You must provide receipts or any other documentation required by your agency. However, in instances when documentation might compromise the security of the individuals involved, the head of the agency may waive these requirements.
41 C.F.R. § 301-31.15