Why Cannabis Banking Is Hard: The Rules Behind the No

Cannabis banking is hard because federal rules make a bank file a suspicious activity report on a cannabis account, even when the state has licensed the business. A suspicious activity report, or SAR, is a filing a bank sends the government to flag a customer. That one rule turns a plain checking account into a compliance job that never ends, and most banks decide the deposits are not worth it. The decline you got was rarely a judgment about your company. It was a bank pricing the paperwork and walking away.

Key takeaways

• FinCEN guidance makes a bank file a suspicious activity report on a marijuana-related business, and says the duty is “unaffected by any state law that legalizes marijuana-related activity” (FIN-2014-G001, 2014).
• Before the account opens, the bank must run seven set checks. Then it must keep watching and keep filing for as long as the account is open.
• Cannabis businesses cannot use the exemption that spares other cash-heavy shops from routine cash reports. So the cash creates filings too.
• The guidance reaches businesses that never touch the plant. It names landlords, equipment suppliers, and shipping servicers, which is why ancillary and B2B firms get declined next to growers.

Why do banks say no to cannabis businesses?

Banks say no because the account is costly to hold. It is not because your business looks dishonest. Under the Controlled Substances Act, marijuana is still barred at the federal level. FinCEN, the Treasury unit that writes bank reporting rules, follows that fact to a hard conclusion. Because federal law bars the sale of marijuana, it reasons, money moving through one of these businesses “would generally involve funds derived from illegal activity.” So a bank “is required to file a SAR on activity involving a marijuana-related business (including those duly licensed under state law)” (FinCEN, FIN-2014-G001).

Read that last part twice. It is the whole problem. A state license does not lift the filing duty. FinCEN says so flatly, that “the obligation to file a SAR is unaffected by any state law that legalizes marijuana-related activity.” Your license changes which report the bank files. It does not change whether one gets filed.

So the bank picks up a duty that never ends, tied to one customer. None of this is legal advice, and legal questions belong with your own lawyer. The business point is simpler. The bank adds up the staff, the software, and the audit attention that one account needs. Then it weighs that against the fees the account will earn. Then it says no. Run that math across a whole industry and you get the access problem operators live with.

What a bank must do before it opens the account

FinCEN does not just tell banks to be careful. It hands them a list. Before taking on a marijuana-related business, a bank must do customer due diligence, which means checking out who it is dealing with. It has to verify with state authorities that the business is licensed. It has to read the license application the business filed. And it has to ask state licensing and enforcement bodies what they know about the business and its owners (FinCEN, FIN-2014-G001).

The list keeps going, and the back half is where the cost sits. The bank must learn what normal activity looks like for you, including what you sell and who buys it. Then it must watch public sources for bad news about you. It must watch for the red flags the guidance spells out. And it must refresh all of it on a schedule. That is seven separate duties. Only the first three end at signup.

The bank must also judge whether you implicate a Cole Memo priority. Those are the federal enforcement concerns, like keeping marijuana away from kids and keeping the money away from cartels. The Justice Department rescinded that memo back in 2018, but FinCEN’s guidance still routes the filing decision through its priorities, so banks still apply them. That is the pattern in miniature. The paperwork outlived the policy it was built on. This step decides your reporting fate. A bank that cannot make that call with confidence has a cheaper option. It can just not open the account.

The three reports that follow the account

FinCEN built three kinds of suspicious activity report for cannabis accounts. Knowing them explains why these bank relationships feel so shaky.

• Marijuana Limited. The bank files this when its checks suggest you do not implicate a Cole Memo priority and do not break state law. The content is kept short. It covers the parties, their addresses, the fact that the filing happened only because you are a marijuana-related business, and the fact that nothing else looked wrong. The narrative must say “MARIJUANA LIMITED.” This is the best case for a clean operator. It is still a filing.
• Marijuana Priority. The bank files this when it thinks you do implicate a priority or break state law. It demands “comprehensive detail,” including which enforcement concerns the bank believes are in play. A Limited filer can turn into a Priority filer at any time, because the guidance tells banks to escalate if their monitoring spots a change in your activity.
• Marijuana Termination. The bank files this when it decides it has to drop you to keep its anti-money-laundering program sound. The narrative explains why. FinCEN then urges the bank to use voluntary information sharing to warn the next bank you approach.

