How Long Do Banks Keep Records? a Practical Guide

Under U.S. Bank Secrecy Act rules, banks generally keep most records for at least 5 years, but real-world retention often runs 7 to 10 years depending on the record type and jurisdiction. Some records may be retained even longer under specific legal, tax, supervisory, or internal policy requirements.

It's a Wednesday afternoon, and a senior accountant is trying to answer a junior colleague's message: “Do we have the bank statement showing the 2018 commercial loan disbursement?” The regional bank migrated its core system in 2021, the client's audit is six weeks away, and the original paper trail is nowhere in the company archive. Someone will soon have to choose between reconstructing the transaction from incomplete evidence and asking the auditor to accept an estimate.

That's the practical cost behind the question how long do banks keep records. Missing statements can create deadline pressure, extra billable hours, and uncertainty about whether a balance or transaction can be supported. The official retention rule gives us a starting point, but it doesn't tell us whether a particular statement remains available through the portal, must be requested from an archive team, or has already been destroyed under the bank's internal schedule.

Table of Contents

• The Question Every Accountant Eventually Asks
• The 5-Year Baseline Frequently Quoted
  • The seven-year complication
• Why Some Records Survive Far Longer Than Five Years
• How Retention Periods Differ by Record Type
• What This Means for Your Reconciliation Workflow
• Verifying Accuracy Before You Trust the Output
• Where Retention Rules Are Heading in 2026 and Beyond
  • What finance teams should prepare for
• A Short Retention Checklist for Finance Teams

The Question Every Accountant Eventually Asks

The first mistake is treating bank retention as one universal timer. In practice, we need to separate three ideas: the regulatory floor, the longest applicable legal requirement, and the bank's operational policy.

For many U.S. records, the Bank Secrecy Act provides a five-year benchmark. The Federal Financial Institutions Examination Council's BSA record-retention guidance explains that many records, including customer identifying information, must be retained for at least five years. For customer identification information, the period can continue for five years after the account closes. That doesn't mean every bank will delete a file immediately when the minimum expires.

A bank may keep records longer because another rule applies, because the record supports supervision or litigation, or because its internal records-management policy sets a longer period. The same institution can therefore hold one record for the minimum period and another for considerably longer.

Practical rule: Treat the legal minimum as the earliest possible destruction date, not as a promise that the bank will provide the document on demand until that date.

For finance teams, the operational question is more useful than the abstract one. Ask what kind of record you need, which event starts the clock, which jurisdiction governs the account, and whether your own archive already contains the source document. A closed account, a paid loan, a transaction ledger, a KYC file, and a regulatory report may all follow different schedules.

The rest of the answer sits between the floor and the ceiling. We need to understand the five-year U.S. baseline, identify longer overlays, and then decide which records should remain in the company archive rather than relying on a bank's retrieval process.

The 5-Year Baseline Frequently Quoted

The U.S. regulatory floor is often described as a five-year retention period under Bank Secrecy Act recordkeeping requirements. The FFIEC BSA/AML manual applies this general period to many bank records, including transaction records and customer identifying information. For transaction records, the clock generally relates to the transaction date. Customer identification information can remain subject to the requirement for five years after the account closes.

Deposit records have a more specific rule. The Office of the Comptroller of the Currency guidance on statements and records states that records for deposits over $100 must be kept for at least five years. If a bank does not return canceled checks, it must retain the checks, or a copy or reproduction, for five years.

Use the transaction date as the starting point, not the date you request the document. A check drawn in March 2024 should therefore remain retrievable until at least March 2029 under that five-year floor. The bank may store an original, microfilm, microfiche, or another indelible image in a tamper-resistant format. The paper check itself may no longer exist.

The seven-year complication

The seven-year figure belongs to particular record categories, not to every customer statement. Federal Reserve records-management schedules identify 7 years for certain oversight records, as described in the FFIEC retention guidance. That longer schedule does not replace the general BSA requirement. It shows why the document type controls the answer.

For an accountant, five years is a floor for many records, not a universal ceiling. A bank may keep statements, check images, or internal records longer, while online access ends earlier. Request the specific record by type, date, and account status, and keep the company's own copy when it supports reconciliation, tax work, or an audit.

