If you’re wondering why your bank account is being audited, the answer is usually one of two things: the IRS spotted a gap between what you reported on your tax return and what your bank reported about you, or your bank filed a compliance report on transactions that looked unusual under federal anti-money-laundering rules. A true financial audit by an accounting firm is rare for individuals. What people call a bank account audit is almost always a tax examination or a compliance inquiry, and which one you’re facing determines how serious it is and what you should do next.
Who Is Actually Looking at Your Account
Three different entities can start scrutinizing your bank activity, and the distinction changes everything.
The IRS or a state tax authority checks whether the deposits flowing into your accounts line up with the income on your return. Their goal is tax compliance. These inquiries are usually civil, meaning they end in additional tax, interest, and penalties rather than criminal charges.
The Financial Crimes Enforcement Network (FinCEN), often working with the Department of Justice, is focused on anti-money-laundering enforcement. FinCEN cares less about whether you owe tax and more about whether transactions involve fraud, narcotics proceeds, or other criminal activity. Those investigations carry criminal exposure from the start.
The third source is the bank itself. Banks have their own obligation to monitor for suspicious activity under the Bank Secrecy Act, and an internal review often happens before any government agency is involved. A bank-initiated freeze can sometimes be resolved by providing documentation directly to the bank’s compliance department.
What Your Bank Reported Without Telling You
Many government inquiries start with reports your bank filed silently. Under the Bank Secrecy Act, banks must file a Currency Transaction Report (CTR) whenever a single cash transaction, or multiple related cash transactions by the same person, exceeds $10,000 in a single business day.1Financial Crimes Enforcement Network (FinCEN). Notice to Customers A CTR Reference Guide A CTR is routine. It doesn’t mean you did anything wrong. It’s simply the government’s way of tracking large cash movements.
Far more consequential is the Suspicious Activity Report (SAR). Banks must file a SAR for transactions of $5,000 or more that appear suspicious or inconsistent with your normal account activity.2FFIEC BSA/AML InfoBase. Assessing Compliance with BSA Regulatory Requirements – Suspicious Activity Reporting Suspicious can mean unexplained spikes in deposit volume, wire transfers with no apparent business purpose, or activity that doesn’t match your stated occupation. The bank decides internally whether to file, and it is legally prohibited from telling you a SAR was submitted.
Once filed with FinCEN, both CTRs and SARs are available to the IRS, the FBI, and other federal agencies. A SAR flagging unusual deposits can easily evolve into a tax investigation if those deposits suggest unreported income. The reports don’t prove wrongdoing on their own. They’re the data points that prompt further inquiry.
Common Triggers Tied to Bank Activity
The most direct trigger for IRS scrutiny is a gap between the income you reported and the total deposits flowing into your accounts. The IRS uses what’s called the bank deposit method to reconstruct income: examiners analyze every deposit, subtract identifiable non-income items such as loan proceeds, transfers between your own accounts, and gifts, and treat whatever remains as taxable income.3Internal Revenue Service. Internal Revenue Manual 9.5.9 – Methods of Proof The burden then shifts to you to prove those deposits came from non-taxable sources. Without documentation — loan agreements, gift letters, inheritance paperwork — the IRS presumes the money is taxable.
Cash-intensive businesses draw particular attention. If you run a restaurant, a landscaping company, or any operation where customers pay in cash, examiners expect your bank deposits to roughly match your reported revenue. Numerous deposits from unidentified sources, with no invoices or sales records to explain them, will be treated as unreported business income. The IRS also looks for patterns suggesting you’re avoiding self-employment tax by underreporting freelance or gig income.
Structuring is a category of its own. Deliberately breaking cash deposits into amounts just below $10,000 to avoid triggering a CTR is a separate federal crime punishable by up to five years in prison, even if the underlying money is completely legitimate.4Office of the Law Revision Counsel. 31 US Code 5324 – Structuring Transactions to Evade Reporting Requirement Prohibited If the structuring is connected to other illegal activity involving more than $100,000 in a 12-month period, the maximum sentence doubles to ten years. The IRS uses data analytics to detect deposits clustering just below the threshold, and this is where a civil tax problem can turn criminal quickly.
High volumes of transfers between your own accounts and unusually frequent cash deposits that don’t match your reported occupation also draw scrutiny. Once an examination begins, the process focuses on tracing the origin and purpose of every large, unexplained transaction.
Reading the Notice You Received
Not every IRS letter about your bank account means a full audit. Two common notices look similar and carry very different implications.
A CP2000 is not a formal audit. It’s an automated letter generated when the IRS’s computer system detects a mismatch between what you reported and what a third party — an employer, a bank, a brokerage — reported. If a bank sent a 1099-INT showing $2,000 in interest income and you didn’t include it on your return, the system flags the discrepancy automatically. The CP2000 proposes an adjustment and gives you roughly 30 days to respond. One critical mistake to avoid: don’t file an amended return. Respond directly to the CP2000 using the form included with the notice.
