Quick answer: Bank of America restricts accounts when its automated fraud monitoring system detects activity that deviates from your account’s established pattern or matches a known fraud or compliance risk profile. Common triggers include unusual transfers, Zelle and Zelle-related payment activity, large deposits from new sources, new login devices, and pass-through patterns. Most Bank of America restrictions resolve within one to five business days once the bank verifies the activity is legitimate.
Estimated reading time: 10 minutes
This guide covers why Bank of America specifically restricts accounts, how BofA’s internal review process works, what different Bank of America account status messages mean, what you can still do while restricted, what documentation BofA requires, and the fastest steps to restore full access.
Why Bank of America restricts bank accounts
Bank of America is legally required under the Bank Secrecy Act, FinCEN’s Anti-Money Laundering regulations, and Know Your Customer rules to actively monitor every account for suspicious activity in real time. BofA uses a combination of rules-based triggers, behavioral baseline modeling, and machine learning fraud scoring — evaluating every transaction, login, and account change automatically. When activity scores above BofA’s internal risk threshold, a restriction is applied before any human reviews the account.
Bank of America is also one of the seven founding owner banks of Early Warning Services — the company that operates Zelle — which means BofA applies particularly aggressive monitoring to Zelle activity as both a Zelle participant and a network co-owner.
The most common reasons Bank of America restricts accounts
Unusual transfer or deposit activity
Every Bank of America account builds a behavioral baseline over time — typical deposit amounts, normal transfer sizes, usual spending ranges. When a single transaction falls significantly outside that baseline, BofA’s monitoring system flags it automatically. A deposit three times your normal amount, a wire transfer to a new external account, or a series of payments in an unusual pattern all trigger the same automated response regardless of whether the underlying activity is legitimate. The system is evaluating deviation from your pattern, not whether you have done something wrong.
Zelle payments to new recipients
Bank of America applies lower flagging thresholds to Zelle activity than to traditional transfers because Zelle payments are instant and irreversible. Sending a Zelle payment to a new contact — particularly for an amount above your typical Zelle history — is one of the most common BofA restriction triggers. Multiple Zelle payments to different new recipients in a short window is almost always flagged. If you initiated a Zelle payment immediately after receiving a large deposit, the combined pass-through pattern significantly increases the probability of a restriction.
Pass-through activity
Receiving a significant deposit and immediately moving most or all of it out — by Zelle, wire, ACH, or withdrawal — is one of the most reliable Bank of America restriction triggers. This pattern resembles money mule activity regardless of the legitimate reason behind it. BofA’s monitoring window for this pattern is typically within one to three business days — allowing even one business day between a large incoming deposit and a large outgoing transfer meaningfully reduces the likelihood of triggering it.
New login device or unfamiliar location
Bank of America uses device fingerprinting and location analysis to identify known login devices and detect potential account takeover. A login from a new phone, computer, browser, or geographic location — particularly when followed by a high-value transaction or account change in the same session — triggers BofA’s security monitoring. If you recently got a new phone, logged in from a new location, or used a VPN before initiating a transfer, this combination is a likely restriction trigger.
First-time wire transfers to new external accounts
First-time wire transfers to external accounts Bank of America has never seen carry one of the highest individual transaction risk scores in BofA’s monitoring system. Wires are irrevocable once processed, which means BofA applies more scrutiny to first-time wires than to any other single transaction type. A first-time wire combined with a recent large deposit, a new login device, or any other elevated signal significantly increases the probability of a restriction.
Identity verification issues
Under KYC regulations, Bank of America must maintain current, verified identity information for all account holders. If your address, name, or contact details have changed and BofA cannot automatically verify the update — or if your documentation is simply out of date — the account may be restricted until verification is completed. Bank of America identity restrictions are typically among the fastest to resolve — usually within one business day of visiting a BofA branch or submitting a government-issued photo ID.
Structuring patterns near $10,000
Multiple transactions structured just below the $10,000 federal reporting threshold — whether deposits, withdrawals, or transfers — trigger AML flags under the Bank Secrecy Act. Bank of America’s compliance systems are specifically trained to detect structuring patterns. These restrictions are handled by BofA’s compliance team rather than fraud analysts, involve longer review timelines, and may result in a Suspicious Activity Report being filed with FinCEN — which BofA is legally prohibited from disclosing to you.
Business activity on a personal Bank of America account
Bank of America monitors personal accounts for business-volume activity — receiving multiple payments from many different sources, processing what appears to be business revenue, or Zelle payment patterns that resemble merchant activity. BofA’s deposit agreement requires business activity to be conducted through a business account. Personal accounts showing sustained business patterns are flagged for compliance review and may be restricted or closed with a recommendation to open a Bank of America Business account.
