When a financial institution suspects an older customer is being financially exploited, FinCEN reporting requirements for elder financial exploitation kick in fast: file a Suspicious Activity Report (SAR) within 30 calendar days of detection, check the Elder Financial Exploitation box on the form, and include the reference key term “EFE FIN-2022-A002” in the narrative field so the report can be routed for specialized review.1Financial Crimes Enforcement Network. Advisory on Elder Financial Exploitation The rest of the obligation, from confidentiality to safe harbor to penalties for missing a filing, follows from that core duty.
What Triggers a SAR Filing
The threshold for banks is set by regulation. A SAR is required when a transaction conducted through the institution involves at least $5,000 in funds or other assets and the institution knows, suspects, or has reason to suspect that the transaction involves proceeds from illegal activity, is designed to evade Bank Secrecy Act requirements, or has no apparent lawful purpose after the available facts are examined.2eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions Parallel rules cover credit unions, broker-dealers, and money services businesses.
FinCEN groups elder financial exploitation into two patterns. Elder theft occurs when a trusted person, often a family member, caregiver, or fiduciary, steals an older adult’s assets, funds, or income. Elder scams involve the older adult sending money to a stranger or imposter for a promised benefit that never appears.3Financial Crimes Enforcement Network. Interagency Statement on Elder Financial Exploitation Both patterns are reportable when the transaction meets the dollar threshold and the suspicion standard.
Filing Deadlines
The 30-day clock starts on the date the institution first detects facts suggesting a reportable transaction. If no suspect has been identified by that detection date, the institution gets an additional 30 days to investigate, but a filing cannot be delayed more than 60 calendar days from initial detection.4eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions When the activity demands immediate attention, such as an active scheme actively draining an elder’s accounts, the institution must also contact law enforcement right away rather than waiting for the SAR.
Continuing Activity
One SAR does not close the file. When suspicious activity continues, FinCEN has historically pointed institutions toward filing a follow-up SAR at least every 90 days, with the deadline for the follow-up falling 120 calendar days after the previous related SAR. Updated FinCEN guidance clarifies that institutions are not strictly required to follow that cadence and may file continuing SARs as appropriate under their own risk-based internal controls, provided those controls are reasonably designed to identify and report the activity.5Financial Crimes Enforcement Network. SAR FAQs October 2025 Most compliance teams keep the 90-day cycle because it creates a predictable paper trail regulators expect to see.
Completing the SAR for Elder Exploitation
Two form entries are specific to elder cases. Check the Elder Financial Exploitation box in SAR Field 38(d), and enter the reference key term “EFE FIN-2022-A002” in SAR Field 2, labeled “Filing Institution Note to FinCEN.”1Financial Crimes Enforcement Network. Advisory on Elder Financial Exploitation Those two markers are how FinCEN flags the filing for specialized analysis and how law enforcement locates EFE cases inside the wider BSA database.
The narrative is where the filing lives or dies. A useful narrative includes identifying details for every party involved (names, addresses, dates of birth, account numbers), dollar amounts and dates for each suspicious transaction, the relationship between the elder and any suspected perpetrator when known, and a plain explanation of why the activity looks exploitative rather than routine. Note what changed from the customer’s normal patterns. Boilerplate narratives waste the institution’s compliance work and give investigators nothing to act on.
Confidentiality
Federal law prohibits anyone involved in the SAR process from revealing that a report was filed. The institution and its directors, officers, employees, and agents cannot notify any person involved in the transaction that it has been reported, and they cannot disclose information that would reveal a SAR exists.6Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority Government employees with knowledge of a SAR carry the same restriction.
The prohibition reaches beyond the document itself. It covers any statement that would indirectly reveal a report’s existence, such as telling a customer that their account was flagged for review in connection with a government report.7Financial Crimes Enforcement Network. SAR Confidentiality Reminder for Internal and External Counsel of Financial Institutions A branch employee cannot confirm to a worried adult child that a SAR was filed on a parent’s account, even when the child was the person who first raised the alarm.
