Business Bank Account Frozen After Too Many Deposits: How to Clear It

A business account is usually frozen after a deposit spike because the bank's BSA/AML monitoring flagged the pattern as possible structuring or layering, and placed a re-verification hold. You clear it by sending a signed source-of-funds letter, the contracts or invoices behind the deposits, and three to six months of statements to the bank's BSA officer.

The freeze is rarely triggered by the amount. It is triggered by the shape. Twelve deposits of $8,400 over nine days reads differently to an automated monitoring system than one deposit of $100,800, even though the total is identical, because the smaller increments sit just under the $10,000 threshold that forces a Currency Transaction Report under 31 U.S.C. § 5324. Factoring advances, crowdfunding payouts and marketplace settlements produce exactly that shape, which is why legitimate businesses get caught.

Two clocks start at once. Under the Bank Secrecy Act the bank has 30 calendar days from detecting suspicious activity to file a Suspicious Activity Report, and the hold usually lands during that review window, before any filing. Meanwhile payroll, ACH debits and supplier wires fail the same morning. If a SAR is filed, the account can stay restricted for 30 days or longer. If it is not, most banks release the hold within 3 to 10 business days of receiving a complete package.

The mistake most owners make is calling to argue about the money. The analyst on the phone cannot lift the hold and does not decide. Ask instead for the BSA officer or the fraud investigations unit, get the request in writing, and treat 72 hours as your deadline, not theirs.

• SAR deadline is 30 days: Banks must file a Suspicious Activity Report within 30 calendar days of detecting suspicious activity under the Bank Secrecy Act, and the freeze typically happens during that review rather than after it.
• Structuring is defined narrowly: 31 U.S.C. § 5324 makes it illegal to structure transactions to evade the $10,000 Currency Transaction Report threshold, and non-cash deposit patterns can still trip the flag if they appear designed to stay under it.
• Patriot Act Section 326: The USA PATRIOT Act requires banks to run a Customer Identification Program and re-verify customer information when account activity changes materially.
• Typical release window: Most re-verification holds lift within 3 to 10 business days of a complete source-of-funds package, but an account tied to a filed SAR can stay restricted for 30 days or more.
• What the letter needs: A source-of-funds letter should carry the legal business name, EIN, exact deposit dates and amounts, the payer's identity, and a signed statement that the funds are legitimate.

Why did my business bank account get frozen after a spike in deposits?

Your account was not frozen because a human at JPMorgan Chase decided you looked suspicious. It was frozen because software did. Every US bank runs automated transaction monitoring under the Bank Secrecy Act, and that software builds a rolling picture of what your account normally does: typical deposit size, typical frequency, typical counterparties, typical geography. A client who averages $8,000 a week in deposits and then lands $340,000 across nine days does not look like a growing business to the model. It looks like a baseline break, and a baseline break is the single strongest predictor of layering that the model has.

The specific triggers are boring and well documented. A sudden threefold to tenfold jump in deposit volume in a rolling 30-day window is the classic one. So is a cluster of deposits landing just under $10,000 — the Currency Transaction Report threshold set by 31 CFR 1010.311 — because a business that breaks a $47,000 payment into five deposits of $9,400 has, on paper, matched the pattern in 31 U.S.C. § 5324 for structuring, whether or not that was the intent. Deposits from high-risk jurisdictions, wires from newly opened accounts at Mercury or a small community bank, a factoring advance from an entity nobody at your bank has seen before, a Kickstarter or GoFundMe payout arriving with no invoice attached: all of these fire the same alert. The bank does not know which one is legitimate. That is the point of the alert.

What you have is a re-verification hold, and the distinction matters for how you respond. Nobody has seized your money. The bank has suspended your ability to move it while it satisfies itself that the funds are clean — an obligation it carries under USA PATRIOT Act Section 326 and its Customer Identification Program, and one that the OCC and FDIC examine closely. The penalty for getting this wrong is measured in the tens of millions for the bank; the penalty for inconveniencing you is a phone call. That asymmetry explains every frustrating thing about the next three weeks.

