After a SAR Is Filed: What the Bank Does Next

The filing button is not the end. What the bank still owes the file, the customer and FinCEN once a SAR leaves the building.

Published	14 October 2026

What a filed SAR is and where it goes

A suspicious activity report is a record of a transaction that may break the law. It is not a charge, and it is not an accusation. It tells the government what the bank saw.

The FFIEC manual says the BSA E-Filing System will not accept filings in which fields marked as critical are left blank. The FFIEC manual says the BSAR replaced the old FinCEN form and gives one data format across industries.

Filing is the start of a process the bank still owns part of. The report itself is covered by suspicious activity report requirements that keep working long after the submit button.

What the bank must still do after filing

The file is not done when it leaves the building. FinCEN's advisory says a financial institution must keep a copy of a SAR and its supporting documentation for five years from the filing date.

Those papers have to be ready to hand over. FinCEN's advisory says financial institutions must provide a requested SAR and its supporting documentation to FinCEN or an appropriate law enforcement or supervisory agency.

The bank should also write down why it filed. The FFIEC manual says banks should document SAR decisions, including the specific reason for filing or not filing a SAR. § 1020.320 says FinCEN or its delegatees examine banks for compliance with that section.

Confidentiality: who can know a SAR exists

This is the rule people ask about most. The FFIEC manual says a SAR and any information that would reveal its existence are confidential, except as necessary to fulfill BSA obligations.

The rule goes further than most staff expect. The FFIEC manual says even the existence or non-existence of a SAR must be kept confidential. So the answer to "will the customer be told?" is no. Telling the customer is itself a breach of the rule.

There are narrow doors. The FFIEC manual says a SAR's underlying facts and supporting documents may be shared with another financial institution to prepare a joint SAR. The FFIEC manual also says a U.S. bank may share a SAR with controlling companies, whether domestic or foreign. § 1020.320 allows a bank to share a SAR within its own corporate structure for purposes consistent with the Bank Secrecy Act.

Banks should set up protections for those doors. The FFIEC manual says banks should maintain arrangements with head offices, controlling companies, and affiliates to protect the confidentiality of SARs.

Continuing suspicious activity and repeat filings

What if the suspicious activity continues? FinCEN's guidelines speak to what comes after the first report. FinCEN's guidelines suggest banks should report continuing suspicious activity by filing a report at least every 90 calendar days.

Each new filing stands on its own. The FFIEC manual says banks are required to file SARs that are complete, thorough, and timely. A follow-up report gets the same care as the first one.

The bank does not have to confirm a crime to keep reporting. The FFIEC manual says banks are not required to investigate or confirm the underlying crime, because investigation is the responsibility of law enforcement. The bank's job is to notice, document and report.

What happens at FinCEN and with law enforcement

Once the report is filed, the confidentiality rule binds the government too. § 1020.320 says a government authority may not disclose a SAR except as needed to fulfill official duties under the Bank Secrecy Act.

Sometimes the work comes back to the bank. The FFIEC manual says law enforcement inquiries and requests can include grand jury subpoenas, National Security Letters, and section 314(a) requests.

Two rules govern that moment. The FFIEC manual says mere receipt of a law enforcement inquiry does not by itself require the bank to file a SAR. And the FFIEC manual says law enforcement discourages banks from referencing a grand jury subpoena in a SAR filed after receiving one. The FFIEC manual says a SAR should reference only the facts and activities that support a finding of suspicious transactions identified by the bank.

A phone call is not a substitute for the form. The FFIEC manual says notifying law enforcement of a suspicious activity does not relieve a bank of its obligation to file a SAR. The FFIEC manual also says a bank that calls the terrorist hot line must also file a SAR.

The safe harbor: protection for the filer

Is the bank protected for having filed? The FFIEC manual describes a safe harbor. The FFIEC manual says federal law provides protection from civil liability for all reports of suspicious transactions made to appropriate authorities.

The FFIEC manual says the safe harbor applies to SARs filed within the required reporting thresholds and to SARs filed voluntarily below the threshold. FinCEN's advisory says statutorily defined financial institutions may voluntarily report suspicious transactions under the suspicious activity reporting safe harbor.

What the bank does not have to do after filing

Filing does not make the bank a detective. The FFIEC manual says FinCEN and the federal banking agencies recognize that a bank cannot detect and report all potentially illicit transactions.

And filing does not mean the customer committed a crime. A suspicious activity report records a suspicion. The FFIEC manual says an appropriate law enforcement authority would generally be the local office of the IRS Criminal Investigation Division or the FBI. Those agencies decide what the suspicion adds up to.

The bank's part is narrower than people think. It builds the suspicious activity report banks process into its controls. It trains staff to refer what looks wrong. It files on time when someone decides to file suspicious activity report paperwork. Then it keeps the file, keeps quiet, and keeps watching.