No stranger can call your bank and find out how much money is in your account. Federal privacy law makes your balance confidential, and the short list of people who can legally check your bank account balance is limited to those you’ve authorized, bank staff doing their jobs, specific government agencies acting through defined legal channels, and creditors who have already sued you and won.
People You’ve Given Access To
The largest category of people who can see your balance is the one you created yourself.
Anyone listed as a co-owner on a joint account has full access to the balance, transaction history, online banking portal, and paper statements. Banks treat every person on a joint account as an equal owner of the entire balance, regardless of who deposited the money or how recently the co-owner was added. You cannot set up tiered visibility so one co-owner sees less than another. The same principle means any co-owner can also withdraw the full balance at any time. Adding someone to your account for convenience gives that person the same legal rights to the funds that you have.
A person you’ve named as your agent under a durable power of attorney can also see your balance and conduct transactions on your behalf. The “durable” designation means the authority survives if you become incapacitated, which is the point for most people who set one up. A springing power of attorney, by contrast, only takes effect once you’re incapacitated, and the agent may need a doctor’s certification before the bank grants access. Banks typically require the agent to present the original notarized document, a valid government-issued photo ID, and a list of the specific accounts involved. Court-appointed guardians and conservators have similar access, backed by a court order rather than a private agreement.
After death, access shifts again. If the account was jointly held, the surviving co-owner keeps full access. For accounts held solely in the deceased person’s name, a probate court has to formally appoint someone before the bank will share any information. An executor named in a will receives letters testamentary from the court; an administrator appointed when there’s no will receives letters of administration. Either document authorizes the fiduciary to view balances and manage the funds. Many states offer a simplified process for small estates below a set value.
Bank Employees
Bank employees can view your balance as part of their job. Tellers check balances to process withdrawals and deposits, customer service representatives pull up accounts to answer questions, and fraud investigators review transaction patterns for unauthorized activity. Banks generally maintain internal logs tracking which employee opened an account and when, creating an audit trail meant to deter misuse.
Your bank can also look across the different accounts you hold at the same institution to exercise what’s called a right of offset. If you fall behind on a loan with the same bank where you keep your checking or savings, the bank can pull money from your deposit account to cover the missed payment, as long as your account agreement allows it.1HelpWithMyBank.gov. May a Bank Use My Deposit Account to Pay a Loan to That Bank? Federal law prohibits the bank from using offset to collect on a consumer credit card balance, but other loan types like auto loans or personal loans are fair game when the contract permits.
Federal Privacy Laws That Set the Ground Rules
Two statutes decide who gets past the front door.
The Gramm-Leach-Bliley Act (GLBA) bars your bank from sharing your nonpublic personal information, including your account balance, transaction history, and account numbers, with outside companies unless the bank first gives you a clear written notice describing what it shares and with whom.2Office of the Law Revision Counsel. 15 USC 6802 – Obligations With Respect to Disclosures of Personal Information You must also be given a reasonable way to opt out, such as a toll-free number or an online form, and time to respond before anything is disclosed. The GLBA also specifically bars your bank from sharing your account number with any outside company for marketing purposes. There’s a narrow exception for service providers, such as a vendor that prints statements, provided they agree in writing to keep your data confidential.
The Right to Financial Privacy Act (RFPA) adds a separate layer specifically against federal government access. Under the RFPA, no federal agency can reach your bank records unless it goes through one of five channels: your written consent, an administrative subpoena, a search warrant, a judicial subpoena, or a formal written request.3Office of the Law Revision Counsel. 12 U.S. Code 3402 – Access to Financial Records by Government Authorities Prohibited; Exceptions The RFPA covers federal agencies only. State and local access is governed by state privacy laws, which vary.
Government Agencies
Federal investigators can’t just ask. When they need your records for a criminal case, they generally obtain a search warrant or grand jury subpoena to track assets or verify claims.
Automatic Reports the Bank Files on Its Own
Some transactions trigger reports to the government with no warrant, no subpoena, and no notice to you. Under the Bank Secrecy Act, your bank must file a Currency Transaction Report whenever you make a cash deposit, withdrawal, or exchange exceeding $10,000.4Office of the Law Revision Counsel. 31 U.S. Code 5313 – Reports on Domestic Coins and Currency Transactions These go to the Financial Crimes Enforcement Network, not the IRS. Banks must also file Suspicious Activity Reports for transactions of $5,000 or more that the bank suspects involve money laundering, fraud, or other criminal activity.5Office of the Comptroller of the Currency. Suspicious Activity Report (SAR) Program The bank is prohibited from telling you a SAR has been filed.
