Cannabis banking: vault, ledger, audit trail and wire transfer records for a licensed cannabis business

Cannabis Banking: Why Banks Say No and What Changes Their Answer

Why does a licensed, lawful cannabis producer still get turned away at the bank counter?

Cannabis banking outside the United States usually fails for a reason that has nothing to do with the applicant: the local bank is protecting its own correspondent banking relationships, not applying a rule that requires refusal. The industry has a name for that behaviour, de-risking, and the Financial Action Task Force says it runs against the standard FATF itself publishes.

This page covers opening and keeping an operating account for a licensed cannabis business outside the United States: the mechanism behind the refusal, what a bank’s compliance team asks for, and what a government can change at national scale.

What Cannabis Banking Means Outside the United States

Cannabis banking, sometimes searched as weed banking, means access to ordinary commercial banking services for a licensed cannabis business: an operating account, international wire transfers, cash management and trade finance. Outside the United States the constraint is rarely domestic law, because the business is licensed and lawful in its own jurisdiction; the constraint is the chain of banks standing behind the local bank.

Those four services are not a random selection. The World Bank’s November 2015 report on correspondent banking withdrawal named clearing and settlement, cash management, international wire transfers and trade finance as the products most affected, with US dollar transactions hit hardest. An exporting producer needs three of them to get paid, and a licence to operate answers none of it.

Key Takeaways

  • FATF defines de-risking as terminating or restricting client relationships to avoid, rather than manage, risk, and calls it inconsistent with the risk-based approach (FATF, 2021).
  • The primary concern of ECCU licensed financial institutions, as in Jamaica and Uruguay, is fear of being de-risked by their correspondent banks (ECCB, 2023).
  • A correspondent bank is not required to run due diligence on its respondent banks’ customers as a matter of course (FATF, 2015).
  • 69 per cent of local and regional Caribbean banks reported a moderate or significant decline in correspondent banking relationships, the region most severely affected (World Bank, 2015).
  • The ECCB recommends ring-fencing cannabis funds, and links licence-level tracking to making that ring-fencing workable (ECCB, 2023).
  • Regulation 55 of SRO No. 17 of 2022 records a Saint Kitts and Nevis licensee’s financial transactions from the licence application onward.

Readers looking for the United States federal position, the SAFE Banking Act and section 280E should read the guide to cannabis rescheduling to Schedule III. None of it reaches a producer licensed outside the United States.

This page is about account access, not credit. Readers looking for lenders and loan products should read the guide to cannabis business loans.

Why Do Banks Refuse Cannabis Businesses?

Banks outside the United States usually refuse cannabis businesses to protect their own correspondent banking relationships, not because a supervisor told them to and not because the applicant failed diligence. The cannabis banking refusal is made upstream of the applicant, and often upstream of the bank.

The Eastern Caribbean Central Bank set it out in its 2023 flagship report, The Medicinal Cannabis (R)evolution: Challenges in Banking a Budding Industry in the ECCU: “The primary concern of licensed financial institutions in the ECCU, similar to that of Jamaica and Uruguay, is the fear of being de-risked by correspondent banks.”

FATF reached a matching conclusion about de-risking in general. Its 2021 stocktake found “profitability concerns are the primary driver” and that AML/CFT rules are not the main cause. Fear of supervisory actions, reduced risk appetite and reputational concerns are the other drivers FATF names.

The ECCB also recorded the behaviour: “many licensed financial institutions are adopting a very conservative approach to banking the medicinal cannabis industry, with many of the foreign branch banks opting to abstain from the market at present. Where a decision has been taken to serve the market, risk management systems, resources, practices and controls have been augmented.” Where institutions are reluctant, the ECCB adds, “the issue of cash only transactions may arise and present a handicap to the industry”.

What Is De-risking in Banking?

FATF defines de-risking as “the phenomenon of financial institutions terminating or restricting business relationships with clients or categories of clients to avoid, rather than manage, risk in line with the FATF’s risk-based approach”. A blanket policy of not banking a lawful licensed sector is de-risking, and FATF says it is not what the international standard asks for.

FATF’s 2021 stocktake is specific about where the line sits: “The loss of access to financial services represents de-risking if it is not based on a case-by-case assessment of risk and ability to mitigate that risk. De-risking is by this definition inconsistent with a proper application of the RBA promoted by the FATF, which is central to the effective implementation of the FATF Recommendations.”

Avoiding risk and managing risk are different decisions, and the risk-based approach describes the second. A case-by-case assessment is something a cannabis banking file can answer; a category-level policy is not.

