SAR Reporting Requirements: Thresholds, Deadlines, Penalties

SAR reporting requirements come from the Bank Secrecy Act and require covered financial institutions to file a Suspicious Activity Report with the Financial Crimes Enforcement Network (FinCEN) whenever they know, suspect, or have reason to suspect that a transaction involves illegal funds, is structured to evade reporting rules, has no apparent lawful purpose, or involves insider misconduct. The filing must be made electronically within 30 calendar days of detection, kept confidential from the subject, and retained with supporting documentation for five years. Miss the obligation and civil penalties can reach $100,000 per willful violation, with criminal exposure on top of that.

Which Institutions Have to File

The BSA’s filing obligation reaches most of the regulated financial sector. Banks, credit unions, and bank holding companies file under the supervision of the OCC, FDIC, Federal Reserve, or NCUA. Money services businesses — money transmitters, check cashers, currency exchangers, and issuers of money orders or traveler’s checks — carry the same duty. So do casinos and card clubs with annual gross gaming revenue above $1 million, broker-dealers registered with the SEC, mutual funds registered under the Investment Company Act, and insurance companies offering permanent life insurance and annuities.¹

Each category has its own regulation under 31 CFR Chapter X, but the underlying test is the same: if the activity is suspicious and it meets the applicable dollar threshold, a report is required.

What Counts as Suspicious

A SAR is triggered by suspicion, not proof. The institution does not have to establish that a crime occurred. Under the general standard, a report is required when the institution knows, suspects, or has reason to suspect that a transaction falls into one of a handful of categories.²

The funds appear to come from illegal activity, or the transaction seems designed to hide their source, ownership, or control.
The transaction appears structured to evade BSA reporting or recordkeeping requirements. The classic case is breaking a large cash deposit into smaller amounts to stay under the $10,000 Currency Transaction Report threshold.³
The transaction has no business or apparent lawful purpose, and no reasonable explanation surfaces on review.
A director, officer, employee, or agent of the institution is involved in criminal activity. For banks, this category has no dollar threshold at all.¹

Casinos and mutual funds carry a fourth trigger: any transaction that uses the institution to facilitate criminal activity.⁴ Cyber-enabled crimes that exploit the financial system, such as unauthorized intrusion into banking networks, also fall within reportable activity.

Dollar Thresholds by Institution Type

Suspicion alone does not force a filing for most transaction types. The activity must also cross a minimum dollar amount, and that number differs by institution.

Banks and credit unions: $5,000 or more in aggregate, with no threshold for insider abuse.²
MSBs: $2,000 or more for transactions conducted by, at, or through the MSB. The threshold rises to $5,000 when issuers of money orders or traveler’s checks identify suspicious activity through a review of clearance records rather than at the point of sale.⁵
Casinos and card clubs: $5,000 or more in aggregate.⁴
Broker-dealers: $5,000 or more in aggregate.⁶
Mutual funds: $5,000 or more in aggregate.⁷

The $2,000 MSB threshold is the lowest in the framework and catches routine transactions that would sit below the radar at a bank. Any institution can file voluntarily below its threshold when the activity looks suspicious.

Filing Deadlines

Once an institution detects facts that may warrant a SAR, the clock runs 30 calendar days. If no suspect has been identified by day 30, the institution gets an additional 30 days to work on identification, but the report cannot be delayed past 60 calendar days from initial detection under any circumstances.²

When the activity involves terrorist financing or an ongoing money laundering scheme, the institution must immediately telephone law enforcement in addition to filing on schedule. FinCEN operates a dedicated Financial Institutions Hotline for potential terrorism connections. The call does not replace the SAR. Both are required.¹

Continuing Activity

Filing once does not end the obligation when the behavior continues. FinCEN guidance directs institutions to review ongoing suspicious activity at least every 90 calendar days. If the activity is confirmed to be continuing, a follow-up SAR must be filed no later than 120 calendar days after the prior SAR. An institution can file sooner when earlier law enforcement review is warranted, and the cycle repeats for as long as the pattern persists. Each follow-up filing should reference the earlier SAR and describe any new developments.¹

How to Submit the Report

All SARs are filed electronically through FinCEN’s BSA E-Filing System. Paper is not accepted. Filers can submit reports individually on the discrete FinCEN SAR form or transmit them in batch through a system-to-system connection.⁸

The Narrative

The narrative is the most consequential part of the filing and the part most often done poorly. FinCEN guidance says every narrative should address who conducted the activity, what instruments or methods were used, when it occurred, where it occurred, why the institution considers it suspicious, and how the activity was carried out.⁹ A usable narrative names every individual and business involved, describes their relationships, lists relevant account numbers, and traces the flow of funds. Vague narratives that restate the form’s checkbox categories without laying out the underlying facts are a common compliance failure.

Recordkeeping

Every institution must keep a copy of the filed SAR and all supporting documentation for five years from the filing date. Supporting documents are treated as if they were filed with the SAR itself, and the institution must produce them on request to FinCEN, federal or state regulators, or law enforcement.²

Confidentiality and Safe Harbor

Federal law gives filers two shields. Under 31 U.S.C. § 5318(g)(3), a financial institution and its directors, officers, employees, and agents are protected from civil liability for disclosing possible legal violations in connection with a SAR. The protection applies under federal law, state law, local law, and private contracts including arbitration agreements, and it covers both mandatory and voluntary filings.¹⁰

The second shield is confidentiality. Under 31 U.S.C. § 5318(g)(2), no one at the institution may notify the subject that a SAR has been filed. The prohibition reaches current and former employees and government officials with knowledge of the report, and even confirming that a SAR was not filed is treated as a prohibited disclosure. If the institution receives a subpoena or discovery request seeking SAR-related information — including in arbitration — it must decline production and notify FinCEN of the request.¹¹

Penalties for Failing to File

FinCEN pursues enforcement actions for SAR reporting failures, and the penalty structure scales with fault.¹²

On the civil side, negligent BSA violations carry a penalty of up to $500 per violation, and each unfiled SAR counts separately. A pattern of negligence supports an additional penalty of up to $50,000. Willful violations reach the greater of $25,000 or the amount involved in the transaction, capped at $100,000 per violation.¹³

Willful violations are also federal crimes. The baseline is a fine of up to $250,000, imprisonment up to five years, or both. When the violation occurs alongside another federal offense or as part of a pattern of illegal activity involving more than $100,000 in a 12-month period, the maximums double to $500,000 and 10 years. A convicted individual who was a partner, director, officer, or employee of the institution at the time of the violation must repay any bonus received during the year of the violation or the following year, and courts can order forfeiture of profits gained through the violation.¹⁴

1
Federal Financial Institutions Examination Council. FFIEC BSA/AML Manual – Suspicious Activity Reporting
2
eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions
3
Financial Crimes Enforcement Network (FinCEN). Suspicious Activity Reporting (Structuring)
4
eCFR. 31 CFR 1021.320 – Reports by Casinos of Suspicious Transactions
5
Financial Crimes Enforcement Network. MSB Threshold – $2,000 or More
6
FinCEN.gov. Suspicious Activity Reporting Rule for Broker-Dealers Finalized
7
eCFR. 31 CFR 1024.320 – Reports by Mutual Funds of Suspicious Transactions
8
FinCEN. Bank Secrecy Act Filing Information
9
Financial Crimes Enforcement Network. Guidance on Preparing a Complete and Sufficient Suspicious Activity Report Narrative
10
Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority
11
Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions
12
Financial Crimes Enforcement Network. FinCEN Enforcement Actions
13
Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties
14
Office of the Law Revision Counsel. 31 USC 5322 – Criminal Penalties