Skip to main content
FinCrime Institute
Category: Suspicious Activity Reporting

SAR Decision

Also known as: SAR Decision-Making Process, SAR Filing Decision
Simply put

A SAR decision is the judgment a financial institution makes about whether a customer's activity is suspicious enough to be reported to the authorities through a Suspicious Activity Report (SAR). This is a subjective assessment, meaning it relies on the institution's informed judgment rather than a simple mechanical rule. Making the decision to file does not, by itself, prove that any wrongdoing has occurred.

Formal definition

The SAR decision refers to the internal determination by an obliged financial institution as to whether identified activity meets the threshold for filing a Suspicious Activity Report. In the US context, FinCEN and the FFIEC BSA/AML Examination Manual describe this as an inherently subjective judgment; supervisory examiners focus not on any individual filing outcome but on whether the institution maintains an effective, documented SAR decision-making process. The decision typically follows detection, alert review, and investigation stages, and rests on whether the institution has reason to suspect activity may be linked to money laundering or other financial crime. Note that terminology and specific filing standards vary by jurisdiction (for example, other regimes use the term Suspicious Transaction Report, or STR), and that a decision to file establishes only a reporting obligation, not a finding of criminal conduct. Exact regulatory thresholds and procedural requirements should be confirmed against the applicable regime.

Why it matters

The SAR decision sits at the heart of an institution's suspicious activity reporting framework because it is the point at which detection and investigation translate into a reportable outcome. In the US context, both FinCEN and the FFIEC BSA/AML Examination Manual characterize this decision as an inherently subjective judgment rather than the application of a mechanical rule. That subjectivity is precisely why it carries supervisory weight: examiners generally do not second-guess any single filing outcome, but they do assess whether the institution maintains an effective, documented SAR decision-making process behind those outcomes.

The distinction matters for how compliance teams are judged and how they protect themselves. Because the standard is whether an institution had reason to suspect that activity may be linked to money laundering or other financial crime, consistency, documentation, and defensible reasoning tend to be more important than reaching a particular conclusion in any one case. A poorly governed process can expose an institution to supervisory criticism even where individual filings appear reasonable, and a strong process can withstand scrutiny even where reasonable analysts might have reached different conclusions.

Equally important is what the SAR decision does not mean. A decision to file establishes only a reporting obligation; it is not a finding that a crime has occurred, and it should never be treated as proof of a customer's wrongdoing. Conversely, a decision not to file does not by itself demonstrate that activity was legitimate. Keeping these boundaries clear helps institutions avoid both under-reporting and the mischaracterization of customers, and it reinforces that the reporting regime is a mechanism to inform authorities rather than to adjudicate guilt. Terminology also varies by jurisdiction, and exact filing standards should be confirmed against the applicable regime.

Who it's relevant to

Compliance Officers and BSA/AML Officers
Those responsible for the institution's reporting framework must ensure the SAR decision-making process is effective and documented, since supervisory examiners focus on the quality of the process rather than any single filing outcome. This includes defining escalation paths, review standards, and record-keeping expectations that can withstand examination.
Financial Intelligence and Investigations Analysts
Analysts who review alerts and conduct investigations exercise the informed, subjective judgment at the core of the SAR decision. Their reasoning and documentation are central to demonstrating that the institution had, or lacked, reason to suspect that activity may be linked to money laundering or other financial crime.
Supervisory Examiners and Regulators
In the US context, examiners applying the FFIEC BSA/AML Examination Manual assess whether an institution maintains an effective SAR decision-making process, rather than critiquing individual filing decisions. This shapes how institutions are expected to govern and evidence their reporting judgments.
Legal and Risk Professionals
Legal and risk teams help ensure the institution understands the boundaries of the SAR decision, including that a decision to file establishes only a reporting obligation and not a finding of criminal conduct. They also help navigate jurisdictional differences in terminology and filing standards.

