What Is a SAR Report: Triggers, Filing, and Penalties

A SAR report, short for Suspicious Activity Report, is a confidential document that banks and other financial institutions file with the federal government when they detect a transaction that may involve money laundering, fraud, terrorist financing, or other illegal activity. The reports go to the Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Treasury, where federal investigators use them to build cases against financial criminals. Institutions filed roughly 4.7 million SARs in fiscal year 2024, about 12,870 every day.¹

What a SAR Actually Does

The Bank Secrecy Act requires covered financial institutions to monitor customer transactions and report anything that looks like it could involve illegal conduct. A SAR is the formal mechanism for that reporting. When a compliance officer spots something unusual — a pattern of deposits that seems designed to avoid reporting limits, a wire transfer with no clear purpose, or funds with no obvious lawful source — they document it and submit the report electronically to FinCEN.²

A SAR is not a criminal charge, and it is not an accusation. It is a flag. Agencies including the FBI, IRS Criminal Investigation, and the Drug Enforcement Administration search FinCEN’s database to connect activity across institutions and cases. Many SARs lead nowhere. Some become the starting point for a federal investigation.

What Triggers a SAR

Institutions do not file a SAR for every odd transaction. The filing obligation kicks in when a transaction crosses a dollar threshold and the institution knows, suspects, or has reason to suspect that the activity involves illegal conduct.

Dollar Thresholds

For most institutions, a SAR is required when the suspicious transaction involves or aggregates to at least $5,000. Money services businesses have a lower threshold of $2,000.³ One exception matters: when the suspicious activity involves insider abuse by a director, officer, employee, or agent of the institution itself, there is no minimum amount. The institution must file no matter how small the transaction.⁴

The Four Categories of Suspicion

FinCEN’s filing instructions describe four types of activity that warrant a SAR once the dollar threshold is met:³

Funds derived from illegal activity, or moved to conceal such funds.
Transactions designed to evade BSA reporting requirements. The classic example is structuring, where someone splits a large cash deposit into smaller ones to stay under the $10,000 threshold that triggers a Currency Transaction Report. Structuring is itself a federal crime carrying up to five years in prison.⁵
Transactions with no apparent lawful purpose that the institution cannot explain after reviewing the facts.
Use of the institution to facilitate criminal activity such as fraud, embezzlement, or terrorist financing.

Compliance officers rely on their knowledge of each customer’s normal patterns to spot deviations. A retiree who suddenly starts wiring large sums overseas, a small business receiving deposits that dwarf its reported revenue, or a customer who gets evasive when asked about the source of funds can all trigger a filing.

What a SAR Contains

Each report identifies the person or entity involved: full name, physical address, Social Security or Taxpayer Identification Number, relevant account numbers, and the dates and amounts of the transactions in question. The most important field is the narrative, where the filer describes the suspicious behavior in plain language — what happened, when, who was involved, and why it raised concerns. Investigators read the narrative to decide whether a report warrants further attention, so its quality often determines whether a case moves forward or stays in the database.

When SARs Must Be Filed

Once the institution first detects facts that could warrant a SAR, it has 30 calendar days to file. If no suspect can be identified within that window, the institution gets an additional 30 days, but the report can never be delayed more than 60 days from the initial detection.² All filings go through FinCEN’s BSA E-Filing System; paper filings are no longer accepted.⁶

When suspicious activity continues after the initial report, FinCEN guidance recommends reviewing it in 90-day cycles. An institution that chooses to file a follow-up SAR has 120 calendar days from the previous SAR filing to submit the new one.⁷

Why You Won’t Be Told You’re the Subject of One

Federal law imposes strict secrecy around SARs. Under 31 U.S.C. 5318(g)(2), no one at the filing institution — current or former employee, director, officer, or contractor — may tell any person involved in the reported transaction that a SAR has been filed, or reveal any information that would give away its existence.⁸ This “tipping off” prohibition exists so that suspects cannot destroy evidence or flee before investigators can act.

If you are the subject of a SAR, you generally have no way to find out. FinCEN treats SARs as confidential and does not disclose them to the people they describe.

To keep institutions from hesitating out of fear of lawsuits, the same statute provides a safe harbor. Any institution or employee who files a SAR — required or voluntary — is shielded from liability under any federal or state law, regulation, or contract for making the disclosure, even if the report turns out to be unfounded, as long as the filer acted in good faith.⁸

Who Has to File

Federal regulations in 31 CFR Chapter X set out which businesses must file SARs, and the list runs beyond traditional banking.⁹ It covers:

Commercial banks, trust companies, savings associations, and credit unions.¹⁰
Casinos and card clubs with more than $1 million in gross annual gaming revenue.
Money services businesses, including currency exchanges, check cashers, and money transmitters.
Securities brokers and dealers registered with the SEC.
Insurance companies that issue permanent life insurance, annuities, or other products with cash value.¹¹
Dealers in precious metals, stones, or jewels that both bought and sold more than $50,000 in covered goods in the prior year.¹²
Mutual funds, futures commission merchants, operators of credit card systems, loan and finance companies, and housing government-sponsored enterprises.

The Bank Secrecy Act’s definition of “financial institution” is deliberately broad and reaches further still — to travel agencies, pawnbrokers, vehicle sellers, and the U.S. Postal Service — although not all of these currently have active SAR filing obligations under FinCEN’s regulations.¹³

Penalties for Getting It Wrong

Failing to file a required SAR, or improperly disclosing one, can carry serious consequences on both the civil and criminal side.

On the civil side, willful BSA violations expose institutions and individuals to money penalties starting at the greater of $100,000 or $25,000 per violation under the statute.¹⁴ Those figures are adjusted for inflation. As of early 2025, the inflation-adjusted range for a willful BSA violation ran from $71,545 to $286,184 per violation.¹⁵

Criminal penalties are stiffer. A willful BSA violation, including unauthorized disclosure of a SAR, can bring a fine of up to $250,000, up to five years in prison, or both. When the violation is committed alongside another federal offense or as part of a pattern of illegal activity involving more than $100,000 over 12 months, the maximums rise to $500,000 and 10 years.¹⁶ Structuring transactions to evade reporting thresholds is a separate crime with its own five- and ten-year maximums.⁵

1
FinCEN. FinCEN Year in Review for FY 2024
2
eCFR. 12 CFR 208.62 – Suspicious Activity Reports
3
FinCEN. FinCEN Suspicious Activity Report Electronic Filing Instructions
4
eCFR. 12 CFR 21.11 – Suspicious Activity Report
5
Office of the Law Revision Counsel. 31 USC 5324 – Structuring Transactions to Evade Reporting Requirement
6
FinCEN. Suspicious Activity Reports (SARs)
7
Financial Crimes Enforcement Network. Frequently Asked Questions Regarding the FinCEN Suspicious Activity Report (SAR)
8
Office of the Law Revision Counsel. 31 USC 5318 – Compliance, Exemptions, and Summons Authority
9
eCFR. 31 CFR Chapter X – Financial Crimes Enforcement Network, Department of the Treasury
10
eCFR. 31 CFR Part 1010 – General Provisions
11
eCFR. 31 CFR Part 1025 – Rules for Insurance Companies
12
eCFR. 31 CFR Part 1027 – Rules for Dealers in Precious Metals, Precious Stones, or Jewels
13
Office of the Law Revision Counsel. 31 USC 5312 – Definitions and Application
14
Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties
15
eCFR. 31 CFR 1010.821 – Penalty Adjustment and Table
16
GovInfo. 31 USC 5322 – Criminal Penalties