For over a decade, the legal cannabis industry has functioned in a state of precarious paradox. While medical and recreational marijuana is now legal in a significant majority of U.S. states, the industry remains effectively "unbanked" or "underbanked" due to its classification under federal law. A landmark report published this week by the Government Accountability Office (GAO) has now confirmed what many in the financial sector have long suspected: the fear of regulatory reprisal is largely a phantom, yet it remains the primary barrier preventing mainstream financial inclusion for cannabis-related businesses (CRBs).
The Myth of Regulatory Punishment
According to the GAO’s findings, which were released following a formal inquiry by a coalition of U.S. Senators—Raphael Warnock (D-GA), Elizabeth Warren (D-MA), Tina Smith (D-MN), and John Fetterman (D-PA)—no financial institution has ever been punished by federal regulators for providing services to legal cannabis businesses.
The report, based on exhaustive interviews with 74 financial institutions and 51 cannabis businesses, alongside data from the Financial Crimes Enforcement Network (FinCEN), found “no indication” that any bank or credit union has been subject to civil or criminal penalties for serving the sector. Despite this, the narrative of "regulatory risk" persists as the dominant reason most banks refuse to engage with cannabis clients.
Courtney LaFountain, the GAO director who spearheaded the report, describes the industry’s current state as an "amorphous situation." She notes that banks are not reacting to specific threats or existing enforcement actions, but rather to a pervasive, paralyzing uncertainty regarding how the conflict between state and federal law will resolve. "Maybe they wanted to see other banks’ experience, to make sure that the banking regulators really were going to behave the way they said," LaFountain explained in an interview. "It’s a reasonable perspective to have on an uncertain landscape and a new potential business line."
A Chronology of the Cannabis Banking Standoff
To understand the current impasse, one must look at the timeline of the industry’s maturation versus the stagnation of federal policy.
- Pre-2013: The "Wild West" era. Cannabis businesses operated almost exclusively in cash, creating significant public safety risks, including high rates of robbery and theft.
- 2014: The Department of Justice issued the "Cole Memo," which provided a framework for financial institutions to serve cannabis businesses under specific, rigorous guidelines. This offered a glimmer of hope for banking access.
- 2018: The rescission of the Cole Memo by then-Attorney General Jeff Sessions injected fresh fear into the banking sector, effectively halting the progress made toward normalizing cannabis banking.
- 2020–2023: As state-level legalization continued to sweep the nation—reaching 41 states for medical use and 24 for recreational use—the disconnect between the federal Controlled Substances Act and the reality of commerce became impossible to ignore.
- 2024: The GAO concludes its year-long study, confirming that while roughly 1,000 banks and credit unions—about 11% of all U.S. insured depository institutions—file suspicious activity reports (SARs) related to cannabis, many do so only for ancillary businesses, not "plant-touching" entities.
Supporting Data: The High Cost of Compliance
The GAO report offers a sobering look at the financial realities for those cannabis companies that do manage to secure banking services. Because of the perceived risk, financial institutions that do work with CRBs pass the burden of compliance—the cost of enhanced due diligence, monitoring, and legal oversight—directly to the business owner.
The report revealed that cannabis companies face exorbitant fees, with some paying upwards of $100,000 per year just to maintain a business checking account. Participants in seven out of eight GAO focus groups reported that they pay significantly higher fees than standard commercial clients.
These costs are not merely arbitrary; they are reflections of the labor-intensive nature of banking a CRB. One focus group participant noted that their institution lacks the staff levels required for the exhaustive onboarding and monitoring processes mandated by internal risk management policies. Consequently, for many banks, the juice is simply not worth the squeeze.
The Human and Economic Implications
The consequences of this banking vacuum extend far beyond the balance sheets of cannabis corporations.
The Safety Argument
Ironically, the refusal to bank these businesses creates the very dangers regulators hope to avoid. Because cannabis businesses are forced to operate in cash, they become targets for criminal activity. Some banks that have chosen to enter the space cite public safety as a primary motivation, arguing that bringing these businesses into the formal financial system reduces the volume of cash moving through neighborhoods, thereby lowering the incidence of robbery and violent crime.
The Lending Gap
The lack of traditional banking services forces cannabis businesses into the arms of predatory or nontraditional lenders. The GAO report highlights that because banks will not extend credit, business owners are often forced to seek private equity or high-interest loans. In many cases, these agreements are structured in ways that allow investors to take control of the business, effectively stripping the original founders of their equity and autonomy.
The Employee Experience
The exclusion reaches the individual level. Employees working in the cannabis sector often report difficulty opening personal bank accounts or obtaining loans, as their source of income is viewed as "high risk" or "illegitimate" by many mainstream financial institutions. This stigmatization of the cannabis workforce is an often-overlooked side effect of the federal policy failure.
Official Responses and the Path Forward
When asked what would actually move the needle, industry stakeholders and financial institutions gave the GAO a variety of answers. There is no "silver bullet," according to LaFountain.
Some banks have adopted an "all or nothing" stance, stating they will not touch the industry until cannabis is fully descheduled from the Controlled Substances Act. Others suggest that rescheduling to Schedule III—which is currently being considered by federal authorities—would provide enough of a buffer to make the risk manageable. A third group argues that explicit "safe harbor" legislation, which would shield financial institutions from federal prosecution, is the only way to achieve widespread industry participation.
Regardless of the legislative path taken, the GAO report makes one thing clear: the current state of affairs is an inefficient, costly, and dangerous stalemate. As long as cannabis remains a Schedule I substance, financial institutions will continue to treat the industry as a radioactive asset, despite the lack of evidence that such caution is legally necessary.
Conclusion
The GAO’s findings serve as an indictment of the status quo. By documenting that no federal regulator has ever penalized a bank for serving the cannabis industry, the report strips away the primary justification for the "just say no" culture that dominates the financial sector.
However, the "amorphous" nature of the regulatory landscape remains a formidable barrier. Until there is clear, consistent federal guidance—whether through legislative safe harbors or a total overhaul of the drug’s scheduling—banks will continue to prioritize their institutional risk appetite over the economic reality of a multi-billion dollar, state-legal industry. For now, cannabis businesses remain in financial limbo, paying a "premium for progress" while waiting for the federal government to close the gap between outdated laws and modern commerce.