Safe Harbor for Filers
Compliance teams sometimes hesitate to file on a long-standing customer. The Bank Secrecy Act addresses that concern directly. Under 31 U.S.C. § 5318(g)(3)(A), any financial institution that discloses a possible legal violation to a government agency, and any employee who makes or requires such a disclosure, is shielded from liability under federal, state, and local law, and under any contract or arbitration agreement.6Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority The institution also has no obligation to notify the person named in the SAR.
Most federal courts have read the safe harbor broadly, treating it as near-absolute immunity that protects institutions even when a disclosure turns out to be unfounded. The practical calculus is straightforward: the legal risk of filing a SAR that proves unnecessary is close to zero; the risk of failing to file when the facts warranted it is not.
Penalties for Failing to File
Civil monetary penalties for missed or deficient SAR filings sit in 31 U.S.C. § 5321. Willful violations of BSA reporting requirements can reach the greater of the amount involved in the transaction (up to $100,000) or $25,000. Negligent violations carry a penalty of up to $500 per instance, and a pattern of negligent violations triggers additional penalties on top of the per-violation amount.8Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties
Enforcement actions carry consequences beyond the fine. Federal banking agencies can issue cease-and-desist orders, remove officers, and in extreme cases revoke charters. When regulators review a bank’s compliance program after an EFE-related failure, they look at whether the institution had adequate internal controls to detect exploitation and whether staff were trained on the red flags FinCEN has published.
Red Flags Staff Should Watch For
FinCEN’s advisories divide the warning signs into transaction-based and behavior-based categories. No single indicator proves exploitation; a cluster is the trigger for a deeper look and, when the standard is met, a SAR.
Financial Red Flags
- Sudden large withdrawals that break with the customer’s history, such as a retiree pulling $10,000 in cash after years of small monthly withdrawals.
- Repeated wire transfers to individuals or entities with no prior relationship to the customer, especially overseas.
- Early liquidation of certificates of deposit or retirement accounts despite penalties, often at someone else’s urging.
- Large purchases of gift cards or prepaid access cards, a hallmark of imposter scams where the victim reads card numbers to a caller claiming to collect a debt or fee.
Behavioral Red Flags
- A previously independent customer now accompanied by a new friend, caregiver, or romantic partner who speaks for them, answers questions directed at the customer, or steers the transaction.
- New powers of attorney, updated beneficiaries, or added account signers, particularly when the changes benefit someone recently introduced into the customer’s life.
- Confusion about the purpose of a transaction, apparent fear, or explanations that sound rehearsed or inconsistent with the customer’s past behavior.
Sharing Information With Other Institutions
Elder exploitation frequently moves across multiple institutions. Funds might travel from a bank to a brokerage, then to a cryptocurrency platform, then overseas, with no single institution seeing the full path. Section 314(b) of the USA PATRIOT Act allows financial institutions, after notifying the Treasury Department, to share information with one another to identify and report activities that may involve money laundering or other financial crimes.9Financial Crimes Enforcement Network. Section 314(b)
Participation is voluntary. Institutions that opt in can exchange customer and transaction data in ways that would otherwise raise privacy concerns, and the broader view often makes the resulting SAR more useful. For EFE cases, where perpetrators deliberately split transactions across institutions to stay under detection thresholds, 314(b) sharing can be what turns three unconnected transactions into a documented pattern.
A Note on Who Can File
The SAR process is exclusively for financial institutions and other entities with BSA reporting obligations. Victims and family members cannot file a SAR directly with FinCEN. If you are worried about an older adult you know, start with the financial institution holding the account and describe the transactions and behavior that concern you; your report can be the trigger that prompts an internal review and a filing. Report to local law enforcement and to your state’s Adult Protective Services agency as well. The national Eldercare Locator at 800-677-1116 can connect you with your local APS office if you do not know how to reach it.10USAging. Eldercare Locator Financial exploitation tends to escalate quickly, so reporting through more than one channel is safer than searching for the single correct one.