Suspicious Activity Report (SAR)

Now that you understand the Anti-Money Laundering (AML) program framework, let's look at the primary reporting tool broker-dealers use when they detect potential financial crimes.

What Is a SAR?

• A Suspicious Activity Report (SAR) is a report filed with the Financial Crimes Enforcement Network (FinCEN) when a broker-dealer detects transactions that are suspicious or potentially involve money laundering, fraud, or other illegal activity
• SARs are a key reporting tool in the fight against financial crime
• Filing a SAR does not mean the customer is guilty; it means the activity warrants further investigation by authorities

When Must a SAR Be Filed?

A SAR must be filed when a transaction (or aggregate of related transactions) involves $5,000 or more and the firm knows, suspects, or has reason to suspect the transaction:

• Involves funds from illegal activity
• Is designed to evade reporting requirements (structuring)
• Has no apparent lawful purpose
• Is intended to facilitate criminal activity

The key phrase is "knows, suspects, or has reason to suspect." The firm does not need proof of illegal activity, just reasonable suspicion.

Think of it this way: A SAR works like a "see something, say something" report. Three $4,900 deposits satisfy both requirements: the aggregate total ($14,700) clears the $5,000 threshold, and the pattern qualifies as structuring (deliberately keeping each deposit just below the reporting threshold to avoid detection), which is explicitly one of the listed triggering conditions. The firm does not need to prove illegal intent; the suspicious pattern is enough.

Exam Tip: Gotchas

• The SAR threshold is $5,000 for broker-dealers. Do not confuse this with the $10,000 threshold for Currency Transaction Reports (CTRs), which are a separate filing requirement
• SARs are filed with FinCEN, NOT directly with the FBI, SEC, or local police
• Structuring is not just a red flag; it is one of the listed triggering conditions. Each individual deposit does not need to reach $5,000 on its own: the aggregate of the suspicious pattern counts toward the threshold, and deliberately keeping transactions below the reporting threshold is itself the suspicious activity that triggers the SAR

Who Files the SAR: The RR's Role vs. the AMLCO's Role

This distinction is tested frequently and is easy to miss:

• A registered representative who notices suspicious activity does NOT file the SAR directly with FinCEN
• The RR's responsibility is to report the activity to the firm's AML compliance officer (AMLCO)
• The AMLCO evaluates the report and determines whether a SAR filing is warranted
• Only the firm (through the AMLCO) files the SAR with FinCEN

In other words, the filing chain is: RR detects suspicious activity → reports to AMLCO → AMLCO decides whether to file → firm files SAR with FinCEN.

Exam Tip: Gotchas

• If a question asks what a registered representative should do first upon noticing suspicious activity, the answer is always to report to the firm's AML compliance officer, not to contact FinCEN directly. The RR reports; the AMLCO files.

SAR Filing Deadlines

• The clock starts when the firm first detects facts that may justify filing
• In no case can filing be delayed beyond 60 days

The Tipping-Off Prohibition

This rule is heavily tested on the SIE exam:

• The firm must NOT notify the customer that a SAR has been filed
• This prohibition is called the "tipping off" rule
• Tipping off is itself a violation of federal law
• Even if the customer directly asks whether a SAR has been filed, the firm cannot disclose the filing
• No director, officer, employee, or agent of the firm may reveal the existence of a SAR

Who CAN know about the SAR:

• FinCEN (receives the filing)
• Federal, state, or local law enforcement agencies
• Federal regulatory authorities examining the firm
• Self-Regulatory Organizations (SROs) like FINRA examining the firm for SAR compliance

Exam Tip: Gotchas

• The firm must NEVER tell the customer that a SAR was filed. Even if the customer asks directly, the firm cannot disclose the filing. This "tipping off" prohibition is absolute
• The tipping-off prohibition applies to everyone at the firm, not just the compliance officer

SAR vs. Voluntary Reporting

• SARs are mandatory when the filing criteria are met
• A firm cannot decide to skip filing because it believes the activity is harmless
• Filing a SAR does not require the firm to close the account. The account relationship can continue
• SARs are filed with FinCEN, not with law enforcement directly (though FinCEN shares information with law enforcement)

Exam Tip: Gotchas

• Filing a SAR does not require closing the customer's account. The firm can maintain the relationship while authorities investigate