Suspicious Activity Reports (SAR) / Suspicious Transaction Reports (STR)

Suspicious Activity Reports (SAR) – also known as Suspicious Transaction Reports (STR) in many jurisdictions – are legally mandated disclosures that financial intermediaries and other obliged entities must file when they observe transactions or behaviour indicative of money laundering, terrorist financing, or other financial crimes.

• Reporting obligation: Banks, payment service providers, insurers, notaries, lawyers, and further obliged entities are required by law to file reports.
• Confidentiality: Reporting entities are prohibited from informing the customer about the report («tipping-off» prohibition).
• Processing: Financial Intelligence Units (FIUs) analyse SAR/STR and forward relevant cases to law enforcement.
• Global standard: FATF Recommendation 20 obliges all member states to implement SAR/STR reporting systems.

The foundation for subsequent SAR requirements was laid in the United States with the Bank Secrecy Act (BSA) of 1970, which first required financial institutions to report cash transactions exceeding USD 10,000 (Currency Transaction Reports, CTR). The actual SAR obligation was introduced in 1992 by the Annunzio-Wylie Anti-Money Laundering Act. The establishment of the FATF in July 1989 and the publication of its 40 Recommendations in 1990 elevated the SAR/STR concept to a global standard. The EU enshrined the reporting obligation in the 1st Anti-Money Laundering Directive (1991) and further developed it in subsequent directives. Since the 2000s, virtually all FATF members have introduced national SAR/STR systems administered by FIUs. Digitalisation since 2010 has significantly improved both the quality and volume of reports, while automated transaction monitoring (AML-monitoring) systems have been developed in parallel. The EU AML Package of 2024 (AMLAR, Regulation 2024/1624 and AMLD6, Directive 2024/1640) fundamentally reformed SAR/STR obligations in Europe.

SAR/STR obligations apply globally to a broad range of obliged entities:

• Credit institutions and banks
• Payment service providers and currency exchangers
• Insurance companies
• Securities firms and fund managers
• Lawyers, notaries, accountants, and tax advisers (for specific transactions)
• Real estate agents
• Dealers in high-value goods
• Crypto-asset service providers (included in many jurisdictions since 2020)

Exact thresholds, reporting deadlines, and recipient authorities vary by national legislation.

• Obliged entities must maintain internal systems for detecting suspicious transactions.
• SAR/STR must be filed promptly upon discovery, in many countries within 24–72 hours, with the competent FIU.
• Tipping-off prohibition: the customer must not be informed of the report.
• Retention of reporting records typically for 5–10 years.
• No civil liability for SAR/STR filed in good faith (safe harbour provision).
• Failure to report can result in significant fines and criminal prosecution.

3 corrections:
- FATF Recommendation 20: date 2003 incorrect, comes from 2012 revision
- key_dates: BSA 1970 was not a SAR obligation
- BSA 1970 introduced CTR obligation, not SAR obligation
3 updates:
- Missing mention of EU AML Package 2024
- Missing key_dates entry for FATF 40 Recommendations 1990
- Missing key_dates entry for Annunzio-Wylie Act 1992
4 clarifications.
1 note.