What actually happens inside the bank while you wait

A monitoring alert goes to a BSA analyst, usually within 24 to 48 hours. That analyst pulls your CIP file, your account history, and the transaction detail, then decides: close the alert, or escalate. If it escalates, a second reviewer looks at it, and if they agree, the bank has 30 calendar days from the date of detection to file a Suspicious Activity Report with FinCEN — and it will never tell you whether it did. That filing is why the freeze outlasts the explanation. A filed SAR typically means a two-to-four-week full review, and SARs and CIP records carry a five-year retention requirement, so the file does not go away once you are unfrozen. If the documentation you submit is complete and unambiguous, industry practice puts release at three to ten business days. Hand it over inside 72 hours and you are usually in the first bucket. Argue about it for a week and you are in the second.

There is a hard trade-off here worth naming. Some owners push to escalate to a branch manager or relationship banker, on the theory that a human who knows them will move faster. That works at a small community bank where the branch manager sits near the BSA officer. At Chase, Bank of America or Wells Fargo it usually backfires: the branch has no authority over the hold, and repeated calls get logged in the file as pressure on the institution, which is the last note you want a reviewer to read. Route everything through the BSA team in writing, once, and make it complete. Also note that the $3,000 average daily balance most banks require to waive the monthly fee is sitting frozen along with everything else, so a payroll run that bounces on day four is now a second, separate problem with your employees and your state's wage payment statute.

Is this structuring? How banks decide your deposits look suspicious

Structuring has a narrow legal definition and a much wider detection footprint. Under 31 U.S.C. § 5324, you break the law only if you deliberately split transactions to keep them under the $10,000 Currency Transaction Report threshold — intent matters. But the monitoring software at Chase, Bank of America, or Wells Fargo is not reading your mind. It is reading velocity, payer count, and round numbers, and it flags on pattern alone.

What the system is actually scoring:

• Sub-threshold repetition. Five deposits of $9,500 landing in one week totals $47,500 and generates zero CTRs. To a rule-based AML engine, that cluster is the textbook signature of evasion, even when it is a contractor paying you in weekly chunks because that is how their AP cycle works.
• High payer count in a short window. Ten or more incoming transfers from unrelated parties in a single day reads as layering — the middle stage of money laundering, where funds are moved to obscure origin. Crowdfunding payouts and marketplace settlements hit this constantly: GoFundMe, Kickstarter, and Stripe batched disbursements arrive looking exactly like a layering burst.
• Round-number deposits from offshore accounts. $25,000.00 from a Hong Kong or Cyprus counterparty on a clean wire is a higher alert score than $23,847.19 from a domestic client, because round numbers suggest a figure chosen rather than invoiced. Jurisdiction risk stacks on top of amount risk.
• Deposits inconsistent with your stated business. Your Customer Identification Program record, collected at onboarding under USA PATRIOT Act Section 326, declares your expected monthly volume and activity type. A landscaping LLC that suddenly receives $180,000 in three weeks from a software company is now an outlier against its own risk profile.
• A sudden multiple of your historical baseline. Most business accounts trigger review somewhere between three and five times the trailing twelve-month average monthly inflow. A factoring advance or an annual insurance settlement clears that bar in a single deposit.
• Rapid in-and-out movement. Money that lands and leaves within 24 to 48 hours, especially to a different institution or a newly added payee, scores higher than money that sits. This is the pattern the bank converts into a Suspicious Activity Report, and it has 30 calendar days to file once detection occurs.
• Third-party or mismatched names. Deposits arriving under a name that is not your registered entity, or wires from payers with no invoice trail on your side, add weight. So does a cash component mixed into an otherwise electronic account.

Here is the part that catches people: the bank does not need to prove intent, or even suspect it, to hold your money. Regulation 31 CFR 1010.311 obliges the institution to report currency transactions above $10,000 and to investigate anything it reasonably suspects; that investigative window is what you experience as a freeze, and it can run two to four weeks if a SAR gets filed. You are not being accused of a crime. You have matched a pattern, and matching a pattern is sufficient.