Why Is Correspondent Banking High Risk for a Local Bank?

A correspondent bank assesses the respondent bank, not the respondent bank’s customers. It judges the respondent’s business, reputation, quality of supervision and AML/CFT controls, which is why one local bank’s cannabis banking policy is a judgement about the whole institution.

FATF has stated it directly. Banks must “gather sufficient information about the respondent bank to understand the respondent bank’s business, reputation and the quality of its supervision” and “assess the respondent bank’s AML/CFT controls”. On the customer side, “the FATF Recommendations do not require banks to perform, as a matter of course, normal customer due diligence on the customers of their respondent banks”.

A correspondent banking AML review therefore lands on the respondent bank’s controls and the legal environment around them, and anything that improves that evidence base is the lever that moves the answer. FATF’s risk categorisation names the correspondent risk directly: “high value transactions, limited information about the remitter and source of funds”. Source of funds is the named gap, and it is answerable with records.

The US dollar leg follows from two findings. The World Bank named the United States as “most often mentioned as being home to correspondent banks that are withdrawing from foreign CBRs”, and the ECCB put 32.0 per cent of ECCU correspondent banking relationships in the United States. That is how US policy reaches an operator who has never traded there.

How far correspondent banking has retreated from the region

The World Bank surveyed 110 banking authorities, 20 large international banks and 170 local and regional banks on correspondent banking withdrawal between 2012 and mid-2015, and found the Caribbean to be the region most severely affected, with 69 per cent of local and regional Caribbean banks, 32 of them, reporting a moderate or significant decline. Inside its own currency union the ECCB counted 15 correspondent banking relationships lost between 2015 and 2018 (ECCB, 2023).

CARICOM Heads of Government put the regional position on the record at their Thirty-First Inter-Sessional Meeting in Bridgetown in February 2020, describing blacklisting and de-risking leading to withdrawal of correspondent banking services as “an existential threat to the economic security of CARICOM Member States”.

Table B: De-risking evidence at a glance

Source Finding Period
World Bank Group (Nov 2015) Surveyed 110 banking authorities, 20 large international banks and 170 local and regional banks on correspondent banking withdrawal 2012 to mid-2015
World Bank Group (Nov 2015) “The Caribbean seems to be the region most severely affected” 2012 to mid-2015
World Bank Group (Nov 2015) 69 per cent of local and regional banks in the Caribbean (32 banks) reported a moderate or significant decline in correspondent banking relationships 2012 to mid-2015
World Bank Group (Nov 2015) Services most affected: clearing and settlement, cash management, international wire transfers and trade finance, with US dollar transactions hit hardest 2012 to mid-2015
IMF WP/17/209, Alleyne et al. (Sep 2017) Cost of services increased substantially, some services were cut back, and some sectors experienced reduced access to 2017
Eastern Caribbean Central Bank (2023) ECCU commercial banks reported the loss of 15 correspondent banking relationships, concentrated within the domestic banking sector 2015 to 2018
Eastern Caribbean Central Bank (2023) 32.0 per cent of ECCU correspondent banking relationships are concentrated in the United States as at 2023 report
CARICOM Heads of Government (Feb 2020) Described blacklisting and de-risking leading to withdrawal of correspondent banking services as “an existential threat to the economic security of CARICOM Member States” 31st Inter-Sessional Meeting

How Do Cannabis Businesses Get a Bank Account?

A cannabis bank account outside the United States is won on evidence, not on argument. Cannabis business banking applications succeed where the applicant can document who owns the business, what it does, where its money came from and where every payment goes, because that is what customer due diligence establishes and what the correspondent will eventually assess.

The bank decides. Where institutions in the region have decided to serve the market, the ECCB records that they augmented systems, resources, practices and controls in order to do it. A cannabis banking approval built on those terms appears further down this page.

A cannabis banking file is assembled out of the operating record rather than out of a covering letter, which is the practical connection between cannabis compliance software and an account application.

Cannabis banking compliance: what the AML team asks for

FATF’s guidance for the banking sector says customer due diligence exists so banks understand who their customers are, what they do and why they require banking services, and that the resulting risk profile “will determine the level and type of ongoing monitoring and support the bank’s decision whether to enter into, continue or terminate, the business relationship”. An account is under review for as long as it stays open.

For a customer in the high-risk column, which is where most banks place cannabis, FATF’s Box 5 lists the monitoring: daily transaction monitoring, manual transaction monitoring, frequent analysis of information, considering the destination of funds, red flags based on typologies reports, and reporting of monitoring results to senior management.

