Account authority record specifying who may instruct a bank, which actions they may take, and whether one or multiple approvals are required.
A bank mandate is the authority record that tells a bank who may operate an account, which instructions each person may give, and whether one or more approvals are required. Depending on the jurisdiction and institution, similar records may be called a signature card, signing authority, account authority, board resolution, or account operating instruction.
A mandate can record:
The bank’s standard account terms can qualify the mandate. A custom corporate resolution is not necessarily effective until the bank accepts it and configures the account accordingly.
| Structure | Example instruction | Operational effect |
|---|---|---|
| Sole authority | Alice alone | One named person can issue covered instructions |
| Any one to sign | Any one of Alice, Ben, or Chen | Each listed signer can act independently |
| Any two to sign | Any two of Alice, Ben, or Chen | Two listed signers must approve a covered instruction |
| Group rule | One director plus one finance officer | Approval must include one signer from each group |
| Threshold rule | One signer up to $25,000; two above | Approval count changes with transaction value |
| Limited purpose | Dana may view and initiate but not approve | Access is restricted by action or workflow stage |
Whether a bank supports a complex rule across cheques, wires, cards, online banking, and APIs must be confirmed. A two-signature cheque mandate can coexist with an online channel configured for one approver if implementation is inconsistent.
| Role | Main meaning | Does it automatically permit withdrawals? |
|---|---|---|
| Account owner | Person or entity holding the account relationship | Depends on the mandate and account terms |
| Authorized signer | Person permitted to give specified instructions | Yes, within the recorded authority |
| Beneficial owner | Natural person who ultimately owns or controls an entity under the relevant definition | No; signing authority is separate |
| Director or officer | Person holding a governance or management role | Not unless bank authority is established |
| Online user | Credentialed person with configured system permissions | Only within the bank’s implemented permissions |
| Attorney-in-fact | Agent acting under a power of attorney | Subject to the legal instrument and bank acceptance |
The FDIC notes that giving another person withdrawal authority over a U.S. single-owner account does not by itself make that person an owner for deposit-insurance classification. Similarly, a company’s shareholder does not automatically have authority to operate its account.
For a legal entity, the bank can require organizational and authority evidence such as:
FFIEC guidance distinguishes the legal-entity customer from the natural persons who own, control, or sign for it. Banks use those records for customer identification, due diligence, sanctions screening, and account operation, but each role answers a different question.
Assume a company has this bank mandate:
The finance director resigns on Friday. Human resources disables email and payroll access, but no one notifies the bank or removes the online token. On Monday, the former director still appears as an authorized bank approver.
The control failure has several layers:
A stronger offboarding process would revoke tokens immediately, notify the bank through an authenticated channel, submit the required resolution and mandate amendment, confirm implementation, review pending payments and templates, and retain evidence of the effective time.
A company might require purchase-order approval, budget-owner approval, and dual payment authorization internally. The bank may see only the external payment approvals configured in its system.
If the corporate policy says “two approvals” but the bank mandate says “any one to sign,” a single authorized signer might be able to bind or instruct the account from the bank’s perspective, subject to applicable law and facts. The policy violation can remain an internal governance issue rather than making the payment technically unauthorized at the bank.
Controls should therefore align:
A joint account can permit each owner to act alone or require joint action. The exact account agreement and bank record control operational access; the words “and” or “or” in an informal description are not a substitute for the bank’s accepted mandate.
Personal mandates can also involve powers of attorney, guardians, executors, trustees, or convenience signers. Those roles arise from different legal authority and should not be merged into one generic “authorized person” category.
When owners, directors, trustees, or partners dispute authority, a bank can require updated resolutions, unanimous instructions, legal documents, or a court order before changing the mandate or releasing funds. It may restrict account activity while the dispute is unresolved, depending on the agreement and law.
A mandate identifies the bank’s recorded authority; it does not resolve underlying corporate-control, divorce, estate, trust, or beneficial-ownership disputes.
Mandate effectiveness and authority disputes are jurisdiction- and fact-specific. This page provides general education, not legal, governance, employment, compliance, or fraud-recovery advice.