How Long to Keep Deposited Checks and When to Destroy Them

How long you need to keep a deposited check depends on which record you mean. The paper original stays in your files only for the window set by your bank’s remote deposit agreement, which usually runs between 14 and 60 days after the deposit clears. The record of the transaction itself, whether that’s the scanned image, the bank statement, or your accounting entry, needs to survive much longer: at least three years after you file the return it supports, and up to seven years if you ever claim a bad debt deduction.¹

How Long to Keep the Physical Paper Check

When you deposit a check through mobile capture or a desktop scanner, the paper original stays with you rather than traveling to the bank. Your bank’s Remote Deposit Capture (RDC) agreement spells out exactly how many days you must hold onto that original. Some banks require as few as 14 days. Others set the window at 30, 45, or even 60. The variation depends on the bank’s own risk assessment and the type of account you hold.

Read the agreement carefully. Violating its terms can get your remote deposit privileges revoked, and the retention period is one of the terms banks enforce. They’re counting on you to keep the paper available in case a transaction is returned for insufficient funds, a stop-payment order, or an imaging error that makes the digital copy unusable.

The reason the paper has such a short shelf life is the Check Clearing for the 21st Century Act, commonly called Check 21. Under this federal law, a properly created digital image of a check is the legal equivalent of the original paper for all purposes, including any federal or state law.² Once your bank has captured a clean image and funds have cleared, the paper check serves no further purpose in the banking system. The digital version is what moves between banks and what would be produced in a dispute.

How Long to Keep the Deposit Record for Taxes

The IRS doesn’t care about the paper check itself. It cares about the record of the transaction. Federal regulations require businesses to keep books and records sufficient to establish the gross income, deductions, and credits shown on their tax returns.³ A scanned image of a deposited check, a bank statement showing the deposit, or an entry in your accounting software all satisfy that requirement.

How long you keep those records depends on your situation:¹

Three years is the standard period, measured from the date you filed the return or its due date, whichever is later. This covers most businesses in most years.
Six years applies if you fail to report income exceeding 25% of the gross income shown on your return, because the IRS has that long to assess additional tax.⁴
Seven years applies if you claim a deduction for bad debt or a loss from worthless securities.
There is no limitations period at all if you don’t file a return or file a fraudulent one.

For most small businesses with straightforward returns, three years is the operative number. If there’s any chance the IRS could argue you underreported income, six years is the safer floor. The IRS also advises checking whether your insurance company or creditors require you to keep records longer than the tax code does.⁵

Digital images of checks qualify as acceptable records, provided they meet legibility and retrievability standards. The electronic storage system must produce copies where every letter and numeral is clearly identifiable, and the business must be able to retrieve and reproduce them on demand during an examination.⁶ A blurry mobile deposit image tucked in an email folder you may lose access to does not meet that bar. If the digital backup fails and the paper is already shredded, the IRS can disallow deductions it can’t verify.

Before You Destroy a Deposited Check

The most common mistake with mobile deposits is failing to endorse the check properly before scanning. Under Regulation CC, a bank that accepts a check through remote deposit capture must indemnify another bank if the same check gets deposited a second time as a paper original and the second bank doesn’t get paid.⁷ In plain terms, your bank is on the hook if someone takes the original paper check and cashes it elsewhere after you already deposited the image.

There’s an important exception. If the paper check carries a restrictive endorsement like “for mobile deposit only at [Your Bank Name],” and another bank accepts it anyway, your bank can’t be forced to pay. The second bank ignored a clear warning and assumed the risk.⁷ Most banks now require this restrictive endorsement as part of their RDC agreement, and skipping it shifts liability in a direction you don’t want.

Once the deposit has posted and funds have fully cleared, mark the physical check with “VOID” and the date. That simple step keeps anyone, including a careless employee, from depositing the same check again. An accidental double deposit triggers a reversal, can push your account into a negative balance, and if left unresolved, banks may treat the activity as suspected fraud. Intentional double deposits are a federal crime.

