When your bookkeeper says they’re retiring, it can feel oddly personal—like the person who “knows where everything is” just announced they’re moving out of state.

And then it hits you: Wait… who’s been keeping the plates spinning behind the scenes?

A transition doesn’t have to be messy, but it does need structure. Here’s how to protect your business, your data, and your sanity while you hand things off.

Start by getting the books truly current (not “mostly” current)
Before anyone new touches your file, ask your current bookkeeper to bring everything up to date through the most recent closed month and to finish all reconciliations.

In plain English: your bank and credit card accounts should match their statements, and your bookkeeping file should reflect reality. If you’re running payroll, this is also the time to make sure payroll taxes and filings aren’t drifting behind. The IRS is clear that employers are responsible for withholding, depositing, and reporting employment taxes—even if payroll is outsourced. 

If there’s unfinished cleanup work, it’s far easier (and cheaper) to address it while the person who knows your history is still available.

Make sure all items that need access are in your name, not theirs. 
This is the step most owners skip until the day something breaks.
You want full access to:

• your accounting software
• payroll system
• bank feeds and merchant processors
• any connected apps (POS, scheduling, payment tools, inventory, etc.)

If your bookkeeping platform is QuickBooks Online, Intuit’s guidance is very specific about roles and the “primary admin” function—this matters because only certain roles can change critical settings. Make sure you know who the primary admin is and that it’s you (or your business owner email), not your bookkeeper’s personal address. (https://quickbooks.intuit.com/learn-support/en-us/help-article/access-permissions/user-roles-access-rights-quickbooks-online/L66POfRrI_US_en_US)

If you need to change the primary admin, Intuit provides the steps. (https://quickbooks.intuit.com/learn-support/en-us/help-article/primary-administrator/change-primary-admin-user-quickbooks-online/L9TU91iOk_ROW_en)

Also: turn on multi-factor authentication wherever it’s offered. NIST’s digital identity guidance is the mainstream standard many organizations follow for stronger authentication practices. (https://pages.nist.gov/800-63-3/sp800-63b.html)

Pull a clean “snapshot” of your business before the handoff
Ask your current bookkeeper for a current set of reports and save PDFs for your records. At minimum, you want a Profit & Loss and Balance Sheet, plus whatever detail reports you rely on for day-to-day decisions.

This gives the next bookkeeper a starting point—and it gives you a baseline in case anything looks different later.

Separately, the IRS emphasizes keeping records that support income and deductions. Even if your bookkeeper has “everything,” you still want copies under your control. Get clear on what’s still unresolved.

Retirements often come with loose ends. So be sure to directly ask: What still isn’t reconciled? What’s sitting in “uncategorized”? Are any receipts missing? Are there deadlines coming up (payroll filings, 1099s, business returns, local filings)?

This is also where you confirm who is handling what in the final weeks—especially around tax season. Again, the IRS treats payroll compliance as an employer responsibility, so you want zero ambiguity about what has been filed and what hasn’t. 

Set a handoff date—and try to build a short overlap

A clean transition usually includes:

• a firm “last day” for the outgoing bookkeeper
• a defined “start day” for the incoming one
• a short overlap window for questions (even if it’s just a couple of calls)

Even a small overlap can prevent weeks of back-and-forth later.

Use this moment to improve the system (not just replace the person)

If you’ve ever felt unsure about cash flow, confused by reports, or surprised by taxes, that’s not a character flaw—it’s usually a reporting and process issue.

A transition is a perfect time to tighten the workflow by asking things like:  How often do you get financials?
Do you understand them? Do you know what to look at monthly? Is your bookkeeping file organized enough that someone new can step in without rebuilding it? 

If the answer is “not really,” good. That means you can fix it now.

Find your next bookkeeper sooner than you think you need one

The best handoffs happen when the new person comes in before the previous person disappears.

If your bookkeeper is retiring and you want help getting things organized, confirming access, and creating a smooth handoff plan, we can help you get it done without panic.

If tax season has you thinking, “I wish I’d started earlier,” you’re in good company. We hear that every year from smart business owners who are juggling clients, payroll, vendors, and real life.

The good news: depending on your situation, there may still be a few legitimate levers you can pull before you file. None are magic, though. But they can reduce taxes, prevent mistakes, and keep you from leaving money on the table.

Here are four practical “last-minute” moves to consider.

1) Maximize retirement contributions (if the deadline still allows it)
Retirement contributions can be a powerful way to reduce taxable income—but the deadline depends on the type of account.

Traditional or Roth IRA: The IRS states the deadline is your tax return filing deadline (not including extensions). (So if you file an extension, that doesn’t extend the IRA contribution deadline.)

SEP IRA: SEP contributions can generally be made by the due date of your return, including extensions.

Solo/One-participant 401(k): Contribution timing can vary based on plan rules (and whether you’re talking “employee deferrals” vs. “employer” contributions). IRS guidance on one-participant plans covers how they work and limits, but your provider/plan document often determines the operational steps.

Real-life example: If you had a stronger profit year than expected, a SEP IRA contribution made within the allowed window may reduce the income that gets taxed (and boost long-term savings).

2) Re-check deductible expenses (because “miscategorized” is the new “missing”)

Many missed deductions aren’t fake deductions—they’re real expenses that never got properly captured such as:

• software subscriptions
• payment processing fees
• continuing education
• supplies
• professional services
• legitimate business mileage (if tracked)

A quick but effective approach would be to scan bank + credit card statements for the year, then 
compare them to what’s in your bookkeeping system, and flag anything business-related that landed in “uncategorized,” “owner draw,” or the wrong bucket.

This doesn’t mean “get aggressive.” though, it is more about looking under every stone to save the most money possible.

