Federal law generally requires banks to keep most of your financial records for at least five years. That five-year floor comes from the Bank Secrecy Act and Treasury Department regulations, and it covers the bulk of what you’d expect: account statements, deposit slips over $100, signature cards, canceled checks, and wire transfer records of $3,000 or more.1eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period A few record types run shorter, some run longer, and none of them are designed around your convenience. If you may need old records for a tax audit, a lawsuit, or your own reconstruction of what happened in an account, it pays to know which clock applies.
The statute behind the rule directs the Treasury Secretary to set retention periods, with an outer limit of six years unless a longer period is needed for law enforcement or regulatory purposes.2Office of the Law Revision Counsel. 12 USC 1829b – Retention of Records by Insured Depository Institutions Treasury’s regulations settle on five years for most categories.
Retention Periods by Record Type
Not every record follows the same clock. The categories below cover what most account holders actually ask about.
Account Statements and Transaction History
Banks must retain the original or a copy of every statement, ledger card, or other record showing transactions on each deposit or share account, along with deposit slips for transactions over $100 and signature cards granting authority over accounts.3eCFR. 31 CFR 1020.410 – Records To Be Made and Retained by Banks Under the general BSA retention rule, five years is the required minimum.1eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period
Many banks voluntarily provide online access to statements for up to seven years, but that’s a business decision, not a legal obligation. Once the mandatory period expires, the bank has no duty to produce those records for you.
Wire and Funds Transfers
For any payment order of $3,000 or more, banks must record and retain detailed information about the originator, beneficiary, and transaction. The specific data points depend on whether the bank is acting as originator’s bank, beneficiary’s bank, or intermediary.3eCFR. 31 CFR 1020.410 – Records To Be Made and Retained by Banks These records also fall under the five-year rule.
Customer Identification Records
When you open an account, the bank collects identifying information under its Customer Identification Program. That identifying information must be kept for five years after the account is closed. For credit card accounts, the clock starts when the account is closed or becomes dormant, whichever comes first. Supporting verification documents (the records used to confirm your identity at account opening) must be kept for five years from the date they were made.4eCFR. 31 CFR 1020.220 – Customer Identification Programs for Banks
Loan Applications
Loan application records follow a different rule. The Equal Credit Opportunity Act requires creditors to keep applications and related documents for 25 months after notifying you of the decision. Covered items include the application itself, the notice of action taken, any statement of reasons for denial, and any written complaint alleging a violation. For business credit applications, the period is 12 months.5eCFR. 12 CFR 1002.12 – Record Retention
Mortgage Closing Documents
Closing disclosures and related mortgage documents must be retained for five years after the loan closes. If the original lender sells the loan and stops servicing it, the closing disclosure passes to the new owner or servicer, who holds it for the balance of the five-year period.6Consumer Financial Protection Bureau. 12 CFR 1026.25 – Record Retention
SARs and CTRs
Copies of every Suspicious Activity Report and Currency Transaction Report must be kept for five years from the filing date.7eCFR. 31 CFR 1010.306 – Filing of Reports Supporting documentation used to prepare these reports carries the same five-year retention under the general BSA rule.1eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period
When the Clock Runs Longer
Several situations push retention past the standard window, sometimes by years.
Legal holds and investigations. When records relate to pending litigation or a government investigation, banks typically impose a legal hold that blocks destruction even after the normal period expires. For records tied to foreign financial accounts, the five-year clock is expressly paused during any criminal proceeding involving a false or missing federal tax return. The pause runs from indictment through final disposition of the case.8eCFR. 31 CFR Part 1010 Subpart D – Records Required To Be Maintained
Dormant accounts and escheatment. When an account sits inactive long enough to trigger a state’s abandoned property laws, the bank can’t just wipe its records at year five. Account records must be maintained until the funds are escheated to the state, and states generally require banks to keep escheatment reports and supporting documents for a decade or more after transfer. Because escheatment timelines vary by state and account type, these records often survive far longer than any federal minimum requires.
Electronic storage. Digital storage doesn’t change how long records must be kept, but it adds a usability requirement. Under the E-SIGN Act, electronic records satisfy any retention obligation only if they accurately reflect the original information and remain accessible in a form that can be reproduced for later reference throughout the entire required period.9Office of the Law Revision Counsel. 15 USC Chapter 96 – Electronic Signatures in Global and National Commerce A file buried in an unreadable archive doesn’t satisfy the rule. It has to be retrievable and reproducible for as long as the law requires it to exist.
What Happens If Your Bank Fails or Merges
Bank closures don’t erase your records. When the FDIC is appointed receiver of a failed bank, it must preserve the institution’s records for at least six years before it can destroy anything it deems unnecessary.10eCFR. 12 CFR 360.11 – Records of Failed Insured Depository Institutions
If the FDIC transfers records to an acquiring institution as part of a purchase-and-assumption deal, the acquiring bank must agree not to destroy those records for at least six years from the date the FDIC was appointed receiver. Records already at least ten years old on the date of the bank’s failure face a lower bar and can be destroyed at the FDIC’s discretion.10eCFR. 12 CFR 360.11 – Records of Failed Insured Depository Institutions
Customers of a failed bank can reach the FDIC’s Failed Bank Customer Service Center to locate records, check deposit insurance claims, or find out which institution took over their accounts. In a merger between two healthy banks, the surviving institution inherits all record-keeping obligations. Your records don’t disappear, though account numbers and online portals may change during the transition.
The Gap With IRS Audit Windows
Here’s the mismatch that catches people off guard. The IRS generally has three years from the date you file a return to assess additional tax. If you omit more than 25% of the gross income shown on your return, the window stretches to six years. If you file a fraudulent return or never file at all, there is no time limit.11Internal Revenue Service. Topic No. 305, Recordkeeping
Six years matters because banks are only required to keep most records for five. If the IRS opens a six-year audit and you need statements from year six, your bank may have already purged them. The IRS expects you to keep your own records for as long as they may be relevant to any return you’ve filed.12Internal Revenue Service. How Long Should I Keep Records
Don’t rely on your bank as your backup filing cabinet. Download or save your own copies of annual statements, 1099 forms, and any records that support a deduction, credit, or income figure on a return. Keep them for at least seven years to cover the six-year audit window with a cushion. For records related to real property, the IRS says to keep them until the limitations period expires for the year you sell the property, which could be decades away.
How to Get Old Records From Your Bank
Start with your bank’s online portal. Most banks provide free digital access to statements and transaction history going back several years. If you need records older than what’s available online, contact customer service or visit a branch.
Have your account number, government-issued identification, and the specific date range ready when you make the request. The more precise you are about what you need, the faster and cheaper the process will be. A request for “all records from 2019 to 2022” will cost more than a request for “March 2021 statement.”
Banks commonly charge fees for retrieving archived records. Per-statement fees typically run a few dollars for recent records but can climb for older documents that require manual retrieval. Some banks charge hourly research fees for complex requests. Electronic copies are usually delivered within a few business days; paper copies of archived records can take several weeks.
If the bank no longer exists because of a failure, contact the FDIC’s Failed Bank Customer Service Center. If it merged with another institution, the surviving bank inherited the records and should be able to fulfill your request. If a bank’s failure to maintain records causes you harm, you can file a complaint with the Consumer Financial Protection Bureau, which will forward it to the bank and typically require a response within 15 days.13Consumer Financial Protection Bureau. Submit a Complaint Either way, the cheapest and fastest way to get a bank record is to already have it.