Separately, if your accounts earn at least $10 in interest during the year, your bank files Form 1099-INT with the IRS reporting the amount.6Internal Revenue Service. About Form 1099-INT, Interest Income The form doesn’t report your balance, but it does tell the IRS you hold an interest-bearing account and how much income it generated.
Benefit and Child Support Agencies
State child support agencies operate under a federal mandate to locate the bank accounts of parents who owe past-due support. Every state runs a data-match program with financial institutions, in which banks provide account holder names, addresses, and Social Security numbers for individuals flagged by the state.7Office of the Law Revision Counsel. 42 U.S. Code 666 – Requirement of Statutorily Prescribed Procedures Once a match hits, the agency can issue a lien or levy to freeze and seize funds, often without a separate court hearing for each account. Banks are shielded from liability for complying.
If you apply for or receive Supplemental Security Income, the Social Security Administration uses an automated system called Access to Financial Institutions to verify the balances you reported. It can also detect undisclosed accounts by running geographic searches across financial institutions in your area.8Social Security Administration. Reducing Improper Payments – Access to Financial Institutions Medicaid programs covering people based on age, blindness, or disability are similarly required to use electronic asset verification systems that query financial institutions directly.9Medicaid and CHIP Payment and Access Commission. State Compliance with Electronic Asset Verification Requirements Applying for either program effectively means consenting to these balance checks.
Creditors Only After They’ve Sued You and Won
A debt collector or creditor cannot call your bank and ask for your balance. Federal privacy law blocks that entirely. The situation changes only after the creditor sues you and wins a court judgment for a specific dollar amount. At that point they become a judgment creditor with access to tools designed to find your assets.
The most common tool is a garnishment order, sometimes called a writ of execution, issued by the court that entered the judgment. It directs your bank to freeze non-exempt funds and report back how much is in the account. The bank typically must respond within 20 to 30 days, depending on state law. The creditor can also send post-judgment interrogatories, written questions you answer under oath about your accounts, balances, and other assets.
Banks commonly charge an administrative fee when processing a garnishment. These fees vary but often fall in the $75 to $125 range, and the bank may charge the fee whether or not any funds are actually seized.
The Other Side in a Lawsuit
Even without a debt, your balance can surface during litigation. In divorce cases, custody disputes, and personal injury lawsuits, both sides go through discovery, where each party must hand over financial documents, including months of bank statements, to the other. The opposing party doesn’t get login access, but the statements reveal balances, deposits, and spending patterns.
Attorneys use these records to calculate alimony, child support, or a party’s ability to pay a settlement. Refusing to produce requested statements can lead to court sanctions, and judges may draw negative conclusions, assuming the hidden information would have been unfavorable. Financial documents are sometimes filed under seal to keep them from public view, but the opposing party and their attorney will see them.
Apps You’ve Linked to Your Account
When you connect your bank to a budgeting app, payment service, or investment platform, you authorize that service to see your account data, often including balance and full transaction history. Many services connect through data aggregators that log in on your behalf, using either your credentials or a direct data-sharing link with the bank. Once connected, they see what you see when you log in.
The Consumer Financial Protection Bureau has finalized rules under Section 1033 of the Dodd-Frank Act requiring banks to share your data with authorized third parties in a standardized electronic format when you request it, and limiting what those third parties can do with the data.10eCFR. 12 CFR Part 1033 – Personal Financial Data Rights Third parties can’t collect more than they need and must delete data when you revoke access. If you don’t want an app to see your balance, revoke its connection through your bank’s online settings or contact your bank directly.
If Someone Accessed Your Account Improperly
If a bank or federal agency reaches your financial records in violation of the Right to Financial Privacy Act, you can sue for damages. The law provides a minimum of $100 in statutory damages per violation, regardless of whether you suffered a measurable loss.11Office of the Law Revision Counsel. 12 U.S. Code 3417 – Civil Penalties On top of that, you can recover actual damages, for instance if the improper disclosure led to identity theft or a lost business opportunity. If the violation was willful, the court can also award punitive damages. A successful claim entitles you to attorney’s fees and court costs.
Violations of the Gramm-Leach-Bliley Act’s privacy provisions, such as a bank sharing your data with an outside company without giving you the required opt-out notice, are enforced by federal regulators like the Federal Trade Commission and banking agencies rather than through a private lawsuit. If you believe your bank is improperly sharing your information, file a complaint with the Consumer Financial Protection Bureau or your bank’s primary federal regulator.