Payment Records State Regulators and Banks Expect You to Keep

The short answer

Cannabis payment recordkeeping means keeping a documented, reconciled trail connecting every sale, every tender type, every deposit and every fee back to a licensed transaction, retained long enough and organised well enough that a regulator, a bank or an examiner can follow it without your help. At minimum this covers point-of-sale reports, cash count and deposit slips, card and ACH settlement statements, chargeback and refund logs, and a monthly reconciliation showing that reported sales, deposited funds and remitted tax all agree.

Banks supporting cannabis accounts are themselves required to file enhanced monitoring reports, so they push much of that documentation burden down to the dispensary. An operator who cannot promptly produce a clean record for a requested period is treated as a monitoring risk even if nothing improper occurred, because the absence of records reads the same as the absence of controls.

The core record set

Every business handling cannabis payments should be able to produce a consistent set of records for any given day, week or month on short notice, ideally within a day or two of a request.

• Daily point-of-sale close reports broken down by tender type (cash, debit, ACH).
• Cash count sheets and armoured pickup or deposit receipts matched to the same date.
• Card and ACH settlement batches from the processor, matched line by line to POS totals.
• A chargeback and refund log with dates, amounts, and resolution outcomes.
• Monthly bank statements with deposits tagged back to the daily reports that produced them.
• Tax remittance filings tied to the same reporting period as the sales records.

How long and how organised

Retention periods differ by state and by bank agreement, but a common baseline used by operators is to keep detailed transaction-level records for at least the current and prior two calendar years, and summary reconciliations indefinitely. Some state cannabis regulators set their own explicit retention floors as part of licensing rules, so the state requirement should be treated as the governing minimum where it is longer than a bank's request.

Organisation matters as much as retention. A folder of unsorted receipts satisfies no one; a monthly package with a one-page reconciliation summary on top, supporting statements beneath it, and a clear naming convention by date and location is what actually gets a document request closed quickly instead of escalated.

What examiners and bank compliance teams actually check

A bank's compliance team reviewing a cannabis account is typically comparing three numbers: what the POS system reported in sales, what actually landed as a deposit, and what the business reported to its state regulator or tax authority for the same period. Persistent, unexplained gaps between any two of those numbers are the single most common trigger for an account review or a request for additional documentation.

Examiners also look at consistency over time rather than any single data point. A sudden spike in cash deposits relative to POS-reported cash sales, a growing gap between gross sales and net deposits after fees, or repeated late reconciliations all read as operational disorganisation at best and as a red flag at worst, so building a habit of monthly reconciliation is worth more than scrambling to reconstruct records after a request arrives.

Building a workable recordkeeping routine

The operators who handle document requests smoothly are almost always the ones who reconcile monthly rather than annually. A monthly close that matches POS totals to bank deposits, files the settlement statements, and flags any variance while it is still fresh and explainable turns an annual scramble into a repeatable ten-minute task.

Assign the reconciliation to a specific person with a specific deadline each month, store the resulting package somewhere accessible to whoever fields bank or regulator requests, and treat any unexplained variance over a small threshold as something to investigate immediately rather than carry forward. Waiting until a regulator asks is the most expensive way to discover a gap.

Illustrative Example: closing a recordkeeping gap before an audit

A generic multi-location dispensary group received notice of a routine account review from its bank six weeks out. Its bookkeeping had been done location by location with no central reconciliation, and pulling twelve months of matched POS, deposit and tax records took the finance team nearly three weeks of manual work, delaying other tasks and creating visible stress ahead of the deadline.

Afterward, the group implemented a standard monthly close template used identically across every location, with a single reconciliation summary rolled up centrally. The following year, when the bank requested an update, the same twelve-month package took under a day to assemble, because each month had already been closed and filed as it happened rather than reconstructed after the fact.

Regulatory context

State cannabis regulators generally require sales and inventory records to be retained for a set period and to be traceable through the state's seed-to-sale system, and some states layer additional financial recordkeeping requirements on top of that baseline. Federal banking guidance separately expects banks servicing cannabis accounts to conduct enhanced due diligence, which is the reason banks push detailed documentation requests down to their dispensary customers.

Because retention periods, required formats and the specific records regulators expect all differ by state and change over time, confirm current requirements with your state regulator, your bank's compliance team and counsel rather than relying on a single generic checklist.

Common questions

• How far back should a dispensary keep detailed payment records? A common baseline is the current year plus the prior two years for transaction-level detail, with summary reconciliations kept longer, but state rules can set a longer explicit minimum that governs.
• What is the fastest way to fail a bank document request? Being unable to produce a matched set of POS reports, deposit records and tax filings for the same period within a few days is the most common way an account review escalates into a deeper investigation.
• Does POS software alone satisfy cannabis payment recordkeeping requirements? Not on its own. POS data needs to be reconciled against bank deposits and tax filings, since regulators and banks are checking that the three sources agree, not just that one system logged a sale.
• Who should own monthly reconciliation at a dispensary? Assign it to a specific accountable person with a fixed monthly deadline, rather than leaving it to whoever has time, since inconsistent ownership is the most common reason reconciliations lapse.