The most common error is the one almost every owner makes in the first 48 hours. They call the branch, get their relationship manager on the phone, explain that the money came from a real client for real work, and wait for it to be fixed. It will not be. Branch staff and even most relationship managers cannot see the SAR — federal law prohibits tipping off the subject of a report — and they have no authority to release a BSA hold. Arguing the legitimacy of the deposits to someone who cannot act on that argument burns the days that matter. Chase, Bank of America, and Wells Fargo all route these decisions to a BSA/AML compliance unit that responds to documents, not phone calls. Business neobanks like Mercury work the same way: support tickets do not lift holds, a source-of-funds letter with attachments does. Get the paperwork to the compliance team inside 72 hours and you are typically looking at a 3–10 business day release. Spend that window on the phone with the branch and you can add two weeks while your $3,000 minimum-balance buffer sits locked and your payroll run bounces.

Which documents actually unfreeze a business account? (The source-of-funds dossier)

A source-of-funds letter on its own will not move a BSA analyst. It is an assertion by the party under review, and the analyst has already seen the deposit pattern that triggered the hold. What clears the file is a packet where each deposit line traces to a document created by someone other than you, ideally the payer. Assemble it in a single PDF, page-ordered to match the deposit sequence, with a one-page index at the front.

The 72-hour target is not a legal deadline. No statute says a bank must review faster if you file quickly. It is a queue-position tactic that works because BSA teams triage by completeness: a packet with matching invoices and payer identifiers gets assigned to a reviewer the same week, while an incomplete one sits in a pending-documentation folder and accumulates no review time at all. Roughly 2-4 weeks is the industry norm for a full BSA/AML review once a SAR is filed, and the clock restarts each time the bank has to come back and ask you for something.

The invoice row is the one that actually releases money. A BSA analyst can clear a file on invoices plus payer EIN letters alone; they cannot clear it on a source-of-funds letter plus your own statements, because both of those originate with you. Anyone running a seasonal business or a consultancy with lumpy client payments should keep the payer-identity row permanently on file, since it is the one item you cannot produce on demand and the one most likely to stall the packet past day 5. The exception flips for lending and equity events: if the deposit is a factoring advance or a Series A tranche, the loan or subscription agreement is the controlling document, because there is no invoice and the analyst knows it. Send that agreement first and the invoice row becomes irrelevant.

How to write a source-of-funds letter that the bank will accept

The letter is the cover sheet for the dossier, not a substitute for it. Use this procedure the moment you have the evidence in hand — invoices, contracts, settlement statements, loan documents — and before you call anyone to argue. Working steadily, it takes 40 to 60 minutes, and the target is on the bank's desk within 72 hours of the freeze. A BSA analyst who has your stack on day two starts reading; one who gets it on day twelve has already drafted a Suspicious Activity Report and moved on.

You are writing for one reader: the BSA officer or financial intelligence unit analyst at your bank. Not your relationship manager, not the branch, not the call centre. The relationship manager cannot lift a hold. The analyst can.

1. Find the right addressee by name. Pull the bank's most recent public filing or search "BSA officer" plus your bank's legal entity name — JPMorgan Chase, Bank of America, Wells Fargo and most regional banks all list a designated BSA/AML contact on their corporate site or in the annual report. If you cannot find a name, address it to "BSA Officer, Financial Intelligence Unit" and add your branch's address as a courtesy copy. A letter to "Customer Service" adds two to five days of internal routing; you do not have that budget.

2. Open with the identifiers in the first four lines: legal business name exactly as it appears on the account, EIN, full account number (not the last four), the date the freeze or hold began, and the direct phone number and email of the person authorised to speak for the business. Banks must verify identity under the Customer Identification Program rules that came out of USA PATRIOT Act Section 326, so make that verification trivial rather than making the analyst ask.

3. List every flagged deposit as a table, not prose: date received, exact amount, payer legal name, invoice or contract reference, and a one-line description of what was sold or financed. Include all deposits over $10,000 in a single day, because that figure is the Currency Transaction Report threshold under 31 CFR 1010.311 and the analyst will be cross-checking your list against the bank's own CTR filings. If your list matches theirs, you look organised. If it does not, you look evasive, even when the discrepancy is a wire that posted a day late.

