When to File a SAR Report: Thresholds, Deadlines, and Penalties

A financial institution must file a Suspicious Activity Report with FinCEN within 30 calendar days of the date it first identifies facts suggesting a reportable transaction, with the deadline stretching to a maximum of 60 days when no suspect has been identified. Deciding when to file a SAR report comes down to two questions: does the activity cross the dollar threshold that applies to your institution type, and does it fit one of the statutory suspicion categories? Roughly 4.7 million SARs were filed in fiscal year 2024, so the judgment calls described below are made constantly across the industry.1Financial Crimes Enforcement Network. FinCEN Year in Review for FY 2024

The Dollar Threshold That Triggers a Filing

The amount at which a SAR becomes mandatory depends on who you are and what the activity looks like. Each covered institution type operates under its own FinCEN regulation, and banks carry an additional layer of rules from their primary federal regulator.

Banks and Credit Unions

Banks sit under both FinCEN’s rule (31 CFR ยง 1020.320) and the parallel rules from the OCC, Federal Reserve, and FDIC. The FinCEN rule requires a SAR for any suspicious transaction of $5,000 or more involving suspected illegal proceeds, structuring, or activity with no apparent lawful purpose.2eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions On top of that, the banking regulators impose a tiered structure:

The lowest applicable threshold controls. If an employee is implicated, there is no floor. If the bank can name a suspect, the floor is $5,000. If no one can be identified and the activity doesn’t clearly involve laundering, the floor rises to $25,000.

Money Services Businesses

MSBs file at a lower threshold than banks. The general trigger is $2,000 or more in funds involving suspected illegal activity, BSA evasion, or no apparent lawful purpose. One carve-out: issuers of money orders or traveler’s checks that detect suspicious activity solely through clearance-record review use $5,000 instead.5eCFR. 31 CFR 1022.320 – Reports by Money Services Businesses of Suspicious Transactions

Broker-Dealers, Casinos, and Insurance Companies

Broker-dealers, casinos and card clubs with more than $1 million in annual gross revenue, and insurance companies offering covered products each carry a $5,000 threshold.6eCFR. 31 CFR 1023.320 – Reports by Brokers or Dealers in Securities of Suspicious Transactions7eCFR. 31 CFR 1021.320 – Reports by Casinos of Suspicious Transactions8eCFR. 31 CFR 1025.320 – Reports by Insurance Companies of Suspicious Transactions The suspicion criteria track the bank rule.

What Counts as Suspicious

Hitting the dollar threshold is only half the question. The regulations require a filing when the institution knows, suspects, or has reason to suspect that a transaction fits one of three categories:

Structuring is the pattern compliance teams flag most often. A customer making three $3,200 cash deposits at different branches on the same day is almost certainly trying to stay under the CTR trigger. That requires a SAR even if the underlying money is clean.

The 30-Day Clock and When It Starts

The deadline runs from the date the institution first identifies facts that could support a filing, not from the date the suspicious transaction occurred. A wire might clear on March 1, but if a routine review doesn’t flag it until March 15, March 15 is day zero.

From that detection date, the institution has 30 calendar days to file.9eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions If no suspect has been identified on day zero, the institution may take an additional 30 days to investigate, but the SAR must be filed no later than 60 calendar days after initial detection regardless of whether a suspect has been found.10Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions

When Immediate Notification Is Required

Certain situations can’t wait for a written filing. When an institution encounters activity requiring immediate attention, such as suspected terrorist financing, an ongoing money laundering scheme, or an active threat to the financial system, it must contact law enforcement by telephone right away. The call does not replace the SAR. The electronic report still has to be submitted within the standard 30- or 60-day window.10Financial Crimes Enforcement Network. FinCEN Suspicious Activity Report Electronic Filing Instructions

Continuing Activity After the First SAR

A single SAR covers a single episode. When the same customer keeps doing suspicious things after the initial filing, FinCEN’s guidance uses a 90-day review cycle. After the initial SAR, the institution monitors the account for 90 days, then files a follow-up SAR covering that period if the activity continued.11Financial Crimes Enforcement Network. Frequently Asked Questions Regarding Suspicious Activity Reporting Requirements

Walking through the timing: if detection occurs on day zero and the initial SAR is filed on day 30, the 90-day monitoring window runs from day 30 to day 120. A follow-up SAR, if warranted, is due by day 150. Each subsequent filing should cover only the dollar amounts and activity from its own 90-day window, not cumulative totals from earlier SARs.12Financial Crimes Enforcement Network. Frequently Asked Questions Regarding the FinCEN Suspicious Activity Report (SAR)

Institutions aren’t required to conduct a special post-SAR review just to check for continued activity. They can rely on existing risk-based monitoring to flag it. The 90-day cycle is a framework for institutions that choose to follow it, not a rigid mandate.11Financial Crimes Enforcement Network. Frequently Asked Questions Regarding Suspicious Activity Reporting Requirements

Filing Below the Threshold

An institution can file a SAR even when the dollar amount falls below the mandatory floor. The bank regulation explicitly permits reporting “any suspicious transaction that it believes is relevant to the possible violation of any law or regulation but whose reporting is not required.”2eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions Many compliance programs file voluntarily when a pattern of small transactions looks suspicious as a whole. Federal law extends the same safe harbor to voluntary filings as to required ones, so an institution that files below the threshold gets the same civil-liability protection.13Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority

What a Missed or Late SAR Costs

Failing to file, filing late, or filing inaccurate reports carries penalties that scale with intent.

Civil Penalties

FinCEN adjusts its penalty amounts annually for inflation. The January 2025 ranges are:

  • Up to $1,430 per violation for a single negligent failure.
  • Up to $111,308 for a pattern of negligent violations.
  • Between $71,545 and $286,184 per willful violation.

These figures are revisited each year.14Federal Register. Financial Crimes Enforcement Network Inflation Adjustment of Civil Monetary Penalties

Criminal Penalties

Willful BSA reporting violations carry fines of up to $250,000 and up to five years in prison. When the violation is part of a broader pattern of illegal activity involving more than $100,000 in a 12-month period, the maximum fine doubles to $500,000 and the maximum prison term rises to 10 years.15Office of the Law Revision Counsel. 31 USC 5322 – Criminal Penalties These provisions reach individuals, not just institutions. A compliance officer who knowingly ignores reportable activity carries personal criminal exposure.