SAR (Suspicious Activity Report)
Confidential report filed by financial institutions with FinCEN when they detect potentially illegal activity.
A Suspicious Activity Report (SAR) is a confidential report filed by financial institutions with the Financial Crimes Enforcement Network (FinCEN) under the Bank Secrecy Act when they detect transactions or patterns of behavior that may indicate money laundering, fraud, terrorist financing, or other financial crimes. SARs are critical intelligence tools for law enforcement and financial regulators.
Filing requirements: financial institutions must file a SAR within 30 days of detecting suspicious activity (60 days if additional investigation is needed), covering activity involving $5,000 or more ($2,000 for money services businesses). The SAR details the suspected violation, parties involved, transaction patterns, and the basis for suspicion. Institutions are prohibited from 'tipping off' subjects—notifying them that a SAR has been filed—under severe penalties.
SAR filing protections: financial institutions that file SARs in good faith receive safe harbor from civil liability—they cannot be sued by the reported parties for filing. This protection encourages reporting without fear of legal retaliation from subjects.
Triggering behaviors include: structuring transactions to avoid Currency Transaction Report thresholds (below $10,000); transactions inconsistent with customer's known business or financial profile; use of multiple accounts with no legitimate business purpose; layering of funds through multiple entities; transactions with sanctioned or high-risk jurisdictions; and activities suggesting proceeds of specific crimes (drug trafficking, human trafficking, fraud).
SARs feed law enforcement's analytical databases. FinCEN shares SAR data with federal, state, and local law enforcement agencies under confidentiality protections. SAR filings have been pivotal in large-scale investigations including the unmasking of tax evasion schemes, Ponzi schemes, and terrorist financing networks.
FAQs
Who is required to file SARs?
SAR filing is mandatory for a broad range of financial institutions: banks and credit unions, broker-dealers, futures commission merchants, insurance companies, money services businesses (MSBs—currency exchangers, check cashers, money transmitters), casinos, mutual funds, and loan or finance companies. FinCEN has extended SAR filing to certain non-bank financial institutions in recent years. Notably, attorneys, accountants, and real estate professionals are generally not required to file SARs under current U.S. law, though FATF standards recommend extending AML requirements to these 'designated non-financial businesses and professions' (DNFBPs)—a gap U.S. regulators are considering addressing.
What is a 'continuing SAR' and when should it be filed?
A continuing SAR (also called a SAR continuation) is filed when suspicious activity is ongoing after the initial SAR filing. FinCEN guidance requires institutions to file continuing SARs for ongoing suspicious activity at minimum every 90 days as long as the activity continues. The continuing SAR references the initial filing and updates law enforcement on new activity patterns, amounts, and any additional parties identified. Institutions should maintain SAR lookback programs that identify when initial-SAR subjects should be reviewed for continuing SAR obligations—failure to file continuing SARs on ongoing activity is a compliance deficiency.
How do financial institutions identify suspicious activity for SAR filing?
Financial institutions identify suspicious activity through multiple mechanisms: automated transaction monitoring systems that apply rules and behavioral analytics to flag unusual patterns; branch and relationship manager reports from staff who observe suspicious customer behavior; security and fraud department referrals; government information sharing (314(b) requests from other institutions, 314(a) requests from law enforcement); news media monitoring; adverse media screening; and internal investigations triggered by employee misconduct. Effective programs combine algorithmic detection (for volume-based pattern identification) with human judgment (for context, relationship knowledge, and investigation) to minimize both false positives (over-filing) and false negatives (missed filing obligations).
Related Terms
BSA (Bank Secrecy Act)
U.S. primary anti-money laundering law requiring financial institutions to assist in detecting and preventing financial crimes.
CDD (Customer Due Diligence)
Process of verifying customer identity and assessing risk before and during a financial relationship.
Beneficial Ownership
Identification of natural persons who ultimately own or control a legal entity above a defined ownership threshold.
Sanctions Screening
Process of checking customers, counterparties, and transactions against government sanctions lists to prevent prohibited activity.
