Five federal banking regulators said this week that a bank or credit union has always been free to tell a customer that a frozen account, a blocked transaction or a rejected deposit is tied to suspected fraud, closing a gap that had left branch staff giving customers no explanation at all. The Federal Reserve, the FDIC, the OCC, the National Credit Union Administration and the Treasury’s Financial Crimes Enforcement Network issued the joint statement on September 2, and each agency was careful to frame it as a clarification of existing law rather than a new customer right. For an older account holder locked out of their own money with no explanation, the distinction between old law and new right may matter less than finally getting an answer.
The Confidentiality Rule Banks Were Misreading
The confusion traces to the Bank Secrecy Act, which makes it a federal offense to disclose a Suspicious Activity Report, or SAR, or to reveal that one exists to the person under suspicion. Bank compliance teams have read that prohibition broadly for years, often instructing frontline staff to say nothing once a SAR was filed, even when a customer was simply asking why a deposit bounced or an account suddenly froze. The five agencies said this week that caution had gone further than federal law actually requires.
The joint statement draws a sharper line: a SAR itself, and any detail that would reveal one was filed, remains confidential, but the underlying facts, transactions and documents upon which a SAR is based do not. That distinction lets a bank discuss the actual transaction dates, dollar amounts and parties involved, describe the fraud concern behind an investigation, and warn a customer about scam patterns, all without confirming or denying that paperwork went to the Treasury’s Financial Crimes Enforcement Network.
Regulators acknowledged the practical cost of the old, overcautious approach. A customer whose deposit is rejected or whose account is frozen mid-investigation, with no explanation beyond a teller’s shrug, has no way to know whether the bank made an error, whether identity theft is underway, or whether a scam is already draining the account, and that silence can leave a fraud victim in the dark exactly when clear information would help most.
Free retirement updates: Miss an enrollment or claim deadline and it may be gone. Our free Retirement Shield newsletter keeps readers ahead of the ones that matter. Get the free newsletter.
What a Bank Can Now Say Out Loud
The statement lists specific communications regulators say do not cross the confidentiality line. A bank can tell a customer that a delay, restriction or closure on an account “may be related to suspected fraud or other suspicious activity,” and it can tell a customer directly that a deposit was rejected because of suspected fraud, language that covers a common scenario for older account holders: an altered or counterfeit check bounced back with no explanation offered.
The list also covers warning a customer about active scam typologies, including so-called money-mule schemes that recruit unwitting participants to move stolen funds through their own accounts, and asking a customer directly about the purpose of a transaction or the source of incoming funds. None of it requires a bank to confirm a SAR exists; it only means having that conversation will no longer draw a second-guess from examiners.
The agencies were just as direct about what has not changed. The OCC’s bulletin summarizing the guidance states that it “does not alter existing Bank Secrecy Act legal or regulatory requirements or establish new supervisory expectations,” and applies to every national bank and federal savings association the OCC supervises, down to the smallest community bank. No bank is required to explain a frozen account to anyone; regulators have only confirmed that doing so, within the boundaries described, will not create an enforcement problem.
Why the Guidance Surfaced Now
The clarification did not start as a fraud-prevention project on its own. It answers concerns raised in response to a June 2025 request for information the Federal Reserve, FDIC and OCC issued on curbing payments fraud, particularly check fraud, after commenters told the agencies that SAR confidentiality fears were making banks less transparent with customers at the exact moment scam victims needed information most. The agencies also tied the statement to Executive Order 14331, “Guaranteeing Fair Banking for All Americans,” framing clearer communication around account freezes and closures as part of a broader push on how banks treat individual customers.
That backdrop matters most for older Americans, who account for a disproportionate share of elder financial exploitation cases and are often the customers whose accounts get frozen mid-scam, when a bank flags an unusual wire, an oversized check deposit or a pattern matching a known fraud typology. Under the old, overcautious reading, those customers frequently learned only that their money was inaccessible, not why, at the precise moment a clear explanation could have helped them recognize they were being scammed and stop sending more money.
The statement does not obligate any bank to adopt these disclosures, and it creates no right a customer can enforce if a bank still says nothing. Whether frontline staff actually start explaining fraud-related freezes, or internal legal teams keep the old blanket silence out of institutional habit long after the regulatory ambiguity is gone, is now a matter of bank-by-bank practice rather than federal law.
This article was drafted with the assistance of AI tools and reviewed for accuracy before publication.
More Financial Reading
