What Is a SAR Report: Triggers, Filing, and Penalties

A Suspicious Activity Report, or SAR, is a confidential document that a bank or other financial institution files with the federal government when it spots a transaction that may involve money laundering, fraud, terrorist financing, or another financial crime. The report goes to the Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Department of the Treasury, where federal agents use it to investigate and build cases. Filing a SAR is not an accusation. It is a flag that tells investigators a transaction is worth a closer look.

Financial institutions filed roughly 4.7 million SARs in fiscal year 2024, averaging about 12,870 reports every day.¹

What the Report Actually Does

The Bank Secrecy Act (BSA) requires financial institutions to watch their customers’ transactions and report anything that looks like it could involve illegal activity. The SAR is the formal mechanism for that reporting. When a compliance officer notices something unusual, like a pattern of deposits structured to stay under reporting limits or funds moving through an account with no apparent lawful source, they document the activity and submit the report electronically to FinCEN.²

Once filed, the report lands in a federal database that multiple law enforcement agencies can search. The FBI, IRS Criminal Investigation, and the Drug Enforcement Administration all use SARs to connect threads across different cases and institutions. A single report rarely drives a prosecution on its own. More often, SARs are pieces of a larger pattern that investigators assemble over time.

What Triggers a Filing

A SAR is not required for every unusual transaction. The obligation kicks in when a transaction meets both a dollar threshold and a suspicion standard: the institution must know, suspect, or have reason to suspect that the activity involves illegal conduct.

For most financial institutions, a SAR is required when a suspicious transaction involves or adds up to at least $5,000. Money services businesses have a lower threshold of $2,000.³ There is one notable exception. When the suspicious activity involves insider abuse by a director, officer, employee, or agent of the institution itself, there is no minimum dollar amount. The institution must file regardless of the size of the transaction.⁴

FinCEN’s filing instructions identify four broad categories of activity that trigger a SAR once the dollar threshold is met:³

Funds derived from or intended to conceal the proceeds of illegal activity.
Transactions designed to evade BSA reporting requirements. A classic example is structuring, where someone breaks a large cash deposit into smaller amounts to stay under the $10,000 Currency Transaction Report threshold. Structuring is itself a federal crime carrying up to five years in prison.⁵
Transactions with no apparent lawful purpose that the institution cannot reasonably explain after reviewing the facts.
Use of the institution to facilitate criminal activity such as fraud, embezzlement, or terrorist financing.

Compliance officers rely on their knowledge of each customer’s typical activity to spot deviations. A retiree suddenly wiring large sums overseas, a small business taking in deposits that dwarf its reported revenue, or a customer giving evasive answers about the source of funds can all prompt a filing.

What a SAR Contains

Each SAR includes identifying information about the person or entity involved: full name, physical address, Social Security number or Taxpayer Identification Number, relevant account numbers, and the dates and amounts of the transactions in question.

The most important part of the report is the narrative. In plain language, the filer describes what happened, when it happened, who was involved, and why the activity raised concerns. The narrative is what investigators actually read when deciding whether to pursue a case. A clear, specific narrative can be the difference between a report that opens an investigation and one that sits unread in a database.

Once filed, all SARs are submitted through FinCEN’s BSA E-Filing System. Paper filings are no longer accepted.⁶ An institution has 30 calendar days from first detecting the facts that could warrant a SAR to submit it. If no suspect has been identified yet, the deadline can be extended by another 30 days, but filing cannot be delayed more than 60 days from the date the suspicious activity was first noticed.²

Who Has to File

Federal regulations in 31 CFR Chapter X define which organizations must file SARs, and the list is broader than most people expect.⁷ Covered institutions include:

Commercial banks, trust companies, savings associations, and credit unions.⁸
Casinos and card clubs with more than $1 million in gross annual gaming revenue.
Money services businesses: currency exchanges, check cashers, money transmitters, and sellers of money orders or traveler’s checks.
Securities brokers and dealers registered with the SEC.
Insurance companies that issue permanent life insurance policies, annuity contracts, or other products with cash value or investment features.⁹
Dealers in precious metals, stones, or jewels that bought and sold more than $50,000 in covered goods during the prior year.¹⁰
Mutual funds, futures commission merchants, operators of credit card systems, loan and finance companies, and housing government-sponsored enterprises.

The BSA’s underlying definition of “financial institution” reaches even further, naming travel agencies, pawnbrokers, vehicle sellers, and the U.S. Postal Service. Not all of these groups currently have active SAR filing obligations under FinCEN regulations.¹¹

If You Are the Subject of a SAR

You generally will not find out. Federal law imposes strict secrecy around SARs to protect ongoing investigations. Under 31 U.S.C. 5318(g)(2), no one at the financial institution, whether a current employee, former employee, director, officer, or contractor, may tell any person involved in the reported transaction that a SAR has been filed, or reveal any information that would give away its existence.¹² This “tipping off” prohibition exists so that suspects cannot destroy evidence or flee before investigators act.

The secrecy runs in both directions. SARs and the information that would reveal them are treated as confidential, and FinCEN does not disclose them to the subjects of reports. There is no formal way to request a copy of a SAR filed about you.

Being the subject of a SAR does not mean you have been charged with anything or that any investigator has concluded you did something wrong. A SAR is a flag, not a finding. Many reports describe activity that turns out to have an innocent explanation, and the law anticipates this by shielding institutions from liability.

Safe Harbor and Penalties

To encourage institutions to report without fear of lawsuits, the BSA provides a safe harbor: any financial institution or employee who files a SAR, whether required or voluntary, is shielded from liability under any federal or state law, regulation, or contract for making the disclosure.¹² The protection applies even if the report turns out to be unfounded, as long as the filer acted in good faith.

On the other side, failing to file a required SAR or improperly disclosing one carries real consequences. A willful BSA violation can trigger civil money penalties with a statutory baseline of up to the greater of $100,000 or $25,000 per violation.¹³ Those amounts are adjusted for inflation; as of early 2025, the inflation-adjusted range for willful BSA violations ran from $71,545 to $286,184 per violation.¹⁴

Criminal exposure is heavier. A willful violation, including unauthorized disclosure of a SAR, can bring a fine of up to $250,000, up to five years in prison, or both. When the violation occurs alongside another federal offense, or as part of a pattern of illegal activity involving more than $100,000 over 12 months, the ceiling rises to a fine of up to $500,000, up to 10 years in prison, or both.¹⁵

1
FinCEN. FinCEN Year in Review for FY 2024
2
eCFR. 12 CFR 208.62 – Suspicious Activity Reports
3
FinCEN. FinCEN Suspicious Activity Report Electronic Filing Instructions
4
eCFR. 12 CFR 21.11 – Suspicious Activity Report
5
Office of the Law Revision Counsel. 31 USC 5324 – Structuring Transactions to Evade Reporting Requirement
6
FinCEN. Suspicious Activity Reports (SARs)
7
eCFR. 31 CFR Chapter X – Financial Crimes Enforcement Network, Department of the Treasury
8
eCFR. 31 CFR Part 1010 – General Provisions
9
eCFR. 31 CFR Part 1025 – Rules for Insurance Companies
10
eCFR. 31 CFR Part 1027 – Rules for Dealers in Precious Metals, Precious Stones, or Jewels
11
Office of the Law Revision Counsel. 31 USC 5312 – Definitions and Application
12
Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority
13
Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties
14
eCFR. 31 CFR 1010.821 – Penalty Adjustment and Table
15
GovInfo. 31 USC 5322 – Criminal Penalties