What banks can and cannot do with your account

Your bank can access your account to process transactions you authorize, collect fees you owe them, and comply with court orders or government investigations. They cannot access your account to spy on your spending, share details with third parties without your permission, or freeze money without legal cause. The line between these two is set by federal banking law, your account agreement, and sometimes state law.

When you sign an account agreement, you give the bank permission to look at your account for specific reasons: to verify funds before clearing a check, to detect fraud, to apply monthly maintenance fees, or to report suspicious activity to federal authorities. This is routine and happens constantly. What requires extra permission or a court order is different — seizing funds, sharing your transaction history with someone else, or investigating your account beyond what's needed to run it.

The most common scenario where banks access accounts beyond routine operation is when they have a legal obligation to do so. A court can order a bank to freeze an account or turn over records. The IRS can place a levy on your account to collect unpaid taxes. A creditor with a judgment can ask the bank to locate and hold your funds. In each case, the bank receives a formal legal document — not a phone call or email — before they act.

Key Takeaways

  • Banks access your account routinely to process your transactions, detect fraud, and collect their own fees, and this is covered by your account agreement.
  • A court order, IRS levy, or creditor judgment can force a bank to freeze your account or hand over records, but the bank must receive a formal legal document first.
  • Banks must report suspicious activity to the Financial Crimes Enforcement Network (FinCEN) under federal law, but they cannot share your account details with private companies or individuals without your written consent.
  • If your account is frozen or accessed without your knowledge, contact your bank immediately to find out which legal process triggered it and what you can do next.

Routine access: what your bank does every day

Every time you make a deposit, write a check, or use your debit card, your bank accesses your account to verify the transaction is legitimate and that you have funds to cover it. This is not a violation of privacy — it is the core function of banking. Your account agreement explicitly permits this, and you cannot opt out without closing the account.

Banks also access your account to apply fees. Monthly maintenance fees, overdraft fees, ATM fees, and wire transfer fees all require the bank to look at your balance and deduct money. Again, this is in your account agreement. If you dispute a fee, the bank can show you the exact date and reason it was charged.

Fraud detection is another routine reason. If you swipe your card in New York at 2 p.m. and then in Los Angeles at 3 p.m., the bank's system flags this as impossible and may decline the second transaction or call you to verify. The bank is accessing your account history and location data to protect you, not to monitor you. Most banks now use machine learning to spot unusual patterns — a sudden spike in online purchases, transfers to new recipients, or activity in a country where you have never been.

Legal holds and freezes: court orders and government levies

A court can order a bank to freeze your account if you are being sued and the plaintiff wins a judgment. The bank receives a document called a writ of execution or garnishment order, which tells them to hold funds up to the amount owed. The bank does not decide whether the order is fair — they comply with it. You can challenge the order in court, but the freeze stays in place until a judge lifts it.

The IRS can place a levy on your account without a court order if you owe back taxes. The IRS sends the bank a formal notice, and the bank must freeze the account within one business day. The IRS can then take the money to pay your tax debt. You have the right to request a hearing with the IRS to challenge the levy, but you must do so quickly — usually within 30 days of receiving notice.

Child support enforcement agencies can also freeze accounts. If you owe child support, the state can send your bank an order to hold funds. Like a tax levy, this does not require a court judgment first — the agency has the power to do it directly.

If your account is frozen, the bank will send you notice, though the timing varies. Some banks notify you immediately; others wait a few days. Call your bank as soon as you see the freeze and ask which legal document triggered it. The bank can tell you the exact amount being held and who issued the order. From there, you can contact the creditor, the court, or the government agency to understand your options for release or payment.

Subpoenas and government investigations

Law enforcement or a prosecutor can subpoena your bank records as part of a criminal or civil investigation. A subpoena is a court order requiring the bank to produce documents — in this case, your transaction history, account statements, and sometimes the identity of people who sent you money or received money from you. The bank must comply with a valid subpoena.

In some cases, the bank may notify you that records have been subpoenaed. In others, especially criminal investigations, the subpoena includes a gag order that prevents the bank from telling you. If you receive a subpoena yourself, you have the right to object in court, but the bank does not — they simply hand over what is requested.

The IRS and other federal agencies can also access your account information through administrative summons, which is similar to a subpoena but does not require a judge's signature. The bank still must comply, though you may have a right to challenge it in court if you learn about it.

What banks cannot do without your permission

Your bank cannot share your account details with a private company, employer, or individual without your written consent. If a debt collector calls claiming they need to verify your account information, they do not. If a potential creditor asks your bank for your balance before lending you money, the bank should decline unless you have signed a form authorizing it.

