SAR
Also known as: suspicious activity report
A suspicious activity report (SAR) is a confidential filing that a regulated financial institution submits to authorities when it detects transactions or behavior that may indicate money laundering, fraud, terrorist financing, or other financial crime.
In identity verification and anti-money-laundering (AML) programs, a SAR is a key escalation mechanism. It records concerns that arise from customer due diligence, transaction monitoring, account behavior, or suspected identity fraud.
In the United States, SARs are generally filed with the Financial Crimes Enforcement Network (FinCEN). In the EU and UK, comparable reports are commonly called suspicious transaction reports (STRs) or suspicious activity reports and are submitted to national financial intelligence units.
When a SAR may be required
A SAR does not require proof that a crime occurred. The reporting institution must have a reasonable basis for suspicion under the rules that apply to it, and must file within the required timeframe.
- Identity documents appear altered, stolen, synthetic, or inconsistent with the applicant's claimed identity.
- An account is opened or used through apparent impersonation, mule activity, or coordinated fraud.
- Transactions lack an apparent lawful purpose, are structured to avoid reporting thresholds, or are inconsistent with the customer's known profile.
- A customer attempts to move funds linked to scams, sanctions evasion, money laundering, or terrorist financing.
Confidentiality and IDV relevance
SARs are confidential. In the US, institutions generally may not tell a customer or other unauthorized person that a SAR was filed or that one is being considered, a restriction often called the SAR confidentiality or anti-tipping-off rule.
Identity-verification tools can provide evidence that informs an institution's review, such as document-authentication results, biometric-match signals, device data, or detected inconsistencies. A tool's fraud alert is not itself a SAR filing decision: the regulated institution remains responsible for investigating, documenting, and reporting as required.
Go deeper: AML Red Flags: The Warning Signs Compliance Teams Watch For.