Continuing Activity SARs: 90-Day Review, 30-Day Filing, and Deadlines

When suspicious activity keeps happening on an account after an initial Suspicious Activity Report, FinCEN guidance sets a repeating rhythm for continuing activity SARs: a 90-day review of the account followed by a 30-day window to file the next report, for a total of 120 calendar days from the prior SAR’s filing date. That cycle repeats for as long as the underlying activity continues.¹

When the 90-Day Clock Starts

The 90-day review window begins the day after the filing date of the previous SAR, whether that previous SAR was the initial filing or an earlier continuing activity report.¹ During those three months, the institution monitors and documents every transaction on the flagged account that connects to the pattern already reported: deposits, withdrawals, transfers, and any other movement matching the original red flags.

The point of the window is a complete evidentiary snapshot for that period. Automated monitoring systems catch activity that matches the original criteria, but a subject who realizes an earlier pattern was detected may shift tactics while keeping the same underlying purpose, so compliance officers still need eyes on the file.

The 30-Day Filing Window and the 120-Day Total

Once the 90-day review closes, the institution has 30 days to prepare and submit the continuing activity SAR. FinCEN’s own worked example: if the initial SAR is filed on Day 30 after detection, the 90-day review period ends on Day 120, and the continuing activity SAR is due by Day 150.¹

Each filing resets the schedule. The 90-day monitoring window begins again the day after the new report is filed, another 30 days follow to prepare the next one, and the cadence continues regardless of how many consecutive reports have been filed on the same subject.

One important boundary: the 120-day framework is FinCEN’s recommended approach, not a hard regulatory mandate. The FAQ states that institutions “are not required to” follow this schedule and “may instead file SARs as appropriate in line with applicable timelines.”¹ In practice, the 90/120-day cycle has become the industry standard, and deviating from it without a documented, risk-based rationale invites examiner scrutiny. Most institutions treat it as effectively mandatory for that reason.

What Counts as Continuing Activity

Continuing activity means the same subject is engaged in the same type of suspicious behavior that prompted the original SAR. A customer who keeps structuring cash deposits just below federal reporting thresholds, or who continues routing wire transfers to the same high-risk jurisdiction, fits the pattern. The link between the new transactions and the old ones is what matters: the same account numbers, the same counterparties, or the same methods.

Not every recurrence qualifies. If the suspicious behavior stops for a significant stretch and then restarts using entirely different methods or accounts, that may call for a brand-new initial SAR rather than a continuation filing. When the judgment is close, treating the activity as continuing and linking the report to the prior filing gives investigators a clearer view of the overall pattern.

When the Cycle Does Not Apply: Immediate Notification

The 90/120-day rhythm assumes there is time to observe. If a reportable violation is ongoing and demands immediate action, such as an active money laundering operation or suspected terrorist financing, the institution must telephone the appropriate law enforcement authority right away in addition to filing the SAR through normal channels.² The SAR itself still follows its normal filing timeline.

Form Fields That Matter for a Continuing SAR

A continuing activity SAR uses the same FinCEN SAR form as the initial filing, but several fields carry different weight. Box 1c (“Continuing activity report”) has to be checked to signal that this report links to a prior filing. Without that designation, the report is treated as a standalone and loses its connection to the investigative chain.³

Field 1e requires the Document Control Number or BSA Identifier from the most recent related filing, which is what lets federal investigators pull the case history. Two dollar figures are required on the form: Item 26 captures the amount of suspicious activity for the current 90-day period only, while Item 28 captures the cumulative total across all filings in the series, including the current one.³ If some amounts are unknown, enter the total of the known amounts and explain the unknowns in the narrative.

All subject information, including identification numbers and addresses, should be reviewed and updated if anything has changed. The date range in Item 30 should cover the entire 90-day review period.¹

Writing the Narrative for a Continuing Filing

FinCEN expects the narrative to focus on what happened during the current 90-day period, not to rehash the entire prior history. The report should reference the date and reason for the previous SAR filing, then detail the new suspicious activity in chronological order.⁴ Reproducing the full narrative from earlier reports is a common mistake; the filing instructions specifically say not to do that. Include only enough background from earlier filings for the current report to stand on its own.

A good narrative answers who is involved, what they did during this period, when the transactions occurred, where the funds moved, and why the institution considers the activity suspicious. Supporting documents such as transaction logs and account statements should not be attached to the SAR itself; keep them in your internal files.⁴

When To Stop the Cycle

No regulation sets a fixed number of review cycles. FinCEN’s FAQ is explicit: because there is no requirement to file continuing SARs in the first place, there is no defined process for stopping them.¹ Institutions rely on their own risk-based policies.

Examiners still expect more than a casual decision to stop monitoring. Written procedures should address when to escalate repeat SAR filings to senior management or legal counsel, when to analyze the overall customer relationship, and when to consider closing the account.⁵ A decision to stop should be documented with specific reasoning, such as the activity ceasing entirely over one or more review periods, the account being closed, or law enforcement advising that continued reporting is no longer needed.

What a Missed Deadline Costs

The BSA authorizes civil penalties of up to the greater of the transaction amount (capped at $100,000) or $25,000 for each willful violation.⁶ Inflation-adjusted amounts remain at their January 2025 levels: $1,430 per negligent violation for financial institutions, and up to $1,776,364 for violations of certain due diligence and anti-money-laundering requirements.⁷

In practice, penalties for systemic SAR failures often run into the millions. FinCEN assessed a $3.5 million penalty against Paxful for willful BSA violations that included failures to identify and report suspicious activity.⁸ Because each missed or deficient filing counts as a separate violation, an institution that neglects continuing activity SARs across multiple accounts can accumulate exposure quickly. That is why building a buffer well ahead of the 120-day mark, rather than filing on the last permissible day, is the standard practice for compliance teams that treat the FinCEN cadence as the operating rule.

1
Financial Crimes Enforcement Network. Frequently Asked Questions Regarding Suspicious Activity Reporting Requirements
2
eCFR. 12 CFR 208.62 – Suspicious Activity Reports
3
Financial Crimes Enforcement Network. FinCEN SAR Electronic Filing Requirements
4
Financial Crimes Enforcement Network. Guidance on Preparing a Complete and Sufficient Suspicious Activity Report Narrative
5
FFIEC BSA/AML InfoBase. Assessing Compliance with BSA Regulatory Requirements – Suspicious Activity Reporting
6
Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties
7
Federal Register. Financial Crimes Enforcement Network – Inflation Adjustment of Civil Monetary Penalties
8
Financial Crimes Enforcement Network. FinCEN Assesses $3.5 Million Penalty Against Paxful for Facilitating Suspicious Activity Involving Illicit Actors