Yes, banks do look at your transactions, and they are required by federal law to do it. Every U.S. financial institution runs monitoring programs under the Bank Secrecy Act to detect money laundering, tax evasion, and fraud, and they file reports with the government when certain thresholds or red flags are triggered.1FinCEN.gov. The Bank Secrecy Act No one is reading your coffee purchases line by line, but software is watching patterns, and humans review what the software flags.
Why Banks Are Required to Watch
The Bank Secrecy Act obligates every financial institution to keep records of cash purchases, verify who its customers are, and file reports with the Financial Crimes Enforcement Network when transactions meet certain thresholds or look suspicious.2Internal Revenue Service. Bank Secrecy Act Two reports do most of the work.
A Currency Transaction Report is filed whenever cash activity crosses $10,000 in a single day. A Suspicious Activity Report is filed when the bank has reason to believe a transaction involves illegal funds or is designed to dodge the reporting rules; for banks the SAR threshold begins at $5,000 in suspicious activity.3Internal Revenue Service. Bank Secrecy Act – Section: Suspicious Activity Report (SAR) Because the penalties for missing a required report are steep, banks tend to report more, not less.
The $10,000 Cash Rule and Why Splitting It Up Is Worse
Any cash deposit, withdrawal, or exchange totaling more than $10,000 in one business day automatically generates a Currency Transaction Report to FinCEN.4eCFR. 31 CFR 1010.311 – Filing Obligations for Reports of Transactions in Currency The rule covers all of your cash handled through the institution that day, not just a single ticket. A $6,000 morning deposit and a $5,000 afternoon withdrawal get added together.
Breaking a larger transaction into smaller pieces to stay under $10,000 is called structuring, and it is a federal crime on its own, regardless of whether the underlying money is legal. A small business owner who deposits $9,500 every Monday to avoid the paperwork is committing the offense. A basic conviction carries up to five years in prison; when structuring is tied to a broader pattern of illegal activity involving more than $100,000 in twelve months, the maximum doubles to ten years.5Office of the Law Revision Counsel. 31 USC 5324 – Structuring Transactions to Evade Reporting Requirement Prohibited The government can also seize the funds through civil forfeiture, before any criminal conviction. If you have a legitimate reason to move a large amount of cash, one report is far better than a pattern of just-under deposits.
How the Actual Monitoring Works
No one is manually reviewing your account. The volume makes that impossible. Instead, banks run automated software that builds a profile for each customer from spending history, deposit patterns, typical transaction sizes, and geographic activity. When something falls outside your normal range, the system flags it for a human analyst.
The algorithms are tuned to patterns that match known methods of financial crime: rapid movement of large sums with no clear business reason, frequent transfers to countries with weak financial oversight, sudden spikes in cash activity, or a series of deposits just below the $10,000 line. The analyst then decides whether the activity warrants a Suspicious Activity Report.
One side effect of this system is de-risking. When a bank’s tools keep flagging a customer, or an entire category of customers, the institution sometimes decides it is cheaper to close the relationship than to keep managing the compliance burden. The Treasury Department has acknowledged that de-risking pushes activity outside the regulated banking system and disproportionately affects economically vulnerable populations and communities that rely on remittances.6U.S. Department of the Treasury. The Department of the Treasury’s De-risking Strategy
Why Your Bank Won’t Tell You Why It Closed Your Account
When a bank files a SAR about your account, federal law prohibits anyone at the institution from telling you. No employee, officer, director, or contractor may notify you that a report exists or share information that would tip you off, and the same restriction applies to government employees who learn about it.7Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority
That is why an account can be flagged, held, or closed with only a vague reference to “internal review” or “risk assessment.” The bank is not being rude; it is legally barred from saying more. You have no right to see the report itself. You do have the right to access your funds once any hold period ends, and you can file complaints with the Consumer Financial Protection Bureau or the Office of the Comptroller of the Currency if you believe the action was unjustified.
Fraud Monitoring and the 48-Hour Rule
The monitoring most customers actually want is fraud detection. Banks track transactions in real time to catch signs of identity theft, card skimming, or account takeover. A purchase in a city you have never visited, a small test charge followed by a large one, or a burst of activity at high-fraud merchants will typically trigger a hold and a verification message.
