Though some employers may not think so, the truth is that in today’s world 401(k) plans are subject to fraudulent activity and that the often-overlooked retirement plan can be the perfect place for it to occur. For example, in late 2017, several news outlets reported a scheme targeting individual 401(k) accounts. The U.S. Attorney’s office in Colorado had filed a lawsuit to recover up to $2 million in losses due to fraudulent distributions from retirement plan accounts. The lawsuit, filed December 4th, 2017 in federal court, sought to seize up to $342,335 in assets from five individuals that deposited funds from the alleged scheme. Multiple banks, including JP Morgan Chase Bank, Bank of America, PNC Bank, and Wells Fargo, received the fraudulent transactions. According to the suit, the FBI’s Denver Division was contacted in November 2016 by Great-West Financials’ VP of Internal Audit regarding allegations of fraudulent transfers from clients’ 401(k) accounts by JP Morgan. At that time, Great-West Financial had 20 participants affected with a loss of at least $1 million and a potential loss in excess of $2 million.
As in many 401(k) plans, participant victims of the fraud established an account online with the plan’s recordkeeper (in this case Great-West). Great-West maintains a call center to assist with questions when contacted by a plan participant, utilizing a four-part authentication process that employs biographical identifiers set up by the plan participant. Using this biographical information (e.g. name, Social Security numbers, or date of birth) obtained through phishing scams and password hacking, the scammers were able to provide accurate information to change the online profile and ultimately affect a distribution. According to the suit, Great-West observed that unauthorized individual(s) had been fraudulently using this process to obtain access to funds held in retirement accounts. Upon obtaining access, the funds were able to be transferred from those retirement accounts to other bank accounts without the knowledge or consent of the actual participant. The FBI indicated that Great-West wasn’t the only recordkeeper that was targeted by fraud schemes. In the end, Great-West reimbursed all funds to the participant’s account.
Please note, in this instance, neither the TPA nor Great-West had experienced a data breach. The participant’s personally identifiable information (PII) was obtained by other means prior to contacting Great-West or submitting the distribution request. It appears that the PII was obtained through scams aimed at the participant. This being the case, what can you do to help mitigate distribution fraud?
- Educate your participants on password management. Many times, the retirement plan account password is the same, or very similar, to another password in an account that may have been breached. Changing passwords and using stronger, randomly-generated passwords goes a long way towards protecting PII.
- Review your account transactions. Online access that is available 24/7/365 has taken the scrutiny from quarterly or annual statements. Reviewing your account on a frequent basis can help identify fraudulent activity quickly.
- Don’t use security questions in a participant’s profile the hacker may potentially be able to find the answers to from information which can be found publicly, such as on social media.
- Ask for verification of distributions and loans if the recordkeeper allows for it. It might seem to be an excessive burden to approve individual transactions but checking with an employee by cell phone or protected communication channels will prevent a lot of problems down the road. Remember, if the participant’s email was the source of the hacked information, the hacker could still be accessing email accounts undetected.
- Establish a system of checks and balances within your own human resources and accounting departments. Fraud can occur in many ways, and hacking seems to be the most prevalent today. Internal personnel have the power to request and direct retirement distributions for the plan’s recordkeeper.
It’s good practice to review your retirement plan’s transactions each month like you would your company bank account or credit card accounts. If you see any questionable transactions, please contact your TPA immediately.
This newsletter is intended to provide general information on matters of interest in the area of qualified retirement plans and is distributed with the understanding that the publisher and distributor are not rendering legal, tax or other professional advice. Readers should not act or rely on any information in this newsletter without first seeking the advice of an independent tax advisor such as an attorney or CPA.
We’re leaders in retirement plan administration.
How can we help you get where you want to go?
Phone: (732) 747-1540
Email: [email protected]
Spring will arrive soon, promising new growth and a fresh beginning. It could also be the perfect time to do some spring cleaning for your plan. Let’s look at some areas that you might consider reviewing to ensure your retirement plan is operating efficiently.
Document your processes and procedures to make certain that plan tasks can be handled in case of any absences during an enrollment or pay period. Having a backup in place can prevent errors and delays that could lead to penalties.
Make sure to have a process in place to notify all new enrollments of their eligibility, regardless of whether the plan has automatic enrollment. Depending on the timing for plan entry, including the plan enrollment paperwork with the new hire paperwork could make entry easier for you. Please reach out with any questions regarding when an employee enters the plan.
Deposits of employee deferrals and loan repayments must be submitted to the plan as soon as possible to avoid penalties and corrections. For plans with less than 100 participants, a safe harbor rule allows deposits to be made within seven business days. For larger plans, the expectation is that the money will be deposited more quickly. Depositing these funds on the pay date will avoid the possibility of being late.
Monitoring deferral contribution limits during the calendar year will avoid refunds after year end. Make sure that your payroll is set up to stop deferrals once the limit is reached, including any catch-up contributions for those who have reached age 50.
To keep the plan in compliance, employer contributions must be deposited timely. Due dates are impacted by the type of contributions, required status and tax deductibility. If you have questions on when to deposit your employer contribution or even whether to make an employer contribution, please contact us.
Most plans must be covered by a fidelity bond. The minimum coverage is 10% of plan assets (rounded up to the next $1,000) and the maximum coverage is $500,000. Additional requirements apply to plans with employer securities or non-publicly traded assets. If your fidelity bond is insufficient, now is the time to raise the coverage. Inflation clauses that increase the bond amount as the plan assets increase can ensure that your bond coverage is always adequate. Contact us or your insurance provider if you don’t have a fidelity bond.