Why Some Records Survive Far Longer Than Five Years

A five-year rule can look simple until the record changes. Ohio banking rules, for example, require certain deposit and withdrawal tickets to remain available for 6 years, while bank call reports and some financial statements follow a 5-year period under Ohio Revised Code Section 1109.69. The document type starts the clock, so one account can have records with different destruction dates.

Operational policies can extend the period further. Indian bank policies describe 8 financial years for some books of account and vouchers, and 10 years from final settlement for other records. Deposit and advance records may also be preserved for 10 years from account closure or the last transaction. The policy published by Equitas Small Finance Bank illustrates how retention can outlast the minimum rule.

Jurisdiction	Governing rule	Minimum retention	Notable extras
United States	Bank Secrecy Act guidance	5 years for many records	Some customer information remains covered for 5 years after closure; certain oversight records may run 7 years
Ohio	Ohio Revised Code Section 1109.69	5 to 6 years depending on record type	Deposit and withdrawal tickets can require 6 years
India	Bank record-retention policies and applicable statutory rules	8 to 10 years for specified records	Books, vouchers, deposits, advances, and operational records may follow different triggers

Retention is layered, not universal. The controlling period is generally the longest applicable requirement from federal, state or provincial law, another legal obligation, or the bank's own records-management policy.

For an audit, this distinction changes the request. A bank may destroy one record after its minimum period yet keep another because it supports tax, accounting, compliance, or supervisory work. Ask what record you need and which event began its retention period, rather than relying only on the statement's age. Keep your own copy when the document supports reconciliation or an audit.

How Retention Periods Differ by Record Type

A bank statement is only one item in a much larger records environment. Deposit statements, loan files, KYC evidence, and regulatory reports don't necessarily begin or end retention on the same date. The record-retention policy published by Equitas Small Finance Bank demonstrates this record-class approach by assigning different periods and triggers to different artifacts.

Record Type	Typical Retention	Trigger Event	Governing Authority
Deposit and transaction records	At least 5 years in many U.S. cases	Transaction date, closure, or last transaction depending on the rule	Bank Secrecy Act and local banking rules
Canceled checks and reproductions	At least 5 years when the bank doesn't return them	Deposit or check transaction date	OCC consumer banking guidance
KYC and customer identification records	5 years after account closure in the U.S. baseline	Account closure or end of the customer relationship	Bank Secrecy Act guidance
Loan and advance records	Often longer under local policy	Closure, final settlement, or last transaction	Applicable banking law and bank policy
Call reports and financial statements	5 years for specified Ohio records	Filing or record creation date	Ohio banking rules
Oversight and supervisory records	7 years for certain programs	Creation or completion of the oversight record	Federal supervisory schedules

The phrase “after closure” also creates confusion. Closure may not be the same as the date of the last statement, last payment, loan settlement, or customer-identification update. We need to record the trigger used by the governing schedule.

For a closed account, the bank may still hold KYC evidence, transaction records, and account correspondence under separate clocks. Finance teams looking for an old statement can use this guide to getting bank statements from a closed account, but they should also preserve any copy they obtain in the company archive.

What This Means for Your Reconciliation Workflow

Retention rules become useful only when they change the close process. We should store the working paper, source statement, reconciliation notes, and supporting documents locally rather than assuming the bank will provide the original file whenever an auditor asks.

Start with a simple decision tree:

1. The period is visible in online banking. Download the official statement, retain the original PDF, and link any spreadsheet export back to that source.
2. The period isn't online, but it may still fall within the bank's retention window. Contact the bank's archive or records team, identify the account, period, statement type, and requested images, and keep the request trail.
3. The bank confirms the record has expired. Rebuild the evidence from the company archive, general ledger, payment support, loan schedules, and other independent records. Mark reconstructed amounts clearly instead of presenting them as original bank evidence.

The company's archive remains the control point. A bank may retain a record but limit customer-facing access, charge for retrieval, or require manual verification before releasing it. We shouldn't confuse “the bank may have it” with “we can obtain it before the close deadline.”

A repeatable bank statement reconciliation process should preserve the source document even when the transactions are exported into a spreadsheet. The accounting file explains the posting, but the original statement supports the bank-side evidence.

