# Suspicious Activity Report A SAR is the filing a bank sends to **[[FinCEN]]** when it concludes a transaction may involve illicit funds. It is the operative instrument of the [[Bank Secrecy Act]] regime — the point at which a private institution's private judgment becomes a government record. Created by the **Annunzio-Wylie Anti-Money Laundering Act of 1992**, which consolidated a patchwork of earlier criminal-referral forms into a single report. ## The mechanics - **Trigger:** the institution knows, suspects, or has reason to suspect that a transaction involves illegal funds, is designed to evade BSA requirements, has no apparent lawful purpose, or facilitates criminal activity. **There is no dollar threshold** — unlike a Currency Transaction Report, a SAR can be filed on any amount. - **Confidentiality:** it is a **crime to notify the customer** that a SAR has been filed. This is why banks that exit a client relationship give no reason, and why "debanking" complaints so often encounter a wall of silence — the institution may be legally barred from explaining. - **Safe harbor:** the filer is shielded from civil liability for reporting, which removes the disincentive to file but does not create an incentive. - **Volume:** millions are filed annually. ## The structural problem The trigger is the institution's own suspicion, and the statute sets no hard deadline enforceable against a bank that would prefer to wait. Compliance staff assessing a lucrative client's transactions are being asked to generate a government record adverse to a relationship their employer profits from. The **[[Ron Wyden]] report of 4 August 2026**, *Looking the Other Way*, is the sharpest available illustration. Reviewing SARs and litigation records, it found that bankers at [[JPMorgan Chase]], [[Bank of America]] and [[Deutsche Bank]] were aware of suspicious [[Jeffrey Epstein]] transactions **as far back as 2002** and in most cases did not alert Treasury until after his 2019 arrest. Bank of America's filings on roughly $170 million in transactions connected to [[Leon Black]] — including some the bank described as having "no apparent economic, business or lawful purpose" — arrived **five to seven years late**. The reports were accurate. The reporting was useless. A SAR filed years after the fact satisfies the form of the obligation and defeats its function entirely. ## Why it matters for the KB **1. Delegated detection is the design flaw, not an implementation failure.** The government does not watch the transactions; it requires the banks to watch and report. That makes the enforcement regime's effectiveness a function of the regulated party's willingness, which is exactly the variable it cannot control. **2. Volume is used as evidence of function.** Millions of filings a year make the system look healthy in aggregate while the specific high-value cases go unreported for years. Aggregate activity is a poor proxy for enforcement — a recurring measurement error across the vault's regulatory material. **3. The confidentiality rule shapes the debanking fight.** Because institutions cannot say why an account was closed, every closure is available to be characterized as political. Some are; some are AML compliance; the rule makes the two indistinguishable from outside. ## See Also - [[Bank Secrecy Act]] — the statute - [[FinCEN]] — where reports go - [[Money Laundering]] · [[FinCEN Files]] - [[Bank of America]] · [[JPMorgan Chase]] · [[Deutsche Bank]] · [[Jeffrey Epstein]]