Before any deposited check goes to the shredder, walk through this short verification sequence:

Confirm the deposit cleared. Log into your bank portal and verify the transaction shows as completed, not pending. Funds shown as “available” because of a courtesy hold are not the same as fully cleared funds.
Match the amount. Compare the deposited figure against the check and your invoice or accounts receivable entry. Imaging errors occasionally capture the wrong amount, and catching that before destruction is the only easy fix.
Verify the digital image. Open the scanned copy and make sure every digit of the check number, routing number, account number, payee name, and amount is legible. If anything is blurry or cut off, re-scan before destroying the original.
Log the disposal. Record the check number, payer name, amount, deposit date, and destruction date in your accounting software or a dedicated disposal log. This creates an internal audit trail linking the paper deposit to the digital record in your ledger.
Wait for the bank’s retention window to close. Even after the deposit clears, hold the paper until the period in your RDC agreement expires. Destroying it on day five of a 30-day requirement puts you in breach.

How to Destroy a Deposited Check Securely

A deposited check contains account numbers, routing numbers, signatures, and sometimes addresses. Tossing it in the recycling bin can create legal liability. Under federal law, any business that possesses consumer financial information must take reasonable measures to protect against unauthorized access when disposing of it. The regulation specifically lists shredding, burning, or pulverizing paper records so the information cannot be read or reconstructed.⁸

For in-house destruction, a cross-cut shredder rated at security level P-4 or higher handles checks effectively. Strip-cut shredders leave pieces large enough to reassemble and don’t meet the “cannot practicably be read or reconstructed” standard. If your business processes a high volume of checks, a micro-cut shredder rated P-5 produces smaller particles that are functionally impossible to piece back together.

Businesses that prefer to outsource destruction should hire a professional service and verify its credentials. The federal disposal regulation requires due diligence when contracting with a third-party destroyer, which can include reviewing an independent audit of the company’s operations, obtaining references, or requiring certification by a recognized trade association.⁸ Ask for a certificate of destruction after each visit. If a company can’t provide one or won’t explain its security procedures, find a different vendor.

Risks of Destroying a Check Too Early

Destroying a paper check before the bank’s retention window closes creates several concrete problems. If the deposit gets reversed because the payer’s bank returns it for insufficient funds or a stop-payment order, your bank may need the original to resolve the dispute. Without it, your position weakens. The bank’s system has the digital image, but if that image has a defect, the paper was the backup, and now it’s confetti.

Double presentment is the more expensive risk. If someone later deposits or cashes the same physical check at another institution, the payer’s account gets hit twice. Under Regulation CC, your bank bears the indemnity obligation in most of those scenarios.⁷ The bank will then look to you to explain why the original was still floating around. If you didn’t endorse it restrictively and didn’t mark it void, the trail leads back to you.

Disputes about check contents can also surface months after deposit. The Uniform Commercial Code gives check writers up to one year to report an unauthorized signature or alteration to their bank.⁹ If you’ve already destroyed the original and your digital image is ambiguous, there’s no way to resolve the question definitively. On the IRS side, the risk window stretches for years. If an audit arrives three to six years after filing and your electronic records have degraded or become inaccessible, you can’t fall back on paper you shredded a week after deposit.¹

Hold the paper for whatever period your RDC agreement requires, and put the real effort into making sure the digital records are clean, legible, and backed up somewhere reliable. The paper goes away in weeks. The digital image and the transaction record need to survive for years.

1
Internal Revenue Service. How Long Should I Keep Records
2
Office of the Law Revision Counsel. 12 USC Ch. 50 Check Truncation
3
Code of Federal Regulations. 26 CFR 1.6001-1 Record Keeping Requirements
4
Office of the Law Revision Counsel. 26 US Code 6501 – Limitations on Assessment and Collection
5
Internal Revenue Service. Publication 583 – Starting a Business and Keeping Records
6
Internal Revenue Service. Rev. Proc. 97-22
7
eCFR. 12 CFR 229.34 Warranties and Indemnities
8
eCFR. 16 CFR 682.3 Proper Disposal of Consumer Information
9
Uniform Commercial Code. UCC 4-406 Customer Duty to Discover and Report Unauthorized Signature or Alteration