A bank can be held liable for elder financial abuse when it processes unauthorized transactions, ignores its own red-flag procedures, or knowingly helps someone drain an older customer’s account, but bank liability for elder financial abuse is narrower than most families expect. The bank-customer relationship is a debtor-creditor relationship, not a fiduciary one, and courts have generally declined to treat banks as insurers against fraud on their customers. Recovery is possible, and older Americans lose an estimated $28.3 billion each year to financial exploitation, much of it moving through accounts where warning signs were visible. But the path to holding the institution responsible runs through specific legal theories with specific proof requirements.
When a Bank Can Be Held Liable
Four theories account for most successful claims against banks in elder exploitation cases. Each has its own elements, and the facts of the exploitation often dictate which one fits.
Negligence
A negligence claim requires proving four elements: the bank owed a duty of care, the bank breached that duty, the breach caused the loss, and the customer suffered actual financial harm. The first element is where these claims usually falter. Courts have generally held that a bank’s duty is limited to processing authorized transactions with ordinary care, not actively policing accounts for fraud.
Under UCC § 4-103, a bank cannot disclaim responsibility for failing to exercise ordinary care or acting in bad faith. Action consistent with general banking practices is treated as ordinary care unless it conflicts with the UCC itself.1Legal Information Institute. UCC 4-402 – Banks Liability to Customer for Wrongful Dishonor So the question often becomes whether the bank followed standard industry practices and its own written procedures. If an institution’s internal policies called for escalating certain red flags and staff ignored those procedures, that gap between policy and practice can support a breach-of-duty argument.
A negligence claim may also gain traction where the bank violated a state mandatory reporting statute. Failure to report when legally required can be treated as evidence of a breach, though the victim still must prove that timely reporting would have prevented or reduced the loss.
Aiding and Abetting
Where a bank had actual knowledge that a transaction was fraudulent and still processed it, the institution can face liability for assisting the exploitation. Courts have drawn a firm line here: suspicion or constructive knowledge is not enough. The standard requires actual knowledge of the wrongful conduct and substantial assistance in carrying it out. A bank that processes a wire transfer it finds suspicious is not automatically aiding anything. But a bank that keeps facilitating transactions after learning from law enforcement or Adult Protective Services that a specific agent is stealing from a client is in a very different position.
UCC Claims for Unauthorized Transactions
When the exploitation involved forged checks, unauthorized withdrawals, or transactions processed without proper signatures, the Uniform Commercial Code provides a more direct path. Under the “properly payable” rule, a bank may only charge a customer’s account for items that are properly authorized. If the bank paid a check that lacked a required signature, or processed a transaction that exceeded the authority granted under a power of attorney, the bank bears the loss for that payment.
This often gives victims a cleaner claim than negligence, because the question is simply whether the bank followed its own account agreement and verified authorization, not whether it should have detected a pattern of abuse. If an account requires two signatures and the bank processed a check with only one, the bank may be liable for the resulting loss.2HelpWithMyBank.gov. My Account Requires Two Signatures to Pay a Check The same logic reaches transactions processed on a defective or expired power of attorney: a durable POA must contain specific language stating the agent’s authority survives the principal’s incapacity, and banks that accept a POA without proper verification can face liability when losses result.
Why You Cannot Sue Just Because the Bank Failed to File a SAR
Families sometimes argue that a bank’s failure to file a Suspicious Activity Report caused their losses. Courts have consistently rejected this theory as a private cause of action. The duties created by the Bank Secrecy Act run from the bank to the federal government, not to individual customers. A victim cannot sue a bank solely because it didn’t file a SAR. The failure to file can still be relevant as background evidence in a broader negligence claim or regulatory action, but it does not independently support a private lawsuit.
Duties Banks Owe Older Customers
Understanding what a bank should have done is essential to any claim that it fell short. Federal regulators expect banks to know their customers well enough to spot activity that doesn’t fit. This “Know Your Customer” principle means the bank should have a baseline understanding of how each account holder typically uses their money, including the size, frequency, and type of transactions. When an elderly client’s account suddenly shows large wire transfers, repeated cash withdrawals, or checks made out to unfamiliar people, those deviations are the kinds of patterns staff should be trained to question.
Common warning signs of elder financial exploitation include a new person accompanying the client and directing transactions, abrupt changes to beneficiary designations or account ownership, early closure of certificates of deposit with no concern for penalties, and withdrawals that leave a long-time client unable to cover basic living expenses. The 2024 interagency statement on elder financial exploitation emphasized that banks should train employees to recognize and respond to these indicators and develop internal policies for escalation when red flags appear.3Office of the Comptroller of the Currency. Interagency Statement on Elder Financial Exploitation
Front-line employees such as tellers and personal bankers are positioned to notice things automated monitoring misses. A client who seems confused, fearful, or coached by a companion may be under duress. Regulators don’t expect every bank employee to diagnose exploitation on the spot, but they do expect the institution to have a process in place so that concerns move up the chain quickly enough to matter. When they don’t, the resulting gap between what industry standards require and what staff actually did is often the foundation of a negligence claim.