4. State the business reason for the pattern in two or three sentences. "Four payments of $47,500 each from Meridian Construction LLC between 3 and 11 August 2026 represent milestone billings on a single $190,000 contract, invoice numbers 4412 through 4415, attached." A seasonal surge, a factoring advance, a crowdfunding payout after a Kickstarter campaign and a one-off large-client settlement all need this sentence. Without it, frequency looks like structuring, and the bank's only tool for frequency is a SAR referral.

5. Include a signed declaration and sign it yourself. The most botched step is leaving the letter unsigned, or having an office manager sign something only a director or officer of the company can attest to. One sentence is enough: "I declare that the funds described above derive from legitimate business activity as evidenced by the attached documents, and I am authorised to make this statement on behalf of [Legal Name]." Print, sign in ink, scan. Include your title and the date. An unsigned declaration is functionally a blank page to a compliance reviewer.

6. Attach the evidence in the same order as the table in step three, numbered. For a client payment: invoice, signed contract or purchase order, and bank confirmation of the inbound wire. For a factoring advance: the factoring agreement, the schedule of assigned invoices, and the advance statement. For a crowdfunding payout: the platform's disbursement statement. For a loan: the promissory note and the disbursement letter. Nothing needs to be certified; everything needs to be legible and clearly start-to-finish.

7. Send it through the bank's secure message centre inside online banking, or by overnight courier with signature required. Do not send it by ordinary email. Compliance teams frequently will not open attachments from external addresses, and anything containing an EIN, account number and signatures is exactly the material banks train staff not to handle over unencrypted mail. Overnight courier costs roughly $25–$40; the secure message centre costs nothing and timestamps receipt, which matters if you later need to show how fast you responded.

8. Log the submission and call the BSA team's direct line 48 hours later, once. Ask a single question: "Has the documentation package been received and is anything outstanding?" Expect a full review to take 3 to 10 business days once the package is complete, and 2 to 4 weeks if a SAR has already been filed internally, because the bank cannot tell you a SAR exists and will simply keep saying the review is ongoing. Do not send new arguments, do not dispute the freeze, and do not send the same package twice. Repeated contact from an anxious depositor is itself a data point in the file.

The failure mode is a letter that argues. Owners write three pages explaining that they run an honest business, that the freeze has stopped payroll, that this is outrageous, and that they will move their accounts. The analyst reads none of it as relevant. Everything the bank needs is factual, verifiable and boring, and the strongest sentence you can write is the one that matches an attachment they can check in ninety seconds. The second failure mode is timing: 30 calendar days is the window a bank has to file a SAR after detecting suspicious activity, and once that filing is made you are in a queue measured in weeks, not days. Get the package in before the file is written.

What happens after you send the documents? Timeline and escalation

Once your dossier lands with the BSA team — not the branch, not the 1-800 line — the initial review usually clears in 3 to 10 business days. That range assumes the documents are complete: signed source-of-funds letter, contracts, invoices, and bank statements showing the money's origin. If anything is missing, you restart the clock at day one, which is why the 72-hour submission window matters more than it sounds.

The timeline stretches if the bank files a Suspicious Activity Report. Under BSA rules the bank has 30 calendar days from detection to file, and a filed SAR commonly keeps the account restricted for 2 to 4 weeks of full AML review, sometimes longer. You may never be told a SAR exists. Under 31 CFR 1010.430, banks are prohibited from disclosing a SAR's existence to the subject, so silence from your banker is not evidence that nothing is happening. It may mean the opposite.

When to escalate

If you have submitted complete documentation and heard nothing after 10 business days, stop waiting on your relationship manager. Ask for the bank's Office of the President or executive complaints team and put your request in writing with the date your dossier was received. If that goes nowhere, file a complaint with the OCC (for national banks like JPMorgan Chase, Bank of America, or Wells Fargo) or the FDIC (for state-chartered and savings institutions). Complaints do not unfreeze accounts directly, but they create a documented paper trail and typically force a response within 30 days.

