A Suspicious Activity Report, or SAR, is a confidential report that certain financial institutions are required to file with the Financial Crimes Enforcement Network (FinCEN) when they detect activity that appears suspicious. Understanding what triggers this obligation, and what happens after, is a core part of any AML compliance program.
What Counts as "Suspicious"
Broadly, an institution must consider filing a SAR when a transaction (or pattern of transactions) involving at least a minimum dollar threshold appears to involve funds derived from illegal activity, is designed to evade reporting requirements, has no apparent lawful business purpose, or involves the institution being used to facilitate criminal activity. Common examples include structuring deposits to avoid currency transaction reporting, transactions inconsistent with a customer's known business or history, and activity involving high-risk jurisdictions with no clear business rationale.
Who Decides Whether to File
Front-line staff typically escalate unusual activity to the institution's BSA/AML compliance function, which investigates and makes the filing determination. This is a judgment call informed by the totality of the facts, not a simple checklist, which is why well-trained staff and clear escalation procedures matter.
Confidentiality Requirements
SAR filings, and even the fact that a SAR was filed, are confidential by law. Institutions and their employees are generally prohibited from disclosing a SAR or its contents to the subject of the report or to unauthorized third parties, with narrow exceptions.
What Happens After Filing
Filing a SAR does not require the institution to close the customer relationship, and the decision about whether to continue the relationship is separate from the filing decision. However, many institutions do reassess the customer's risk rating and monitoring intensity following a SAR filing.
Building a Sound SAR Process
An effective process includes clear escalation criteria for front-line staff, a documented investigation methodology, defined filing timelines, quality control review of filed SARs, and ongoing training so staff can recognize red flags relevant to the institution's specific products and customer base.