How Subpoenas for Bank and Financial Records Work

A subpoena for bank records reaches your account through one of two very different tracks, and which track it’s on decides almost everything else. If a federal agency or prosecutor is asking, the Right to Financial Privacy Act generally requires that you get a copy of the subpoena and a waiting period before the bank produces anything, giving you a short window to go to court. If a private party in a civil lawsuit is asking, the Federal Rules of Civil Procedure govern instead, and you may not be notified at all unless you’re a party to the case.

Sort out which track you’re on first. The rest follows from that.

When the Government Subpoenas Your Bank Records

The Right to Financial Privacy Act, 12 U.S.C. §§ 3401–3422, applies only to government demands for your financial records. It lists five ways a government authority can access those records: your written authorization, an administrative subpoena or summons, a search warrant, a judicial subpoena, or a formal written request.¹

Federal agencies have broad power to issue these demands. The IRS uses administrative summonses during examinations, collection actions, and criminal investigations, and no judge signs off before that summons reaches the bank.² The SEC, FBI, and other federal agencies hold similar authority. Judicial subpoenas come from prosecutors working through a court in a pending case.

Before the bank hands anything over, a supervisory official at the requesting agency must certify in writing to the bank that the RFPA’s requirements have been met. The bank isn’t supposed to release records until that certification arrives.³

Notice and the Waiting Period

For administrative subpoenas and summonses, the government must give you a copy of the subpoena on or before the day it’s served on your bank, along with a notice describing the law enforcement inquiry with reasonable specificity.⁴ Judicial subpoenas carry the same requirement.⁵ Formal written requests, used only when no subpoena authority is reasonably available, have their own parallel notice rules.⁶

Once you’ve been notified, the bank cannot release the records for ten days after personal service on you, or fourteen days after the notice was mailed to your last known address.⁷ That window exists so you can go to court first.

When the Government Doesn’t Have to Tell You

Several categories fall outside the RFPA’s notice rules. The biggest is the grand jury subpoena: with narrow exceptions for reimbursement and record transfer, the RFPA doesn’t apply to subpoenas connected to grand jury proceedings.⁸ If a federal grand jury pulls your bank records, you won’t get advance notice and the RFPA gives you no way to stop it. Records obtained by grand jury subpoena must actually be presented to the grand jury, used only for indictment or a resulting prosecution, and destroyed or returned to the bank if never used for those purposes.⁹

Other situations where notice isn’t required include:

You and the government are already parties to the same civil or criminal case.
The records are sought through an administrative subpoena in a proceeding before an administrative law judge where you and the agency are both parties.
The government wants only your name, address, account number, and account type in connection with a legitimate law enforcement inquiry.
The investigation targets the bank itself, not you as a customer.
The records concern a government loan, loan guarantee, or loan insurance program.
The disclosure follows IRS summons procedures under Title 26 rather than the RFPA.⁸

Even for subpoenas that would normally require notice, the government can ask a court for a delayed notice order. The government must show the investigation is within its jurisdiction, the records are relevant, and that telling you would likely cause a specific harm: danger to someone’s life or safety, flight from prosecution, destruction of evidence, witness intimidation, or serious jeopardy to the investigation. Delay lasts up to ninety days at a time and can be extended in ninety-day increments. In rare foreign-account control cases where notice could endanger lives, the delay can be indefinite.¹⁰

How to Challenge a Government Subpoena

You have ten days from personal service, or fourteen days from mailing, to file a motion to quash or an application to enjoin the government from obtaining your records.¹¹ File in the court that issued a judicial subpoena, or in the appropriate U.S. district court for an administrative summons or formal written request.

Your filing needs a sworn statement that you’re a customer of the bank in question and that either the records aren’t relevant to the law enforcement inquiry described in the notice, or the government didn’t substantially comply with the RFPA. You also serve a copy on the government authority.¹¹ This is the sole judicial remedy the RFPA provides for opposing government disclosure of your records. Miss the deadline and you’ve effectively waived the right to fight the subpoena.

When a Private Party Subpoenas Your Bank Records

Civil litigants use a subpoena under Federal Rule of Civil Procedure 45 (or the state equivalent) to get bank records. Rule 45 requires the party issuing the subpoena to notify every other party to the lawsuit before serving it on the bank, but it does not require notice to the account holder if the account holder is not a party.¹²

If your ex-spouse subpoenas your bank in a divorce, you’ll know because you’re a party to the case. If a stranger’s lawsuit sweeps in your records as a nonparty witness, you may hear nothing unless the bank chooses to tell you. The RFPA’s ten- and fourteen-day windows, its notice provisions, and its motion-to-quash procedure don’t apply here at all.