That third one deserves a hard look. When a bank exits a cannabis account, the guidance nudges it to tell the next bank. Getting dropped is not a clean break you can quietly walk off. It is the same trap that makes a MATCH or TMF listing so costly on the card side.

Notice the escalation built into the design. Every Limited filing is one monitoring hit away from becoming a Priority filing. Banks know it. That is why even a well-documented operator gets treated as temporary.

Why the cash problem feeds itself

Thin bank access pushes cannabis businesses toward cash. Then the rules punish the cash. Banks must report cash moves over $10,000 per person per day. That part is normal and applies everywhere. The twist is the exemption. Cash-heavy shops can usually be excused from those routine reports. But FinCEN says a marijuana-related business cannot be treated as a non-listed business under the rule, and “therefore, is not eligible for consideration for an exemption” (FinCEN, FIN-2014-G001).

So the trap closes on itself. No account means more cash. More cash means more reportable deposits. And the red flags include deposits that look too big next to local rivals, or that seem split up to stay under the reporting line. Running a cash-only business can itself throw the signals that get you flagged. You end up looking shady for coping with a problem the rules created.

Why ancillary and B2B companies get caught too

Here is the part that stings if you assumed distance from the plant would protect you. Ancillary means you serve the industry without touching the product. FinCEN’s guidance reaches you anyway. It notes a bank “could be providing services to a non-financial customer that provides goods or services to a marijuana-related business (e.g., a commercial landlord that leases property to a marijuana-related business).” Serving those customers, it says, is a risk call that should weigh the Cole Memo priorities.

The red flag list goes further. It names “a surge in activity by third parties offering goods or services to marijuana-related businesses, such as equipment suppliers or shipping servicers.” Your packaging company never touches a gram. It still shows up by name in federal red-flag guidance.

Risk teams read that and do the lazy thing. They score the whole adjacent economy as one category. A software vendor, a fertilizer supplier, a security firm, and a licensed grower all trip the same rule and collect the same auto-decline. That is a screening failure, not a real risk review, because those four carry very different exposure. Telling them apart is the job of cannabis and CBD merchant accounts built for this space, which score ancillary, B2B, CBD, and direct-THC risk on their own terms instead of as one bucket.

Why hemp sits in a different bucket

Hemp is the clearest proof that the burden, not the plant, drives the declines. Regulators pulled hemp out of this regime and banking changed fast. On December 3, 2019, federal banking regulators jointly confirmed that banks “are no longer required to file suspicious activity reports (SAR) for customers solely because they are engaged in the growth or cultivation of hemp in accordance with applicable laws and regulations” (FDIC FIL-78-2019; Federal Reserve, 2019). Banks were told to use standard steps instead.

Hemp is set by a threshold, not a name. Federal law now defines it as cannabis with “a delta-9 tetrahydrocannabinol concentration of not more than 0.3 percent on a dry weight basis” (7 U.S.C. § 1639o). That threshold is due to change, and what it means for what you sell today is covered in is CBD federally legal.

The lesson is general. Drop the automatic filing duty and banks come back. Nothing about hemp farming got less agricultural in 2019. The paperwork changed, and the access followed.

Banking and card acceptance are two different walls

One point saves a lot of wasted effort. A bank account and card acceptance are separate problems with separate gatekeepers. Everything above is about deposit banking, which is where the SAR rules bite. Card acceptance runs on the networks’ own private rulebooks. Those sit above the bank and block federally barred products on their own.

So a banking fix is not a payments fix. That is also why the pending bill is narrower than the headlines suggest, as covered in the SAFE Banking Act explained. Clearing one wall does not clear the other.

What actually gets you paid

Cannabis banking is hard for a reason you can name exactly. Federal guidance bolts a permanent, rising reporting duty onto the account. Then it denies the business the exemptions that make cash-heavy retail work everywhere else. That is a cost problem in a compliance costume. It explains why blanket declines hit careful operators and sloppy ones alike.

It also shows the way through. The declines come from category screening, so the businesses that get approved are the ones whose real model gets read. Ancillary suppliers, B2B vendors, and hemp-derived CBD brands look nothing like direct THC sales. Underwriting that prices that gap lands somewhere a signup form never will, because the form stops at the word cannabis. If a processor has already dropped you, or you have never had steady acceptance, the useful next step is a review of how your business actually runs. Bank-debit rails through ACH processing are often part of that answer, since they skip the card networks entirely.