Credit card companies must keep your account records for at least five years under federal banking law, and most major issuers hold billing statements for six to seven years. How long credit card companies keep records depends on the type of document: statements, applications, dispute files, and identity theft records each fall under different federal rules with different retention periods.
The Five-Year Federal Minimum
The Bank Secrecy Act sets the floor. Financial institutions must retain account statements showing each transaction for at least five years.1FFIEC BSA/AML Manual. Appendix P – BSA Record Retention Requirements For credit card accounts specifically, the issuer must keep your identifying information for five years after the account is closed or becomes dormant.2FFIEC BSA/AML Manual. Regulatory Requirements for Customer Identification Programs
Five years is the legal minimum, not the typical practice. Once an issuer has met its obligations and no other rule requires longer retention, it has no duty to keep your records indefinitely.
Why Most Issuers Keep Statements Six to Seven Years
In practice, most major card issuers hold billing statements for six to seven years. That longer window tracks IRS audit timelines. The standard period of limitations for most tax returns is three years from the filing date, but if you understate gross income by more than 25 percent, the window extends to six years.3Internal Revenue Service. Overview of Statute of Limitations on the Assessment of Tax Claims involving a bad debt or worthless security carry a seven-year filing window.4Internal Revenue Service. Time You Can Claim a Credit or Refund
Because credit card statements often serve as proof of deductible business expenses, charitable donations, or medical costs, the six-to-seven-year retention window essentially mirrors these IRS timelines. Some records need to live even longer on your end. If you use a card to pay for home improvements, the IRS expects you to keep records that affect the cost basis of your home for as long as you own the property and for the limitations period after you sell.5Internal Revenue Service. Publication 530 Tax Information for Homeowners Don’t count on your issuer to store those for you. Download or print statements for major purchases that could affect future tax calculations.
Credit Application Records
When you apply for a card, federal law requires the issuer to keep your application on file regardless of whether you were approved or denied. Under Regulation B, which implements the Equal Credit Opportunity Act, creditors must retain consumer credit applications for at least 25 months after notifying you of the decision. That includes the application itself, any information used to evaluate it, and the written statement of reasons if you were denied.6eCFR. 12 CFR 1002.12 – Record Retention Any written complaint you file alleging discrimination or a violation of the law must also be preserved.
Business credit applications follow different periods based on the applicant’s size. For businesses with $1 million or less in gross revenue, the creditor must keep records for at least 12 months after notifying the applicant of the decision. For businesses with more than $1 million in gross revenue, the minimum is 60 days, extended to 12 months if the applicant asks in writing for the reasons behind a denial.6eCFR. 12 CFR 1002.12 – Record Retention
If the creditor is under investigation or subject to an enforcement action for an ECOA violation, it must hold all relevant records until the matter is fully resolved, even after the normal retention period has run.7Consumer Financial Protection Bureau. 12 CFR Part 1002 (Regulation B) – Section 1002.12 Record Retention
Billing Dispute Records
When you dispute a charge, the issuer must follow the billing error resolution procedures in the Fair Credit Billing Act and Regulation Z.8Federal Trade Commission. Fair Credit Billing Act The creditor must acknowledge your dispute, investigate it, and send you the results within two complete billing cycles and no more than 90 days after receiving your written notice.9Consumer Financial Protection Bureau. Section 1026.13 Billing Error Resolution
Regulation Z requires creditors to retain evidence of compliance with these procedures for two years after the date the action was required.10eCFR. 12 CFR 1026.25 – Record Retention That includes your original dispute letter, the investigation results, correspondence sent to you during the process, and documentation showing that interest charges or fees were properly adjusted. If the issuer determines you still owe some or all of the disputed amount, it must also keep the written notice explaining why and when payment was due.9Consumer Financial Protection Bureau. Section 1026.13 Billing Error Resolution
Records Related to Identity Theft
If someone fraudulently opens or uses a credit card in your name, federal law gives you a specific right to obtain the transaction records. Under the Fair Credit Reporting Act, a business that extended credit based on a stolen identity must provide you with copies of the application and all transaction records related to the fraud within 30 days of your written request, at no charge.11Federal Trade Commission. Businesses Must Provide Victims and Law Enforcement with Transaction Records Relating to Identity Theft
You will need to prove your identity and prove that you are a victim. A police report and a completed identity theft affidavit (the FTC provides a standardized form) satisfy this requirement. You can also authorize law enforcement to receive the same records directly. The issuer cannot refuse simply because the fraudulent account has been closed.
What About Your Credit Report
The retention periods above govern what the issuer keeps internally. What appears on your credit report is a separate question, and one that often gets conflated. Under the Fair Credit Reporting Act, most adverse items on a credit report—late payments, charge-offs, and accounts sent to collections—must be removed after seven years, measured from the date of the first missed payment that led to the delinquency. A Chapter 7 bankruptcy can remain for up to ten years from the date of filing.12Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
Those limits apply to the credit bureaus, not to your card issuer. The issuer may still hold the underlying account records long after the information falls off your report.
Getting Copies After You’ve Closed the Account
Once your account is closed, you lose access to the online dashboard where you previously viewed statements. The issuer moves your files from active systems into archived storage, and getting copies requires a direct request. Contact the bank’s records or compliance department. Sending your request by certified mail creates a paper trail and confirms it reached the right office. Be ready to provide your Social Security number and the approximate dates of the account activity you need.
Issuers commonly charge a fee in the range of five to fifteen dollars per statement retrieved from the archives, and processing typically takes two to four weeks. Some banks deliver physical copies by mail; others provide a secure one-time download link. The further back the records go, the longer retrieval may take, and records that have passed the issuer’s retention period may no longer be available at all.
What Happens to Records After Retention Ends
Once retention obligations expire, your issuer cannot simply throw the records away. The FTC’s Safeguards Rule requires financial institutions to develop procedures for securely disposing of customer information no later than two years after it was last used to serve you, unless the institution has a legitimate business need or legal requirement to keep it longer.13eCFR. 16 CFR Part 314 – Standards for Safeguarding Customer Information The FTC’s Disposal Rule separately requires any business that possesses consumer report information to take reasonable measures against unauthorized access during disposal, such as shredding paper records or destroying electronic media so the data cannot be reconstructed.14eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records
If a record you need for taxes, a dispute, or a large purchase may fall outside these windows, save your own copy now. Once the issuer’s clock runs out, the record may be gone.