Reporting Obligations That Can Support a Claim
Two separate reporting regimes apply. Under the Bank Secrecy Act, banks must file a SAR with the Financial Crimes Enforcement Network for transactions of $5,000 or more when a suspect can be identified, or $25,000 or more regardless of whether a suspect is known, when the transaction appears to involve illegal activity, has no apparent lawful purpose, or seems designed to evade reporting requirements.4FFIEC BSA/AML InfoBase. Assessing Compliance with BSA Regulatory Requirements – Suspicious Activity Reporting SAR filings are confidential, and 31 U.S.C. § 5318(g)(3) shields banks from civil liability for making the report, even if it turns out to be wrong.5Office of the Law Revision Counsel. 31 U.S. Code 5318
Failing to file when required carries real consequences at the regulatory level. Under 31 U.S.C. § 5321, a financial institution that negligently violates BSA requirements faces penalties of up to $500 per violation, with pattern violations reaching $50,000, willful violations reaching the greater of $100,000 or the transaction amount, and certain compliance failures reaching $1,000,000.6Office of the Law Revision Counsel. 31 U.S. Code 5321 – Civil Penalties These are government-imposed penalties, not damages payable to the victim.
Separately, many states require banks or their employees to report suspected elder abuse to Adult Protective Services or law enforcement. The timeframe, the designated agency, and which employees count as mandatory reporters all differ by state. The CFPB has urged banks to report suspected exploitation to local, state, and federal authorities even beyond what state law strictly requires.7Consumer Financial Protection Bureau. Reporting of Suspected Elder Financial Exploitation by Financial Institutions Violation of a state mandatory reporting statute is more useful in a private lawsuit than a BSA violation, because the state statute creates a duty running to the victim.
The Senior Safe Act, codified at 12 U.S.C. § 3423, sits alongside these rules. It gives banks and trained employees immunity from civil or administrative liability for reporting suspected exploitation of a senior citizen to a covered agency, provided the employee received the required training and the disclosure was made in good faith and with reasonable care.8GovInfo. 12 U.S. Code 3423 – Senior Safe Act The immunity is narrow. It covers only the act of reporting. It does not shield a bank from liability for processing a fraudulent transaction, ignoring known exploitation, or any other act or omission. And the Senior Safe Act is not itself a reporting mandate; it only protects those who choose to report.
Transaction Holds and the Wrongful Dishonor Trap
Detecting exploitation and filing reports don’t help much if the money already left the account. Many states authorize financial institutions to place a temporary hold on a suspicious disbursement involving an older adult or other vulnerable person while authorities investigate.9Federal Trade Commission. Financial Institution Transaction Holds – State Overview
Hold periods vary. Some states allow initial holds of 5 business days with extensions up to 10, others permit 15 business days or longer, and a handful authorize 30 business days or more. Several states allow additional extensions at the request of Adult Protective Services, law enforcement, or a court. Banks generally must notify account holders and document their reasoning, and some states require records to be retained for five years.9Federal Trade Commission. Financial Institution Transaction Holds – State Overview
Banks that freeze transactions face risk in the other direction. If a hold turns out to be unjustified, the bank may face a claim for wrongful dishonor under UCC § 4-402, which provides that a bank is liable for actual damages proximately caused when it dishonors an item that is properly payable, including consequential damages such as harm from an arrest or prosecution.1Legal Information Institute. UCC 4-402 – Banks Liability to Customer for Wrongful Dishonor This is why documentation matters. A well-documented hold placed under a specific state statute is far easier to defend than one based on a vague hunch, and a bank that could have used a state hold statute but didn’t may have a harder time explaining that choice later.
Steps to Take If You Suspect Exploitation
Preserving a potential claim starts with acting on the exploitation itself. Money that has left an account through a wire transfer can become unrecoverable within days. The CFPB recommends the following steps, and each of them also creates a record that helps if a lawsuit becomes necessary later.10Consumer Financial Protection Bureau. Reporting Elder Financial Abuse
- Contact the bank in writing. Notify the institution in writing that you suspect exploitation and ask what it will do — freeze the account, reverse recent transactions, flag it for enhanced monitoring. Ask to speak with the bank’s fraud or elder abuse specialist. A written notice creates a date after which the bank cannot claim ignorance.
- Report to Adult Protective Services. APS in every state investigates elder financial abuse and can arrange protective services or pursue conservatorship in serious cases.
- File a police report. Call 911 if there is immediate danger, otherwise use the non-emergency line. A police report supports both criminal investigation and any civil claim.
- Contact the district attorney. Elder financial exploitation is a criminal offense in every state, and the DA’s office can investigate and prosecute the person responsible.
- Report misuse by a fiduciary to the appointing authority. For a Social Security representative payee, contact SSA at 800-772-1213. For a VA fiduciary, contact the VA. For a court-appointed guardian or conservator, contact the appointing court.10Consumer Financial Protection Bureau. Reporting Elder Financial Abuse
Include as much detail as possible in every report: dates and times of suspicious transactions, names of anyone involved, what you observed, and any information about the victim’s health or cognitive condition. Keep copies of everything, including the bank’s responses. If you later sue the bank, the timeline of what the bank knew and when it knew it will be central to the case, and contemporaneous records are far more persuasive than reconstructed memory.