The Vault Is Still Locked: Cannabis Banking After Rescheduling

On August 26, 2026, National Law Review published "The Vault Is Still Locked: A Banking Update on Cannabis Rescheduling." Its core finding: while moving marijuana to Schedule III removes some federal barriers to cannabis banking, the absence of clear Treasury guidance on cannabis-specific banking compliance means operators still face significant hurdles accessing traditional financial services. The same day, The Marijuana Herald published transcripts of cannabis finance executives reacting to the DEA rescheduling — industry perspective that converges on the same conclusion from the operator side: the door is no longer locked by statute, but it is still locked by procedure.

For operators, the distinction matters. Statutory barriers and procedural barriers fail differently, and they demand different preparation.

Where banking access actually stands

Two things are true at once.

First, the legal ground shifted. Rescheduling to Schedule III removes some of the federal friction that kept cannabis businesses out of the traditional banking system. That is a real change, not a symbolic one.

Second, the operational reality lagged. Banks do not underwrite operators based on what the law theoretically permits. They underwrite based on what their regulators will accept, and without clear Treasury guidance on cannabis-specific banking compliance, financial institutions have no definitive framework telling them what a compliant cannabis account relationship looks like. As National Law Review describes, that gap keeps operators facing significant hurdles accessing traditional financial services even after the federal schedule moved.

The result is an industry with improved legal footing and unchanged practical access. The vault door is unlocked, but nobody has published the instructions for walking through it.

Why staying cash-only is a liability, not a workaround

Some operators read this landscape and conclude the pragmatic move is to keep operating in cash. That conclusion deserves scrutiny, because cash-only operation carries costs of its own.

Regulatory scrutiny. Cash-intensive businesses attract attention from every direction — state regulators, the IRS, local authorities. A fully cash cannabis operation is harder to audit cleanly, and it invites exactly the scrutiny an operator wants to avoid.

Security exposure. Holding and moving large amounts of physical cash is a standing operational risk. Every deposit run is a risk event. Every unbanked week compounds it.

Records that exist nowhere. Cash operations generate thinner documentation trails. When the banking framework finally does arrive — and it will, because Treasury guidance is a question of when, not if — the operators who get through the door first will be the ones who can show financial history in a form a bank can review. Cash-only operators will start from zero.

In other words: waiting out the guidance gap does not preserve optionality. It burns it.

What banks will ask for when guidance lands

When Treasury does issue a framework and financial institutions move into the space in numbers, the onboarding questions are predictable, because they are the questions banks already ask of any high-risk account category:

1. A functioning compliance program. License verification, seed-to-sale traceability, ongoing transaction monitoring, and someone accountable for all of it.
2. Clean financial documentation. Revenue that reconciles to state reporting, expenses with business purpose, cash flow that a loan officer can follow.
3. Governance that survives review. Named responsible parties, written policies and procedures, training records, and evidence the program actually operates — not a binder that exists for its own sake.

Operators who assemble this after the guidance arrives will be standing in line behind the ones who assembled it before. Cannabis banking access, when it opens, will not be first-come-first-served by luck. It will be first-come by readiness.

The compliance architecture to build now

Based on how this story is developing, the preparation work falls into four layers:

• Gap assessment. Measure the current operation against what a bank underwriting a cannabis account will require — licensing, reporting, transaction controls, documentation. Identify where the gaps are and what closing each one costs.
• Documentation buildout. Get financial records into a state a financial institution can review: reconciled revenue, organized expenses, reporting that matches what the state already receives.
• Compliance program formalization. Written policies, named compliance responsibility, and monitoring procedures that connect to the state traceability system the operator already reports into.
• Institution identification. Track which financial institutions are actually moving into the cannabis space and what each one requires, so that when guidance lands, the application targets real doors rather than a generic list.

None of this requires the Treasury guidance to exist. All of it takes time — which is the argument for starting now.

Where Proxis fits

Proxis provides cannabis-specific compliance advisory. On the banking question, the work is concrete:

• Readiness assessment. Audit the operation against the documentation and compliance-program expectations banks will apply, and produce a prioritized gap list.
• Compliance program development. Build the written program — policies, procedures, monitoring, accountability — that a financial institution can review as part of onboarding.
• Documentation alignment. Get financial records into reviewable shape and reconciled against state reporting, so the file a bank receives supports the application instead of undermining it.
• Institution targeting. Identify financial institutions actively serving or entering the cannabis space and align the application package to each one's requirements.

The objective is to be bankable on day one of whatever framework Treasury publishes — not to start becoming bankable that day.

Next steps

The National Law Review piece is titled accurately: the vault is still locked. But the lock changed. It is no longer statute; it is guidance and preparation. Guidance is Treasury's timeline. Preparation is yours.

If your operation is planning for banking access — or evaluating whether your current cash posture is sustainable — start with a banking readiness assessment: what you have, what is missing, and what it takes to close the gap before the framework arrives.

The operators who move first when guidance lands are being selected now. By their own paperwork.