Meanwhile, keep your cash-flow clock running separately. A $3,000 average daily balance requirement does not pause during a freeze, and neither does payroll. Two to four weeks of a locked operating account is enough to miss a payroll cycle, so line up a backup account — a fintech like Mercury or a second institution — before you need it, not after.

Can the bank keep my money? Your legal rights during a BSA freeze

No. A freeze is a hold, not a forfeiture, and the distinction matters more than it sounds. Your balance stays your property; the bank is under a regulatory obligation to pause activity while it satisfies its Bank Secrecy Act (BSA) and Anti-Money Laundering (AML) duties. To keep the funds permanently, the institution needs either a court order or a formal forfeiture action brought by the government, typically after a Financial Crimes Enforcement Network (FinCEN) referral. Banks do not initiate civil asset forfeiture on their own authority. What they can do is hold your money for weeks while a review runs, and that is the practical problem, not confiscation.

You can ask for the reason. If the hold is tied to a Customer Identification Program (CIP) discrepancy under USA PATRIOT Act Section 326, or a missing source-of-funds letter, the bank will usually tell you plainly. If a Suspicious Activity Report (SAR) has been filed, staff are barred from disclosing it under 31 CFR 1010.311 and the parallel tipping-off rules. You will get a version of "we are unable to discuss the specifics." That refusal is lawful, not evasive, and pressing a branch manager for the SAR will not produce it. Note that the filing deadline itself is generous: banks have up to 30 calendar days from detection to file, and SAR records are retained for five years.

Where the leverage actually sits

Your realistic remedy is contractual, not regulatory. The deposit agreement obliges the bank to make funds available within specified windows unless a lawful exception applies, and a BSA hold is one of those exceptions, which is why a straight breach-of-contract claim is rarely a fast win. If the freeze drags past 2–4 weeks with no SAR filed and no documented basis, the calculus changes, and a banking lawyer can send a demand letter citing the account agreement and the Office of the Comptroller of the Currency (OCC) or FDIC examination standards for holds. That letter sometimes moves a file. Litigation, filed in state or federal court, is slow enough that most owners should treat it as recovery of damages, not as a way to make payroll on Friday.

Two things to keep straight while you wait. First, that $3,000 average daily balance many banks require to dodge monthly fees is frozen along with everything else, so a freeze can trigger an overdraft cascade on unrelated debits. Second, submitting your documentation within 72 hours is not a legal requirement, but it reliably cuts the release window to the 3–10 business days that industry practice reflects once a BSA team has a complete file. The clock the bank follows and the clock your suppliers follow are not the same clock. Assume the former is slower.

How to prevent the next freeze: deposit hygiene for growing businesses

Prevention is cheaper than a dossier. Once you have been through one BSA hold, the operational habits below are not bureaucracy — they are the difference between a Friday deposit that lands and a Monday payroll run that bounces. Most of these take under an hour to set up and pay off the first time a client pays you $78,000 for a single project.

