Browse FINRA SIE & Series Exam Guides

Suspicious Activity Reporting (SAR)

Learn when firms file suspicious activity reports and how SAR confidentiality works.

4.5.3 Suspicious Activity Reporting (SAR)

Suspicious Activity Reporting (SAR) plays a pivotal role in the financial industry’s efforts to combat money laundering and other financial crimes. As part of the Anti-Money Laundering (AML) compliance framework, SARs are essential tools that help regulatory authorities and financial institutions detect and prevent illegal activities. This section will provide a comprehensive overview of SARs, detailing when and how they should be filed, the confidentiality requirements, and the regulatory responsibilities of financial institutions.

Definition of Suspicious Activity Reporting (SAR)

A Suspicious Activity Report (SAR) is a document that financial institutions must file with the Financial Crimes Enforcement Network (FinCEN) whenever there is a suspicion that a transaction might involve illegal activities, such as money laundering or fraud. SARs are critical in providing law enforcement agencies with the information needed to investigate and combat financial crimes.

When to File a SAR

Financial institutions are required to file a SAR when they identify a transaction involving $5,000 or more and have reason to suspect that the transaction:

  • Involves funds derived from illegal activities.
  • Is designed to evade the Bank Secrecy Act (BSA) requirements.
  • Has no business or apparent lawful purpose.
  • Involves the use of the firm to facilitate criminal activity.

These criteria are designed to ensure that financial institutions remain vigilant and proactive in identifying and reporting suspicious activities.

Practical Example

Consider a scenario where a customer makes a series of deposits just below the $10,000 threshold, which triggers the Currency Transaction Report (CTR) requirement. This pattern, known as “structuring,” is designed to evade reporting requirements and should prompt the filing of a SAR.

Filing Requirements

Timing

A SAR must be filed within 30 calendar days after the financial institution detects facts that may constitute a basis for filing. If no suspect is identified, the institution may delay filing for an additional 30 days to identify a suspect, but in no case should filing be delayed more than 60 days.

Confidentiality

The filing of a SAR is strictly confidential. Financial institutions are prohibited from disclosing the existence or contents of a SAR to the person involved in the transaction. This confidentiality is crucial to ensure that the subject of the SAR does not alter their behavior or attempt to cover their tracks.

Contents of a SAR

A SAR must include:

  • A detailed description of the transaction(s).
  • Information about the parties involved, including names, addresses, and identification numbers.
  • The reasons for suspicion, detailing why the transaction is considered suspicious.

Recordkeeping

Financial institutions must retain a copy of the SAR and all supporting documentation for five years from the date of filing. This documentation should be readily accessible for examination by regulatory authorities.

Regulatory Responsibility

Financial institutions have a regulatory responsibility to establish and maintain effective policies and procedures for detecting and reporting suspicious activities. This includes:

  • Implementing a robust AML program that includes SAR filing procedures.
  • Training employees to recognize red flags that may indicate suspicious activities.
  • Regularly reviewing and updating AML policies and procedures to ensure compliance with current regulations.

Safe Harbor Provision

The Safe Harbor provision protects financial institutions and their employees from liability when they report suspicious activities in good faith. This legal protection encourages institutions to report suspicious activities without fear of legal repercussions, provided that the report is made in good faith.

Glossary

  • Suspicious Activity Report (SAR): A report filed to authorities detailing transactions that are suspicious in nature.
  • Safe Harbor: Legal protection for those who report suspicious activities.

References

SIE Exam Practice Questions: Suspicious Activity Reporting (SAR)

Loading quiz…

By understanding the intricacies of Suspicious Activity Reporting, you are better equipped to ensure compliance with AML regulations and contribute to the integrity of the financial system. This knowledge is not only vital for passing the SIE Exam but also for your future career in the securities industry.

Revised on Thursday, April 23, 2026