A Letter 566 is a formal correspondence audit conducted by an actual IRS examiner. This letter asks you to mail in documentation supporting specific items on your return, such as charitable donations that seem high for your income, business expenses on a Schedule C, or repeated business losses that look like a hobby. The examiner has already identified the line items to verify, and you’ll need receipts, canceled checks, or other records to back up your claims.
Read whichever notice you got carefully before doing anything. Identify which agency sent it, what tax years or transactions are at issue, and what specific documents or responses are being requested. The notice itself defines the scope of the inquiry and the deadline for your response.
Foreign Accounts as a Separate Trigger
If any of your accounts are outside the United States, a separate set of reporting rules applies, and confusion between them is a common and expensive mistake.
The Report of Foreign Bank and Financial Accounts (FBAR) requires any U.S. person to report foreign accounts if the combined value of all foreign accounts exceeds $10,000 at any point during the calendar year.5Internal Revenue Service. Report of Foreign Bank and Financial Accounts (FBAR) The FBAR is filed electronically with FinCEN, not with your tax return. Non-willful violations carry a penalty of up to $16,536 per annual report. Willful violations jump to the greater of $100,000 or 50% of the account balance at the time of the violation.6Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties Willful doesn’t require malicious intent — courts have found that reckless disregard for reporting obligations qualifies.
Form 8938, required under the Foreign Account Tax Compliance Act (FATCA), has higher reporting thresholds and is filed with your tax return. If you’re unmarried and living in the U.S., you must file Form 8938 when your foreign financial assets exceed $50,000 on the last day of the tax year or $75,000 at any point during the year. For married couples filing jointly, the thresholds are $100,000 and $150,000.7Internal Revenue Service. 3Internal Revenue Service. Internal Revenue Manual 9.5.9 – Methods of Proof Your job is to identify as many deposits as possible before the examiner does the math for you.
If the IRS hasn’t asked you directly yet, it may. In a standard civil audit, the IRS typically starts with an Information Document Request (IDR) asking you to provide bank statements and deposit records voluntarily.8Internal Revenue Service. Navigating the IDR Process Cooperating with an IDR is usually in your interest because it lets you and your representative control what context accompanies each document. If you don’t cooperate, or if fraud is suspected, the IRS can issue a summons directly to your bank. In that case you’re generally entitled to notice within three days of the summons and no later than 23 days before the bank must produce records, which gives you a window to challenge it in court.9Office of the Law Revision Counsel. 26 US Code 7609 – Special Procedures for Third-Party Summonses In certain criminal investigations, though, the government can get records without warning you.
Your Rights During the Process
The IRS Taxpayer Bill of Rights guarantees ten fundamental protections, and several matter directly when bank accounts are under scrutiny.10Internal Revenue Service. Taxpayer Bill of Rights You have the right to be informed of what the IRS is examining and why. You have the right to retain a representative and have that person handle communication with the IRS on your behalf. You have the right to challenge the IRS’s position and provide additional documentation, and the IRS must consider your objections fairly. You also have the right to privacy, meaning any examination must comply with the law and be no more intrusive than necessary.
If you disagree with the audit’s findings, you can request a hearing with the IRS Independent Office of Appeals by filing a written protest within 30 days of the letter proposing changes.11Internal Revenue Service. Preparing a Request for Appeals For adjustments totaling $25,000 or less per tax period, a simplified small case request using Form 12203 is enough. Appeals is independent from the examination division and resolves most disputes without litigation.
If the IRS determines you owe additional tax and appeals is exhausted or bypassed, it will issue a statutory Notice of Deficiency, sometimes called the 90-day letter. You then have 90 days to petition the U.S. Tax Court to contest the assessment before paying. Miss that window and the tax is officially assessed, leaving you with far fewer and more expensive options.
If Criminal Exposure Exists
Where there’s any possibility the inquiry could turn criminal — structuring, suspected fraud, willful FBAR violations — the Fifth Amendment right against self-incrimination becomes relevant. In a purely civil audit, refusing to answer or produce documents can lead the IRS to draw negative inferences and assess taxes based on whatever information it has. Once criminal liability is on the table, you can invoke the Fifth Amendment on a question-by-question basis if each answer would pose a real and substantial risk of incrimination. This is exactly why representation matters. A tax attorney can evaluate where the civil-criminal line sits and advise you on what to produce and what to withhold.
What Happens If You Ignore the Notice
Ignoring an IRS notice is the single most expensive mistake you can make. If you don’t respond, the IRS completes the audit without your participation and issues an assessment based entirely on third-party data: W-2s, 1099s, and bank reports. That assessment will not include any deductions, business expenses, or credits you would have been entitled to, because you weren’t there to claim them.
After the assessment, the IRS issues a Notice of Deficiency giving you 90 days to petition Tax Court. If you miss that deadline, the tax is officially assessed and your account is referred to IRS Collections. Penalties and interest continue to accrue from the original due date of the return, not from the date of the assessment. For someone who owed a modest amount of additional tax, ignoring the notice can easily double or triple the total bill by the time liens and levies enter the picture.
If you never filed the return in question, the IRS can create a substitute return for you using only third-party income data, with zero deductions or credits applied. The resulting bill is almost always higher than what you would have owed if you’d filed yourself.