SAR
Suspicious Activity Report
SAR (Suspicious Activity Report) is a report that a financial institution files with a financial intelligence unit when a transaction or customer's behavior raises suspicion of money laundering or terrorist financing.
What is SAR (Suspicious Activity Report)?
A SAR is not an accusation or proof of a crime. It is a signal: the company's compliance team notices transactions or behavior that do not match the customer's profile and passes the information to the regulator. The state then decides what happens next.
## How it works
Monitoring triggers first: rules and scoring models flag transactions, for example, splitting amounts below the reporting threshold, a sudden change in login geography, transfers between unrelated accounts, or large deposits on an account with no history. An analyst reviews the alert and checks it against KYC data and the source of funds. If the suspicion remains, a SAR is prepared with a description of the facts, the period, the parties involved, and the reasons for suspicion.
## Where it applies
Banks and payment institutions, EMIs and PSPs, crypto exchanges and VASPs, and licensed online casino and betting operators. In the US, reports are filed with FinCEN under the Bank Secrecy Act requirements. In the EU and other jurisdictions, they go to national financial intelligence units under rules based on FATF recommendations. Deadlines and thresholds depend on the jurisdiction and type of organization and should be confirmed against local regulation.
## What matters for practitioners
There is a ban on tipping-off: you must not tell a customer that a report has been or is being filed regarding their transactions. You must not refuse service solely because a SAR was filed, without a compliance decision. Documents and the supporting rationale should be retained for the period set by the regulator. A common mistake is filing a formal report without substantive content: regulators need specific facts, not a general statement that the transaction is suspicious.
## Impact in gambling and crypto
In online casinos, a SAR is often linked to deposits through chains of e-wallets and crypto exchangers, rapid withdrawals after minimal play, and the use of other people's cards. In crypto, it is linked to transfers to addresses associated with fraud or sanctioned services. Account blocks and payout delays should rest on internal rules and regulatory requirements, not arbitrary decisions.
FAQ
Who files a SAR?
The report is prepared and filed by the financial institution or its compliance unit, not by an individual employee acting on their own. Inside the company, the decision is usually made by the responsible AML officer.
Does the customer find out that a SAR was filed?
No, disclosing that a SAR was filed is prohibited in most jurisdictions. The customer may be told about a suspension or a request for documents, but without any mention of the report.
How does a SAR differ from a routine document request?
A document request is an internal customer check. A SAR is a formal notice to the regulator about suspicion, and it is shared outside the company.