What Bank of America account status messages mean
| What BofA shows | What it means | Typical trigger |
|---|---|---|
| “Your account is restricted” | Outgoing transfers and sometimes card access blocked pending review | Fraud flag, unusual activity |
| “Your account is under review” | Active evaluation in progress; access may or may not be affected | Fraud or compliance review |
| “Your account has been temporarily limited” | Specific functions suspended pending verification | Identity issue, fraud flag |
| “We noticed unusual activity” | Fraud alert — BofA asking you to confirm recent activity | Automated fraud detection flag |
| “Your account has been frozen” | Most or all activity suspended | Serious fraud, account takeover, legal hold |
What you can still do with a restricted Bank of America account
| Account feature | Available during BofA restriction? |
|---|---|
| View balance and transaction history | Yes |
| Receive direct deposit or payroll | Usually yes |
| Receive incoming ACH or wire transfers | Usually yes |
| BofA debit card purchases | Sometimes — depends on restriction type |
| BofA ATM withdrawals | Often yes for transfer-only restrictions |
| Send outgoing transfers or wires | Usually blocked |
| Send Zelle payments | Usually blocked |
| Bill pay through BofA online banking | Often blocked |
| In-branch cash withdrawal with ID | Often available — ask at the branch |
Test your BofA debit card at a Bank of America ATM before calling. If it works, you likely have a transfer-only restriction — outgoing transfers are blocked but card and ATM access remain intact. If the ATM also declines, the restriction is broader and requires immediate contact with Bank of America.
How Bank of America’s internal review process works
Fraud analyst review
Standard fraud flags — unusual transfers, Zelle activity, pass-through patterns — are assigned to a BofA fraud analyst who reviews the account’s full transaction history, the specific flagged activity, and any documentation submitted by the account holder. The analyst determines whether the flag is a false positive or a genuine fraud concern. Most Bank of America fraud reviews resolve within three to five business days when the account holder responds promptly and submits documentation the same day it is requested.
Security team review
Login-based flags — new device combined with high-value activity, multiple failed login attempts followed by success, account changes followed by transfers — are handled by BofA’s security team. These reviews typically resolve within one to two business days once identity is confirmed. For suspected account takeover situations, Bank of America may require in-branch identity verification rather than phone verification.
Compliance officer review
AML flags — structuring patterns, high-frequency cash activity, large-scale pass-through — are escalated to BofA’s compliance team. These reviews take significantly longer — five to fifteen business days at minimum — and may result in a Suspicious Activity Report being filed with FinCEN. Bank of America is legally prohibited from disclosing when an SAR has been filed, which is why compliance-connected restrictions sometimes feel unusually opaque even when you cooperate fully and ask direct questions.
What to do right now if your Bank of America account is restricted
Step 1: Check the Bank of America app secure messages first
Open the Bank of America mobile app and check your secure messages inbox before calling. BofA often sends a message explaining what triggered the restriction and what documentation is needed. If BofA has sent a fraud alert asking you to confirm recent activity, respond immediately — this is the fastest way to lift a restriction caused by a fraud detection flag. Ignoring a BofA fraud alert consistently extends the restriction timeline.
Step 2: Test what still works
Try an ATM withdrawal at a Bank of America ATM, a small debit card purchase, and check whether recent deposits have posted normally. This tells you the restriction type before you call and helps you ask BofA the right questions when you reach them.
Step 3: Call Bank of America through the official number
Call the number on the back of your BofA debit card — not a number from a text, email, or search result. Bank of America fraud alerts and restriction notices are a common phishing vector; always initiate contact yourself rather than responding to an inbound call claiming to be BofA. When you reach Bank of America, ask specifically: is my account restricted or under review, what type of review is active, what department is handling it, what documentation is needed, and what is the expected resolution timeline. Get a case or reference number.
Step 4: Visit a Bank of America branch if available
For identity verification restrictions and some fraud reviews, Bank of America prefers or requires in-branch resolution with a government-issued photo ID. Bank of America has one of the largest branch networks in the U.S. — visiting a branch the same day with your ID can resolve identity-based restrictions within hours, which is typically faster than the phone-based process.
Step 5: Submit documentation the same day
For fraud-based restrictions, BofA will ask for documentation explaining the flagged activity. Submit everything in a single complete submission the same day Bank of America requests it — through the BofA app’s secure messaging or at a branch. The review clock does not move until BofA has what it needs. Common documentation BofA requests includes pay stubs or employer letters for large payroll deposits, invoices or bills of sale for property-related transfers, gift letters for personal transfers, and business documentation for business-related payments on a personal account.
Step 6: Escalate if the restriction extends past 10 business days
If Bank of America has not resolved the restriction within 10 business days without clear communication or a defined timeline, file a complaint with the Consumer Financial Protection Bureau complaint portal. Bank of America is required to respond to CFPB complaints within 15 days. CFPB complaints consistently produce faster responses from BofA than continued direct escalation through customer service channels.
