What is SAR?

Suspicious Activity Report

Why SAR Matters

SARs are the primary mechanism through which financial institutions communicate potential financial crime to law enforcement. They serve as critical intelligence that enables authorities to detect, investigate, and prosecute money laundering, terrorist financing, and other illicit activities. FinCEN receives over 4 million SARs annually, and these reports have been instrumental in uncovering major criminal networks, corruption schemes, and terrorist plots. For compliance teams, timely and accurate SAR filing is both a legal obligation and a cornerstone of an effective AML program.

Regulatory Implications

SAR requirements are established under various regulatory frameworks:

• Filing threshold: In the US, financial institutions must file a SAR for any suspicious transaction involving $5,000 or more. Money services businesses (including crypto exchanges) have a $2,000 threshold.
• Filing timeline: SARs must typically be filed within 30 calendar days of detecting suspicious activity. If no suspect is identified, a 60-day window may apply.
• Confidentiality: SAR filings are strictly confidential. Institutions are prohibited from disclosing to the subject of a SAR that a report has been filed (tipping off).
• Safe harbor: Institutions and their employees are protected from liability for filing SARs in good faith, even if the reported activity turns out to be legitimate.
• Record retention: SARs and supporting documentation must be maintained for five years from the date of filing.

How SAR Relates to Compliance Monitoring

SAR requirements evolve through regulatory guidance, advisory updates, and typology reports. FinCEN periodically updates SAR filing instructions, introduces new red flag indicators, and issues advisories targeting specific threats (e.g., ransomware, human trafficking, crypto-related illicit finance). RegPulse tracks all SAR-related regulatory developments across jurisdictions, helping compliance teams maintain current filing practices and detection scenarios.