What matters most on your side is speed. Under Regulation E, your liability for unauthorized electronic transfers depends almost entirely on how quickly you report them:
- Report within two business days of discovering the problem, and your maximum liability is $50.8eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report between two and sixty days, and your liability can rise to $500.
- Wait longer than sixty days from your statement date, and you can be liable for the full amount of any unauthorized transfers that occur after that window, with no cap.
The gap between a $50 loss and losing everything can be a single phone call inside 48 hours. If something like hospitalization prevented you from reporting sooner, the bank must extend these deadlines to a reasonable period.8eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers Not checking your statements does not qualify.
When the Government Asks the Bank for Your Records
Banks file CTRs and SARs on their own, but federal agencies also request records directly. The Right to Financial Privacy Act limits how they can do that.9FDIC. VIII-3 Right to Financial Privacy Act A federal agency generally must use one of several formal procedures, and most require notifying you first.
If an administrative subpoena, judicial subpoena, or formal written request is used, you must receive a copy on or before the date the request goes to the bank. You then have at least ten days, or fourteen if the notice was mailed, to challenge the request in court before the bank turns anything over.10Office of the Law Revision Counsel. Chapter 35 – Right to Financial Privacy You can also authorize disclosure yourself, but that authorization expires after three months and cannot be open-ended.
The protections have real gaps. A court can delay the notice requirement for up to ninety days if a judge finds that tipping you off would endanger lives, cause destruction of evidence, or seriously jeopardize an investigation. Search warrants work differently: the government can obtain your records first and notify you up to ninety days later, with possible extensions to 180 days.10Office of the Law Revision Counsel. Chapter 35 – Right to Financial Privacy Emergency access is allowed when delay would create immediate danger, and the government must file a sworn statement within five days.
One boundary worth knowing: these protections apply only to individuals and small partnerships of five or fewer people. Corporations and larger partnerships have no rights under the statute.
When Scrutiny Ramps Up
Mortgage Applications
Applying for a mortgage puts your account under a different kind of eye. Underwriters typically want two months of bank statements, and longer for self-employed borrowers or non-traditional income. They are looking for large, unexplained deposits. Under Fannie Mae’s guidelines, a “large deposit” is any single deposit exceeding 50% of your total monthly qualifying income, and anything crossing that line raises the question of whether you have taken on an undisclosed debt.11Fannie Mae. Depository Accounts You will need a paper trail: gift letter from a relative, tax refund documentation, sale receipts.
Underwriters also watch for recurring payments that do not appear on your credit report, such as private loans or cash advances, and for consistent overdrafts. Keep the accounts calm for at least two months before applying, and be ready to explain anything that is not a regular paycheck.
Payment Apps
Banks are not the only ones tracking money movement. Third-party payment platforms like Venmo, PayPal, and Cash App must report your activity to the IRS on Form 1099-K if you receive more than $20,000 in payments for goods or services across more than 200 transactions in a calendar year, under the reinstated threshold.12Internal Revenue Service. IRS Issues FAQs on Form 1099-K Threshold Under the One, Big, Beautiful Bill – Dollar Limit Reverts to $20,000 Both conditions must be met.
Personal transfers do not count. Splitting a dinner bill, a birthday gift, or a roommate paying you back for rent are not reportable.13Internal Revenue Service. Understanding Your Form 1099-K Only payments received for selling goods or providing services do. Label transfers correctly in the app, and if a 1099-K arrives with personal transfers mixed in, address the discrepancy on your return rather than ignoring the form.
Business Accounts
Accounts held by legal entities get more attention than personal ones. The Customer Due Diligence Rule requires banks to identify and verify anyone who owns 25% or more of the entity, along with an individual who controls it.14Financial Crimes Enforcement Network. CDD Final Rule The bank looks through the company at the people behind it.
High-cash industries like restaurants and convenience stores, sectors historically tied to money laundering such as casinos and money service businesses, and companies with frequent international wires all draw enhanced due diligence: more frequent reviews, additional documentation about sources of funds, and lower thresholds for flagging. FinCEN issued an order in early 2026 granting temporary relief from certain beneficial ownership verification requirements at account opening, so the exact obligations at the moment are in flux.14Financial Crimes Enforcement Network. CDD Final Rule Business accounts remain subject to the same CTR and SAR reporting as personal ones, with ownership verification layered on top.