianese CPA, P.C. ​
300 Tri State International
Suite 180
Lincolnshire, Il. 60069 ​

630.351.4005

info@cogcpa.com