A SAR form, short for Suspicious Activity Report, is the document a financial institution files with the Treasury Department’s Financial Crimes Enforcement Network (FinCEN) when it spots a transaction that looks tied to criminal activity. The report is submitted electronically on FinCEN Form 111 under authority of the Bank Secrecy Act, and it feeds directly into federal investigations of money laundering, fraud, and terrorist financing. Filing deadlines are tight, confidentiality rules are strict, and the penalties for getting it wrong reach both the institution and the individuals inside it.
Who Has to File
The filing obligation under 31 CFR Chapter X reaches well past traditional banks. Credit unions, casinos and card clubs, money transmitters, currency exchanges, check cashers, broker-dealers in securities, and insurance companies all fall under the same mandate.1eCFR. 31 CFR 1025.320 – Reports by Insurance Companies of Suspicious Transactions Each industry has its own regulation, and while the structure is the same, the dollar thresholds differ.
Every filer must also run a formal anti-money laundering compliance program with internal controls, independent testing, a designated compliance officer, training, and risk-based customer due diligence.2eCFR. 31 CFR 1020.210 – Anti-Money Laundering Program Requirements for Banks Without ongoing monitoring, suspicious transactions never get flagged in the first place.
One recent expansion is worth flagging because it catches people off guard. As of March 1, 2026, settlement and closing agents must file reports on residential real estate transfers to a legal entity or trust when no bank financing is involved, the classic all-cash purchase through an LLC. Homebuyers themselves have no filing duty; the obligation sits with the real estate professional handling the closing.3Financial Crimes Enforcement Network. Requirement Fact Sheet – Residential Real Estate Reporting Requirement
When a SAR Is Required
Not every unusual transaction triggers a filing. The regulations set dollar floors that vary by institution type, paired with a judgment about what the transaction looks like.
Bank Thresholds
Banks must file when a transaction or group of related transactions totals at least $5,000 and the bank has reason to believe the money comes from illegal activity, the transaction is designed to evade reporting requirements, or there is no apparent lawful purpose.4eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions A higher $25,000 threshold applies when the bank itself is the victim of a suspected crime and no suspect has been identified.5FFIEC BSA/AML InfoBase. Assessing Compliance with BSA Regulatory Requirements – Suspicious Activity Reporting
Money Services Businesses
Money transmitters, currency exchanges, and check cashers face a lower $2,000 threshold on suspect transactions.6eCFR. 31 CFR 1022.320 – Reports by Money Services Businesses of Suspicious Transactions Issuers of money orders or traveler’s checks reviewing clearance records only report at $5,000 or above.
Casinos
Casinos and card clubs follow the $5,000 threshold that applies to banks.7eCFR. 31 CFR 1021.320 – Reports by Casinos of Suspicious Transactions
The Kinds of Activity That Get Reported
The same patterns show up across every institution type. Structuring, meaning breaking a large cash transaction into smaller pieces to stay under reporting limits, is the most common red flag. Funds an institution suspects came from criminal conduct qualify at any amount. So does a transaction that doesn’t match the customer’s known business or financial profile when the institution can’t find a reasonable explanation after reviewing the facts.4eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions And when a director, officer, or employee of the institution appears to be involved, the filing obligation kicks in at any dollar amount.8eCFR. 12 CFR 208.62 – Suspicious Activity Reports
What Goes on the Form
Every SAR is filed on FinCEN Form 111 through the BSA E-Filing System. Paper submissions have not been accepted since April 2013.9Financial Crimes Enforcement Network. Bank Secrecy Act Filing Information
The structured fields capture identifying information about the subject: full legal name, taxpayer identification number, current address, date of birth, occupation or business type, and any relationship to the filing institution.10Financial Crimes Enforcement Network. FinCEN SAR Electronic Filing Instructions Fields marked with an asterisk must be completed even when the answer is “unknown.”
