How Long Are Banks Required to Keep Your Records?

Banks are generally required to keep your records for at least five years. That floor comes from the Bank Secrecy Act and Treasury Department regulations, and it covers most of what a customer would think of as a “bank record”: account statements, signature cards, deposit slips over $100, canceled checks, and wire transfer records of $3,000 or more.1eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period The underlying statute lets Treasury set retention as long as six years when there’s a law enforcement or regulatory reason, but the regulations settle on five for most categories.2Office of the Law Revision Counsel. 12 USC 1829b – Retention of Records by Insured Depository Institutions

Five years is the answer for most situations, but a handful of record types run on different clocks, and a few situations pause or extend the clock entirely. The details matter when you need something back.

How Long Each Type of Record Sticks Around

Statements, Signature Cards, and Everyday Transactions

Banks must keep the original or a copy of each statement, ledger card, or other record showing transactions on every deposit account, plus deposit slips for any transaction over $100 and signature cards granting account authority.3eCFR. 31 CFR 1020.410 – Records To Be Made and Retained by Banks These fall under the general five-year rule.1eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period

Many banks voluntarily post seven years of statements to their online portals, but that’s a business choice, not a legal one. Past the mandatory window, the bank has no obligation to produce anything.

Wire and Funds Transfers

For any payment order of $3,000 or more, banks must record detailed information about the originator, the beneficiary, and the transaction. The specifics depend on whether the bank is originating, receiving, or acting as an intermediary.3eCFR. 31 CFR 1020.410 – Records To Be Made and Retained by Banks Retention is the same five years.

Customer Identification Records

The information collected when you opened your account is kept for five years after the account is closed. For credit cards, the clock starts when the account is closed or becomes dormant, whichever comes first. The supporting verification records (the documents used to confirm your identity) run on their own five-year clock from the date they were created.4eCFR. 31 CFR 1020.220 – Customer Identification Programs for Banks

Loan Applications

Loan application records run much shorter. Under the Equal Credit Opportunity Act, creditors must keep the application, the notice of action taken, any statement of reasons for denial, and any written complaint from the applicant for 25 months after the decision is communicated. For business credit applications, that shrinks to 12 months.5eCFR. 12 CFR 1002.12 – Record Retention

Mortgage Closing Documents

Closing disclosures and related mortgage documents must be kept for five years after the loan closes. If the loan is sold and no longer serviced by the original lender, the closing disclosure transfers to the new owner or servicer, who holds it for whatever remains of the five years.6Consumer Financial Protection Bureau. 12 CFR 1026.25 – Record Retention

Suspicious Activity and Currency Transaction Reports

Copies of every Suspicious Activity Report and Currency Transaction Report must be retained for five years from the date of filing.7eCFR. 31 CFR 1010.306 – Filing of Reports Supporting documentation follows the same five-year rule.1eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period

When the Clock Runs Longer

Several situations extend or pause the standard timeline.

Legal holds and investigations. When records relate to pending litigation or a government investigation, banks typically place a legal hold that blocks destruction even if the normal retention period has expired. For records tied to foreign financial accounts, the five-year clock is explicitly paused during any criminal proceeding involving a false or missing federal tax return; the pause runs from indictment through final disposition.8eCFR. 31 CFR Part 1010 Subpart D – Records Required To Be Maintained

Dormant and escheated accounts. When an account sits dormant long enough to trigger a state’s abandoned property laws, the bank cannot simply destroy its records at year five. The records must be maintained until the funds are turned over to the state, and states generally require banks to keep escheatment reports and supporting documents for a decade or more after the transfer. Because rules vary by state and account type, these records often outlive any federal minimum.

Electronic storage. Digital storage does not change how long records must be kept, but it does impose a format requirement. Under the E-SIGN Act, electronic records satisfy any retention obligation as long as they accurately reflect the original information and stay accessible in a form that can be reproduced throughout the required period.9Office of the Law Revision Counsel. 15 USC Chapter 96 – Electronic Signatures in Global and National Commerce A file the bank can’t retrieve doesn’t count.

If Your Bank Fails or Merges

Records don’t vanish when a bank does. When the FDIC is appointed receiver of a failed bank, it must preserve the institution’s records for at least six years before destroying anything it considers unnecessary.10eCFR. 12 CFR 360.11 – Records of Failed Insured Depository Institutions

If the FDIC transfers records to an acquiring institution through a purchase-and-assumption deal, that bank must agree not to destroy them for at least six years from the date the FDIC was appointed receiver. Records that were already at least ten years old on the date of failure can be destroyed at the FDIC’s discretion.10eCFR. 12 CFR 360.11 – Records of Failed Insured Depository Institutions

Customers of a failed bank can contact the FDIC’s Failed Bank Customer Service Center to locate records or find out which institution took over their accounts. In a straightforward merger between healthy banks, the surviving institution inherits all record-keeping obligations. Account numbers and login portals may change during the transition, but the records themselves stay put.

Why Bank Retention May Not Cover an IRS Audit

The gap between what banks keep and what the IRS can ask about catches people off guard. The IRS generally has three years from the date you file a return to assess additional tax. If you omit more than 25% of the gross income shown on your return, that window stretches to six years. If you file a fraudulent return or never file at all, there’s no time limit.11Internal Revenue Service. Topic No. 305, Recordkeeping

Six years of audit exposure, five years of guaranteed bank retention. If the IRS opens a six-year audit and needs statements from that outermost year, your bank may already have purged them. The IRS expects you to keep your own records for as long as they may be relevant to any return you’ve filed.12Internal Revenue Service. How Long Should I Keep Records

Don’t rely on your bank as your backup filing cabinet. Save your own copies of annual statements, 1099 forms, and any transaction records that support a deduction, credit, or income figure. Seven years is a reasonable floor. For records tied to real property, the IRS says to hold them until the limitations period expires for the year you sell the property, which can be much longer.

Getting Your Own Records From the Bank

Check the online portal first. Most banks give free digital access to statements and transaction history going back several years. If you need something older than what’s posted, contact customer service or visit a branch.

Have your account number, government-issued ID, and a specific date range ready when you ask. A request for “March 2021 statement” costs less and moves faster than “all records from 2019 to 2022.” Banks commonly charge per-statement fees, and older archived records can carry hourly research fees on top. Electronic copies typically arrive within a few business days; paper copies of archived material can take weeks.

If the bank has failed, contact the FDIC’s Failed Bank Customer Service Center. If it merged, the surviving bank has the records. Either way, the cheapest and fastest way to get a bank record is to already have your own copy.