https://en.wikipedia.org/wiki/Bank_Secrecy_Act
In addition, banks are not allowed to open accounts without verifying the customer's identity.
https://en.wikipedia.org/wiki/Know_your_customer
I don't think it's clear how well credit card transaction data is protected against subpoenas, and there is a rumor that one or more of the many undisclosed §215 bulk collection programs relate to financial transactions. There are statutory protections for financial transaction records, but the Supreme Court has held that a bank account holder has no constitutional expectation of privacy in the bank's records. U.S. v. Miller, 425 U.S. 435 (1976).