Your bank balance is private information, and no stranger, ex, nosy relative, or random debt collector can call your bank and get it. Under federal law, the short list of people who can legitimately check your bank account balance without a special request from you is narrow: anyone named as a joint owner, an agent you appointed under a power of attorney, bank employees doing their jobs, government agencies using specific legal channels, benefit programs you’ve applied to, creditors who have sued you and won, opposing parties in certain lawsuits, and the court-appointed executor of your estate after you die. Everything else runs into the Gramm-Leach-Bliley Act and the Right to Financial Privacy Act.
The Two Federal Laws That Set the Baseline
The Gramm-Leach-Bliley Act (GLBA) stops your bank from handing your “nonpublic personal information” — balance, transactions, account numbers — to outside companies unless the bank first sends you a written notice describing what it shares and with whom, and gives you a reasonable way to opt out.1Office of the Law Revision Counsel. 15 USC 6802 – Obligations With Respect to Disclosures of Personal Information The GLBA also flatly bars your bank from sharing your account number with any outside company for marketing. One exception matters: the bank can share information with a service provider that works on the bank’s behalf, such as a statement printer or payment processor, as long as that provider agrees in writing to keep the data confidential.
The Right to Financial Privacy Act (RFPA) layers on top of that for government access. No federal agency can see your bank records unless it uses one of five channels: your written consent, an administrative subpoena, a search warrant, a judicial subpoena, or a formal written request.2Office of the Law Revision Counsel. 12 U.S. Code 3402 – Access to Financial Records by Government Authorities Prohibited; Exceptions The RFPA only covers federal agencies. State and local government access runs on state privacy law, which varies.
Joint Account Holders
Anyone listed as a co-owner on your account has full access to the balance, the transaction history, the online banking portal, and the paper statements. Banks treat every person on a joint account as an equal owner of the entire balance, no matter who deposited the money or when the co-owner was added. There is no tiered access on a joint account. A co-owner can also withdraw the full balance at any time. Adding someone to your account for convenience gives that person the same legal rights to the funds that you have.
Power of Attorney Agents and Court-Appointed Fiduciaries
Someone you named as your agent under a durable power of attorney (POA) can see your account balance and move money on your behalf. “Durable” means the authority survives your incapacity, which is the usual reason for creating one. A “springing” POA takes effect only once you become incapacitated, and the bank may require a doctor’s certification before releasing access.
Banks typically ask the agent for the original notarized POA document, a government-issued photo ID, and a list of the specific accounts covered. They may request additional paperwork, such as a physician’s letter, if capacity is in question. Court-appointed guardians and conservators get similar access, backed by a court order instead of a private document.
Bank Employees and the Bank Itself
Tellers, customer service representatives, and fraud investigators all have reason to view your account during the normal course of business. Banks generally keep internal logs that record which employee opened an account record and when, giving the institution an audit trail to catch misuse.
The bank itself can also look across your accounts to exercise its “right of offset.” If you fall behind on a loan at the same bank where you keep a checking or savings account, the bank can pull money from your deposit account to cover the missed payment, provided your account agreement allows it.3HelpWithMyBank.gov. May a Bank Use My Deposit Account to Pay a Loan to That Bank? Federal law blocks offset against a consumer credit card balance, but other loan types, like auto or personal loans, are fair game if the contract permits it.
Government and Law Enforcement
Federal investigators cannot phone your bank and ask what you have on deposit. The RFPA forces them into one of its five legal channels, and in a criminal investigation that usually means a search warrant or a grand jury subpoena.2Office of the Law Revision Counsel. 12 U.S. Code 3402 – Access to Financial Records by Government Authorities Prohibited; Exceptions
Automatic Reports Under the Bank Secrecy Act
Some transactions trigger a government report with no warrant, no subpoena, and no notice to you. Under the Bank Secrecy Act, your bank must file a Currency Transaction Report (CTR) whenever you make a cash deposit, withdrawal, or exchange of more than $10,000.4Office of the Law Revision Counsel. 31 U.S. Code 5313 – Reports on Domestic Coins and Currency Transactions CTRs go to the Financial Crimes Enforcement Network (FinCEN). Non-bank businesses that take more than $10,000 in cash file Form 8300 with the IRS, but that is a separate filing from the one your bank makes.5Internal Revenue Service. Understand How to Report Large Cash Transactions
Banks must also file a Suspicious Activity Report (SAR) for transactions of $5,000 or more that the bank suspects involve money laundering, fraud, or other criminal activity.6Office of the Comptroller of the Currency. Suspicious Activity Report (SAR) Program The bank is prohibited from telling you a SAR has been filed.
