A client trust account is a bank account that holds money belonging to clients, not the firm itself. Lawyers and similar professionals must keep these funds separate from operating money and follow strict rules for deposits, withdrawals, recordkeeping, and approval. Access is usually limited to a small set of trusted staff and controlled by internal checks.
In cyber security, client trust accounts matter because they combine financial value with legal and regulatory sensitivity. If attackers steal trust-account records, wire instructions, or ACH details, they may try payment fraud, fake transfer requests, or pressure campaigns against a firm and its clients. Defenders reduce this risk with strong access control, segregation of duties, multi-factor authentication, audit logs, encryption, and careful handling of related identity documents and payment records. In a breach or leak, trust-account data can create immediate fraud exposure even when no funds have yet been moved.