A Suspicious Activity Report, or SAR, is a confidential document a bank or other financial institution files with the federal government when a transaction looks like it may involve money laundering, fraud, terrorism financing, or another financial crime. The reports go to the Financial Crimes Enforcement Network (FinCEN), a bureau of the Treasury Department, where investigators use them to spot criminal networks and trace how illicit money moves. Financial institutions filed roughly 4.7 million SARs in fiscal year 2024, making the system one of the largest financial intelligence tools in federal law enforcement.
A SAR is not a criminal charge. It is a tip from a regulated business to the government, and the person named in the report is not supposed to find out it exists.
What Triggers a SAR
SAR filings combine dollar thresholds with the institution’s judgment about whether a transaction looks legitimate. The thresholds shift depending on who is involved and what kind of misconduct is suspected.1FFIEC BSA/AML Manual. Assessing Compliance With BSA Regulatory Requirements
- Suspected criminal activity with an identified suspect: filing required at $5,000 or more.
- Suspected criminal activity with no identified suspect: filing required at $25,000 or more.
- Insider abuse involving a director, officer, employee, or other institution-affiliated party: filing required at any dollar amount.2Federal Deposit Insurance Corporation. 12 CFR 353 – Suspicious Activity Reports
Beyond the dollar tests, compliance officers watch for patterns that suggest someone is trying to hide where money came from or where it is going. The most common is structuring: breaking a large cash amount into smaller deposits to stay under reporting limits. Structuring is itself a federal crime, punishable by up to five years in prison, or up to ten years when it is tied to other illegal activity involving more than $100,000 in a twelve-month period.3Office of the Law Revision Counsel. 31 USC 5324 – Structuring Transactions to Evade Reporting Requirement
Other red flags that routinely prompt SARs include wire transfers to or from high-risk jurisdictions, cash deposits that do not match a customer’s known occupation or business, transactions with no apparent lawful purpose and no reasonable explanation from the customer, sudden changes in transaction patterns, and inconsistent information about the source of funds. The narrative section, where the compliance officer explains in plain language why the activity looked wrong, is often the most useful part of the report for investigators.
Cryptocurrency and Digital Assets
Cryptocurrency exchanges and other businesses dealing in convertible virtual currencies generally operate as money services businesses and file SARs under the same framework as traditional financial institutions. FinCEN has directed these businesses to watch for transactions linked to darknet marketplaces, the use of mixing or tumbling services designed to obscure fund flows, rapid conversions between multiple virtual currencies below reporting thresholds, and transfers to exchanges in jurisdictions with weak anti-money-laundering controls.4FinCEN. Advisory on Illicit Activity Involving Convertible Virtual Currency The same suspicion-based triggers apply; there is no separate dollar threshold for crypto SARs.
How a SAR Differs From a Currency Transaction Report
People often confuse SARs with Currency Transaction Reports (CTRs), but they answer different questions. A CTR is automatic and objective: any cash transaction over $10,000 generates one, whether or not anyone thinks anything is wrong. Multiple cash transactions by or on behalf of the same person that together exceed $10,000 in a single business day must be aggregated and reported.5Financial Crimes Enforcement Network. FinCEN Currency Transaction Report Electronic Filing Requirements
A SAR requires a judgment call. The institution has to evaluate whether a transaction looks suspicious given the circumstances, the customer’s profile, and the nature of the activity. A CTR says “this happened.” A SAR says “this looks wrong.” A cash transaction over $10,000 that also looks suspicious can generate both.