3) Fund an HSA (if you’re eligible)
HSAs can be extremely tax-friendly, but eligibility matters. To contribute, the IRS says you generally must:

• be covered under a qualifying high deductible health plan (HDHP)
• have no disqualifying additional coverage
• not be enrolled in Medicare
• not be someone else’s dependent
• And the IRS states you can typically make HSA contributions for a tax year through the tax filing deadline for that year (example shown in Pub. 969).

Also note: the IRS announced that starting Jan 1, 2026, certain Marketplace bronze and catastrophic plans are treated as HSA-compatible under new guidance—so eligibility may be broader for some people than in prior years.

4) Confirm your estimated tax payments and credits are actually showing up
This is the quiet one that causes totally avoidable frustration: you paid—but the return doesn’t reflect it correctly.

The IRS instructions are clear that estimated payments should be reported on Form 1040 (and you can include prior-year overpayments applied forward).

So before you hit “file”:

• reconcile quarterly payments against your IRS payment history/records
• confirm the amounts are applied to the correct year and taxpayer
• make sure you’re getting credit for every dollar you already paid

One more “unsexy” step that prevents a lot of pain: Before filing, double-check that you have put the correct:

• SSN/EIN
• legal business name spelling
• bank account/routing (especially if you’re getting a refund or paying electronically)
• address and email accuracy

Small errors can trigger delays, notices, or misapplied payments.

But if you're looking for the biggest possible impact you need to focus on year-round planning with your team of experts.

Last-minute savings can help. But the real relief comes from clean books and current numbers—because that’s when you have options before deadlines.

If you want a second set of eyes on your numbers (and a clear plan for the year ahead), that’s exactly what we do.

As a spa owner or service-based business, your inbox is constantly filled with payment-processing requests: invoices, vendor emails, payroll notices, software alerts, “urgent” account updates… all day.

Scammers know that. And they’ve gotten very good at making fake messages look like they came from a legit source like your bank, the IRS, a vendor, or even your payroll/accounting software. The goal is always the same: to get you to click, hand over login info, and pay for something you shouldn't.

Below are the most common scams we see during tax season—plus simple safeguards you can actually use when you’re busy.

1) Fake IRS “You Owe Now” Notices
An email/text/DM claiming you owe back taxes or penalties and must pay immediately via a link, QR code, wire, crypto, or some “instant” method.

What you need to remember is the IRS does not initiate contact with taxpayers via email, text message, or social media about bills, refunds, or “tax credits.” The IRS states that most initial contacts begin with a letter delivered by U.S. mail (with limited exceptions).

So your best bet is: Don’t click!

Go to the IRS site directly and look up how to verify notices, or use your IRS online account if you have one.

2) “Invoice” Scams (Small Amounts, Big Damage)
An invoice for something you never ordered—often a “reasonable” amount that a busy owner might approve without thinking.  This scam works because it’s designed to slip through during high-volume weeks when you’re approving everything quickly.

How to stop it: Require a matching purchase order / written approval for any new vendor charge.

Pay vendors only from a saved vendor list (and not from new banking details inside an email).

3) Bank / Payment Processor “Security Alerts”
This may come in the form of a message saying there’s suspicious activity and you must “verify” your login or payment details.

Just remember that "Pressure + link = danger" and you'll probably make the correct decision.

Also, if you see the language “Verify now” + login page  this is classic credential theft (also known as phishing).

Your best bet is to open a new browser tab and type your bank/payment processor URL yourself (or use a trusted bookmark). The IRS explicitly warns that scammers use links to fake IRS pages and tools—banks are targeted the same way.

4) Payroll / Vendor “Change My Bank Details” Requests (BEC)

This one is especially brutal because it can look like it came from a real person you know.

What typically happens is that you might receive this message: “Hey—my banking changed. Please update my ACH info.” Or  “We switched banks—use this account starting today.” , or “I’m in a meeting—can you send the payment now?”

This is a common form of Business Email Compromise (BEC)—a major fraud category the FBI tracks and warns businesses about.  A great way to avoid the problems that can stem from this scam is to never change payment instructions based on email alone.

A simple strategy is to verify by calling the person from a known phone number (from your records, not the email).  You could also require a second approver for any banking-change request.

If money already moved, contact your bank immediately

The “3 Red Flags” Test (Use This on Every Weird Message)

• Urgency: “Act now,” “final notice,” “today only,” “or penalties.”
• Links/attachments: especially unexpected PDFs, ZIPs, or “secure messages.”
• Sender weirdness: tiny misspellings, extra characters, or a “reply-to” that doesn’t match.

If you see even one of these, pause and verify independently.

Quick Protection Checklist for Busy Owners

1. Use multi-factor authentication (MFA) on email, banking, payroll, and accounting tools.
2. Limit who can change bank details or send payments (least access needed).
3. Set a rule: bank detail changes require phone verification + second approval.

Train your team to forward suspicious messages to one internal point person (so nobody “handles it quickly” alone).

If you suspect a breach or exposed info, follow a documented response plan (the FTC provides a practical breach-response guide for businesses).

If You Already Clicked (Do This Immediately)
Do not enter any passwords (if you haven’t already). If you entered credentials, change passwords right away and enable MFA.  Contact your bank/payment platform if any payment info may have been exposed.

If it involved an IRS impersonation attempt, the IRS provides steps for reporting phishing and suspicious messages.

For vendor/payment redirection scams, contact your financial institution immediately.

Bottom line
Spam isn’t just annoying anymore—it’s a direct threat to your cash flow, your client data, and your peace of mind. Cautious doesn’t mean fearful. It means you’re protecting what you’ve worked way too hard to build.