Ongoing Monitoring Needs for Cannabis Accounts

Ongoing monitoring is the continuous surveillance of cannabis account activity to confirm that what flows through the account matches what the business should be doing, and to surface anything that does not. For MRBs (aka CRBs), monitoring is uniquely data-rich: institutions can reconcile bank deposits against state-mandated seed-to-sale (track-and-trace) reporting and point-of-sale figures, turning the abstract question 'is this normal?' into a concrete comparison. Effective monitoring is what converts a pile of due-diligence documents into an early-warning system.

Monitoring also feeds the SAR engine: the red flags it surfaces determine whether a relationship stays Limited or escalates to Priority.

Key takeaway: Monitor every MRB by reconciling deposits to reported sales, comparing actual activity to the onboarding baseline, and screening for cannabis-specific red flags. Alerts must be reviewed, dispositioned, and documented, and feed directly into SAR categorization.

‍

Reconcile deposits to reported sales

The signature monitoring control in cannabis banking is reconciliation: comparing the cash and card deposits hitting the account against the sales the business reports through state track-and-trace systems and its point-of-sale platform. A dispensary depositing far more than it reports selling may be commingling out-of-state or illicit funds; one depositing far less may be skimming or operating an unrecorded cash channel. Either gap is a red flag worth investigating.

• Pull state seed-to-sale data and POS reports on a regular cycle.
• Compare reported sales to deposits for the same period.
• Investigate and document variances beyond a defined tolerance.
• Escalate persistent or large unexplained gaps toward a Marijuana Priority SAR.

‍

Compare activity to the onboarding baseline

Monitoring is only meaningful against the expected-activity profile built at onboarding and refreshed during ongoing due diligence. Watch for volumes, transaction sizes, counterparties, or geographies that diverge from the baseline without a documented explanation. Growth is normal; unexplained step-changes are not.

Watch the cannabis-specific red flags

FinCEN's 2014 guidance lists red flags drawn from the Cole Memo priorities and money-laundering typologies. Build them into monitoring rules:

• Deposits substantially exceeding the scale of the licensed operation.
• Rapid movement of funds or transfers to jurisdictions with no business nexus.
• Apparent structuring of cash to stay under the $10,000 CTR threshold.
• Activity suggesting interstate movement or sales to minors.
• Sudden changes in transaction patterns or counterparties.
• Commingling of marijuana revenue with funds from unrelated or undisclosed businesses.

‍

Run a disciplined alert and case workflow

Every alert needs a documented disposition. A defensible workflow generates alerts from monitoring rules, routes them to a trained analyst, requires a written rationale to clear or escalate each one, and links escalations to the SAR process. The quality of alert documentation is a frequent examination focus: clearing an alert without explaining why is as risky as missing it.

1. Detect: rules and analytics flag the activity.
2. Review: an analyst evaluates against the baseline and red flags.
3. Disposition: clear with rationale, or escalate to investigation.
4. Report: file or update the SAR where warranted.
5. Record: retain the full decision trail.

‍

Tune thresholds and avoid alert fatigue

Static thresholds either drown analysts in false positives or miss real risk. Calibrate rules to each customer's risk tier and baseline, review tuning periodically, and document the rationale for threshold settings. Cannabis-specific monitoring platforms increasingly use the reconciliation data itself to set dynamic, business-specific expectations rather than one-size-fits-all dollar limits.

Monitoring as the core of examiner readiness

When an examiner reviews a cannabis program, monitoring output is the proof that controls operate, not just exist. Be able to show, for any account, the reconciliation history, the alerts generated, how each was dispositioned, and how that fed SAR filing. That continuous, documented chain is the difference between a program that looks compliant on paper and one that demonstrably works.

Frequently asked questions

What is sales-to-deposit reconciliation in cannabis banking?

It is the comparison of a marijuana business's bank deposits to the sales it reports through state seed-to-sale systems and its point-of-sale platform. Significant unexplained gaps in either direction are red flags that can escalate a relationship to a Marijuana Priority SAR.

What are the main red flags in monitoring cannabis accounts?

Deposits that exceed the licensed operation's plausible scale, structuring to avoid CTRs, rapid fund movement to unrelated jurisdictions, signs of interstate diversion or sales to minors, sudden pattern changes, and commingling with undisclosed businesses.

How should banks handle monitoring alerts on MRBs?

With a documented workflow: detect, review against the baseline and red flags, disposition with a written rationale, file or update SARs where warranted, and retain the full decision trail. Undocumented dispositions are a common examination finding.

‍