The LedgerSync Desktop App has geographic restrictions that require users to be physically located in the United States when fetching check images and certain bank statements. This article explains why these restrictions exist and how the Desktop App works.
Banks have strict security measures that scrutinize connection requests based on IP addresses. When LedgerSync attempts to fetch check images or statements from financial institutions, banks examine where the request originates from.
The Problem: Banks actively block or flag connections from:
Why? It's normal for a customer to connect to their Chase account from their home or office, but unusual for a connection to come from AWS. This triggers additional security measures like multi-factor authentication (MFA) token requests or outright connection rejections.
The Solution: The LedgerSync Desktop App routes bank connection requests through your local machine's IP address instead of our cloud servers. This makes the connection appear as if you're accessing the bank directly from your computer—which is exactly what banks expect from legitimate users.
When the LedgerSync Desktop App is enabled, we submit your local machine's IP address to the financial institution. If that IP address is located outside the United States, banks will likely:
This is a bank security policy, not a LedgerSync limitation. US-based banks expect domestic connections, and international IP addresses raise red flags in their fraud detection systems.
Important: This applies even to US citizens or authorized users who happen to be traveling or working internationally. The restriction is based on the physical location of the IP address, not the nationality or authorization level of the user.
When you install and enable the LedgerSync Desktop App:
Highly recommended for:
Requirements:
If you have team members or administrators who work internationally or travel frequently:
For standard account connections and transaction data (not check images), geographic restrictions are less stringent, though US-based access still provides the most reliable experience.