Municipal parking meter audits share a pattern that is worth understanding before commissioning one. They very rarely find theft. Long Beach’s 2023 performance audit of parking meter coin operations reported no internal theft of coin revenue by city employees at all. New York City’s comptroller found that the Department of Transportation had properly administered cash revenue collection from meters, with adequate controls over collection, counting, and depositing.
What audits find instead is a reconciliation that nobody was performing — and that is a more useful finding, because it describes how revenue can go missing with no one having stolen anything.
The gap between what the system says and what was counted
The most instructive single number in the New York audit is a 3 percent discrepancy between the total revenue reported by DOT’s Counting House software and the total of the corresponding meter receipts.
That is a control finding on an operation the same audit described as adequately controlled. Two independent records of the same money did not agree, and the difference was not attributable.
The significance is not the size. It is that the discrepancy existed as a standing condition rather than as an incident. A variance that recurs and is never resolved defines the boundary of what the operation can actually see — anything smaller than the routine variance is invisible by construction. If 3 percent is normal, a 2 percent loss cannot be detected.
Applied to a system of real size, the arithmetic is uncomfortable. San Francisco’s meter programme collected $54.6 million in meter revenue in the audited year alongside $23.2 million in citation fines, together $77.8 million against $81.0 million expected — 96 percent. Percentage points at that scale are millions of dollars.
The three gaps audits keep finding
Streams combined before they are counted. Albuquerque’s audit found that parking meter funds and pay station funds were combined when counted, which prevented staff from establishing the accuracy of either. This is the most consequential control failure of the three and the easiest to create accidentally, usually in the name of counting-room efficiency. Once two streams are merged, neither can be reconciled to its own source, and a shortfall in one is masked by the other.
Electronic reconciliation left undone. New York’s parking card audit found the Parking Bureau did not reconcile electronic fund transfer receipts from internet credit-card sales to monthly internet sales, and did not verify the accuracy of monthly credit card processing fees. As payment shifts away from coin, this is where the exposure now sits — and it is quieter than cash, because there is no bag to be short.
Documentation that cannot support the count. Albuquerque also found deposit paperwork incomplete and missing significant collection items. Incomplete records do not merely make an audit harder; they make the reconciliation impossible to perform at all, which means the control never operated regardless of what the procedure said.
What this implies for revenue control design
Reconcile each stream to its own source, end to end. Meter, pay station, mobile, and card sales each need an independent chain from device record to counted receipt to deposit. Merging at any point before the reconciliation destroys it.
Treat the unexplained variance as the real detection threshold. Whatever the routine discrepancy is between system-reported and counted revenue, that is the floor on what can be detected. Reducing it is the single highest-value control improvement available, and it is worth more than additional physical security.
Extend the same rigour to electronic revenue. Cash handling attracts controls because cash feels vulnerable. Card and mobile revenue frequently receive far less, despite now carrying the larger share. Reconciling settlement to sales, and verifying processing fees, are both routine and both routinely skipped.
Audit the paperwork before auditing the money. If collection documentation is incomplete, no amount of counting produces a reconcilable result.
The reframe worth carrying
Municipal parking revenue is usually not lost to dishonesty. It is lost to streams merged too early, reconciliations that were never scheduled, and electronic receipts nobody matched to sales — each of which produces exactly the same outcome as theft on the financial statements, without any individual having done anything wrong.
An audit that returns “no theft found” alongside a list of reconciliation gaps has not given a clean bill of health. It has said the operation could not have detected theft either way, and that is the finding to act on.