Branch robbery is the rarest of a bank’s security problems. Here is what the other three look like, and the regulation that shapes the response.
The threat picture, specifically
Bank security is not one problem. It is four, and they need different postures on the same site. A branch lobby is a public-access retail environment with cash on the premises and a legal obligation to protect staff first. An operations centre is a controlled-access building where the real exposure is a badge, a propped door, and a contractor nobody escorted. Cash-in-transit is a moving target with a fixed schedule. And insider fraud is the one that costs the most and shows up on camera as somebody doing their job.
In Arizona the pattern has its own shape. Branch density across the Phoenix and Tucson metros means an officer covering multiple sites is common, and drive time is part of the plan rather than an afterthought. ATM vestibule attacks and after-hours machine attacks cluster near arterial access — a route on and off the freeway matters more to an offender than the branch itself. Elder financial exploitation is a live and growing problem in a state with a large retiree population, and it presents at the teller line before it presents anywhere else: an unfamiliar companion doing the talking, an unusual withdrawal, a customer who cannot explain the purpose. An officer who has been briefed on what that looks like is worth more than one who has not.
Robbery itself is the rarest of these and the most procedurally governed. The correct outcome is that everybody goes home, the money is insured, and the description and timeline are accurate. Officers work to a no-pursuit posture: comply, observe, preserve, report. Anything else trades a recoverable loss for an unrecoverable one.
The regulatory frame around the post
Financial-institution security is one of the few sectors where the physical security programme is itself a compliance artefact. Federally insured institutions operate under the Bank Protection Act and its implementing regulations, which require a designated security officer, written minimum security procedures, and an annual report to the board on the programme’s administration. When a bank contracts guard services, the contractor’s post orders, training records and incident reporting become part of the evidence that programme exists. We write and retain them accordingly.
The Gramm-Leach-Bliley Safeguards Rule reaches physical security too — customer records in a branch back office are in scope, and an officer who props a door or fails to challenge an unescorted visitor is a safeguards failure, not just a housekeeping one. FFIEC examination guidance shapes what an examiner expects to see documented. And where suspicious activity is observed, our people report it to the institution’s BSA officer; the institution files. Officers do not file suspicious activity reports and are trained not to discuss them.
In Arizona, guard services are licensed under A.R.S. Title 32, Chapter 26 and regulated by the Department of Public Safety. Honeybadger Solutions holds Security Guard Agency licence 1759798 and Private Investigations Agency licence 1759795. Armed officers carry the additional armed endorsement and are separately qualified. What our officers are not: sworn peace officers. They have no arrest authority beyond that of any private citizen, no power to detain a customer, no authority to search, and no subpoena power. Any proposal that implies otherwise is a proposal to inherit somebody else’s liability.
What Honeybadger Solutions provides
Honeybadger Solutions is an Arizona-licensed security guard and private investigations agency — Guard 1759798, PI 1759795 — with investigations, digital forensics and cyber work delivered nationwide. This article is background on the problem. For what we actually provide, see Banking & Financial Security, or book a confidential consultation.