Another area to review is communication with participants. Helping your employees understand and trust the plan can increase their contributions. Be sure that your procedures include distributing any plan-related communications—including required participant notices.
Distributions also involve communication, including some of the aforementioned notices. Discussing distribution options with terminated participants, possibly as part of an exit interview, can help to reduce risk of lost participants. We’ll provide instruction on distributions for force-out distributions for small balances, testing corrections and required minimum distributions.
Your plan document is the legal source on how the plan should be administered; operating within its parameters is critical. It’s always worth taking time to review the plan document to ensure that you fully understand and are following its provisions. We’ll cover more details about the plan document later in this newsletter. We’re here to support you in keeping your plan in compliance. Please feel free to reach out with any questions.
Addressing the Challenge of Uncashed Distribution Checks
Uncashed distribution checks present a persistent and often overlooked challenge for retirement plan sponsors. Despite the best efforts of plan administrators, some participants fail to cash their distribution checks, leading to administrative burdens, fiduciary concerns and potential compliance issues. A recent publication by Retirement Management Services (RMS) sheds light on this issue and offers practical guidance for employers seeking to manage and mitigate the risks associated with uncashed checks.
Uncashed checks can arise for various reasons. Participants may have moved without updating their contact information, may not recognize the check as legitimate or may simply forget to deposit it. Regardless of the cause, the responsibility for addressing these uncashed funds ultimately falls on the plan sponsor. This creates a fiduciary obligation to act in the best interest of the participant while ensuring compliance with IRS and Department of Labor (DOL) regulations.
Sponsors are encouraged to maintain up-to-date contact information for all plan participants and to follow up promptly when checks remain uncashed. This may involve sending reminder letters, making phone calls or using certified mail to confirm receipt. In some cases, plan sponsors may also consider using electronic payment methods to reduce the likelihood of checks going uncashed in the first place.
The IRS and DOL have issued guidance on how to handle these situations, including the use of forfeiture accounts and escheatment to state unclaimed property programs. However, these options come with their own set of rules and potential pitfalls. For example, using a forfeiture account may require the plan document to explicitly allow for such treatment. Escheatment laws, which allow the government to assume control of unclaimed property, vary by state. As such, plan sponsors must carefully evaluate their options and consult with legal or compliance experts as needed.
Another important consideration is the documentation of all the efforts made to contact participants and resolve uncashed checks. Maintaining a clear audit trail can help demonstrate fiduciary prudence and protect the plan sponsor in the event of an audit or legal challenge. It is extremely important to have a written policy in place that outlines the steps to be taken when a check remains uncashed beyond a certain period.
By taking a proactive, well-documented and compliant approach, employers can fulfill their fiduciary duties, reduce administrative burdens and ensure that participants receive the benefits they are entitled to.
Source: Retirement Management Services – “Uncashed Distribution Checks” https://www.consultrms.com/Resources/59/Plan-Sponsor-Tips-and-Help/212/Uncashed-Distribution-Checks
Divorce and the Retirement Plan
When a participant in a qualified retirement plan undergoes a divorce, the participant’s account balance may be an asset that is split with the former spouse. As the plan exists for the exclusive benefit of its participants, a court order is required to transfer the participant’s benefits to the ex-spouse. Once approved by the plan administrator, this court order is called a Qualified Domestic Relations Order (QDRO).
The QDRO is a judgment, decree or order that must be issued by a state authority (usually a court). It can be part of the divorce settlement or it may be a separate document. Because of the serious nature of separating the participant’s account balance, the QDRO is more than just an agreement made by both parties — it must also be signed by a judge.
A QDRO will describe how to divide the participant’s account balance between the participant and the ex-spouse, referred to as the alternate payee. In some cases, a set dollar amount will be allocated; in others, a percentage of the account may be designated. In the latter case, the amount assigned to the alternate payee represents the given percentage of the participant’s total vested account balance as of a specified valuation date. This percentage will apply to all sources — such as deferrals, matching or profit sharing — unless specified by the QDRO. Any interest and investment gains/losses that accrue between this valuation date and the date the funds are separated into an account for the alternate payee are often factored into this final calculation. If the participant has outstanding loans, the QDRO will usually indicate how the loans are handled.
Contributions such as deferrals and employer matching made after the valuation date are credited to the participant’s account. Earnings and losses are applied to the account balances. Once the division is complete, the alternate payee’s portion (either dollars or shares) is transferred to an account in the alternate payee’s name.
If the plan allows, the alternate payee may be paid out in a cash or rollover distribution. Not all plan documents allow the alternate payee to receive a distribution before reaching normal retirement age, so it’s important to follow the terms of the plan. In addition, the QDRO cannot violate the provisions of the plan document by requiring a plan to provide an alternate payee or participant with any type or form of benefit not otherwise provided under the plan.
Although the most common situation for a QDRO is a divorce, it can be issued in other situations, such as to a dependent in the case of child support. If the alternate payee is a minor child or legally incompetent, the order can also require payment to the individual with legal responsibility for the alternate payee. If a participant or their attorney provides you with a copy of a divorce decree that references the plan or a QDRO, please contact us immediately, and we will work with you to ensure it meets the requirements of the plan.
Important note for defined benefit plans: For 2025 plan years, PBGC premiums are due one month earlier than usual, specifically on the 15th day of the ninth month after the beginning of the plan year. For calendar year plans, this means the premium is due on September 15, 2025, instead of the usual October 15. This accelerated deadline is due to a provision in the Bipartisan Budget Act of 2015.
Upcoming Compliance Deadlines for Calendar-Year Plans
© 2025 Benefit Insights, LLC. All Rights Reserved.
© 2026 Red Bank Pension Services. All rights reserved. Website by GSM Marketing