Paragraph 69 asks banks to document and state clearly the criteria used for customer segmentation and risk allocation, and to keep the monitoring criteria transparent. Source of funds runs through all of it, and it is the item FATF names as a correspondent-banking gap.

Table A: What the bank needs, and where a national tracking regime already records it

What a bank’s AML team needs (FATF) Where Saint Kitts and Nevis Regulation 55 puts the same information
Understand who the customer is, what they do and why they require banking services (RBA guidance, para 59) 55(1): the Authority regulates, monitors and tracks funds surrounding a medicinal cannabis business, expressly to maintain compliance with international anti-money laundering and CFT obligations
Source of funds, named by FATF as a specific correspondent-banking risk (“limited information about the remitter and source of funds”) 55(4): source of funds documentation showing the sources of all monies to be invested, submitted during the licence application, before the business exists
A customer risk profile that determines whether the bank enters, continues or terminates the relationship (para 60) 55(5): every financial transaction, beginning from the licence application process, recorded through the national tracking system and available to the Authority in read access format in real time
High-risk monitoring, including considering the destination of funds (Box 5) 55(6): seventeen enumerated transaction categories, from investments, capital expenditure, loans, rent, salaries and taxes through to banking and dividends
Transparent, documented criteria for segmentation and monitoring intensity (para 69) 55(7): the tracking system shall allow for a properly documented chain of command of all finances and monies
Ongoing monitoring with results available to senior oversight (Box 5) 55(9) and 55(10): 24-hour Authority access with real time view access, and an Executive manager read-access account on each operational tracking account
Confidence that the record cannot be altered quietly 55(11): tampering with the tracking system is an offence, liable under section 57 of the Cannabis Act, 2020

This table maps requirement to requirement. It does not assert that any bank has accepted records produced under these regulations as sufficient for account opening. That decision belongs to the bank and its correspondent.

What Changes the Answer at National Scale?

The cannabis banking answer changes when the jurisdiction, not the applicant, supplies the evidence. The Eastern Caribbean Central Bank recommends that medicinal cannabis funds be “adequately controlled, through an effective ring-fencing system and the establishment of a Chinese wall to ensure that funds are not comingled and transferred through correspondent banks in jurisdictions where medicinal cannabis remains illegal”, and it says in the same report that licence-level tracking is what makes that workable.

A second ECCB recommendation names both actors: “both the regulator and financial institutions” should “continue to engage with correspondent banks, not only to preserve existing relationships but also to establish new relationships”.

“The legislation will be operationalised in such a way that allows the Authority to track each licence and, therefore, track individual revenue streams from the industry. This information can also be useful if financial institutions are required to ring-fence the funds related to the industry.” Eastern Caribbean Central Bank, The Medicinal Cannabis (R)evolution, 2023, discussing the Saint Vincent and the Grenadines Medicinal Cannabis Industry (Licensing) Regulations 2018.

An operator can improve its own file. An authority can improve the file for every licensee at once, which is why track-and-trace requirements by country differ so widely in how far they reach into the money.

The bank that said yes

At least one bank in the region decided to serve the market and published what it built in order to. The Bank of St Vincent and the Grenadines, in the ECCB’s Box 4, “has implemented systems to identify and monitor accounts which engage in the medicinal cannabis industry”, allocated dedicated resources to “avoid the comingling of funds”, and applied “a zero tolerance approach” so that funds move only through “designated correspondent banking relationships which have been established for such transactions”.

Identification, monitoring, segregation and designated correspondent routing are the four controls the ECCB recommends, and the four things a national tracking record documents.

Regulation 55: The Same Idea Written Into Law

Saint Kitts and Nevis legislated the mechanism in 2022. Regulation 55 of the Saint Kitts and Nevis cannabis regulations, gazetted as SRO No. 17 of 2022, is headed “Tracking Funds and Money” and requires the Authority to “regulate, monitor, and track any funds surrounding a medicinal cannabis business … to maintain compliance with International obligations and guidelines related to anti-money laundering, combating the Financing of Terrorism”.

Reg 55(4) puts source of funds at the licence application: an applicant “shall submit source of funds documentation showing the sources of all the monies to be invested”. That lands before the business opens, earlier than any account application.

