The Bank Secrecy Act tracks large money movements to catch financial crime
The Bank Secrecy Act, passed in 1970, requires banks and other financial institutions to report large cash transactions and suspicious activity to the federal government. The law's core purpose is to create a paper trail for money that might be connected to crime—drug trafficking, money laundering, terrorism financing, tax evasion, and fraud. Banks are not trying to catch criminals themselves; they are required to document what they see and report it to the Treasury Department's Financial Crimes Enforcement Network, known as FinCEN.
The Act does not prevent you from depositing or withdrawing your own money. It does not freeze accounts or deny you access to your funds. What it does is require your bank to file a report when a transaction crosses a reporting threshold or looks unusual given your account history. Those reports go to law enforcement and financial regulators, who then decide whether to investigate.
The law applies to banks, credit unions, money services businesses, casinos, and certain other financial institutions. It is one of the oldest and most foundational pieces of financial regulation in the United States, and it shapes how every bank operates today.
Key Takeaways
- Banks must report cash deposits and withdrawals of $10,000 or more on a single day using a Currency Transaction Report, or CTR.
- Banks also report transactions that seem suspicious or inconsistent with a customer's normal activity, even if they are below $10,000.
- The reports go to FinCEN and law enforcement, not to your employer or the IRS directly, though law enforcement can share findings with tax authorities.
- Deliberately breaking up deposits to avoid the $10,000 reporting threshold—called structuring—is itself a federal crime.
- The Act does not prevent you from moving your own money; it creates a record that law enforcement can review if they suspect criminal activity.
How the $10,000 reporting threshold works
When you deposit or withdraw $10,000 or more in cash on a single calendar day, your bank files a Currency Transaction Report (CTR) with FinCEN within 15 days. The threshold is $10,000 total across all your transactions that day—so a $6,000 deposit and a $4,500 withdrawal on the same day would trigger the report, even though neither transaction alone reaches $10,000.
The $10,000 figure has not changed since 1970. Because of inflation, that amount represents far less purchasing power today than it did 50 years ago, but Congress has not raised the threshold. This means more routine transactions now cross the reporting line than originally intended.
The CTR itself is not a sign of wrongdoing. Businesses that handle cash regularly—restaurants, laundries, retail stores, construction companies—file CTRs constantly. Your bank is not accusing you of anything by filing one. The report is straightforward a record that the transaction happened.
Suspicious activity reports and what triggers them
Beyond the $10,000 rule, banks must also file Suspicious Activity Reports (SARs) when they observe transactions that seem odd or inconsistent with what they know about you. A SAR does not require a large dollar amount. A series of small deposits designed to stay under $10,000, a sudden wire transfer to a high-risk country, or repeated cash withdrawals that do not match your usual pattern can all trigger a SAR.
Banks use software and human review to spot these patterns. The decision to file a SAR is subjective—different banks may interpret the same transaction differently. A SAR is filed if the bank has reason to suspect the transaction relates to money laundering, fraud, tax evasion, or other financial crime. The bank does not have to prove anything; reasonable suspicion is enough.
SARs are confidential. Your bank cannot tell you that one has been filed about your account, and you have no automatic right to see it. Law enforcement can access SARs as part of an investigation, but the reports are not shared with the public or with other banks in a way that would damage your credit or reputation.
Structuring: the crime of avoiding the reporting threshold
If you deliberately break up a large cash deposit into smaller amounts to stay under $10,000—depositing $9,000 one day and $9,000 the next, for example—you are committing structuring, a federal crime. The law treats structuring as seriously as the underlying transaction it was meant to hide, even if the money itself is completely legal.
This is where the Act becomes controversial. Someone who deposits their own legitimate cash earnings in smaller chunks to avoid paperwork can face criminal charges, civil penalties, and even asset forfeiture. The government does not have to prove the money is connected to crime; the act of structuring itself is the offense. Banks are trained to spot structuring patterns and file SARs when they see them.
