The Bank Secrecy Act requires banks to report large transactions and suspicious activity to the federal government, not to keep your accounts secret.

The Bank Secrecy Act (BSA), passed in 1970, is a federal law that forces banks and other financial institutions to report certain transactions to the U.S. Department of the Treasury. The law exists to catch money laundering, tax evasion, and terrorist financing. It does not protect your privacy — it does the opposite. Banks must tell the government about transactions over $10,000 and about any activity that looks unusual or suspicious, even if it is smaller.

The reporting happens behind the scenes. You do not fill out a form or give permission. Your bank files the reports electronically to the Financial Crimes Enforcement Network (FinCEN), a Treasury bureau. The reports are called Currency Transaction Reports (CTRs) for large deposits or withdrawals, and Suspicious Activity Reports (SARs) for anything that seems off. Being reported does not mean you have done anything wrong — it means the transaction met a threshold or pattern that the bank's compliance team flagged.

Key Takeaways

  • Banks must report cash deposits, withdrawals, and transfers over $10,000 to the federal government within 15 days.
  • Banks also report transactions under $10,000 if the pattern or nature of the activity looks suspicious, such as multiple deposits just under $10,000 on the same day.
  • The reports go to FinCEN, a Treasury agency, not to law enforcement automatically — but law enforcement can request the data.
  • Being reported does not trigger an investigation or freeze your account unless the bank itself suspects criminal activity.
  • You have no right to know whether your transactions have been reported, and banks cannot tell you without risking their own legal liability.

How the $10,000 reporting threshold works

Any single transaction of $10,000 or more in cash must be reported on a CTR. This includes deposits to your account, withdrawals from your account, and transfers you initiate. The threshold is $10,000 exactly — $10,001 triggers a report, $9,999 does not.

The rule applies to each transaction separately, not to your total activity in a day or month. If you deposit $8,000 on Monday and $7,000 on Wednesday, neither crosses the threshold and neither is reported as a large transaction. But if you deposit $15,000 on Thursday, that single deposit is reported. The bank files the CTR within 15 days of the transaction.

The $10,000 figure has not changed since 1970, despite inflation. Congress has not raised it, so the threshold stays the same in nominal dollars.

Suspicious activity reports and structuring

Banks also report transactions that do not reach $10,000 but look intentionally designed to avoid reporting. This is called structuring, and it is illegal under the BSA. If you make multiple deposits of $9,500 each over a few days, or if you split a single large cash deposit into smaller ones across different branches, the bank's compliance system flags this as a pattern and files a Suspicious Activity Report.

A SAR does not require proof of wrongdoing. The bank files it if the activity is "unusual" and the bank suspects it may relate to money laundering, tax evasion, or other financial crimes. The threshold for filing a SAR is typically $5,000, meaning any suspicious transaction of $5,000 or more can trigger one. Smaller suspicious transactions may also be reported at the bank's discretion.

Structuring itself is a crime, even if the money is legal. You cannot avoid the reporting requirement by breaking up your deposits. The penalty for structuring can include fines and criminal charges.

What banks report and what they do not

Banks report the amount, date, type of transaction, and your identifying information — name, address, account number, and Social Security number or tax ID. They also report the source of the funds if known (cash, check, wire transfer) and sometimes the stated purpose of the transaction.

Banks do not report routine transactions under $10,000, such as your paycheck deposits, bill payments, or regular transfers to savings. They do not report credit card charges or purchases. They do not report wire transfers between your own accounts at the same bank. The reporting is limited to cash transactions and transfers that cross certain thresholds or patterns.

Different types of financial institutions have different reporting rules. Banks report CTRs and SARs. Money transmitters, casinos, and check-cashing services also file reports. Brokerages and insurance companies have separate rules. The BSA applies across the financial system, not just to banks.

Who sees the reports and how they are used

FinCEN receives the reports and stores them in a database. Law enforcement agencies — the FBI, DEA, IRS, Secret Service, and local police — can request access to the data if they are investigating a specific person or transaction. The reports are not automatically shared with law enforcement; they sit in the FinCEN database until someone with legal authority asks for them.

The IRS uses BSA data to identify potential tax evasion. The DEA uses it to track drug trafficking. Homeland Security uses it to identify terrorist financing. Foreign governments can also request U.S. transaction data through formal channels, though this is less common and subject to treaties.

Your bank does not tell you when it files a report about you. Banks are prohibited from alerting customers to SARs — this is called the "tipping off" rule. If a bank tells you that a SAR has been filed, the bank can face criminal penalties. You have no legal right to know whether you have been reported.

Your rights and what you cannot do

You cannot prevent a bank from reporting a transaction that meets the BSA threshold. You cannot ask the bank not to file a CTR or SAR. You cannot sue a bank for reporting you. Banks are protected from liability when they file reports in good faith, even if the report turns out to be wrong.

You can request your own records from FinCEN under the Freedom of Information Act (FOIA), but the process is slow and FinCEN often redacts information. You can also request records directly from the bank that filed the report, though the bank may refuse if the information is part of an ongoing investigation.

If you believe a report was filed in error — for example, if your bank reported a legitimate business deposit as suspicious — you can contact the bank's compliance department and ask them to review the decision. The bank is not required to change or withdraw a report, but they may investigate your complaint.

Why the BSA matters for your banking

Understanding the BSA helps you avoid unintended consequences. If you regularly withdraw large amounts of cash for a legitimate reason — paying contractors, funding a business, or making a large purchase — the bank will report it. This is normal and legal. The report does not mean you are under investigation.

However, if you structure deposits or withdrawals to stay under $10,000, you are breaking the law, even if the money itself is legal. If you are flagged for suspicious activity and law enforcement opens an investigation, your accounts can be frozen or seized while the investigation proceeds. This can happen even before you are charged with a crime.

If you work in a business that handles cash — retail, restaurants, casinos, or money services — your employer is also subject to BSA rules and must report large transactions. You should know this is happening so you do not accidentally structure transactions on behalf of the business.

Frequently Asked Questions

Will my bank account be frozen if I deposit $10,000?

No. A single deposit of $10,000 or more triggers a report, but it does not freeze your account or start an investigation. The report is routine and happens thousands of times per day across the country. Your account remains accessible unless the bank itself suspects criminal activity unrelated to the deposit amount.

Can I split a large cash deposit into smaller ones to avoid reporting?

No. Splitting deposits to stay under $10,000 is called structuring and is illegal. Banks have automated systems that detect this pattern across multiple transactions and file a Suspicious Activity Report. Structuring can result in criminal charges and penalties, even if the money is legal.

What happens if law enforcement requests my transaction data?

If law enforcement has a warrant, subpoena, or court order, the bank must provide your transaction records. If they have a less formal request, the bank may still comply depending on the circumstances. You are not notified when this happens. Your records can be used in an investigation or prosecution.

Does the BSA explore to online banks and payment apps?

Yes. Any institution that holds money and processes transactions — including online banks, PayPal, Venmo, and other payment services — must follow BSA rules if they are licensed as a money transmitter or bank. The reporting requirements are the same as for traditional banks.

Can I learn about I have been reported to FinCEN?

You can file a Freedom of Information Act request with FinCEN, but the process takes months and information is often redacted. You cannot ask your bank directly — banks are prohibited from telling you about Suspicious Activity Reports. You may only learn you were reported if law enforcement contacts you or if your account is frozen as part of an investigation.