My Controller Quit Without Notice. Here Is the 30-Day Plan.

Last updated October 2026.

The short answer

If your controller quit without notice, spend the first 48 hours locking down access to your bank, payroll, and accounting system. Then protect cash and payroll for the next 30 days, rebuild the calendar of deadlines, close the open month even if it is rough, and only after that decide whether to rehire, bring in a fractional controller, or outsource the close. The order matters: access, cash, deadlines, close, then the hiring decision.

What should you do in the first 48 hours after a controller quits?

In the first 48 hours, make sure nobody who has left can still move money or change records, and make sure you can. Everything else can wait a day; access cannot.

Most controllers who leave abruptly leave for ordinary reasons. The access sweep is not an accusation. It is the step any well-run company takes when someone with payment authority leaves, and it is how you confirm that everything is fine.

Work through this list in order:

1. Bank portals. Call each bank, ask for the list of authorized online users, remove the controller, and confirm who can initiate and who can approve wires and ACH. Ask for any changes to users or payment templates in the last 90 days.
2. Payment approvals. Set up dual control on outgoing payments if you do not have it: one person creates the payment, a different person approves and releases it. Nacha, the organization that governs the ACH network, recommends exactly this for businesses.
3. Payroll provider. Confirm who the admin is, remove the controller, and check that the next payroll is scheduled and funded.
4. Accounting system. If the controller was the QuickBooks Online primary admin, you cannot transfer that role the normal way, because Intuit requires the current primary admin to sign in to transfer it. You will need to file a request with Intuit's account protection team and prove you own the business. Start that on day one, since it takes time.
5. Bill pay, corporate cards, and everything else with a login. Remove the controller, cancel or reissue any card in their name, check for pending scheduled payments, and cover merchant processors, retailer and distributor portals, and lender portals.
6. Email and files. Keep their mailbox and shared drives; do not delete them. Forward the mailbox to someone you trust, because vendor, bank, and lender messages will keep arriving there.

One more rule for the first month: any request to change a vendor's bank details gets verified by phone, using a number you already had on file, not one in the email. Nacha lists independent verification of changed payment instructions as a core business practice, and a week with no controller is exactly when a fake "please update our remittance info" email works.

How do you protect cash and payroll in the first week?

You protect cash and payroll in the first week by building a simple four-week cash view and a list of every payment that cannot be missed. You do not need a perfect model. You need to know whether you can make the next two payrolls and the next loan payment, and what has to go out before the end of the month.

Start with three numbers: cash in the bank today, payroll and loan payments due in the next 30 days, and receivables you can reasonably expect to collect in that window. If the gap is tight, you want to know now, not on the Thursday before payroll. If you have never built a rolling forecast, our guide to the 13-week cash flow forecast shows the format; for this week, a four-week version is enough.

Then rebuild the calendar. Your controller carried a list of recurring deadlines in their head. Some of the ones that bite hardest:

• Payroll processing cutoffs and funding dates
• Loan payments, borrowing base certificates, and covenant reporting to your lender
• Monthly or quarterly investor or board reporting
• Insurance audits and renewals
• Payroll and sales tax filings and deposits

The tax items do not pause because your controller left. Call your payroll provider and your CPA this week, ask what is due in the next 60 days and who files it, and get that in writing. Thryve does not answer tax questions, and neither should a checklist; your CPA owns that list.

How do you figure out what your controller actually did?

You figure out what your controller actually did by reading the bank statements, not their job description. Pull the last 90 days of bank and credit card statements and mark every recurring inflow and outflow. Each one is a task someone was doing: paying a vendor, sweeping cash, funding payroll, collecting from a customer, paying a card balance. We call this the bank statement method, and it finds the work nobody wrote down.

Then fill the gaps from three more sources: the accounting system's audit log (QuickBooks Online keeps one), their calendar, and their sent email for the last 60 days. Together they show what was done, when, and for whom outside the company.

Put it all on one page: task, frequency, due date, and who owns it now. That page becomes the job description for whoever comes next, and the start of a real close checklist.