If you have a legitimate reason to make multiple deposits—you run a cash business, you are saving up gradually, you prefer smaller transactions—document it. Keep records of where the money came from. If your bank questions the pattern, be honest about it. Structuring charges are rare when the money's source is clear and legal.
Who receives the reports and what they do with them
CTRs and SARs go to FinCEN, a bureau of the Treasury Department. FinCEN maintains a database of these reports and makes them available to law enforcement agencies—the FBI, DEA, IRS, Secret Service, and state and local police—when those agencies request them as part of an investigation.
The IRS can access CTR and SAR data, but the reports do not automatically trigger a tax audit. The IRS uses the data alongside other information—tax returns, third-party income reports, tips—to decide whether to investigate. A CTR alone does not prove tax evasion; it is one data point among many.
FinCEN also shares information with international partners through formal agreements. If you wire money abroad, that transaction may be reported to the receiving country's financial regulator. This is part of the global effort to combat money laundering and terrorism financing.
What the Act does not do
The Bank Secrecy Act does not give the government the right to seize your money straightforward because you made a large deposit. It does not require you to explain where your money came from before you can access it. It does not prevent you from depositing cash—cash deposits are legal and protected.
The Act also does not explore to all financial transactions. Wire transfers between accounts at the same bank, transfers between your own accounts, and transfers initiated by check or electronic payment are not subject to the same reporting requirements as cash. The focus is on cash because it is harder to trace and has historically been used in criminal activity.
Finally, the Act does not create a public record. Your CTRs and SARs are not published or shared with employers, landlords, or credit bureaus. They are law enforcement records, accessible only through formal legal channels like subpoena or warrant.
How the Act changed after 9/11
The Bank Secrecy Act existed for 30 years before the September 11 attacks. After 2001, Congress expanded it significantly through the USA PATRIOT Act, which added new reporting requirements and gave financial institutions broader obligations to investigate their customers and report suspicious patterns. Banks were required to implement anti-money-laundering programs, hire compliance officers, and conduct due diligence on customers—especially those in high-risk categories.
The PATRIOT Act also introduced the concept of beneficial ownership reporting, which requires banks to know who actually owns or controls an account, not just who is listed on the paperwork. This was meant to prevent criminals from hiding money behind shell companies or nominees.
These expansions made the reporting system more comprehensive but also more subjective. Banks now file far more SARs than they did in the 1990s, and the threshold for what counts as "suspicious" has lowered.
Frequently Asked Questions
Will my bank report me if I deposit $10,000 in cash?
Your bank will file a Currency Transaction Report, but filing a CTR is not an accusation. It is a routine administrative requirement. Thousands of CTRs are filed every day for completely legitimate transactions. The report goes to FinCEN and law enforcement; it does not affect your account status or credit.
Can the IRS see my bank deposits?
The IRS can request CTR and SAR data from FinCEN as part of an investigation, but a single large deposit does not automatically trigger an audit. The IRS uses many sources of information to decide whether to investigate someone's taxes. A CTR is one data point, not proof of wrongdoing.
What happens if my bank files a SAR about me?
You will not be notified that a SAR was filed. The report is confidential and goes to law enforcement. If law enforcement decides to investigate based on the SAR, you may find out through a subpoena or search warrant. Most SARs do not result in any action against the person involved.
Is it illegal to deposit cash in multiple smaller amounts?
Depositing cash in smaller amounts is legal. Structuring—deliberately breaking up deposits to avoid the $10,000 reporting threshold—is a federal crime. The difference is intent. If you have a legitimate reason for smaller deposits, keep records and be transparent with your bank if they ask.
Does the Bank Secrecy Act explore to online banks and payment apps?
Yes. Any institution that holds customer funds and is regulated as a bank or money services business must comply with the Bank Secrecy Act. This includes online banks, credit unions, and payment service providers like PayPal. The reporting requirements are the same regardless of whether the institution is digital or brick-and-mortar.