You must file a Suspicious Activity Report when a transaction both meets your institution’s dollar threshold and gives you reason to suspect illegal activity. For banks, broker-dealers, mutual funds, casinos, and insurance companies the floor is $5,000. For money services businesses it drops to $2,000. And in a handful of situations, including insider abuse, no dollar floor applies at all. Knowing when to file a SAR means checking three things at once: the amount, the character of the activity, and who is involved.
Dollar Thresholds by Institution Type
The threshold is a floor, not a trigger by itself. A transaction has to clear the dollar figure and look suspicious before filing becomes mandatory.
- Banks: $5,000 in funds or other assets, individually or in aggregate.1eCFR. 31 CFR 1020.320 Reports by Banks of Suspicious Transactions
- Money services businesses: $2,000 for check cashers, currency dealers, money transmitters, and similar operators. Issuers of money orders or traveler’s checks reviewing clearance records have a higher $5,000 floor.2eCFR. 31 CFR Part 1022 Rules for Money Services Businesses
- Casinos and card clubs: $5,000, covering suspicious wagering, currency exchange, or any other transaction conducted through the gaming operation.3eCFR. 31 CFR 1021.320 Reports by Casinos of Suspicious Transactions
- Broker-dealers: $5,000.4eCFR. 31 CFR 1023.320 Reports by Brokers or Dealers in Securities of Suspicious Transactions
- Mutual funds: $5,000.5eCFR. 31 CFR 1024.320 Reports by Mutual Funds of Suspicious Transactions
- Insurance companies: $5,000 for covered products. A false statement made to obtain a policy or file a claim does not by itself require a SAR unless the fraud appears connected to money laundering or terrorist financing.6eCFR. 31 CFR 1025.320 Reports by Insurance Companies of Suspicious Transactions
Aggregation matters. Five transfers of $1,200 through the same account, if the pattern looks suspicious, cross the $5,000 line combined and trigger the filing obligation.1eCFR. 31 CFR 1020.320 Reports by Banks of Suspicious Transactions
Activity Triggers
Meeting the dollar figure is only half the test. The institution must also know, suspect, or have reason to suspect that the transaction fits at least one of four categories.
The first is the most direct: the transaction appears to involve proceeds from illegal activity, or it looks designed to hide the source, ownership, or location of dirty money. The second is structuring, where someone breaks a large sum into smaller pieces to duck the $10,000 Currency Transaction Report threshold or any other BSA reporting requirement.7Internal Revenue Service. Understand How to Report Large Cash Transactions The third is the catch-all: a transaction with no obvious business or lawful purpose, one that doesn’t fit the customer’s normal profile, and one that can’t be explained after a reasonable review.1eCFR. 31 CFR 1020.320 Reports by Banks of Suspicious Transactions The fourth, applicable to broker-dealers, mutual funds, and insurance companies, covers any transaction that uses the institution to facilitate criminal activity.4eCFR. 31 CFR 1023.320 Reports by Brokers or Dealers in Securities of Suspicious Transactions
When the Dollar Threshold Doesn’t Apply
Insider Abuse
When a director, officer, employee, or agent of the institution is involved in the suspicious activity, there is no dollar threshold. If the bank has a substantial basis for identifying an insider as having committed or helped commit a criminal act, a SAR must be filed regardless of amount.8eCFR. 12 CFR 21.11 Suspicious Activity Report A $50 transaction can be enough.
The $25,000 No-Suspect Rule
Banks ordinarily need both a suspicious transaction and some basis for identifying a suspect once activity clears $5,000. But when suspicious activity aggregates to $25,000 or more and the bank believes it was a victim or was used to facilitate a crime, a SAR is required even if no suspect can be identified.9eCFR. 12 CFR 208.62 Suspicious Activity Reports The rule prevents institutions from avoiding filings simply because they don’t yet know who is behind the activity.
Voluntary Filings Below the Floor
Nothing stops an institution from filing when a transaction falls below the mandatory threshold. FinCEN encourages voluntary filings, and the same safe harbor that covers mandatory reports extends to voluntary ones.9eCFR. 12 CFR 208.62 Suspicious Activity Reports A $1,500 wire that looks tied to fraud is worth filing on. Compliance officers who let the dollar threshold do their thinking for them tend to miss activity that matters.
Deadlines Once You Decide to File
The clock starts on the date someone at the institution first detects facts that could support a SAR. From that point:
- Suspect identified at detection: file within 30 calendar days.
- No suspect identified at detection: you get an additional 30 days to try to identify one, but the absolute deadline is 60 calendar days from initial detection. If you still can’t identify anyone, file anyway.
These deadlines apply to banks, and virtually identical timelines appear in the regulations for other covered institutions.10eCFR. 31 CFR 1020.320 Reports by Banks of Suspicious Transactions
Immediate Notification for Urgent Situations
When violations require immediate attention, such as an ongoing money laundering scheme, the institution must call law enforcement right away in addition to filing a SAR within the normal window.10eCFR. 31 CFR 1020.320 Reports by Banks of Suspicious Transactions The call does not replace the written filing. It adds urgency to situations where waiting 30 days could allow serious harm to continue.
Continuing Activity
Suspicious activity does not always stop after the initial SAR. FinCEN has historically suggested that institutions file a follow-up SAR at least every 90 days when suspicious activity persists, but this is guidance rather than a hard requirement. Institutions are not obligated to conduct a separate review after each filing to determine whether activity has continued, and they may rely on their own risk-based monitoring to detect and report ongoing patterns. Institutions that follow the 90-day guidance file the continuing SAR within 120 calendar days of the previous filing, with the narrative covering the full 90-day period beginning immediately after the prior filing date.11Financial Crimes Enforcement Network. Frequently Asked Questions Regarding Suspicious Activity Reporting Requirements
What Happens If You Don’t File
A negligent violation of BSA reporting requirements carries a civil penalty of up to $500 per violation. Negligence that forms a pattern can add a further penalty of up to $50,000. Willful violations carry the greater of $25,000 or the amount of the transaction involved, up to a $100,000 cap.12Office of the Law Revision Counsel. 31 USC 5321 Civil Penalties Because the caps apply per violation, an institution that willfully ignores multiple filing obligations can reach seven-figure exposure quickly.
Criminal exposure sits on top of that. A person who willfully violates BSA requirements, including the SAR filing obligation and the ban on tipping off subjects, faces a fine of up to $250,000, imprisonment for up to five years, or both. When the violation occurs alongside another federal crime or is part of a pattern involving more than $100,000 over twelve months, the maximum fine doubles to $500,000 and the prison term extends to ten years.13Office of the Law Revision Counsel. 31 USC 5322 Criminal Penalties Courts can also order forfeiture of any profit from the violation.