What banking records should investigators request?¶
The records needed from a bank depend on the investigative question, but a statement alone is rarely the complete answer.
Avoid this assumption: Requesting “the bank records” will automatically produce everything relevant.
Start with the account records. These may include account-opening information, account holders, authorised users, contact details, linked accounts and account status.
Then request the transaction records relevant to the period. Preserve amounts, currencies, timestamps, references, beneficiaries, merchants, status changes, reversals, refunds and onward movement.
Where attribution matters, request access and authentication records. These may include login history, IP addresses, registered devices, session identifiers, authentication methods, one-time-passcode events, failed logins and security changes.
For disputed payments, ask for beneficiary creation, payment instruction, approval, fraud-warning and risk-decision records.
Customer-support contacts can also be important. Calls, secure messages, branch visits and fraud reports may show what the customer said and when the bank acted.
For card activity, request authorisation codes, merchant descriptors, terminal details, card-present indicators, tokenisation information and dispute records.
For transfers, request the complete payment message, sending and receiving details, intermediary information and any recall or recovery action.
Specify the relevant account, transaction identifiers, date range and investigative issue. Avoid broad wording where a focused request will produce clearer records.
Ask the bank to explain unfamiliar fields and timestamps.
Do not assume that every bank retains the same data for the same period. Consider preservation early where records may be volatile.
Where several accounts or institutions are involved, request records from each relevant holder.
Operational takeaway¶
Frame banking requests around account ownership, transaction movement, access, authentication and provider action rather than relying on statements alone.