Archive before access disappears: Download important statements when the account is active, not when an audit request has already arrived.

When a PDF must be converted for analysis, keep the original file beside the CSV or XLSX output. A converter can make transactions easier to sort and reconcile, but it doesn't replace the bank's source document or the finance team's review.

Verifying Accuracy Before You Trust the Output

A converted statement is useful only after it passes an accuracy review. We should compare the opening and closing balances shown on the source statement with the figures in the bank's official record, then confirm that the extracted transaction rows cover the complete date range.

The core accounting check is:

Opening balance + total credits − total debits = closing balance

That reconciliation check is also described in bank reconciliation guidance for accounting teams. If the equation doesn't work, stop before posting adjustments. The difference may come from a truncated page, an omitted fee, a duplicated transaction, or an OCR error.

Use a three-part review:

• Balance check: Compare opening and closing balances with the official statement, including the sign and decimal placement.
• Transaction check: Sample transactions against the general ledger and source documents, including a substantial debit, a credit, and a bank fee.
• Identity check: Confirm the account number, statement period, page sequence, and transaction dates on every page. This catches merged files and incomplete downloads.

The guide to reading a bank statement can help junior staff identify the fields that need review before they rely on an extracted table.

For temporary handling, autobankstatement converts digital, scanned through OCR, and password-protected PDF bank statements into CSV or Excel/XLSX files. Files can be up to 25 MB, bulk uploads are supported, guests can preview before payment, registered users receive 24-hour download access, and uploads auto-delete within 24 hours. Those handling limits support a short working window, but they don't remove the need to retain the original statement and completed reconciliation in the company archive.

Where Retention Rules Are Heading in 2026 and Beyond

The direction is clear even when the exact rule differs by jurisdiction. Banks are moving away from a single blanket retention setting and toward record-class-specific lifecycle management, with separate controls for archival, deletion, legal holds, and access.

The Bandhan Bank preservation policy for FY 2025-26 illustrates this more granular approach. It describes explicit preservation and destruction timelines, including defined deletion windows for certain categories after review. Other operational records, such as dormant account and clearing records, may remain preserved for 10 years or more under applicable schedules.

That creates a privacy and compliance tension. Closed-account records cannot always disappear quickly because regulatory rules may require continued retention, yet banks also need documented destruction processes so personal data isn't held without a valid purpose.

What finance teams should prepare for

We should treat retention as metadata attached to each record, not as a single date written on a folder. A useful record profile identifies the document class, governing jurisdiction, trigger event, destruction date, legal-hold status, and source location.

Future systems may surface those flags inside reconciliation dashboards rather than leaving them in a separate policy document. Until that happens, finance teams can create the same discipline manually by recording the retention basis with each working paper and preserving the source PDF alongside any extracted spreadsheet.

A Short Retention Checklist for Finance Teams

Use this checklist at month-end and before an account is closed:

• Identify the governing rule: Record the jurisdiction, document type, and retention source instead of applying one blanket period.
• Confirm the trigger: Note whether the clock begins at the transaction date, account closure, final settlement, last transaction, or filing date.
• Preserve the source: Store the original bank PDF or image with the reconciliation file and any spreadsheet export.
• Check retrieval access: Confirm that current and prior-period statements can be opened, downloaded, and read without relying on an expiring portal session.
• Separate bank access from company retention: Decide which records remain in the local archive and which may be requested from the bank.
• Review closed accounts: Request important statements and supporting images before the account disappears from normal online access.
• Validate extracted data: Confirm the opening balance plus credits minus debits equals the closing balance, then investigate every difference.
• Document the decision: Add the retention basis, review date, and responsible person to the working paper.

The short answer to how long do banks keep records is five years for many U.S. records, but the accountant's answer is more careful. Retention depends on the record class, the trigger event, the governing jurisdiction, and the bank's internal schedule. Preserve the evidence you'll need before access becomes a retrieval problem.

---

autobankstatement converts digital, scanned through OCR, and password-protected PDF bank statements into clean CSV or Excel/XLSX files, with bulk uploads for files up to 25 MB. You can preview as a guest before payment, receive 24-hour download access as a registered user, and work with uploads that auto-delete within 24 hours. Visit autobankstatement to turn retained statements into reviewable reconciliation data.