Suspicious activity monitoring is the federally mandated process by which banks, credit unions, casinos, insurers, money services businesses, and other covered institutions watch customer transactions for signs of money laundering, fraud, or terrorism financing, and quietly report anything they can’t explain to the Financial Crimes Enforcement Network (FinCEN). The reporting thresholds are lower than most people assume: $5,000 for banks, casinos, and insurance companies, and $2,000 for money services businesses. You will not be told when a report is filed on your account, and the bank may close the account without explaining why.
How the Monitoring System Works
Two separate reporting streams run alongside each other, and they behave very differently.
Currency Transaction Reports (CTRs) are automatic. Any cash transaction over $10,000 triggers one, no suspicion required, and the bank files whether or not the transaction looks legitimate.1Financial Crimes Enforcement Network. Suspicious Activity Reporting – Structuring Businesses outside banking file the same information on IRS Form 8300 within 15 days of receiving more than $10,000 in cash, and they must notify the customer in writing by January 31 of the following year.2Internal Revenue Service. IRS Form 8300 Reference Guide
Suspicious Activity Reports (SARs) are the judgment call. A compliance officer files one when transactions look wrong and can’t be explained, regardless of dollar amount. A SAR does not mean anyone has committed a crime. It means the institution couldn’t find a legitimate reason for what it saw. Unlike CTRs, SARs are strictly confidential. The institution is legally forbidden from telling you one was filed.
The legal authority behind all of this comes from the Bank Secrecy Act, particularly 31 U.S.C. 5318(g), which lets the Treasury Secretary require any financial institution and its employees to report any suspicious transaction relevant to a possible violation of law.3Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority FinCEN handles enforcement and collects the reports.4Financial Crimes Enforcement Network. The Bank Secrecy Act
Which Businesses Have to Monitor
The list of covered institutions runs well past traditional banks. Every entity on it must register with FinCEN, maintain written anti-money laundering policies, appoint a compliance officer, train staff, and undergo independent audits.
- Banks and credit unions, which face the most detailed obligations.
- Money services businesses, including check cashers, currency exchangers, money transmitters, and sellers of money orders or traveler’s checks.5eCFR. 31 CFR Part 1022 – Rules for Money Services Businesses
- Casinos and card clubs, which must file SARs on suspicious transactions of $5,000 or more in funds or chips.6eCFR. 31 CFR 1021.320 – Reports by Casinos of Suspicious Transactions
- Insurance companies, for suspicious activity of $5,000 or more involving cash-value products such as permanent life insurance or annuities.7eCFR. 31 CFR 1025.320 – Reports by Insurance Companies of Suspicious Transactions
- Dealers in precious metals, stones, and jewels.
- Mortgage lenders and brokers, which must monitor the source of funds in real estate transactions.
- Dealers in antiquities and art, added by the Anti-Money Laundering Act of 2020.
Before any bank opens an account, federal rules require it to collect your name, date of birth, address, and taxpayer identification number. Non-U.S. persons can provide a passport number, alien identification card number, or another government-issued photo ID.8eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks Every later transaction gets measured against the profile built from that initial information.
What Triggers a Suspicious Activity Report
Automated software and manual review work together to flag transactions that don’t fit a customer’s normal pattern. A few categories account for most filings.
Structuring and Smurfing
Structuring means deliberately breaking transactions into smaller pieces to stay below the $10,000 CTR threshold. Three $9,800 deposits on consecutive days instead of one $29,400 deposit is the classic example.1Financial Crimes Enforcement Network. Suspicious Activity Reporting – Structuring Smurfing is the group version, with multiple people making smaller deposits across different accounts. Modern monitoring software recognizes both patterns immediately, and the evasion itself is a federal crime even when the money is clean.
Unusual Transaction Patterns
Money that arrives and leaves an account almost immediately with no apparent business reason gets flagged as rapid flow-through. Frequent round-dollar transfers draw scrutiny because legitimate business payments almost always carry odd-cent amounts. Deposits or withdrawals that hover just below reporting thresholds are treated as structuring indicators even without proof of intent. And a dormant account that suddenly starts moving high-volume wire transfers can signal account takeover or a money mule arrangement.
High-Risk Jurisdictions and Contradictory Information
Transactions involving countries with weak anti-money laundering controls automatically receive closer review. Vague or inconsistent answers about the source of funds push a customer into a higher risk tier. So does wire activity that doesn’t match the customer’s stated line of business. A small landscaping firm that starts receiving $80,000 wires from overseas will get attention regardless of any fixed threshold.
