Banks, credit unions, broker-dealers, and money services businesses must file a Suspicious Activity Report (SAR) with the Financial Crimes Enforcement Network when they know, suspect, or have reason to suspect that a transaction of $5,000 or more involves elder financial exploitation. The FinCEN reporting requirements for elder financial exploitation set a tight clock, prescribe exactly how the report must be flagged, and impose strict confidentiality on everyone involved. The rules apply to the institution, not to the public: victims and families cannot file a SAR themselves.
Who Must File and What Triggers the Obligation
Every bank is required to file a SAR when a transaction conducted through the institution involves at least $5,000 in funds or other assets and the bank knows, suspects, or has reason to suspect that the transaction involves proceeds from illegal activity, is designed to evade Bank Secrecy Act requirements, or has no apparent lawful purpose after examining the available facts.1eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions The same obligation applies to credit unions, broker-dealers, and money services businesses under their own parallel regulations.
FinCEN defines elder financial exploitation in two categories. Elder theft involves a trusted person stealing an older adult’s assets, funds, or income. Elder scams involve the older adult sending money to a stranger or imposter for a benefit that never materializes.2Financial Crimes Enforcement Network. Interagency Statement on Elder Financial Exploitation Both categories trigger the same filing duty.
Filing Deadlines
The clock starts the moment the institution first detects facts suggesting a reportable transaction. From that detection date, the institution has 30 calendar days to file the SAR. If no suspect has been identified by then, the institution gets an additional 30 days to investigate, but filing can never be delayed more than 60 calendar days from initial detection.3eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions If the activity demands immediate attention, such as an active scheme draining an elder’s accounts, the institution must also contact law enforcement right away rather than waiting for the SAR to be filed.
Continuing Activity
Filing one SAR does not end the obligation when suspicious activity continues. FinCEN has historically suggested that institutions file a follow-up SAR at least every 90 days, with the filing deadline falling 120 calendar days after the previous related SAR. Updated guidance clarifies that institutions are not strictly required to follow that cadence and may instead file continuing SARs as appropriate under their own risk-based internal controls, provided those controls are reasonably designed to catch and report the activity.4Financial Crimes Enforcement Network. SAR FAQs October 2025 Most compliance teams still work on the 90-day cycle because regulators expect to see it.
How to Flag an EFE Filing
FinCEN’s June 2022 Advisory on Elder Financial Exploitation gives specific filing instructions. When an institution suspects elder exploitation, it should check the “Elder Financial Exploitation” box in SAR Field 38(d) and include the reference key term “EFE FIN-2022-A002” in SAR Field 2, labeled “Filing Institution Note to FinCEN.”5Financial Crimes Enforcement Network. Advisory on Elder Financial Exploitation That checkbox and key term route the report into FinCEN’s EFE analysis and let law enforcement locate the case within the broader BSA database.
The narrative carries the weight of the filing. A good narrative identifies all parties with names, addresses, dates of birth, and account numbers; states the dollar amounts and dates of the suspicious transactions; explains the relationship between the elder and the suspected perpetrator when known; and spells out why the activity looks exploitative rather than legitimate. Boilerplate narratives waste the analyst’s time and reflect poorly on the institution’s program.
Red Flags That Should Trigger a Review
FinCEN’s advisories group the warning signs into financial indicators visible in transaction data and behavioral indicators that emerge during customer contact. No single indicator proves exploitation; the point is to recognize when a cluster appears and treat it as a trigger for closer review.
Financial Indicators
- Sudden large withdrawals from a customer whose history shows only modest monthly activity.
- Repeated wire transfers to unfamiliar individuals or entities, especially overseas.
- Early liquidation of CDs or retirement accounts despite penalties, often at someone else’s urging.
- Purchases of large quantities of gift cards or prepaid access cards, a hallmark of imposter scams.
Behavioral Indicators
- A previously independent customer now accompanied by a new companion who speaks for them or steers the transaction.
- New powers of attorney, updated beneficiaries, or added account signers benefiting someone who recently entered the customer’s life.
- Customer confusion, fear, or rehearsed-sounding explanations inconsistent with past behavior.
Confidentiality Rules
Federal law prohibits anyone involved in the SAR process from revealing that a report was filed. The institution and its directors, officers, employees, and agents cannot notify any person involved in the transaction that it has been reported, and they cannot disclose information that would reveal a SAR exists.6Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority Government employees with knowledge of a SAR face the same restriction.
A bank teller cannot tell a concerned family member that a SAR was filed on a parent’s account, even if that family member raised the alarm. The prohibition covers not only the SAR document itself but any information that would indirectly reveal its existence, such as telling a customer that an account was flagged for review in connection with a government report.7Financial Crimes Enforcement Network. SAR Confidentiality Reminder for Internal and External Counsel of Financial Institutions
Safe Harbor for Filers
Under 31 U.S.C. § 5318(g)(3)(A), any financial institution that discloses a possible legal violation to a government agency, and any employee who makes or requires such a disclosure, is shielded from liability under federal, state, and local law, as well as under any contract or arbitration agreement.6Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority The institution also has no obligation to notify the person named in the SAR. Most federal courts read this safe harbor as near-absolute immunity, protecting institutions even when a disclosure turns out to be unfounded. The legal risk of filing a SAR that proves unnecessary is close to zero; the risk of failing to file when the facts warranted it is not.
Penalties for Failing to Report
Institutions that neglect their SAR obligations face civil monetary penalties under 31 U.S.C. § 5321. For willful violations of BSA reporting requirements, the penalty can reach the greater of the amount involved in the transaction (up to $100,000) or $25,000. Negligent violations carry a penalty of up to $500 per instance, and a pattern of negligent violations triggers additional penalties on top of the per-violation amount.8Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties
Enforcement goes beyond fines. Federal banking agencies can issue cease-and-desist orders, remove officers, and in extreme cases revoke charters. Regulators reviewing a bank’s compliance program will look at whether internal controls were adequate to detect elder exploitation and whether staff were trained on the red flags FinCEN has published.
Sharing Information Between Institutions
Elder exploitation often spans multiple institutions. A victim might wire money from a bank to a brokerage, then to a cryptocurrency platform, then overseas, and no single institution sees the full picture. Section 314(b) of the USA PATRIOT Act allows financial institutions, after notifying the Treasury Department, to share information with each other to identify and report activities that may involve money laundering or other financial crimes.9Financial Crimes Enforcement Network. Section 314(b) Participation is voluntary, but joining lets institutions exchange customer and transaction data that would otherwise raise privacy concerns, and that broader view often turns scattered activity into a recognizable pattern.
What the Public Can Do
The SAR process is exclusively for financial institutions and other entities with BSA reporting obligations. Members of the public, including victims, cannot file SARs directly with FinCEN. If you suspect an older adult in your life is being financially exploited, start by contacting the financial institution where the activity is occurring. Describe the transactions, name anyone you believe is involved, and explain what changed in the older adult’s behavior or financial patterns. Your report may be what prompts an internal review and a SAR filing, though the institution will not be able to confirm whether one occurred.
Also report your concerns to local law enforcement and to your state’s Adult Protective Services agency. Every state operates an APS program that investigates reports of elder abuse and exploitation. The national Eldercare Locator at 800-677-1116 can connect you to local resources if you are unsure how to reach your APS office.10USAging. Eldercare Locator Filing through multiple channels increases the odds that someone with authority to act will investigate, and exploitation tends to escalate quickly, so speed matters more than finding a single right place to report.