Who Has to File
The Bank Secrecy Act defines “financial institution” much more broadly than most people expect. Traditional banks and credit unions are the obvious filers, but the statute at 31 U.S.C. ยง 5312 also covers commercial banks, trust companies, SEC-registered brokers and dealers, insurance companies, money services businesses (including check cashers and money transmitters), dealers in precious metals and jewels, pawnbrokers, loan companies, travel agencies, the U.S. Postal Service, and businesses engaged in vehicle sales.6FFIEC BSA/AML Manual. Appendix D – Statutory Definition of Financial Institution
Casinos and card clubs with annual gaming revenue above $1,000,000 also fall under BSA reporting requirements, along with Indian gaming operations conducted under the Indian Gaming Regulatory Act beyond class I gaming.7eCFR. 31 CFR Part 1021 – Rules for Casinos and Card Clubs Futures commission merchants, commodity trading advisors, and commodity pool operators round out the list. Starting March 1, 2026, certain professionals involved in real estate closings must also report non-financed transfers of residential property to legal entities or trusts, closing a gap that let anonymous shell companies buy real estate with cash and leave no federal paper trail.8Financial Crimes Enforcement Network. Residential Real Estate Rule
Deadlines and Filing Process
Once an institution detects suspicious activity, it generally has 30 calendar days to file the SAR. If no suspect has been identified at the time of detection, the institution gets an additional 30 days to try to identify one, but the total window cannot exceed 60 days from the date the activity was first noticed.9Federal Reserve. Frequently Asked Questions Regarding Suspicious Activity Reporting Requirements
All SARs are filed electronically through FinCEN’s BSA E-Filing System. Paper filing has not been accepted since 2013,10Financial Crimes Enforcement Network. Bank Secrecy Act Filing Information and reports are typically acknowledged within 48 hours of submission.11Financial Crimes Enforcement Network. Frequently Asked Questions Regarding the FinCEN Suspicious Activity Report Institutions must keep a copy of every SAR they file, along with the supporting documentation, for five years.12eCFR. 12 CFR 208.62 – Suspicious Activity Reports
Confidentiality: The Tipping-Off Rule
Federal law flatly prohibits anyone from telling the subject of a SAR that a report has been filed or even exists. The bar applies to the institution, its officers, its employees, and anyone else entrusted with the information, and it covers not just the report itself but any communication that would reveal one exists: an internal memo, a conversation with the customer, even a note in a file.13Financial Crimes Enforcement Network. FinCEN Advisory FIN-2010-A014 The reasoning is practical: if a suspect learns about the SAR, they can destroy evidence, move funds offshore, or disappear before investigators get anywhere. If you are the subject of a SAR, you will almost certainly never learn about it through the institution that filed it.
The confidentiality rule also reaches into civil litigation. Courts treat SAR information as carrying an unqualified evidentiary privilege, meaning a financial institution cannot be forced to produce a SAR or any document revealing one exists during civil discovery. Underlying business records created in the ordinary course, such as account statements and transaction logs, can still be discoverable even if they later formed the basis for a SAR.14Federal Register. Confidentiality of Suspicious Activity Reports
Safe Harbor for Filers
To keep institutions from hesitating out of fear of being sued, federal law gives filers broad immunity. A financial institution or employee that files a SAR, or makes any voluntary disclosure of a possible legal violation to a government agency, is protected from liability under federal or state law for that disclosure. The protection applies even if the reported activity turns out to be entirely legitimate,15Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority and it covers the report itself as well as the supporting documentation, whether the SAR was required or voluntary.12eCFR. 12 CFR 208.62 – Suspicious Activity Reports
The trade-off is deliberate. Congress treated over-reporting as a smaller problem than under-reporting, so institutions face effectively no legal risk for filing and substantial risk for failing to file. Willful failure to comply with BSA requirements, including SAR obligations, can bring civil penalties of up to the greater of $100,000 or the transaction amount, and criminal penalties of up to $250,000 and five years in prison, with higher ceilings when the violation is part of a broader pattern of illegal activity.16Office of the Law Revision Counsel. 31 USC 5322 – Criminal Penalties
What Happens After a SAR Is Filed
Every SAR enters FinCEN’s centralized database, which authorized federal, state, and local law enforcement agencies can query. A single report rarely triggers an arrest on its own, but SARs frequently serve as the first thread investigators pull when building cases involving money laundering, tax evasion, terrorism financing, and organized crime. Agencies like the FBI and IRS Criminal Investigation use the data to supplement existing cases or identify new targets. The reports become especially useful when aggregated: a pattern of SARs filed by different institutions about the same individual or network can reveal the shape of a scheme no single bank would see on its own.
A SAR filing is not a criminal charge and does not by itself cause any legal consequence for the person named. Many reports turn out to involve activity that was entirely legitimate. But the filing creates a permanent record in FinCEN’s system, and that record can surface in future investigations years after the fact.