Skip to main content
Category: Suspicious Activity Reporting

Continuing Activity SAR

Also known as: Continuing Activity Report, Continuing SAR, 90-Day SAR
Simply put

A Continuing Activity SAR is a follow-up Suspicious Activity Report that a financial institution in the United States files when suspicious behavior it previously reported keeps happening. Rather than filing a new report for every transaction, the institution reviews the ongoing activity over a period of time and then submits a further report summarizing it. This helps keep law enforcement informed about patterns of conduct that continue after an initial filing.

Formal definition

In the US Bank Secrecy Act framework administered by FinCEN, a Continuing Activity SAR is a subsequent SAR filing addressing suspicious activity by a subject that continues after an initial SAR has been filed. FinCEN guidance has generally indicated that institutions may report continuing suspicious activity by reviewing it over a set period and then filing a follow-up SAR; more recent FinCEN FAQ guidance describes a framework under which an institution files an initial SAR, reviews the continuing activity over a 90-day period, and files the continuing SAR within 30 days after that 90-day review. This guidance has also clarified that institutions are not necessarily required to conduct separate standalone reviews of customers or accounts solely because a SAR was previously filed. This term is specific to the US SAR regime and does not, by itself, describe suspicious transaction reporting (STR) obligations in other jurisdictions, where terminology, timing, and procedures may differ; exact review periods, filing deadlines, and applicability should be confirmed against current FinCEN guidance and the applicable regulations. A continuing SAR filing reflects an institution's ongoing suspicion and reporting obligation and does not itself establish that any violation of law has occurred.

Why it matters

Suspicious activity is frequently not a one-off event but an ongoing pattern of conduct that persists after an institution files its initial Suspicious Activity Report. The Continuing Activity SAR exists so that law enforcement remains informed about behavior that continues over time, without requiring an institution to file a fresh report for every individual transaction. One stated purpose of SAR filing under the US Bank Secrecy Act framework is to identify violations or potential violations of law to the appropriate law enforcement authorities, and continuing filings extend that visibility across the life of a pattern rather than capturing only a single snapshot.

For compliance functions, the continuing SAR framework directly shapes case management workload, review cadence, and filing timelines. Getting the timing right matters because filings that are late, duplicative, or inconsistent can undermine the usefulness of the intelligence provided to law enforcement and expose the institution to regulatory scrutiny of its BSA program. Recent FinCEN FAQ guidance has clarified aspects of this process, including that institutions are not necessarily required to conduct separate standalone reviews of customers or accounts solely because a SAR was previously filed, a point that affects how firms allocate investigative resources.

It is important to emphasize that a continuing SAR reflects an institution's ongoing suspicion and reporting obligation; it does not itself establish that any violation of law has occurred. The filing is a compliance and intelligence mechanism, not a determination of criminal wrongdoing. This term is specific to the US SAR regime and does not describe suspicious transaction reporting obligations in other jurisdictions, where terminology, timing, and procedures may differ.

Who it's relevant to

BSA/AML Compliance Officers
Compliance officers at US financial institutions rely on the continuing SAR framework to structure their review cadence and filing timelines. They must track when an initial SAR was filed, monitor whether suspicious activity by the subject persists, and ensure follow-up filings summarizing the continuing activity are submitted in line with current FinCEN guidance. Recent clarifications about when separate account reviews are and are not required directly affect how they design their procedures.
Financial Intelligence and Investigations Analysts
Analysts who investigate alerts and prepare SAR narratives use the continuing activity process to consolidate ongoing patterns of conduct into coherent follow-up reports. Rather than documenting each transaction in isolation, they review activity over the defined period and summarize the continuing behavior, which supports clearer and more useful intelligence for law enforcement.
Law Enforcement Recipients
Law enforcement agencies that receive SAR intelligence benefit from continuing activity filings because they remain informed about patterns of conduct that persist after an initial report. One purpose of SAR filing is to identify violations or potential violations of law to the appropriate authorities, and continuing SARs extend that visibility across the duration of an ongoing pattern.
AML Program Auditors and Regulators
Internal auditors, independent testers, and examiners assessing a BSA program review whether continuing SAR practices align with current FinCEN guidance, including timing of follow-up filings and the handling of continuing activity reviews. They evaluate consistency and adequacy of these processes as part of overall program effectiveness rather than as evidence of any underlying criminal conduct.

Inside Continuing Activity SAR

Baseline Reference to Prior Filing
A continuing activity SAR typically identifies and references the previously filed SAR(s) on the same subject or conduct, allowing investigators and regulators to link the reports as part of an ongoing review cycle rather than treating them as isolated filings.
Review Period Coverage
The report generally covers a defined subsequent monitoring period following an earlier filing. In the US, FinCEN guidance describes reviewing ongoing suspicious activity at regular intervals; the specific interval should be confirmed against current FinCEN instructions rather than assumed, as practices and expectations may vary.
Cumulative Activity Summary
It summarizes the additional suspicious activity detected during the new review period, often including aggregate transaction amounts and counts for the period, so the narrative reflects what is new or continuing rather than restating the original filing in full.
Narrative Explaining Continuation
The narrative typically explains why the activity is considered a continuation of previously reported conduct, describing patterns, parties, and the basis for continued suspicion, while avoiding any assertion that the activity constitutes proven criminal wrongdoing.
Terminology and Regime Scope
The 'continuing activity SAR' concept is associated with the US Bank Secrecy Act and FinCEN reporting framework. Other jurisdictions use different instruments and terminology (for example, suspicious transaction reports or SARs under the UK Proceeds of Crime Act), and their expectations for follow-up reporting may differ and should be verified against local rules.