Banks cannot access your account to monitor your spending habits and sell that data to marketers. They can use your transaction data to offer you products (a bank might suggest a credit card based on your spending patterns), but they cannot sell raw transaction data to third parties. Some banks do sell anonymized, aggregated data — patterns about how many customers bought groceries in a certain zip code — but not individual account details.

Banks also cannot freeze your account on a whim or because they dislike your business. If a bank wants to close your account, they must give you notice and time to withdraw your funds. They cannot simply seize money. The exception is if they suspect fraud or money laundering — in that case, they can freeze the account while they investigate, but they must notify you and explain why.

Suspicious activity reports and FinCEN

Banks are required by federal law to report suspicious activity to the Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Treasury. If your account shows signs of money laundering, terrorist financing, or other financial crimes, the bank files a Suspicious Activity Report (SAR). This is not optional — it is a legal requirement.

A SAR does not mean you have done anything wrong. Banks file them for many reasons: large cash deposits that seem unusual for your account, frequent wire transfers to high-risk countries, or patterns that match known fraud schemes. The bank is required to file the report, and they are also required not to tell you they did so. This is called the "tipping off" rule — the bank cannot warn you that a SAR has been filed because doing so could interfere with law enforcement investigations.

If you believe a SAR was filed in error, you can contact your bank and ask them to review the activity. The bank may reconsider, but they are not obligated to withdraw a report once it has been filed. Your recourse is limited to explaining your legitimate reasons for the activity to law enforcement if they contact you.

What to do if your account is accessed without your knowledge

If you see transactions you did not make, contact your bank immediately. The bank has a legal duty to investigate unauthorized transactions. For debit card fraud, you have up to 60 days from the date the fraudulent transaction appears on your statement to report it. For credit card fraud, the window is longer — up to 120 days in most cases. Report sooner rather than later; the faster you report, the faster the bank can freeze the card and investigate.

If your account is frozen and you did not receive notice, call your bank's customer service line and ask why. The bank can tell you whether it is a fraud hold (temporary, usually lifted within a few days), a legal freeze (requires court action or payment to lift), or an error. If it is a legal freeze, ask for the name and contact information of the creditor or agency that issued it.

If you believe your bank has shared your information without consent, file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov. The CFPB investigates complaints about banks and can take action if a bank has violated privacy laws. You can also file a complaint with your state's banking regulator or attorney general.

Your rights under banking privacy law

The Gramm-Leach-Bliley Act (GLBA) is the main federal law protecting your banking privacy. It requires banks to keep your information confidential and to tell you how they use it. When you open an account, the bank must give you a privacy notice explaining what information they collect, who they share it with, and what choices you have.

Under GLBA, you have the right to opt out of certain information sharing. For example, if your bank wants to share your information with affiliated companies for marketing purposes, you can tell them not to. However, you cannot opt out of all sharing — the bank can still share information with service providers (like check processors), with law enforcement (when legally required), and with credit reporting agencies.

State privacy laws vary. California, New York, and a few other states have stronger privacy protections than federal law requires. If you live in one of these states, you may have additional rights to know what information is being collected and to request deletion of certain data.

Frequently Asked Questions

Can my bank see what I spend money on?

Yes, your bank can see every transaction — where you spent money, how much, and when. This is necessary for them to process payments and detect fraud. However, they cannot share this detailed information with third parties without your permission, and they cannot use it to discriminate against you or deny you services based on your spending habits.

Can my employer access my bank account?

No, not without your written consent. Your employer cannot ask your bank for account information, and the bank cannot provide it. The only exception is if your employer has a court order or if you have authorized payroll deductions (like for a loan or garnishment). Even then, the bank only shares what the court order or authorization requires.

What happens if I ignore a bank freeze?

You cannot ignore it — the money is not accessible to you. If the freeze is from a court judgment or tax levy, you need to either pay the debt, work out a payment plan with the creditor or government agency, or go to court to challenge the freeze. Contact the entity that issued the freeze to find out your options.

Can a bank freeze my account if I have not done anything wrong?

Yes, temporarily. Banks can freeze accounts while investigating suspected fraud or suspicious activity. This usually lasts a few days to a week. If the bank finds no fraud, they unfreeze the account. If they suspect money laundering or other crimes, they may file a Suspicious Activity Report and keep the account frozen while law enforcement investigates.

Do I have to give my bank permission to check my credit?

Your bank can check your credit as part of opening an account or reviewing your account for risk. This is considered a "soft pull" and does not affect your credit score. You authorize this by signing the account agreement. However, if your bank wants to offer you a credit product (like a credit card), they must get your explicit consent before doing a hard pull that affects your score.