Elder Financial Exploitation
FinCEN has identified elder financial abuse as a growing concern, with over 155,000 related BSA reports filed in a single recent review period.9Financial Crimes Enforcement Network. Elder Financial Exploitation: Threat Pattern and Trend Information Tellers watch for older customers who appear nervous, struggle to explain a transaction, or seem to be taking instructions by phone from someone else during the visit. On the transaction side, unauthorized withdrawals and transfers appearing without the account holder’s knowledge are the most common pattern. Peer-to-peer payment apps and instant digital transfers are increasingly favored by perpetrators because the money moves fast and there’s no in-branch interaction.
What Happens After a Report Is Filed
Once a compliance officer decides activity is suspicious, the clock starts. The institution has 30 calendar days from initial detection to file the SAR with FinCEN. If it can’t identify a suspect within that window, it gets another 30 days, but the total can never exceed 60 days.10FFIEC Bank Secrecy Act/Anti-Money Laundering InfoBase. Suspicious Activity Reporting All filings go through the BSA E-Filing System, and the institution must retain the SAR and all supporting documentation for at least five years.11eCFR. 12 CFR 163.180 – Suspicious Activity Reports and Other Reports and Statements
The filing dollar thresholds are:
- Banks, casinos, and insurance companies: $5,000 or more.12Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions
- Money services businesses: $2,000 or more.12Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions
The report itself is a narrative describing what happened and why the institution found it suspicious. It can cover transactions that appear to launder proceeds, evade BSA requirements, serve no legitimate business purpose, or facilitate other criminal activity.
Once filed, the SAR is walled off. Neither the bank nor any government employee who learns about it may reveal its existence to the person involved.3Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority The institution and its employees are shielded from civil liability under 31 U.S.C. 5318(g)(3) for filing in good faith, and the immunity also covers the failure to notify the subject. You cannot sue a bank for filing a SAR on your account, under federal law, state law, or any private contract.
What This Means for Your Account
If you become the subject of a SAR, you will not learn about it from your bank. Federal regulations flatly prohibit any disclosure that would reveal a report exists.13eCFR. 12 CFR 21.11 – Suspicious Activity Report The bank can share the underlying transaction facts with law enforcement without telling you, so long as it doesn’t identify those facts as part of a SAR.
What customers do experience is account closure. Banks can terminate accounts for any reason permitted by their account agreements, and heightened compliance risk is a common one. You will typically receive a generic closure notice, sometimes with 30 days to move your funds, sometimes with immediate effect, and no explanation. There is no appeal, and because the bank legally cannot discuss the SAR, there is no way to address the underlying concern.
The pattern hits certain industries harder than others. Money services operators, cannabis-related businesses, and cryptocurrency exchanges have reported difficulty keeping banking relationships because compliance departments view the monitoring burden as too high for the revenue those accounts generate.
Penalties for Structuring and for Institutions
The penalty framework hits both sides: the customer who tries to evade monitoring, and the institution that fails to run its program properly.
Structuring by Individuals
Intentionally breaking up transactions to dodge reporting is a standalone federal crime under 31 U.S.C. 5324. Standard penalty: up to 5 years in prison, a fine, or both. When structuring occurs alongside another federal offense or involves more than $100,000 in illegal activity within 12 months, the maximum prison term doubles to 10 years and the fine can reach twice the normal statutory amount.14Office of the Law Revision Counsel. 31 USC 5324 – Structuring Transactions to Evade Reporting Requirement Prohibited
The government can also seize the structured funds through civil forfeiture. This is where structuring cases become especially harsh. Even if the underlying money was earned legally, the act of structuring can make the funds subject to forfeiture, because the crime is the evasion itself and not the source of the money.
Institutional Penalties
A financial institution that willfully violates BSA reporting or compliance requirements faces civil penalties of up to $25,000 per violation or the amount involved in the transaction, whichever is greater, capped at $100,000 per transaction. Each day a violation continues and each branch where it occurs counts as a separate violation, so the numbers compound quickly.15Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties Even negligent violations carry penalties of up to $500 each, and a pattern of negligent failures can add another $50,000 on top.
Criminal exposure is steeper. Willful violations can bring fines up to $250,000 and prison terms up to 5 years. When the violation coincides with other illegal activity exceeding $100,000 in a 12-month period, the fine ceiling rises to $500,000 and the maximum sentence hits 10 years.16Office of the Law Revision Counsel. 31 USC 5322 – Criminal Penalties Convicted individuals can be ordered to repay any bonus received from their employer during the year of the violation or the following year. Repeat violators face additional penalties of up to three times the profit gained or loss avoided.
If You Work Inside a Compliance Program
Employees who see their institution ignoring its monitoring obligations have federal protection. The Anti-Money Laundering Act of 2020 prohibits employers from retaliating against workers who report BSA violations to the government, and whistleblowers may receive awards of up to 30 percent of monetary sanctions in enforcement actions exceeding $1 million.17Federal Register. Whistleblower Incentives and Protections Government agencies handling the tips are subject to confidentiality requirements meant to protect whistleblower identities.