Can you still close the books this month?

Yes, you can still close the books this month, but plan for a rough close rather than a perfect one. The goal for month one is a reconciled cash balance, a known payables and receivables position, and a profit and loss you can explain, even if a few accruals are estimates you will adjust next month.

A workable first-month close, in order:

1. Reconcile every bank and credit card account to the statement.
2. Reconcile payroll to the payroll provider's reports.
3. Match open payables to vendor statements and open receivables to customer balances.
4. Record the expenses you know you incurred but have not been billed for yet.
5. Review the audit log for anything unusual: new vendors, changed vendor bank details, voided checks, manual entries to cash, or entries dated in a period that was already closed.
6. Compare the month to the prior three months and explain every large swing.

Step 5 is not about suspicion. It is the review a second set of eyes should have been doing all along. For context, the Association of Certified Fraud Examiners' 2026 Report to the Nations, based on 2,402 cases, found a median loss of $104,000 per case and a typical scheme lasting 12 months before anyone caught it. The cases that run longest are the ones where one person both moved money and kept the books, with no review. If anything in the review looks wrong, stop, do not confront anyone, and call an attorney before anyone else touches the records.

Our monthly close checklist covers the full version once you are past the emergency.

What does the full 30-day plan look like?

The full 30-day plan moves from control to coverage to rebuild. Here it is on one page:

Should you rehire, go fractional, or outsource?

You should decide by asking how much controller work your business actually generates each month, not by replacing the old job title by default. A controller who quit without notice is a good moment to check whether you needed a full-time controller at all, or needed a strong bookkeeper plus a part-time controller, or needed more than one person. Our post on your first finance hire walks through what each role does.

Do not expect the hiring market to rescue you fast. The U.S. Bureau of Labor Statistics projects about 115,300 openings for accountants and auditors every year through 2035, so experienced candidates have options. That is why the interim layer matters: it keeps the close running while you hire well instead of hiring fast.

Whatever you choose, make two changes permanent. First, no single person both initiates and approves payments. Second, someone other than the person paying the bills reviews the bank statement every month, even if that person is you.

Where Thryve fits

Thryve Accounting & Advisory in McKinney, Texas steps in as a fractional controller when a finance seat goes empty: we stabilize access and cash, run the close, document what your controller used to carry in their head, and help you decide whether to rehire. If what you really need is accurate monthly books, our bookkeeping and monthly accounting service covers the close itself, and a QuickBooks health check shows what shape the books were left in.

We fit businesses doing roughly $1M to $50M in revenue. We are probably not the right pick if you need someone in your office full-time every day, or if you already suspect theft; in that case call an attorney and a forensic accountant first. We also do not answer tax questions; those go to your CPA, and we are glad to coordinate with them.

See what a clean, on-time close looks like. Talk to us.

FAQ

Can I remove a controller's access the same day they quit?

In most cases you can remove a departed controller's access to company bank accounts, payroll, and accounting systems the same day, because those accounts belong to the business. Keep their email and files rather than deleting them, since vendors, lenders, and banks will keep writing to that address. Anything touching their final pay, personal belongings, or an employment agreement is a question for your HR adviser or employment attorney, because the rules vary by state and by contract.

Should I worry that a controller who quit suddenly took money?

Most controllers who quit suddenly leave for ordinary reasons, so a sudden exit is not evidence of theft. A short review of bank users, new vendors, changed payment details, and manual entries to cash is still standard practice whenever someone with payment authority leaves. The ACFE's 2026 study found the typical fraud ran 12 months before detection. If the review turns up something unexplained, do not confront anyone; call an attorney first and let them decide whether a forensic accountant is needed.

Do I need to replace my controller with another full-time controller?

Not necessarily. Whether you need a full-time controller depends on how much transaction volume, reporting, and team management your business generates each month, and many businesses find a strong bookkeeper plus a fractional controller covers the work. The answer changes if you have lender or investor reporting, multiple entities, inventory, or an audit, which can justify a full-time hire. Map the actual monthly work first with the bank statement method, then decide.