• Warn your relationship manager before the money moves. If you know a $120,000 receivable is due next week, send an email today: amount, expected date, payer name, contract reference. A named contact can add a note to the account record so the alert that fires on the deposit has context attached. Banks do not publish this as a service, but the practice is common at JPMorgan Chase, Bank of America and Wells Fargo for business clients above roughly $50,000 in monthly flow. If you bank with Mercury or another online-only institution, your version of this is a support ticket, not a phone call — open it before the deposit, not after.
• Do not split a deposit to stay under $10,000. This is structuring, and 31 U.S.C. § 5324 makes it a criminal offence regardless of whether the underlying money is clean. A single deposit of $9,800 on Monday and $9,600 on Tuesday looks worse to a monitoring system than one $19,400 deposit, which merely generates a Currency Transaction Report under 31 CFR 1010.311. The CTR is paperwork. The structuring pattern is a Suspicious Activity Report with your name on it.
• Prefer wires and ACH for anything over $10,000. A wire carries the originating bank, the sender's account name and a reference field. A stack of counter deposits or mobile check images carries almost none of that. When a compliance analyst at 9am is deciding whether to release your balance or escalate, the wire has already answered most of their questions.
• Run a standing source-of-funds folder. Not one you build in a panic over 72 hours. Keep it current: signed contracts, invoices with matching amounts, payer legal names and registration numbers, and a one-paragraph note on what each payer does. BSA rules require banks to retain CIP and SAR records for five years, and they will ask you for the same period of history if a pattern is flagged. A folder you can zip and send in twenty minutes beats one you assemble over three days.
• Keep payer names consistent. If a contract says "Northwind Logistics GmbH" and the wire arrives from "NW Logistik Holding," that mismatch is a flag independent of the amount. Ask new clients for the exact legal name and bank entity that will be sending funds, and record it. Onboarding thirty seconds of admin here saves a two-to-four week BSA/AML review later.
• Watch your average daily balance during any freeze. Many business accounts require roughly $3,000 in average daily balance to avoid a monthly maintenance fee, and that money is inaccessible while the account is held. Keep a separate operating buffer at a second institution — ideally one that is not the same holding company — so a single hold does not stop payroll. Two accounts at two banks is not paranoia; it is redundancy against a process you do not control.
• Document crowdfunding and factoring inflows differently. A Kickstarter or Indiegogo payout of $40,000 arrives as a lump sum from a platform, not from your customers, and it will read as an unexplained credit. Get the platform's settlement statement and a breakdown of backers or advances into the folder before the money lands. For factoring advances, keep the assignment agreement and the underlying invoices together — an advance without the invoices attached is one of the fastest routes to a SAR.

The one people get wrong most often is the pre-notification email. They assume a relationship manager will find it odd, or that mentioning a large deposit will itself trigger scrutiny. The opposite is true: an account with a documented, expected inflow pattern gets cleared faster because the analyst has something to check against. Silence plus an unusual deposit is what looks like layering. Tell the bank what is coming, then let the deposit confirm the story you already told.

Frequently Asked Questions

Can a bank freeze my business account without telling me why?

Yes. If the bank files a Suspicious Activity Report, 31 CFR 1010.430 bars it from disclosing that fact or the underlying reason, sometimes called tipping off. What the bank still owes you is a general explanation, typically a "re-verification hold" or "account review" notice.

That gap between the stated reason and the real one is the single most common source of frustration in these cases. Ask for the hold code in writing; a compliance officer can often name the category even when they cannot name the trigger.

How long can a bank hold my business account after a suspicious deposit?

Expect 3 to 10 business days if you supply complete documentation on the first request: formation documents, invoices, contracts, and bank statements showing where the funds originated. If the bank files a SAR and extends its review, the hold can run 30 days or longer, and there is no fixed statutory ceiling on a review hold.

What is structuring and why does it freeze my account?

Structuring is deliberately arranging deposits to stay under the $10,000 threshold that triggers a Currency Transaction Report, and it is a federal offence under 31 U.S.C. § 5324 regardless of whether the money is legal. Banks freeze first and investigate later because the pattern alone, not the source of funds, mandates a review.

Cash-heavy businesses get caught by this constantly without intent. Six $9,400 deposits in a month look identical to a launderer's schedule on a transaction monitoring system.

Will my bank report me to the IRS or FinCEN for a deposit spike?

The bank may file a SAR with FinCEN, but a SAR is an internal analytical filing, not a criminal report, and it does not go to the IRS as an accusation. FinCEN reviews patterns across institutions and refers a case for prosecution only where there is clear evidence of intent.

Roughly 1.5 million to 2 million SARs are filed each year, and the overwhelming majority never become investigations.

Can I sue my bank for freezing my business account?

You can sue for breach of contract if the freeze breaches your account agreement, and some businesses have recovered consequential damages this way. But 31 U.S.C. § 5318(g)(3) gives banks a broad safe harbour for good-faith SAR filings, so a claim built on the mere fact that a report was filed will usually fail.

What should I do first when my business account is frozen?

Call the bank's fraud or BSA department the same day, ask which specific documents will release the hold, and start building your source-of-funds dossier immediately. Do not wait for the bank to contact you; inbound review queues move slower than a case with a named contact attached.

Assemble the last 12 months of statements, the contracts or invoices behind the deposits, and a short dated timeline. Deliver it as one indexed PDF rather than in pieces.