Lockbox Reconciliation
A lockbox is a bank service that receives a practice's mailed payments at a bank-controlled address, deposits the checks, images each check and the paper that came with it, and returns a daily record of it all. Its point is that the money is banked before anyone at the practice touches it. That same feature is why it needs its own reconciliation: the practice never sees the mail, so the bank's lockbox record is the only account of what arrived — and lockbox reconciliation is proving that everything the bank captured was received into the billing system and posted, with nothing banked but left off a claim.
Updated 10 min read
On this page
Key takeaways
- A lockbox is a bank service for paper payments: the bank receives the mail at an address it controls, deposits the checks, images them and the documents with them, captures the data, and returns a daily deposit record and file to the practice.
- It is itself a control. Because the bank receives and deposits before practice staff handle the money, it separates the person who takes in cash from the person who posts it — the separation of duties HFMA describes for processing patient payments.
- That is also why it needs its own reconciliation. The practice never sees the envelopes, so the bank's lockbox record — not a pile of mail — is the only independent account of what came in, and posting is proven against it.
- The reconciliation ties three totals: the bank's deposit, the items the lockbox captured, and what the practice posted. The dangerous gap is an item the bank banked that was never posted — the money is in the account while the claim it paid still shows open.
- A lockbox item posting cannot place is not written off. It goes to a holding account as unapplied cash and is worked until it is identified; the money is real, only its destination is missing.
What a lockbox is
A lockbox is a service a bank runs on a practice's behalf. Instead of coming to the practice's own address, mailed payments go to a post-office box the bank controls. The bank collects the mail, opens it, deposits the checks into the practice's account, images the front and back of each check along with whatever paper came with it, captures the payment information, and makes a daily record — a deposit total, the images, and usually a data file — available to the practice. The practice posts from that record rather than from the envelopes, which it never sees.
A lockbox handles the paper channel: patient checks, and paper payer checks that arrive with a paper EOB. Payments that arrive electronically — funds by EFT with a matching remittance advice — are a different channel, paired by the trace covered in EFT and ERA reassociation, not by a lockbox. Some banks run a medical lockbox that goes a step further and converts the paper EOBs it captures into an 835 electronic remittance, so the practice can post them like any other ERA — but the intake it is reconciling is still the paper that came in the mail.
A lockbox is a control before it is a convenience
Why a lockbox needs its own reconciliation
When a practice opens its own mail, it can check its posting against the stack of payments on the desk: everything received is in the room, and the question is whether it all got posted. A lockbox removes the stack. The practice never sees the envelopes, so there is nothing on a desk to reconcile against — the only record of what arrived is the one the bank produces.
That inverts the question. It is no longer “did we post everything that came in the mail?”, because there is no mail to hold up against the ledger. It becomes “did we receive into the system, and post, everything the bank captured for us?” The bank's lockbox record is the source of truth for what came in, and payment posting is checked against it.
This is the reconciliation argument from Payment Reconciliation — that completeness can only be proven against an independent record, not against posting's own — applied to a channel where the practice never touches the raw input at all. There, the independent record is the bank's deposits generally; here it is narrower and more literal: the bank's own itemized account of a batch of mail the practice will otherwise never see.
What the bank hands back each day
The lockbox record is what makes the reconciliation possible, so it is worth knowing what it contains. A day's lockbox typically returns three things together:
- A deposit total and item count — how much was banked and how many items made it up, the figures the practice's own deposit and posting have to tie back to.
- Images — the front and back of every check, and the remittance or correspondence that came with it, so an item can be identified without the paper.
- A data file — a structured file of the captured detail that can feed posting rather than being keyed by hand. A lockbox provider commonly transmits this incoming-payment detail and its totals as an ASC X12 823 lockbox transaction; a bank's cash-management side reports the same deposit and its transactions in a balance-and-transaction file (the Bank Administration Institute's BAI2 format, now maintained by ASC X9 as BTRS); and the scanned check images move between banks as an ASC X9 image cash letter.
The reconciliation-relevant point underneath the acronyms is simple: the bank returns both the money and an itemized account of what the money was made of. Those two, set against what the practice actually posted, are the three things that have to agree.
Reconciling the day's lockbox
The reconciliation proves that three totals tie to one another:
- the bank's deposit total for the lockbox,
- the sum of the items the lockbox captured in its record, and
- what the practice posted from that lockbox to claims and patient accounts.
When the three agree, every dollar the bank banked has a home in the ledger. When they do not, something the bank captured did not reach a claim or account — and the direction of the gap is what tells you how much it matters.
The gap that matters is banked-but-unposted
A few kinds of item routinely break a clean tie, and each has a defined home rather than a shortcut:
- An item the bank could not identify — a check with no account number, an illegible remittance, or a payment that matches no open balance. The bank still deposits it, because the money is good; posting simply has nothing to apply it to yet, so it lands as unapplied cash until it is identified.
- A payment that covers several accounts — one check for more than one patient or claim, which has to be split before any part of it can be posted. Until it is split, the whole amount sits unapplied.
- Correspondence with no payment — a paper EOB, a denial letter, or a returned statement arrives in the lockbox with no check attached. It is captured as an image and has to be routed to whoever works it, but there is nothing to deposit — so it must not be counted as a payment that went missing.
- An item the bank could not deposit — an unsigned, post-dated, or otherwise unprocessable check the bank images but holds or returns. It appears in the images without appearing in the deposit total, and a reconciliation that does not account for it will chase a difference that is not an error.
