Federal law requires banks to keep most records for at least five years, and many institutions hold onto them for seven years or longer to line up with tax audit windows. How long do banks keep records in practice depends on the type: everyday statements, loan files, wire transfer logs, and signature cards each follow their own timeline. Knowing those timelines tells you how far back you can request a copy, how long you have to catch an error, and what you should be saving on your own.
The Five-Year Federal Minimum
The Bank Secrecy Act sets the floor. Its implementing regulations at 31 CFR Part 1010 require financial institutions to keep covered records for at least five years and to store them so they can be retrieved within a reasonable time given the record’s age and type.1eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period
Five years is the legal minimum, not a ceiling. Many banks voluntarily retain records for seven years or more, largely because the longest standard IRS audit windows for individual taxpayers reach that far. When you’re trying to figure out whether your bank will still have something, five years is what you’re guaranteed; anything beyond that depends on the institution’s own policy.
How Long Different Records Are Kept
Retention varies by document type, so it helps to know what falls into which bucket.
Statements, Checks, and Deposit Slips
Monthly account statements, canceled checks, and deposit slips are typically held for five to seven years. Online banking portals usually give you free, immediate access to about the last one to two years. Older records still exist within the retention window, but the bank has to pull them from long-term digital storage or microfilm, which takes time and normally carries a fee.
Signature Cards
Signature cards, which document who owns and can access an account, are kept for the life of the account and for several years after it closes. For national bank trust accounts, federal rules require retention for at least three years after termination of the account or the end of any related litigation.2eCFR. 12 CFR 9.8 – Recordkeeping
Loans and Credit
The retention clock for a loan does not start until the debt is paid off or the account is closed. A 30-year mortgage means the promissory note and related documents stay on file for the full 30 years, then typically another five to seven years after the final payment. Auto loans follow the same pattern: the title and payment history are kept until the loan is paid and the lien released, then for the standard post-closure period. This matters if you ever need to prove a lien was cleared or a payment was made.
Wire Transfers and Large Transactions
Under 31 CFR 1010.410, banks must create and keep records of wire transfers of $3,000 or more (including sender name and address, amount, execution date, and recipient’s institution), extensions of credit over $10,000 other than real-estate-secured loans, and international transfers of funds, checks, or securities exceeding $10,000. All fall under the five-year retention rule.3eCFR. 31 CFR 1010.410 – Records To Be Made and Retained by Financial Institutions
One boundary worth noting: if you hold foreign financial accounts and file a Report of Foreign Bank and Financial Accounts (FBAR), you have your own five-year retention duty running from the FBAR’s due date, separate from what the bank keeps.4Internal Revenue Service. Report of Foreign Bank and Financial Accounts (FBAR)
Requesting Older Records From Your Bank
For anything past the year or two available in your online portal, you’ll need to submit a formal request. Most banks accept these through the online portal, by phone, or at a branch. Processing runs anywhere from a few business days to several weeks depending on the record’s age and where it’s stored.
Fees are the norm for archived retrieval, and they vary by bank:
- Research fees for staff time locating records, often in the range of $30 to $75 per hour
- Per-page or per-statement copy fees, commonly $1 to $5 per statement
- Delivery fees for certified mail or expedited digital delivery
Narrow your request as tightly as you can before sending it. A specific three-month window and account number will cost far less than a request that sweeps across several years. If your bank no longer exists because of a merger or closure, start with the acquiring institution, which typically inherits the predecessor’s records.
How Long You Should Keep Your Own Copies
Because banks may destroy records once the five-year minimum passes, you should not rely on them to have everything you might need. The IRS audit windows are the main reason to hold onto your own copies longer:
- Three years is the standard period the IRS has to audit a return, measured from the filing date.5Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection
- Six years applies if you omitted more than 25% of your gross income.5Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection
- Seven years applies to claims for a loss from worthless securities or a bad debt deduction.6Internal Revenue Service. How Long Should I Keep Records
- There is no time limit if you filed a fraudulent return or failed to file at all.5Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection
Seven years is the practical benchmark for most people. Download or print your statements annually and store them somewhere secure, along with tax-related documents and any records tied to open loans.
Dispute Deadlines That Make Records Time-Sensitive
Old records matter most when something goes wrong, and federal law gives you narrow windows to catch problems.
Debit Cards and Electronic Transfers
The Electronic Fund Transfer Act, implemented through Regulation E, ties your liability for unauthorized debit card use, ATM withdrawals, and other electronic transfers to how fast you report the loss:
- Report within 2 business days of learning about the loss or theft: liability capped at $50.7eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report after 2 business days but within 60 days of receiving your statement: liability up to $500.7eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report after 60 days: you could be on the hook for the full amount of unauthorized transfers occurring after that 60-day window.7eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
Credit Card Billing Errors
The Fair Credit Billing Act gives you 60 days after the issuer sends a statement to submit a written dispute identifying the error and explaining why you believe the charge is wrong.8Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors The issuer must acknowledge the notice within 30 days and resolve the dispute within two billing cycles, no more than 90 days total. While the investigation is open, the issuer cannot try to collect the disputed amount or report it as delinquent.
Reviewing statements within a few days of receiving them is the single most effective habit for keeping your exposure low.
What Happens When Retention Ends
Once retention periods expire, banks cannot simply throw records away. The FACTA Disposal Rule requires reasonable steps to prevent unauthorized access to consumer information during disposal, whether that means shredding paper, destroying electronic media, or using a vetted document destruction company.9eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records What’s “reasonable” depends on the sensitivity of the information and available technology, but the practical result is the same: once a bank decides to purge, the record is gone. That’s the reason to keep your own copies longer than the bank does, and to request anything you might need before the five-year clock runs out.