Benefit Programs: SSI and Medicaid
Applying for Supplemental Security Income (SSI) effectively consents to balance checks. The Social Security Administration runs an automated system called Access to Financial Institutions (AFI) that verifies the accounts you report and can also run geographic searches to turn up accounts you did not disclose.7Social Security Administration. Reducing Improper Payments – Access to Financial Institutions AFI runs at the initial application and during periodic reviews.
Medicaid programs that cover people based on age, blindness, or disability are required by federal law to use electronic asset verification systems that query financial institutions directly for accounts in the applicant’s name.8Medicaid and CHIP Payment and Access Commission. State Compliance with Electronic Asset Verification Requirements States that fail to run a compliant system face reductions in their federal Medicaid funding.
Child Support Enforcement
Every state operates a federally required data-match program with financial institutions. Banks hand over names, addresses, and Social Security numbers for individuals the state has flagged as owing past-due child support.9Office of the Law Revision Counsel. 42 U.S. Code 666 – Requirement of Statutorily Prescribed Procedures Once a match comes back, the agency can issue a lien or levy to freeze and seize funds, often without a separate court hearing for each account. Banks have immunity from liability for complying with these matches.
Creditors Who Have Sued You and Won
A debt collector cannot call your bank and ask what you have in your account. That changes once the creditor sues you and the court enters a judgment for a specific dollar amount. The creditor becomes a “judgment creditor” and gains access to tools built for locating assets.
The main tool is a garnishment order, sometimes called a writ of execution, issued by the court that entered the judgment. The order directs your bank to freeze non-exempt funds and report back how much is in the account. The bank typically has 20 to 30 days to respond, depending on state law. The creditor can also serve post-judgment interrogatories, written questions you must answer under oath about your accounts, balances, and other assets.
Banks usually charge an administrative fee for processing a garnishment, often in the $75 to $125 range, and they can charge it even if no money ultimately gets seized. The fee comes out of your account.
Opposing Parties in a Lawsuit
Even without a judgment against you, your balance can surface during litigation. In divorce, custody, and personal injury cases, both sides go through discovery, which requires producing financial documents including months of bank statements. The other side does not get login access, but the statements show balances, deposits, and spending patterns.
Attorneys use the records to calculate alimony, child support, or a party’s ability to pay a settlement. Refusing to produce requested statements can bring court sanctions, and judges may assume the hidden information would have hurt the party who withheld it. Statements are sometimes filed under seal to keep them off the public record, but the opposing party and their lawyer still see them.
Third-Party Apps You’ve Linked
When you connect a budgeting app, payment service, or investment platform to your bank, you authorize that service to see your account data, often including your balance and full transaction history. Many apps connect through data aggregators that log in to your bank on your behalf using either your credentials or a direct data-sharing link, and once connected they see what you see.
A Consumer Financial Protection Bureau rule under Section 1033 of the Dodd-Frank Act now requires banks to share your data with authorized third parties in a standardized electronic format when you ask them to, and limits what those third parties can do with the data: they cannot collect more than they need, and they must delete it when you cut off access.10eCFR. 12 CFR Part 1033 – Personal Financial Data Rights To stop an app from seeing your balance, revoke its connection in your bank’s online settings or contact the bank directly.
Executors After You Die
A deceased person’s accounts do not automatically open up to family. If the account was joint, the surviving co-owner keeps full access. For accounts in the deceased person’s name alone, a probate court has to formally appoint someone before the bank will release information. An executor named in a will receives “letters testamentary”; an administrator appointed when there is no will receives “letters of administration.” Either document lets the fiduciary see balances and manage the funds while settling the estate. Many states also offer a simplified process for small estates under a dollar threshold set by state law.
If Someone Accessed Your Records Improperly
If a bank or federal agency accessed your records in violation of the Right to Financial Privacy Act, you can sue. The statute provides a minimum of $100 in statutory damages per violation whether or not you can prove financial harm, plus any actual damages you did sustain, such as losses from identity theft caused by the disclosure.11Office of the Law Revision Counsel. 12 U.S. Code 3417 – Civil Penalties Willful or intentional violations can bring punitive damages, and a successful claim covers your attorney’s fees and court costs.
Gramm-Leach-Bliley is enforced differently. The Federal Trade Commission and the federal banking agencies, not individual lawsuits, handle violations of its privacy provisions. If you believe your bank is sharing your information improperly, you can file a complaint with the Consumer Financial Protection Bureau or your bank’s primary federal regulator.