For the complete step-by-step action guide, see what to do if your bank account is restricted.
How long Bank of America account restrictions typically last
| Restriction type | Typical BofA timeline | Key factor |
|---|---|---|
| Identity verification restriction | Same day to 1 business day | Visit a BofA branch with photo ID |
| Fraud alert — confirm activity | Hours to 1 business day | Respond to BofA’s alert immediately |
| New device or login security review | 1–2 business days | Identity confirmation over phone or branch |
| Standard fraud review | 3–5 business days | Speed of documentation submission |
| Zelle-related restriction | 1–3 business days | Confirm payments were authorized |
| AML or compliance review | 5–15+ business days | Complexity; may involve SAR filing |
| Legally imposed freeze | Until legal matter resolved | Address the underlying legal process |
For the complete timeline breakdown, see how long bank account restrictions last.
How to prevent Bank of America from restricting your account in the future
Notify BofA before large or unusual transactions
Bank of America allows advance notification through secure messaging in the BofA app or by calling the number on the back of your card. A brief message before a large wire, an unusual deposit, or a first-time Zelle payment to a new contact gives BofA’s system context before the transaction is processed — and can prevent an automated flag entirely.
Build Zelle history with new contacts gradually
Send a small amount first to any new Zelle contact before sending a large payment. This creates a transfer history with that contact in BofA’s system and significantly reduces the risk score on subsequent larger payments to the same person.
Allow time between large deposits and large outgoing transfers
Pass-through activity is one of Bank of America’s most reliable restriction triggers. Allowing two to three business days between a large incoming deposit and a large outgoing transfer — by wire, Zelle, or ACH — breaks the sequence that triggers the automated flag.
Keep Bank of America contact information current
Outdated phone numbers and email addresses mean BofA cannot reach you quickly when a review is triggered — extending every restriction timeline. Update your contact information in the BofA app any time it changes. BofA uses your registered contact channels to send fraud alerts that, when responded to immediately, can lift restrictions within hours.
Use a Bank of America Business account for business activity
If you regularly receive payments from multiple sources or process business revenue through your BofA personal account, opening a Bank of America Business checking account eliminates the business-on-personal-account compliance flag entirely. Restrictions connected to business activity on a personal account are among the more likely to result in account closure rather than simple restriction resolution.
Frequently Asked Questions
Why did Bank of America restrict my account without warning?
Because Bank of America’s fraud monitoring system acts in real time — applying restrictions automatically within seconds of a triggering event, before any human reviews the account. BofA is not legally required to notify you before applying a restriction. The lack of advance notice is intentional: it prevents funds from being moved before BofA can investigate in genuine fraud or account takeover scenarios.
Why won’t Bank of America tell me why my account is restricted?
In most cases BofA will explain the general reason when you contact them — fraud review, identity verification, compliance check. In cases where a Suspicious Activity Report has been filed with FinCEN, Bank of America is legally prohibited under the Bank Secrecy Act from disclosing that the report was filed. This is the tipping-off prohibition. Most BofA restrictions are not SAR-connected, but when they are, the bank’s vagueness is legally compelled rather than a choice.
Can I still use my Bank of America debit card if my account is restricted?
It depends on the restriction type. Transfer-only restrictions — the most common type — typically do not block BofA debit card purchases or ATM withdrawals. Broader fraud or compliance reviews may block all outgoing activity including card use. Test your BofA debit card at a Bank of America ATM before calling — if it works, you have a transfer-specific restriction rather than a full account block.
Will Bank of America close my account because it was restricted?
Not automatically. Restriction and closure are separate events at Bank of America. BofA closes accounts only when a review concludes with a genuine finding — confirmed fraud, a sustained policy violation such as business activity on a personal account, or a legal hold that cannot be resolved. Most Bank of America restrictions on legitimate accounts are lifted without closure once the review is complete.
Does a Bank of America account restriction affect my credit score?
No. Bank of America account restrictions are not reported to Equifax, Experian, or TransUnion and do not affect your credit score. If a restriction leads to account closure with a negative finding, that closure may be reported to ChexSystems or Early Warning Services — a separate screening system banks use when evaluating new checking account applications — but this is entirely separate from consumer credit reporting.
Can I open a new Bank of America account while my existing one is restricted?
Generally no — Bank of America’s systems are linked and an active restriction or review on one account typically prevents opening new accounts at BofA until the restriction is resolved. Resolving the existing restriction is the right path before attempting to open a new Bank of America account.
What is the Bank of America fraud department phone number?
Call the number on the back of your Bank of America debit card — this connects you directly to the correct BofA support line for your account type. Do not use phone numbers from texts, emails, or search results claiming to be Bank of America fraud support. Account restriction notices are a common phishing vector — always initiate contact yourself using the number on your card or through the official Bank of America mobile app.
