What Cannabis Bank Monitoring Looks Like From the Merchant's Side

The short answer

Cannabis bank monitoring is the ongoing due-diligence process a bank runs on a cannabis-related deposit account after the relationship opens, not a one-time check completed at onboarding. Banks that serve cannabis businesses generally follow a risk-based framework tied to federal Bank Secrecy Act obligations, and because cannabis remains a controlled substance under federal law, the level of scrutiny is higher and more continuous than what a typical small business account receives. For the operator, that shows up as recurring document requests, periodic account reviews, and closer attention to deposit patterns than a non-cannabis business would ever encounter.

None of this monitoring is optional for the bank, and it is not a sign that anything is wrong with the account. It is simply what allows the bank to keep offering the relationship at all.

Why the scrutiny is different here

Federal guidance issued by the Financial Crimes Enforcement Network in 2014 laid out a framework banks use to decide how much due diligence a marijuana-related account needs and what ongoing reporting the bank itself is expected to file with regulators. That framework is a large part of why cannabis accounts carry a heavier compliance load than an ordinary retail account: the bank is managing its own regulatory exposure, and the account holder's cooperation with monitoring requests is what keeps that exposure manageable.

Because the underlying framework is federal and the underlying product is still federally restricted, no amount of state licensing removes this layer. A fully licensed, well-run operator in a mature legal market still goes through the same recurring monitoring as a newly licensed one.

The recurring documentation requests

The specific items a bank asks for vary, but the recurring themes are consistent: current state license status, any change in ownership or control, sales activity reconciled against what the business reports to its state regulator, and an explanation for any deposit that looks unusual against the account's established pattern. Banks typically request this information on a set schedule, monthly or quarterly is common, rather than only when something looks wrong.

Operators who keep these records organized and current, rather than assembling them from scratch each time the bank asks, tend to move through each review cycle with far less friction.

What draws closer attention

• A sudden jump in deposit volume without a corresponding, documented increase in sales.
• Deposits that don't reconcile against state seed-to-sale or point-of-sale reporting.
• Frequent deposits just under a reporting threshold, which reads as an attempt to avoid reporting even when that isn't the intent.
• A change in ownership, licensed locations, or product lines that hasn't been reported to the bank.

Illustrative Example: a routine monitoring cycle

A multi-location operator received a standard quarterly request for sales reconciliation shortly after opening a new location. The bank's monitoring system flagged the deposit increase because it did not yet have documentation tying the new volume to a licensed, reported location.

The operator supplied the new location's license and a reconciliation of deposits against its point-of-sale reports for the quarter, and the review closed without further escalation. The account was never at risk during the process, the flag simply meant the bank's records had not caught up with the business's, which routine reporting is designed to fix.

Keeping monitoring routine instead of stressful

• Reconcile point-of-sale and bank deposit records on the same schedule the bank uses for its reviews, not just when asked.
• Notify the bank proactively about new locations, ownership changes, or material shifts in sales volume.
• Keep current license documentation on hand rather than requesting it from the state each time the bank asks.
• Respond to information requests promptly; delayed responses are a more common cause of account friction than the underlying activity itself.

Common questions

• Does a monitoring request mean the account is under investigation? No. Recurring, scheduled requests are standard due diligence, not evidence of a problem.
• How often should an operator expect to hear from the bank? Frequency varies by bank, but monthly or quarterly recurring reviews are typical for cannabis deposit accounts.
• Can an operator ask the bank what triggers a review? Yes, banks vary in how much detail they share, but asking directly is reasonable and most will describe their general review cadence.
• Does strong monitoring cooperation change payment processing terms? Not automatically, since banking and processing relationships are usually reviewed separately, but a clean banking record supports a stronger case in either review.