Deposited is not the same as available
Keeping the lockbox clean
Most of what keeps a lockbox reconciled is protecting the properties that made it a control in the first place.
- Keep the duties separated — the lockbox's value is that the bank receives and deposits before practice staff touch the money. That separation is preserved by having someone other than the person who posts reconcile the bank's lockbox record against what was posted. If the same person both posts and confirms the total, the control the lockbox was bought for is gone.
- Reconcile it daily — the aging argument that governs reconciliation and unapplied cash applies here too. An unidentified item is cheap to place the day it lands, using an image that is right in front of you, and expensive a quarter later once the claim it belonged to has been worked and the people who would recognize it have moved on. A daily tie keeps the identification work small.
- Send unplaceable items to suspense, not to a write-off — an item the bank captured that posting cannot place goes to a holding account as unapplied cash and is worked until it is identified. It is money the practice is holding, not a balance it is owed, so a write-off is never the way it leaves the lockbox.
A lockbox moves the practice's cash intake inside the bank's walls, which is exactly what makes it a control — and exactly why the reconciliation has to run against the bank's record rather than the practice's. Worked daily as part of the Payments & Posting routine, it keeps every mailed dollar tied to the claim it paid and keeps the accounts receivable honest. Left unreconciled, a lockbox is a stack of mail the practice deposited without ever reading.
Common questions
What is lockbox reconciliation?
It is proving that everything a bank captured in a practice's lockbox was received into the billing system and posted. A lockbox is a bank service that receives mailed payments at an address the bank controls, deposits the checks, images them, and returns a daily record. Because the practice never sees the envelopes, that record is the only independent account of what arrived — so reconciliation ties the bank's deposit total, the items the lockbox captured, and what the practice posted, and confirms nothing was banked but left off a claim.
How is a lockbox different from just depositing the checks ourselves?
The difference that matters for reconciliation is who holds the record of what came in. When a practice opens its own mail, the payments sit on a desk and posting can be checked against them. A lockbox removes that stack: the bank receives and deposits the mail, and the practice works from the bank's images and data file instead. That is a genuine control — the money is banked before any staff handle it, separating receiving from posting — but it also means the bank's record, not a pile of mail, is what posting has to be reconciled against.
What happens to a lockbox payment we cannot identify?
It goes to a holding account as unapplied cash and is worked until it is identified — it is not written off. The bank deposits the item because the money is good; posting simply has nothing to apply it to yet, usually because the check carried no account number, the remittance was illegible, or the amount matches no open balance. The image is the starting point for identifying it. Because the money is real and only its destination is missing, an unplaceable item leaves the lockbox by being applied where it belongs, never by being made to disappear.
Does a lockbox handle electronic payments too?
No — a lockbox is for the paper channel. Payments that arrive as an EFT with a matching electronic remittance are paired by the reassociation trace covered in EFT and ERA reassociation, not by a lockbox. What can blur the line is that some banks run a medical lockbox that converts the paper EOBs it captures into an 835 electronic remittance, so those payments post like an ERA — but the intake being reconciled is still the paper that came in the mail.
Key terms in this article
Defined once, on their own pages.
Continue learning
Where to go next.
Payment Reconciliation
The control this applies to one channel: proving completeness against the bank rather than against posting's own record.
EFT and ERA Reassociation
The electronic channel a lockbox does not handle — pairing an EFT deposit with its 835 by the reassociation trace.
Unapplied Cash
Where a lockbox item the practice cannot identify lands — money received but not yet applied to a claim or account.
How Payment Posting Works
The step downstream: applying each lockbox item to the claim it pays is what keeps the day's tie clean.
Days in A/R calculator
The metric a banked-but-unposted lockbox item quietly overstates while the claim it paid still shows open.
Authoritative sources
- ASC X12 — 823 Lockbox transaction set (opens in a new tab)
Maintains the 823 Lockbox transaction set, the EDI standard a bank or lockbox provider uses to transmit incoming-payment detail and totals to a company — from the deposit total down to individual item and remittance detail.
- Bank Administration Institute — Cash Management Balance Reporting (BAI2) (opens in a new tab)
The balance-and-transaction reporting file format banks deliver so a client can match reported deposits and transactions against its own records; its stewardship has since moved to Accredited Standards Committee X9 as the Balance and Transaction Reporting Standard (BTRS).
- Accredited Standards Committee X9 — image cash letter and balance reporting standards (opens in a new tab)
Maintains X9.100-187, the image cash letter standard by which a lockbox's scanned check images are exchanged between banks, and BTRS, the balance-and-transaction reporting standard used to report deposits.
- Check Clearing for the 21st Century Act (Check 21) — 12 U.S.C. 5001, 5003 (opens in a new tab)
Authorizes check truncation and the substitute check, making a bank's imaged copy the legal equivalent of the original — the legal basis for a lockbox depositing from an image and returning images rather than the paper checks.
- Regulation CC — 12 CFR Part 229 (opens in a new tab)
Sets the funds-availability schedule for deposited checks and requires each bank to disclose its own availability policy; the specific timing for a practice's account is set within that schedule by the bank's disclosed deposit agreement.
- Healthcare Financial Management Association (HFMA) (opens in a new tab)
Publishes revenue-cycle cash-handling guidance, including separation of duties when processing patient payments — the control a lockbox implements by receiving and depositing before staff handle the money.
