Handling Money, Donations, and Data: Reducing Volunteer Dishonesty Exposure

nonprofit risk-management

Tax season and spring fundraising campaigns typically increase donation volume, donor data collection, and financial activity. That makes this the right time to strengthen your nonprofit risk-management approach.

How can nonprofits prevent volunteer theft or dishonesty? Start by recognizing that dishonesty is not rare. It becomes more likely when internal controls are weak, duties overlap, or a single trusted person controls too much of the process. Strong financial oversight reflects leadership. It protects your mission, your donors, and your volunteers.

Why Is Volunteer Dishonesty a Nonprofit Risk-Management Issue?

According to VIS’s Fundamentals of a Volunteer Risk Management System, dishonesty is one of the four most common volunteer risks, alongside injury, liability, and automobile exposure.

During fundraising periods, volunteers may have access to:

  • Cash and checks from events
  • Online donation platforms
  • Donor databases containing personal and financial data
  • Banking information and reconciliation reports

The Fundamentals resource specifically highlights risks such as volunteers clicking ransomware links, losing donor lists, or misusing sensitive information. These are not hypothetical scenarios. They are foreseeable exposures that require structure and supervision.

If an organization fails to screen, train, or supervise volunteers properly, allegations of negligence may extend beyond the individual to the nonprofit itself. That makes dishonesty a governance issue, not just an operational one.

What Internal Controls Reduce Volunteer Theft and Data Misuse?

VIS recommends practical measures, such as the separation of duties, to prevent embezzlement. No single person should control the receipt, recording, and reconciliation of funds.

Leadership teams should:

  • Separate financial responsibilities. Assign different individuals to open mail, record donations, and reconcile bank statements.
  • Require background checks for sensitive roles. Screening demonstrates due diligence when volunteers (or staff, for that matter) handle money or interact with vulnerable populations.
  • Restrict donor database access. Limit access to those who genuinely need it, and use confidentiality agreements.
  • Provide formal orientation and supervision. Reinforce the importance of structured orientation, written procedures, and active supervision.

A helpful reminder for boards and executive directors: Trust is not a control. Clear documentation and oversight protect everyone involved.

What Happens if a Volunteer Steals From a Nonprofit?

The consequences extend beyond the missing funds. Organizations may face:

  • Financial loss
  • Erosion of donor confidence
  • Board scrutiny
  • Required reporting or regulatory review

The IRS guidance for charities and nonprofits outlines requirements for financial stewardship, political activity, and the proper use of charitable funds. Misuse of funds or prohibited political activity can result in excise taxes, penalties, or even revocation of tax-exempt status.

Data misuse also presents exposure. The Federal Trade Commission provides data security guidance applicable to organizations that handle personal information, including nonprofits.

Even false accusations create risk. Legal defense costs, reputational damage, and operational distraction can strain an organization.

Volunteer insurance protects volunteers and organizations in the event of accidents or allegations. Coverage such as volunteer accident and volunteer liability insurance helps address medical costs, legal defense, and claims that could otherwise strain organizational resources. Providing separate insurance protection for volunteers helps ensure that claims involving volunteers do not erode the liability limits your organization relies on to protect its operations and staff.

Building a Culture of Accountability Before Problems Occur

Leaders should start with a straightforward threshold question: What could possibly go wrong?

From there, leaders should evaluate each risk by severity and frequency using an A–D scale. A severe but infrequent embezzlement event may warrant stronger controls than a minor procedural error that creates a limited impact.

Action steps for nonprofit leaders:

  • Draft written procedures for handling donations and donor data
  • Establish a transparent chain of command for reporting irregularities
  • Train volunteers and staff before granting financial or database access
  • Document oversight practices in board minutes and Form 990 disclosures

VIS members enjoy 24/7 access to the VIS Vault, a collection of risk management resources, including Preventer Papers that support safety training and governance practices.

For details about the specialized volunteer insurance VIS offers, click the VIS is tab at the top of the page and scroll down to the FAQ section.

Protecting Donations Protects Your Mission

Fundraising season increases financial and data exposure. Preparation reduces risk.

Effective nonprofit risk management treats volunteer dishonesty as a foreseeable exposure. Strong internal controls, background screening, supervision, and structured procedures demonstrate leadership. Volunteer liability insurance and dishonesty coverage provide financial protection if controls fail.

Before your next major campaign begins, review your financial safeguards and insurance structure. VIS membership and specialized volunteer coverage can help strengthen your organization’s protection.

FAQ on Volunteer Dishonesty

How can nonprofits prevent volunteer theft or dishonesty?

Nonprofits can reduce exposure by separating financial duties, limiting database access, conducting background checks, providing formal training, and supervising volunteers. Dishonesty coverage provides financial recovery in the event of embezzlement.

Does volunteer liability insurance cover theft?

Volunteer liability insurance primarily addresses bodily injury and property damage claims. Employee or volunteer dishonesty insurance covers losses from theft or embezzlement. Organizations should review their policies carefully to align coverage with exposure.

Why provide separate insurance for volunteers?

When volunteers share the same liability limits as the organization, a large claim may exhaust those limits. Separate volunteer coverage helps preserve the organization’s liability limits.

About VIS

Volunteers Insurance Service Association, Inc. (VIS) is a membership organization serving more than 3,500 volunteer-based nonprofit organizations and public entities nationwide. VIS is the only association that offers these three insurance programs designed specifically for volunteers: volunteer accident, volunteer liability, and volunteer excess automobile liability.

If you are interested in protecting your volunteers through the unique VIS insurance program, please click on the “Get volunteer insurance now” link on the home page, or call 800.222.8920. For more information on VIS’s risk-management resources for members and our vendor partners, click on the “Member Benefits” tab.