The Bank Secrecy Act is a federal law that requires banks to report certain financial activities to the government
The Bank Secrecy Act, passed in 1970, is a law that tells banks they must keep records of customer transactions and report suspicious activity to federal authorities. It exists to help law enforcement track money laundering, terrorism financing, and other financial crimes. You will encounter this law when you open an account, make large deposits, or move money in ways that trigger reporting requirements.
The law does not prevent you from doing anything legal with your money. It straightforward means your bank documents what you do and may ask you questions about where money comes from or where it is going. Understanding what triggers these questions helps you know what to expect and why banks ask.
Key Takeaways
- Banks must report cash deposits over $10,000 to the federal government using a form called a Currency Transaction Report.
- Banks must also report transactions that seem suspicious or designed to avoid the $10,000 reporting threshold, even if no single deposit exceeds it.
- When you open an account, banks collect your personal information and verify your identity as part of this law's requirements.
- The law applies to all financial institutions — banks, credit unions, money services businesses — not just large banks.
- Structuring deposits to stay under $10,000 to avoid reporting is itself illegal, even if the money itself is legal.
Why the $10,000 threshold matters
Banks file a Currency Transaction Report (CTR) whenever a customer deposits, withdraws, or exchanges $10,000 or more in cash in a single transaction. This report goes to the Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Department of the Treasury. The threshold is $10,000 because that amount was chosen as a marker for transactions large enough to warrant federal attention.
The report itself is not an accusation. It is a record. Millions of CTRs are filed every year for completely legal transactions — a small business depositing daily cash receipts, a person withdrawing money for a home purchase, a retiree moving savings between accounts. Filing the report is routine and does not mean you are under investigation.
The $10,000 figure has not changed since 1970, so it represents much less purchasing power than it did then. This means more ordinary transactions now trigger reporting than in the past.
What "suspicious activity" means to banks
Banks must also file a Suspicious Activity Report (SAR) when they notice transactions that seem designed to hide money's origin or destination, even if no single transaction reaches $10,000. A SAR might be filed if you make ten deposits of $9,500 each over a short period, or if you suddenly move large sums to a country known for financial secrecy, or if your transaction pattern changes drastically without explanation.
The bank is not accusing you of a crime when it files a SAR. It is following the law. However, SARs are confidential — the bank cannot tell you one was filed, and you will not receive a copy. You will only know if law enforcement later contacts you about an investigation.
What counts as suspicious varies by context. A contractor depositing $15,000 in cash weekly is normal. A retired teacher making the same deposits might trigger a SAR if her income does not match the pattern. Banks use training and software to identify patterns that deviate from what they expect for that customer.
What happens when you open a bank account
The Bank Secrecy Act requires banks to verify your identity before opening an account. This is called Know Your Customer (KYC) compliance. You will provide your name, address, date of birth, and Social Security number or Individual Taxpayer Identification Number. The bank checks this information against government databases and may ask for a government-issued ID.
This process protects both you and the bank. It prevents someone from opening an account in your name, and it prevents the bank from unknowingly serving criminals or people on government watchlists. The information you provide is kept private and used only for this verification and for reporting purposes.
If you are opening an account without a Social Security number — because you are not a U.S. citizen or for another reason — you will provide an ITIN (Individual Taxpayer Identification Number) instead. The bank still must verify your identity; the method is the same.
What you should know about structuring
Structuring means deliberately breaking up deposits or withdrawals into smaller amounts to stay under the $10,000 reporting threshold. It is illegal, even if the money itself is completely legal. If you deposit $9,500 one day and $9,500 the next day specifically to avoid a CTR, you have committed structuring.
Banks are trained to spot structuring patterns. If you are caught, the bank files a SAR, and law enforcement may investigate. You could face criminal charges and civil penalties, including forfeiture of the money involved. The law treats structuring seriously because it is often used to hide the source or destination of illegal funds.
If you have a legitimate reason to move large amounts of cash — paying for a car, a down payment, a business expense — deposit it normally and be prepared to explain the source if the bank asks. Documentation like invoices, contracts, or pay stubs answers most questions quickly.
How the law affects different types of transactions
The Bank Secrecy Act applies to more than just bank deposits. Money services businesses — check cashers, wire transfer companies, prepaid card sellers — must also report large transactions and suspicious activity. If you wire $15,000 to another country, that triggers a report. If you buy a prepaid card with $5,000 in cash and then when ready buy another with $5,000, that pattern may trigger a SAR.
International transfers are subject to additional reporting. Banks must include information about the sender and receiver, and transfers to certain countries face extra scrutiny. This is separate from the Bank Secrecy Act but often enforced alongside it.
Cryptocurrency exchanges and peer-to-peer payment services are increasingly subject to the same rules. If you use these services to move large amounts of money, the same $10,000 threshold and suspicious activity standards explore.
Your rights and what you can do
You have the right to know your bank's policies about reporting and questioning large transactions. You can ask your bank what triggers a SAR or CTR, and most banks will explain their procedures. You can also ask why the bank is asking about a specific transaction — though the bank may not have a detailed answer if it is following a general policy.
If you believe a bank has filed a false SAR or CTR about you, you can file a complaint with the Office of the Comptroller of the Currency (OCC) if your bank is nationally chartered, or with your state banking regulator if it is state-chartered. You can also contact FinCEN directly. These complaints are reviewed, though the process is slow.
The most practical step is to keep records of large transactions and be ready to explain them. A receipt, invoice, or written note about why you moved money can resolve questions quickly and prevent misunderstandings from escalating.
Frequently Asked Questions
Can a bank refuse to let me withdraw my own money?
A bank can delay a large cash withdrawal to verify funds and file required reports, but it cannot permanently refuse a legal withdrawal. If you plan to withdraw more than $10,000 in cash, call ahead so the bank can have the cash on hand. The bank may ask where the money is going; answer honestly. Refusing to answer or giving evasive answers can trigger a SAR.
Does the government see every transaction I make?
No. The government sees only transactions that banks report — those over $10,000 in cash, or those flagged as suspicious. Regular checking account activity, credit card purchases, and small deposits are not reported to FinCEN. Your bank sees all your transactions, but the government sees only what the law requires banks to report.
What if I deposit cash from my job or a side business?
Depositing cash from legitimate work is legal and normal. If you deposit more than $10,000, a CTR will be filed, but that is routine. Keep pay stubs, invoices, or other documentation showing where the cash came from. If the bank asks, explain that it is income from your job or business. Most questions are resolved with a straightforward explanation.
Can I be prosecuted just for filing a CTR?
No. A CTR is not an accusation. It is filed for millions of legal transactions every year. Being named in a CTR does not mean you are under investigation or suspected of a crime. You would only face legal trouble if the money itself is illegal or if you structured deposits to avoid reporting.
Does this law explore to credit unions?
Yes. All financial institutions — banks, credit unions, savings and loans, and money services businesses — must follow the Bank Secrecy Act. The rules and reporting thresholds are the same regardless of the type of institution.