Reg 55(5) requires “Every financial transaction conducted, beginning from the licence application process” to be recorded through the St. Kitts and Nevis Tracking System, available to the Authority in read access format in real time. Reg 55(6) enumerates seventeen categories at clauses (a) to (q), including loans, rent, salaries, taxes, banking and dividends, and opens with “shall include but may not be limited to”.

Two further sub-regulations put duties on the jurisdiction: reg 55(3) requires the database to flag irregularities, and reg 55(8) requires the Division to inform the Authority on finding one. Nothing in Regulation 55 mentions an account application. It records the material a cannabis banking file is made of, at the point the licence is issued.

Why Account Access Decides Export Earnings

Saint Vincent and the Grenadines was the first member state of the Organisation of Eastern Caribbean States granted permission to export medicinal cannabis, cleared for export to Germany in January 2022 after an import certificate was issued by the Federal Institute for Drugs and Medical Devices.

Export earnings move on international wire transfers and trade finance, two of the four services most affected by correspondent banking withdrawal. That puts the cannabis banking problem and the export opportunity in the same place. Operators can read how to obtain a cannabis cultivation licence in St. Vincent and the Grenadines, and the Saint Lucia national cannabis traceability programme shows the same record at government level.

Where Traceability Fits in Cannabis Banking

Traceability does not open a bank account. It supplies the answers to the questions a bank is required to ask, which is a different and more useful claim.

For a licensed producer, the compliance officer’s questions have documented answers instead of assertions: licence-linked activity records, lot-level provenance, destination and counterparty on every transfer, and an audit trail on every change. FATF and the World Bank both name the cost of diligence as a driver of withdrawal. A complete record lowers it, and it does not guarantee an account.

For an authority, the argument belongs to the ECCB. Tracking each licence lets an authority track individual revenue streams, and that information is useful where financial institutions are required to ring-fence industry funds. In that arrangement the regulator configures the system and sets the rules; the platform is the tool underneath.

GrowerIQ runs national cannabis traceability for the Barbados Medicinal Cannabis Licensing Authority, selected in 2023, and for Saint Lucia, selected in 2026. Regulator-side readers can see the same requirements from a government cannabis tracking position.

See how plant records and financial records sit in one system: book a demo.

Frequently Asked Questions

What is de-risking in banking?

De-risking is FATF’s term for financial institutions terminating or restricting business relationships with clients or categories of clients to avoid, rather than manage, risk. FATF says the practice is inconsistent with the risk-based approach where it is not based on a case-by-case assessment.

Why is correspondent banking considered high risk?

FATF identifies correspondent banking risk as high value transactions with limited information about the remitter and the source of funds. FATF also states that banks are not required, as a matter of course, to run customer due diligence on the customers of their respondent banks, so a correspondent banking AML review judges the respondent bank’s controls.

Can cannabis businesses get bank accounts outside the United States?

Yes, some do. The Eastern Caribbean Central Bank reports that many ECCU licensed financial institutions take a very conservative approach and many foreign branch banks abstain, but that where a decision has been taken to serve the market, systems, resources, practices and controls have been augmented. The Bank of St Vincent and the Grenadines is a documented cannabis bank account example.

What documents does a bank ask a cannabis business for?

FATF’s banking guidance says customer due diligence establishes who the customer is, what they do and why they require banking services, and that the risk profile decides whether the bank enters, continues or terminates the relationship. In practice a cannabis banking file means ownership, licence, business activity, source of funds and destination of funds.

Does seed-to-sale software get you a bank account?

No. The account decision belongs to the bank and, behind it, to the bank’s correspondent. A traceability record answers the diligence questions with documents instead of assertions, which lowers the cost of diligence that FATF and the World Bank both identify as a driver of withdrawal.

Last updated: August 2026

Ready to see the record behind a cannabis banking file?

See how GrowerIQ keeps plant records and financial records in one system, for licensed producers and for the authorities that oversee them.

REQUEST DEMO
Cannabis banking records: vault, ledger, audit trail and wire transfer - GrowerIQ

About GrowerIQ

GrowerIQ is a complete cannabis production management platform. Ours is the first platform to integrate your facility systems, including sensors, building controls, QMS, and ERP, into a single simplified interface.

GrowerIQ is changing the way producers use software - transforming a regulatory requirement into a robust platform to learn, analyze, and improve performance.

To find out more about GrowerIQ and how we can help, fill out the form to the right, start a chat, or contact us.

Start today.

Let us know how to reach you, and we'll get in touch to discuss your project.

GrowerIQ does not share, sell, rent, or trade personally identifiable information with third parties for promotional purposes. Privacy Policy