Then comes the narrative, and it matters more than any other part of the form. FinCEN’s own instructions say the quality of the narrative can determine whether investigators actually understand what happened. A useful narrative covers who was involved, what transactions occurred, when they took place, where, and why the institution considers them suspicious. Internal jargon and system codes should stay out because the readers at FinCEN and downstream law enforcement agencies won’t know what they mean.10Financial Crimes Enforcement Network. FinCEN SAR Electronic Filing Instructions
Supporting records must be identified in the narrative and retained. Common examples include transaction records, account-opening documents, recorded communications, and email correspondence.11Financial Crimes Enforcement Network. Suspicious Activity Report Supporting Documentation All records connected to a SAR must be kept for five years.12eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period
How Long You Have to File
The clock starts on the date the institution detects facts that suggest reportable activity. From that point, the SAR is due within 30 calendar days. If no suspect has been identified within those 30 days, the institution gets another 30 to keep looking, but the outer limit is 60 calendar days from initial detection.8eCFR. 12 CFR 208.62 – Suspicious Activity Reports
When suspicious activity continues after the first report, FinCEN guidance calls for a follow-up SAR at least every 90 days. Practically, a follow-up covering a 90-day review period must be filed within 120 calendar days of the previous SAR, so an initial report filed on Day 30 leads to a follow-up due by Day 150.13Financial Crimes Enforcement Network. Frequently Asked Questions Regarding Suspicious Activity Reporting Requirements Institutions don’t need to launch a separate manual review of every customer after filing; existing risk-based monitoring can surface ongoing patterns.
Terrorism-related activity moves faster than the standard deadlines allow. FinCEN directs institutions to call the Financial Institutions Toll-Free Hotline at (866) 556-3974, which operates around the clock, so the information reaches law enforcement immediately. Imminent threats should also go to local law enforcement right away. The SAR still gets filed, but the phone call comes first.14Financial Crimes Enforcement Network. Frequently Asked Questions Regarding the FinCEN Suspicious Activity Report (SAR)
What You Cannot Tell the Customer
Federal law prohibits any institution, director, officer, employee, or agent from notifying the subject that a SAR has been filed. Government employees who learn about a SAR are bound by the same restriction. The only narrow exception lets institutions include SAR-related information in employment references shared with other financial institutions under specific statutory frameworks.15FFIEC BSA/AML InfoBase. 31 USC 5318 – Compliance, Exemptions, and Summons Authority Compliance officers usually limit internal circulation for the same reason: fewer people in the loop, less chance of an accidental tip-off.
The counterweight is the safe harbor. Under 31 U.S.C. ยง 5318(g)(3), no financial institution or its personnel can be sued under federal or state law for making a disclosure to the government, whether voluntary or required, and the protection extends to any failure to notify the subject.16Office of the Law Revision Counsel. 31 U.S. Code 5318 – Compliance, Exemptions, and Summons Authority A customer whose SAR turns out to be unfounded has no civil claim against the filer. The safe harbor does not shield institutions from government enforcement.
Penalties for Not Filing or for Tipping Off
The consequences run through three layers: civil, criminal, and personal.
A willful failure to file carries a statutory civil penalty of up to the greater of $25,000 or the amount involved in the transaction, capped at $100,000.17Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties After inflation adjustments, the current per-violation range for willful conduct runs from $71,545 to $286,184.18eCFR. 31 CFR 1010.821 – Penalty Adjustment and Table Negligent violations draw up to $500 per incident, with an additional penalty of up to $50,000 for a pattern.
Criminal exposure is real. Willfully violating BSA reporting requirements can bring a fine of up to $250,000 and up to five years in prison. If the violation happens alongside another federal offense or as part of illegal activity exceeding $100,000 in a 12-month period, the maximums rise to $500,000 and ten years.19GovInfo. 31 USC 5322 – Criminal Penalties
The civil penalty statute names partners, directors, officers, and employees as individually liable, not just the institution.17Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties A compliance officer who knows about suspicious activity and deliberately fails to file can face personal fines, and in serious cases, criminal charges. FinCEN enforcement actions have named individuals alongside their employers, so personal liability isn’t theoretical.