Suspicious Activity Reporting (2024)

Welcome to your complete Suspicious Activity Reporting hub, providing all you need to know about filing Suspicious Activity Reports, from the basics to more detailed guidance. This page is created and maintained by our London-based Economic Crime Advisory team.

The sections below help you to know when to file a Suspicious Activity Report (SAR), how to file a SAR and how the information you include in a SAR is used in the global fight against financial crime.

You can also download our guide to help build a robust SAR framework. Click here to download.

In the coming weeks we will be adding more content to help you ensure your Suspicious Activity Reporting framework is robust, and to keep you updated on the new NCA SAR portal. If there is something specific that we have not covered and you’d like to know about, please get in touch with Clarinda Grundy.

When to file a SAR

In this first section we answer what is a suspicious activity report, under what circ*mstances you should file one.

See Also
12CFR353

How to file a SAR

In this second section we go into more detail, including how to file a SAR and explaining the role of The UK Financial Intelligence Unit.

How SARs are used

In this third section we explain how SARs are used, how a DAML SAR is different and why the new SAR portal is being introduced.

Suspicious Activity Reporting (2024)

FAQs

How much can trigger the filing of a suspicious activity report? ›

Under 12 CFR 21.11, national banks are required to report known or suspected criminal offenses, at specified thresholds, or transactions over $5,000 that they suspect involve money laundering or violate the Bank Secrecy Act.

What happens if you get a suspicious activity report? ›

Whether it is a financial matter, or one related to national security, a suspicious activity report ultimately circulates to local, state, and federal agencies through the use of fusion centers. These centers make the information available to whatever other agencies may be affected by the flagged activity.

What are two triggers for a suspicious activity report? ›

Suspicious Activity Reports (SARs) are crucial documents filed by financial institutions to report potentially illicit activities. Triggers for filing SARs include unusual transactions, patterns, or behaviors that raise suspicions of money laundering, fraud, or terrorist financing.

Are suspicious activity reports effective? ›

For example, a SAR clearly evidencing a deposit structuring pattern extending over a lengthy period and involving a large dollar amount, or a SAR specifically detailing statements by a suspect to a bank employee regarding intent to evade financial reporting requirements, is more likely to get law enforcement's ...

How much money is considered suspicious activity? ›

Transactions conducted or attempted by, at, or through the bank (or an affiliate) and aggregating $5,000 or more, if the bank or affiliate knows, suspects, or has reason to suspect that the transaction: May involve potential money laundering or other illegal activity (e.g., terrorism financing).

What is the $3000 rule? ›

The requirement that financial institutions verify and record the identity of each cash purchaser of money orders and bank, cashier's, and traveler's checks in excess of $3,000. 40 Recommendations A set of guidelines issued by the FATF to assist countries in the fight against money. laundering. Bank Secrecy Act.

What does the IRS consider suspicious activity? ›

Specifically, the act requires financial institutions to keep records of cash purchases of negotiable instruments, file reports of cash transactions exceeding $10,000 (daily aggregate amount), and to report suspicious activity that might signify money laundering, tax evasion, or other criminal activities.

What do you do once you have made a suspicious activity report? ›

Step 2: Submit SARs to FinCEN

Once the SARs are completed, the SARs need to be submitted to FinCEN. This can be done individually or in batches, as long as the reports are filed within the appropriate time frame.

What are examples of suspicious activity? ›

Leaving packages, bags or other items behind. Exhibiting unusual mental or physical symptoms. Unusual noises like screaming, yelling, gunshots or glass breaking. Individuals in a heated argument, yelling or cursing at each other.

What prompts a suspicious activity report? ›

If a customer does something obviously criminal – such as offering a bribe or even admitting to a crime – the law requires you to file a SAR if it involves or aggregates funds or other assets of $2,000 or more.

What does suspicious activity look like? ›

Examples of suspicious activity might include: Someone who you may consider to be a trespasser or prowler looking in vehicles or car doors. Scoping out addresses. Conducting occupancy checks prior to a burglary.

What is the suspicious activity rule? ›

A financial institution is required to file a suspicious activity report no later than 30 calendar days after the date of initial detection of facts that may constitute a basis for filing a suspicious activity report.

What happens after you submit a SAR? ›

This starts the next working day after you file your report. Once you've submitted your report, it will be processed and checked against law enforcement databases. If an investigation is needed, your SAR will be sent to the appropriate law enforcement agency.

Who can see suspicious activity reports? ›

The Federal Reserve Board and the 12 Federal Reserve Banks, the Office of the Comptroller of the Currency, and Federal Deposit Insurance Corporation, the Office of Thrift Supervision, and the National Credit Union Administration each have access to SARS at offices throughout the U.S.

How do banks detect suspicious activity? ›

Banks leverage sophisticated rule-based detection systems that monitor transaction patterns and flag anomalies. These systems analyze factors such as transaction frequency, amount, and geographical location, comparing them against established customer profiles and historical data.

What dollar amount triggers a SAR? ›

If a customer does something obviously criminal – such as offering a bribe or even admitting to a crime – the law requires you to file a SAR if it involves or aggregates funds or other assets of $2,000 or more.

What triggers a suspicious transaction report? ›

Financial institutions must file suspicious transaction reports (STRs) whenever they notice any transaction activity that is out of the ordinary — for example, if an individual appears to be hiding information, such as the source of funds, or if they are making or attempting to make transactions that are abnormally ...

What dollar amount triggers a CTR? ›

Federal law requires financial institutions to report currency (cash or coin) transactions over $10,000 conducted by, or on behalf of, one person, as well as multiple currency transactions that aggregate to be over $10,000 in a single day. These transactions are reported on Currency Transaction Reports (CTRs).

Under which circ*mstances is a suspicious activity report submitted? ›

A SAR should be submitted if a party has suspicion or knowledge of money laundering or terrorist financing, regardless of the amount or currency of a transaction.

Top Articles
Latest Posts
Article information

Author: Merrill Bechtelar CPA

Last Updated:

Views: 6099

Rating: 5 / 5 (70 voted)

Reviews: 85% of readers found this page helpful

Author information

Name: Merrill Bechtelar CPA

Birthday: 1996-05-19

Address: Apt. 114 873 White Lodge, Libbyfurt, CA 93006

Phone: +5983010455207

Job: Legacy Representative

Hobby: Blacksmithing, Urban exploration, Sudoku, Slacklining, Creative writing, Community, Letterboxing

Introduction: My name is Merrill Bechtelar CPA, I am a clean, agreeable, glorious, magnificent, witty, enchanting, comfortable person who loves writing and wants to share my knowledge and understanding with you.