A Suspicious Activity Report must be filed within 30 calendar days of the date the financial institution first detects facts that may warrant the filing. If no suspect has been identified by day 30, the institution gets an additional 30 days to continue identifying one, but the SAR must be filed no later than 60 calendar days after initial detection.1eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions The 30-day rule applies to every institution covered by the Bank Secrecy Act, including banks, credit unions, broker-dealers, money services businesses, and casinos. The count is in calendar days. Weekends and holidays are included.
When the 30-Day Clock Starts
The countdown begins on the date of initial detection, not the date the suspicious transaction occurred.2eCFR. 12 CFR 208.62 – Suspicious Activity Reports A transaction may have taken place weeks or months earlier. What matters is when the facts reach someone in the institution’s BSA compliance function who can evaluate whether those facts rise to the level of suspicion.
A frequent misreading is that the clock starts only after an internal investigation concludes. The regulation says 30 days from “initial detection of facts that may constitute a basis for filing,” not 30 days from the end of an investigation.1eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions If the initial facts were suspicious enough to open a review, those same facts likely started the clock. Waiting for the investigation to wrap up before counting is how institutions miss the deadline.
The 60-Day Outer Limit When No Suspect Is Identified
If the institution cannot identify a suspect by day 30, the deadline extends by 30 more calendar days, for a maximum of 60 days from initial detection.3Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions The extension recognizes that tracing activity across accounts or coordinating with other institutions sometimes takes longer than a month.
The 60-day cap is absolute. If the suspect is still unknown on day 60, the SAR goes in with whatever information the institution has. Filing with an unidentified subject is far better than not filing at all.1eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions
When a Phone Call Comes Before the Deadline
Some situations will not wait 30 days. When a reportable violation requires immediate attention, such as an ongoing money laundering scheme, the institution must notify law enforcement by telephone right away, in addition to filing the SAR on the regular schedule.1eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions The call goes to the appropriate law enforcement authority and, depending on the institution’s charter, its primary federal regulator.
The regulation does not list every scenario that qualifies, but it specifically names ongoing schemes. In practice, active terrorist financing, in-progress fraud, and rapidly moving money laundering operations call for immediate contact. The phone call does not replace the SAR. The written filing still follows the 30- or 60-day deadline.
Continuing Activity: The 120-Day Follow-Up Deadline
Suspicious activity often does not stop after the first SAR. When the pattern continues, the institution files follow-up SARs so law enforcement stays current. FinCEN guidance recommends reviewing continuing activity over a 90-day period after the previous SAR filing, with the follow-up SAR due no later than 120 calendar days after the date of the prior report.3Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions
The math: if the initial SAR is filed on day 30 after detection, the institution monitors for 90 more days, reaching day 120. It then has 30 days to prepare and file the continuation SAR, landing at day 150 from the original detection.4Financial Crimes Enforcement Network. Frequently Asked Questions Regarding Suspicious Activity Reporting Requirements Each later continuation runs on the same 90-day review cycle with a 120-day filing deadline from the previous filing.
Continuation SARs can be filed earlier if the activity warrants faster review.3Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions Each continuation report must be complete on its own, covering all subjects and institutions involved, and its narrative should address only the 90-day period under review rather than reproducing earlier narratives.
Which Transactions Actually Require a SAR
The filing deadline only matters when a SAR is required in the first place. The BSA sets dollar thresholds that vary by institution type and circumstances. For banks, the main triggers are:
- $5,000 or more when the bank can identify a suspect in a known or suspected criminal violation.1eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions
- $25,000 or more when no suspect is identified.3Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions
- Any amount when a bank director, officer, employee, or agent is involved in a suspected criminal violation.5eCFR. 12 CFR 21.11 – Suspicious Activity Report
Money services businesses report at a lower level. An MSB must file a SAR for suspicious transactions involving $2,000 or more.6Financial Crimes Enforcement Network. MSB Threshold – $2,000 or More The 30-day and 60-day filing deadlines apply the same way regardless of which threshold triggered the report.
What Happens If the Deadline Is Missed
A missed SAR deadline is more than a paperwork problem. The BSA carries both civil and criminal penalties, and regulators use them.
- A single negligent failure to comply with BSA requirements can draw a civil penalty of up to $500. A pattern of negligent violations can bring an additional penalty of up to $50,000.7Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties
- A willful failure to file carries a civil penalty of up to $25,000 or the amount of the transaction (capped at $100,000), whichever is greater.7Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties
- A willful violation can also bring a criminal fine of up to $250,000 and up to five years in prison. If the violation is part of a pattern of illegal activity involving more than $100,000 in a 12-month period, the maximum rises to a $500,000 fine and 10 years.8Office of the Law Revision Counsel. 31 USC 5322 – Criminal Penalties
Regulators can also take supervisory action against the institution and its personnel. Consent orders, removal of officers, and restrictions on business activities are all available. For compliance officers personally, a pattern of missed SAR deadlines can end a career in banking; regulators have barred individuals from the industry for repeated failures.2eCFR. 12 CFR 208.62 – Suspicious Activity Reports