# How to Reconstruct Bank Records When Statements Are Missing

- Author: PreciseBankFlow (https://www.precisebankflow.com)
- Published: 2026-01-19
- Updated: 2026-01-19
- Category: Fraud and forensic review
- Canonical: https://www.precisebankflow.com/blog/reconstruct-bank-records

> How to reconstruct bank records when statements are missing: requesting from the bank, rebuilding from images and ledgers, and labeling the gaps.
To reconstruct bank records when statements are missing, first ask the bank for replacements, since banks keep most account records for five years. Rebuild whatever the bank cannot supply from check images, deposit slips, the ledger and counterparty records. Then prove each rebuilt period against known balances at both ends, and label every line by its source.

## Why are the bank statements missing, and does the reason matter?

The reason bank statements are missing matters because it changes how much you can trust whatever replaces them. Statements lost in a move or a system change are a records problem. Statements withheld or destroyed by the person who controlled the account may be part of the problem you are investigating, and the rebuild has to assume that.

Ask, and write down the answer, before you start:

- **Who held the statements?** The bookkeeper, the owner, an outside accountant, or nobody, because they were only ever online.
- **Which periods are missing?** A random scatter of months suggests carelessness. A neat block that matches a period of suspected loss suggests something else.
- **When did they go missing?** Records that vanished after questions were asked are a different matter from records lost years ago.
- **Is online access still available?** Many banks let account holders download older statements, but the window varies.

Missing records alone prove nothing. Combined with a person under pressure and with the access to take money, they fit a familiar pattern, described in [the fraud triangle](/blog/fraud-triangle). Record the facts without drawing that conclusion yet.

## Requesting replacement bank records from the bank

Requesting replacement records from the bank is the first and best step, because a statement that comes straight from the bank is the original source. The account holder, or someone acting with their written authority, asks the bank for the missing statements, check images and deposit records for each period.

Banks keep these records for longer than most people expect. Under federal recordkeeping rules, [31 CFR 1020.410](https://www.law.cornell.edu/cfr/text/31/1020.410) requires banks to keep each account statement or ledger record, and most checks, debits and deposit items over $100, with some exemptions. [31 CFR 1010.430](https://www.law.cornell.edu/cfr/text/31/1010.430) sets the retention period at five years. So for any month in the last five years, ask the bank before you rebuild anything.

What to request:

1. **Statements** for every missing month, as PDFs from the bank's own system.
2. **Check images,** front and back, for each check that cleared in those months.
3. **Deposit detail:** deposit slips and images of deposited items.
4. **Wire and ACH detail** where the statement description is too short to identify the counterparty.
5. **A list of all accounts** held under the same tax ID, in case the missing statements belong to an account nobody mentioned.

Banks may charge research fees and may take weeks. If the account holder will not cooperate, the records may need a subpoena in litigation. If someone other than the bank supplies replacement PDFs, test them before relying on them; [edited PDF bank statement checks](/blog/edited-pdf-bank-statement) covers how.

## Rebuilding transactions from check images, deposit slips and ledgers

Rebuilding transactions means assembling, line by line, what went through the account in a missing period from every other record that touched it. No single secondary source is complete, so combine several and rank them by how independent they are of the person who kept the books.

Sources, roughly from strongest to weakest:

- **Bank-produced items,** such as check images, deposit images and wire confirmations obtained from the bank, even when the statement itself is gone.
- **Third-party records:** vendor statements, customer remittances, payroll provider reports, loan statements and card processor reports. Each shows its side of transactions with your account.
- **The general ledger and check register.** Useful for structure and descriptions, but prepared by the business, possibly by the person under review.
- **Internal documents:** invoices, receipts and approvals. These show what should have happened, not what did.
- **Memory and email.** A last resort, and labeled as such.

### An example of rebuilt lines for one month

The table below is an example of a rebuilt month. The figures are invented for illustration. The opening balance comes from the prior month's bank statement and the target closing balance from the next month's statement.

| Date | Item | Amount | Source |
| --- | --- | --- | --- |
| May 1 | Opening balance | 21,406.18 | April statement from bank |
| May 3 | Deposit | +6,250.00 | Deposit slip image from bank |
| May 9 | Check 5120 | -3,400.00 | Check image from bank |
| May 15 | Payroll ACH | -7,640.00 | Payroll provider report |
| May 17 | Deposit | +4,880.75 | Deposit slip image from bank |
| May 22 | Check 5121 | -1,215.60 | Check image from bank |
| May 31 | Service fee | -35.00 | Ledger, matches fee schedule |
| May 31 | Computed closing balance | 20,246.33 | Sum of the above |
| Jun 1 | Opening balance per bank | 18,946.33 | June statement from bank |
| | Unexplained difference | 1,300.00 | Activity missing from all sources |

## Rolling balances forward to test reconstructed bank records

Rolling balances forward tests reconstructed bank records by starting from a balance you know and adding the rebuilt activity to reach a balance you also know. If the computed figure matches the known one, the rebuild is complete for that period. If it does not, the difference is the activity your sources have not found.