Grounds to Quash a Civil Subpoena

The court must quash or modify a Rule 45 subpoena that fails to allow reasonable time to comply, requires compliance beyond the rule’s geographic limits, demands privileged or otherwise protected matter, or subjects the recipient to undue burden.¹²

The scope of what any party can demand in civil discovery is limited by proportionality. Discovery must be relevant to a claim or defense and proportional to the needs of the case, weighing factors like the amount in controversy, the parties’ relative access to information, and whether the burden outweighs the likely benefit.¹³ The older “reasonably calculated to lead to admissible evidence” formulation was removed from the federal rules in 2015. If a subpoena demands sweeping account histories and the party defends it on that older standard, the standard no longer exists.

What a Subpoena Can Actually Reach

Checking and savings account statements are the most common target because they show every deposit and withdrawal in order. Wire transfer records reveal the origin and destination of large domestic and international transfers. Signature cards confirm who has authority over an account. Loan applications capture a snapshot of reported income, assets, and liabilities at a specific moment. Internal bank-customer correspondence, such as messages about overdrafts or account changes, can also be pulled in when relevant.

A subpoena is only useful for records that still exist. Under the Bank Secrecy Act, financial institutions must retain covered records for five years and keep them accessible within a reasonable time.¹⁴ Anything older than that may already be gone, and absent a preservation order the bank has no obligation to keep it longer.

Reimbursement and Penalties

The government doesn’t get bank records for free. Under 12 U.S.C. § 3415, the requesting agency must reimburse the bank for costs reasonably necessary and directly incurred in searching for, reproducing, and delivering the records.¹⁵ The Federal Reserve Board sets the specific rates through Regulation S, covering staff time, photocopies, microfiche, storage media, and transportation, with time billed in fifteen-minute increments and payment owed only after actual compliance.¹⁶ Reimbursement doesn’t apply to government-loan-program records, IRS summonses, or investigations aimed at the bank itself.

Ignoring a valid subpoena is dangerous. A federal court can punish disobedience of its lawful orders, including subpoenas, by fine or imprisonment or both.¹⁷

On the other side of the ledger, if a government agency or a bank obtains or discloses your financial records in violation of the RFPA, you can sue. The statute sets a floor of $100 per violation regardless of how many records were involved, plus any actual damages, plus punitive damages for a willful violation, plus attorney’s fees and costs if you prevail.¹⁸ The floor is small. The actual and punitive damages are where the pressure sits, especially when a bank turns over years of records without waiting for a proper certification or before the notice period runs.

1
Office of the Law Revision Counsel. 12 USC 3402 – Access to Financial Records by Government Authorities Prohibited; Exceptions
2
Internal Revenue Service. IRM 35.4.4 Gathering Information from Third Parties
3
United States Department of Justice. Criminal Resource Manual 405 – Certification of Compliance Requirement
4
Office of the Law Revision Counsel. 12 USC 3405 – Administrative Subpena and Summons
5
Office of the Law Revision Counsel. 12 USC 3407 – Judicial Subpena
6
Office of the Law Revision Counsel. 12 USC 3408 – Formal Written Request
7
Office of the Law Revision Counsel. 12 USC Ch. 35 – Right to Financial Privacy
8
Office of the Law Revision Counsel. 12 USC 3413 – Exceptions
9
Office of the Law Revision Counsel. 12 USC 3420 – Grand Jury Information; Notification of Certain Persons
10
Office of the Law Revision Counsel. 12 USC 3409 – Delayed Notice
11
Office of the Law Revision Counsel. 12 USC 3410 – Customer Challenges
12
Legal Information Institute. Federal Rules of Civil Procedure Rule 45 – Subpoena
13
Legal Information Institute. Federal Rules of Civil Procedure Rule 26 – Duty to Disclose; General Provisions Governing Discovery
14
eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period
15
Office of the Law Revision Counsel. 12 USC 3415 – Cost of Furnishing Records
16
eCFR. 12 CFR Part 219 – Reimbursement for Providing Financial Records (Regulation S)
17
Office of the Law Revision Counsel. 18 USC 401 – Power of Court
18
Office of the Law Revision Counsel. 12 USC 3417 – Civil Penalties