Cannabis retail, like most cash-intensive retail, draws more scrutiny from banks than a business running mostly card and EFT. That's not paranoia on the bank's part - cash-heavy businesses are harder to verify, and regulators expect financial institutions to look harder at them. What that means in practice is enhanced due diligence: closer checks on transaction consistency, source of funds, and whether the numbers a business reports actually match what's moving through its accounts.
Why the scrutiny is structural, not personal
FICA already requires South African businesses to go through verification, and it explicitly allows for stricter checks - enhanced due diligence - on clients a bank considers higher risk. A large cash float, in an industry still building its regulatory track record, tends to land in that category by default, regardless of how the individual store actually runs. The scrutiny isn't a judgment on any one business - it's a structural response to cash and category, and it isn't going away because a store has nothing to hide.
The problem isn't the scrutiny itself. It's not being ready to answer it. A bank or auditor asking "can you show me this reconciles" is a completely different conversation for a store that has one, versus a store trying to reconstruct three months of till activity from memory and a notebook.
What being ready actually looks like
- A same-day cash-up that reconciles expected cash, card, and EFT against what was actually counted - not a monthly guess
- An audit trail that shows who did what, rather than a shared login where every action looks like it came from the same person
- ID verification captured at the point of sale, not assumed and never recorded
- Reports that export cleanly to PDF or CSV, so an accountant or auditor gets the real dataset rather than a summary built for internal use only
None of this makes a bank's due diligence process shorter. What it does is turn "can you prove this" from a multi-day scramble into something a store can actually answer, because the record already exists in one place rather than needing to be reconstructed under pressure.
This is the same ground covered on the security and trust page - not because compliance software makes scrutiny disappear, but because a business that can produce a clean, consistent record when asked is answering the exact question a bank or regulator is actually asking.
Related reading
See how Budstack handles this
Fifteen minutes, a walkthrough of the platform, and a number scoped to the stores you actually run.