The known points are usually the closing balance of the last statement before the gap and the opening balance of the first one after it. Loan statements, a bank confirmation or a balance quoted in a loan application can add more points inside the gap.

In the example above, the rebuild falls 1,300.00 short of the June opening balance. That figure is the most important result of the work. It means money left the account in May through a channel none of the sources show, such as a cash withdrawal, an online transfer or a card payment. A round 1,300.00 suggests one or two transactions, and it gives you something specific to ask the bank about.

Never close a difference by adding a plug line. Record it, describe what has been tried, and carry it into the gap schedule.

### Closing a roll-forward difference

A roll-forward difference usually shrinks in a predictable order. First, look for activity that rarely appears in the business's own records: bank fees, interest, returned items and card payments made from the account. Second, compare the payroll and loan figures with the provider's and lender's records, since a single extra run or payment explains many gaps. Third, ask the bank for the transaction history of the missing month even if it cannot produce a formatted statement; many banks can print a plain activity list. Each item found moves from the unexplained line into the rebuilt table with its source.

## Labeling the gaps in reconstructed bank records

Labeling the gaps means marking every period and every line with where it came from and how sure you are of it. A reader should be able to tell at a glance which months are bank originals, which are rebuilt, and how large the unexplained difference is in each. Without labels, a reconstruction looks more certain than it is.

The gap schedule below is an example for one account over twelve months. All values are invented for illustration.

| Month | Source | Status | Balance proof | Unexplained |
| --- | --- | --- | --- | --- |
| Jan to Mar | Client PDFs, confirmed with bank | Original | Foots | 0.00 |
| Apr | Bank replacement statement | Original | Foots | 0.00 |
| May | Rebuilt from bank images, payroll report, ledger | Reconstructed | Rolled forward | 1,300.00 |
| Jun | Bank replacement statement | Original | Foots | 0.00 |
| Jul to Sep | Requested from bank, not yet received | Missing | Not tested | Unknown |
| Oct to Dec | Client PDFs, confirmed with bank | Original | Foots | 0.00 |

Use the same labels on every line in the transaction table: original, reconstructed or missing, plus the source document. Any total in a report that includes reconstructed lines should say so, with the unexplained amounts shown beside it.

Law firms rebuilding a trust account have an added reason for this care, because each fee or charge has to land on the right ledger; [bank fees in an IOLTA account](/blog/bank-fees-in-iolta-account) explains how those are handled.

PreciseBankFlow reads the statements you do have, checks that each one foots, and flags gaps in check sequences, which shows which items to request and which months still need work. The rebuild itself, and the labels, stay in your hands. You can [ask to join the early group](/get-started).

## When should reconstructed bank records not carry a conclusion?

Reconstructed bank records should not carry a conclusion when the unexplained difference is large relative to the amounts in question, when the main sources were prepared by the person under review, or when the missing period exactly matches the period of suspected loss. In those cases, say what the reconstruction shows and what it cannot.

Be cautious when:

- **The gap is the case.** If the allegation concerns May and May is the rebuilt month, the reconstruction can only frame the question. Push harder for the bank's own records.
- **The ledger is the only source.** A ledger kept by the suspect can be the instrument of concealment. Rebuilt lines that rest only on it should be marked as such.
- **The difference is unexplained and large.** A shortfall of 1,300.00 in a month of 20,000 in activity is a lead. A shortfall of 40,000 means the rebuild is missing too much to test anything.
- **Replacement records conflict.** If the bank's replacement statement differs from a client copy for the same month, the conflict is itself a finding, and the bank's version wins.

Once the gaps are closed or labeled, the usual tests apply to the whole period: duplicates, sequence gaps, round amounts and trends. Those are set out in [fraud detection techniques in forensic accounting](/blog/fraud-detection-techniques-in-forensic-accounting).