Common questions

Answers to the questions practitioners most commonly ask about Continuing Activity SAR.

Does filing a Continuing Activity SAR mean I've already established that the customer is laundering money?
No. A Suspicious Activity Report, including a continuing activity filing, records suspicion of activity that appears unusual or lacks an apparent lawful purpose; it is a compliance disclosure, not a finding of criminal wrongdoing. The filing does not establish that money laundering or any predicate offense has occurred. That determination is a matter for law enforcement and, ultimately, the courts. Institutions file based on their reasonable assessment of the facts available, and a filing should not be read as proof of guilt.
Is a Continuing Activity SAR a distinct legal category from an ordinary SAR?
In the US context, a continuing activity SAR is generally an operational and procedural mechanism under FinCEN's framework rather than a separate legal instrument. It is used to report ongoing or additional suspicious activity that continues after a prior SAR was filed on the same subject or conduct. The underlying obligation to report suspicion remains the same; the continuing activity designation addresses how and when to update or supplement earlier reporting. Terminology and reporting mechanics differ in other jurisdictions, where the equivalent may be described as a suspicious transaction report or handled through different update procedures, so the specific approach should be confirmed against the applicable regime.
How do we decide when the review period for a Continuing Activity SAR has reached the point where we should file?
Institutions typically establish an internal review cycle for monitoring suspicious activity that continues after an initial SAR, so that additional or ongoing conduct is captured and reported on a recurring basis. The timing and cadence of these reviews are generally governed by the applicable regulatory framework and the institution's own policies and procedures. Because exact timeframes and expectations vary by jurisdiction and can change, the specific review period and filing deadlines should be confirmed against the current rules of the relevant authority, such as FinCEN in the US.
What information should a Continuing Activity SAR contain relative to the prior filing?
A continuing activity report generally references the earlier SAR and describes the additional or ongoing activity observed since that prior filing, rather than simply repeating the original narrative. The aim is to give the receiving authority a clear picture of how the conduct has developed, including new transactions, patterns, or subjects relevant to the continuing suspicion. Institutions should follow the specific field, narrative, and cross-referencing conventions set out in the applicable reporting instructions, which should be confirmed against the current guidance of the relevant authority.
How does the decision to file continuing activity reports interact with whether to maintain or exit the customer relationship?
The obligation to report continuing suspicious activity is generally distinct from the commercial and risk-based decision of whether to retain, restrict, or exit a relationship. Some institutions may choose to maintain an account under enhanced monitoring while continuing to file, while others may move toward exit; these decisions are typically governed by internal risk appetite, policy, and any applicable regulatory expectations. Filing itself is a measure to detect and disclose potential concerns and does not by itself resolve the relationship question, which should be assessed separately and documented accordingly.
How should we handle confidentiality when filing a Continuing Activity SAR?
Confidentiality and anti-tipping-off requirements generally continue to apply to continuing activity filings just as they do to an initial report. In many jurisdictions, disclosing the existence or content of a SAR to the subject or to unauthorized parties is prohibited, and staff should manage supporting documentation and internal communications accordingly. Because the specific scope of these prohibitions and permitted disclosures varies by regime, the applicable confidentiality and tipping-off rules should be confirmed against the relevant framework, such as the US Bank Secrecy Act and FinCEN rules or the equivalent provisions in other jurisdictions.

Common misconceptions

Filing a continuing activity SAR means the subject has been confirmed as a money launderer.
A SAR, including a continuing activity SAR, is a compliance report of suspicion. It does not establish criminal wrongdoing and is not a determination of guilt; it flags activity for the relevant financial intelligence authority to assess.
There is a single, universal rule requiring continuing activity SARs at the same interval everywhere.
The concept is tied to the US BSA/FinCEN framework, and expectations for follow-up or continuing reporting vary by jurisdiction and instrument. Exact review intervals and requirements should be confirmed against the applicable regulation and current guidance rather than assumed to be globally consistent.
A continuing activity SAR simply repeats the original filing.
It generally focuses on the additional or ongoing suspicious activity within the new review period and references the prior filing, rather than duplicating the earlier report in its entirety.

Best practices

Reference the prior SAR(s) clearly within the continuing activity filing so the reports can be linked as part of an ongoing review, and confirm the referencing method against current FinCEN instructions.
Define and document the review period covered, and verify the applicable interval and expectations against current regulatory guidance rather than relying on assumed timeframes.
Focus the narrative on what is new or continuing during the review period, providing cumulative amounts and counts, rather than restating the entire original filing.
Use qualified, factual language in the narrative that describes the basis for continued suspicion without asserting or implying proven criminal conduct.
Maintain an internal decision record explaining why the activity was treated as continuing versus a new, unrelated matter, to support consistency and auditability.
For entities operating across jurisdictions, distinguish the US continuing activity SAR approach from other regimes' reporting instruments and confirm each jurisdiction's follow-up reporting expectations against local rules.