Federal law requires banks to keep most account records for at least five years, so the short answer to how far back bank records go is five years at minimum. In practice, most major banks keep seven to ten years of statements accessible through their online portals, and some can retrieve older archived records on request for a fee. How far back you can actually reach depends on your bank’s internal policy, whether the records are digital or paper, and whether the account is still open.
The Five-Year Federal Floor
The Bank Secrecy Act sets the baseline. Its implementing regulation, 31 CFR § 1010.430, requires financial institutions to retain covered records for five years from the date the record was created.1eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period The rule was originally built to give law enforcement a paper trail for money laundering and financial fraud investigations.2Financial Crimes Enforcement Network. The Bank Secrecy Act
Covered records include signature cards for each deposit account, ledger entries or statements showing every transaction, and copies of checks or money orders over $100.3FFIEC BSA/AML Examination Manual. Appendix P – BSA Record Retention Requirements Banks must store them so they can be retrieved within a reasonable time, and institutions that fail to comply face civil penalties under 12 U.S.C. § 1955 and 31 U.S.C. § 5321.2Financial Crimes Enforcement Network. The Bank Secrecy Act
Credit card accounts issued by banks fall under the same BSA rules, so your card issuer should keep transaction records for at least five years as well.
How Long Banks Actually Keep Records
Five years is the legal floor, not the ceiling. Most major national banks now provide digital access to statements for seven to ten years through their online banking portals. Electronic storage costs almost nothing compared with maintaining paper archives in off-site warehouses, so there is little reason to delete records the moment the mandate expires. Longer retention also helps banks resolve customer disputes and respond to discovery requests that surface years after a transaction.
Paper records are a different story. If your account activity predates your bank’s shift to electronic recordkeeping, the physical documents may still exist but will require a more labor-intensive retrieval process. Some banks have digitized their legacy paper files; others have not. The practical answer to how far back you can get records depends heavily on when your bank went digital and how thoroughly it migrated older data.
How to Request Older Records
Statements visible in your online dashboard are easy. The challenge is getting records that have rolled off the portal into the bank’s archive. You will generally need your full account number and the specific date range you want. Bring a government-issued photo ID when making the request in person.
Most institutions have an archived-records request form in the documents or resources section of their website. The form typically asks whether you want digital PDF delivery or paper copies by mail. You can also submit requests through the bank’s secure messaging system or at a branch. For closed accounts, expect a more formal process. Some banks require a written request sent to their corporate office, sometimes notarized, before they will search legacy systems.
Fees and Timelines
Banks commonly charge research fees in the range of $15 to $30 per hour, plus per-page copying costs of around $0.25 for paper copies. Digital delivery is often cheaper. Turnaround depends on how old the records are: recent archived statements might arrive in a week, while records from a decade ago or a predecessor bank could take 30 days. Narrowing the date range up front is the single best way to control costs. Vague requests like “everything from the last ten years” can rack up significant research fees for records you do not actually need.
Match Your Records Request to Why You Need It
How far back you should reach depends on what the records are for. Two situations drive most requests, and each carries its own deadline.
Tax Audits
The IRS generally has three years from the date you filed a return to assess additional tax. That window stretches to six years if you omit more than 25% of the gross income reported on the return.4Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection If you filed a fraudulent return or never filed, there is no time limit at all.5Internal Revenue Service. How Long Should I Keep Records?
The IRS expects you to keep documentation supporting every item of income, deduction, or credit until the relevant limitations period expires.6Internal Revenue Service. Topic No. 305, Recordkeeping Bank statements showing deposits, business expenses, or charitable contributions are exactly the kind of evidence the IRS wants. The five-year federal retention minimum covers the standard three-year audit window with room to spare, but it may fall short for a six-year lookback, which is why your own copies matter.
Fraud Disputes
Fraud disputes run on a far shorter clock. Under Regulation E, which governs debit cards, ATM withdrawals, and other electronic fund transfers, you have 60 days from the date your bank sent the statement showing an unauthorized transfer to report it. The clock runs from when the statement was sent, not when you opened it.7eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers Miss that deadline and you could be on the hook for the full amount of unauthorized transfers that occur after the 60-day window, with no cap.
Credit card disputes follow Regulation Z and give you 60 days from the date the creditor sent the first statement showing the error to submit a written dispute identifying the amount, date, and nature of the problem.8eCFR. 12 CFR 1026.13 – Billing Error Resolution For fraud, the records you need are the recent ones, and you need to look at them quickly.
Keep Your Own Copies
Relying on your bank to produce old records when you need them is a gamble. Banks merge, systems migrate, and retrieval fees add up. Keeping your own copies and knowing when it is safe to shred them is a better approach.
- Deposit and withdrawal slips are safe to discard once you have verified them against the monthly statement.
- Monthly statements should be kept for at least the current year, with anything tax-relevant retained for the applicable IRS limitations period.
- Tax-supporting records should be kept for at least three years after filing. If there is any chance you underreported income, keep them six years. Self-employed filers or anyone with complex returns are often more comfortable at seven years.5Internal Revenue Service. How Long Should I Keep Records?
- Records tied to property or investments should be kept for as long as you own the asset, plus the applicable limitations period after you sell it, since you will need to document your cost basis.
Digital copies are just as valid as paper for IRS purposes. A scanned PDF of a bank statement is fine as long as it is legible and you can produce it on request. Cloud storage or an external drive works. Make sure you have a backup.
Records After Mergers or Bank Failures
Banks merge and get acquired constantly, but that does not make your records disappear. When one bank acquires another, the surviving institution generally takes on the predecessor’s legal obligations, including record retention for the remainder of whatever period applies. Old account data should still be accessible through the acquiring bank’s legacy records department, though retrieval is often slower because of migration issues between incompatible systems.
If your bank failed outright, the FDIC typically steps in as receiver and may retain certain records from the failed institution.9FDIC. Bank Failures In most cases the FDIC arranges for another bank to assume the failed bank’s deposits, and that assuming bank inherits the records. When no buyer is found, the FDIC’s receivership division may be your only contact, and availability of specific records from long-closed banks is limited and not guaranteed.
Tracking down the right institution starts with figuring out who acquired your old bank. FDIC consumer resources can help identify successor institutions for banks that failed or were absorbed through mergers.10FDIC. How to Find a Long-Lost Bank Account or Safe Deposit Box Provide as much identifying information as you can: old account numbers, the bank’s name at the time you held the account, approximate dates. Legacy systems are rarely searchable by name alone.