Inside SAR Decision

Suspicion Threshold Assessment
The evaluation of whether the information gathered meets the applicable legal or regulatory threshold for reporting. In the US, FinCEN rules under the Bank Secrecy Act generally frame this around a 'suspicion' or 'reason to suspect' standard for covered institutions; in the UK, the Proceeds of Crime Act frames it around knowledge or suspicion. Thresholds and precise wording vary by jurisdiction and should be confirmed against the applicable regime.
Alert or Trigger Source
The origin of the matter under review, such as a transaction monitoring alert, a sanctions or PEP screening hit, an employee referral, or law enforcement inquiry. The source informs but does not determine the decision, and a screening match or alert does not by itself establish that a report is warranted or that wrongdoing has occurred.
Investigation and Supporting Documentation
The factual record underpinning the decision, including transaction analysis, customer due diligence information, and any additional inquiries made. This forms the evidentiary basis on which a reasoned decision to file or not file is reached and is typically retained for record-keeping purposes.
Decision Rationale
The documented reasoning for filing or declining to file, explaining how the available facts relate to the applicable suspicion standard. A 'no-file' decision generally also requires a rationale, as the decision not to report is itself a decision subject to internal governance.
Decision Maker and Governance
Identification of the individual or committee authorized to make the determination, which in many jurisdictions is the designated compliance function such as a Money Laundering Reporting Officer (UK terminology) or a designated BSA/AML officer or nominated official. Authority and titles differ by regime.
Output and Terminology
The resulting filing, where warranted. Terminology differs by jurisdiction: a Suspicious Activity Report (SAR) is the term used under the US BSA/FinCEN framework, while a Suspicious Transaction Report (STR) is used in many other jurisdictions and under FATF-aligned regimes. The two are related but not always identical in scope or triggering criteria.

Common questions

Answers to the questions practitioners most commonly ask about SAR Decision.

Does filing a SAR mean the institution has concluded that a crime occurred?
No. A SAR decision reflects a determination that a transaction or activity is suspicious or meets the applicable reporting standard, not a finding of criminal wrongdoing. The compliance obligation to report is distinct from any criminal-law conclusion, which is a matter for law enforcement and, ultimately, the courts. Filing does not establish guilt, and a decision not to file does not certify innocence; each is a risk and compliance judgment made against the relevant regulatory threshold.
Is the decision to file a SAR the same as detecting a sanctions or PEP match, or generating a transaction alert?
No. An alert, screening hit, or PEP match is an input that may prompt review, not a SAR decision in itself. The SAR decision is a separate evaluative step in which an analyst or committee assesses whether the underlying activity meets the reporting standard applicable in the relevant jurisdiction. Many alerts are resolved without any filing, and a SAR may arise from sources other than automated alerts. Treating a match as equivalent to a filing decision conflates detection with the reasoned determination that follows it.
Who within an obliged entity should hold authority to make the final SAR decision?
Practice varies by jurisdiction and by the size and structure of the institution. In many regimes the final decision rests with a designated officer, often the nominated officer or money laundering reporting officer, or with a review committee operating under that officer's authority. Terminology and the precise role differ across regimes, so institutions should map decision authority to the specific requirements of their applicable rules and document who holds it. Exact designations should be confirmed against the governing regulation.
How should the SAR decision be documented?
Institutions generally maintain a record of the rationale for both filing and non-filing decisions, capturing the information reviewed, the analysis applied, and the individual or body making the determination. Documentation supports auditability, regulatory examination, and consistency across cases. Retention periods and specific record-keeping expectations vary by jurisdiction and should be confirmed against the applicable regulation.
What are the confidentiality considerations once a SAR decision is made?
Many regimes impose restrictions on disclosing that a SAR has been filed or contemplated, commonly referred to as tipping-off or prohibited disclosure provisions. These typically limit informing the customer or third parties about the report or related investigation. The precise scope, exceptions, and permitted internal or group-wide disclosures differ by jurisdiction, so the applicable rules should be consulted before any communication about the decision.
How does the SAR decision relate to continuing or exiting the customer relationship?
A SAR decision does not automatically require terminating or maintaining a relationship; these are related but separate determinations. In some jurisdictions, continuing to transact after a report may raise additional considerations, and institutions often assess whether to seek any required consent or guidance before proceeding. Because obligations around continued activity and exit differ across regimes, these steps should be evaluated against the specific applicable rules rather than assumed to follow uniformly from the filing itself.

Common misconceptions

A SAR decision is a finding that a customer has committed a crime.
A decision to file is a compliance determination that available information meets the applicable suspicion threshold; it does not establish criminal wrongdoing. The compliance meaning of a filing is distinct from any criminal-law finding, which is a matter for authorities and courts.
Deciding not to file requires no documentation because nothing was reported.
A decision not to file is itself a decision that is generally subject to internal governance and record-keeping. The rationale for declining to report is typically documented so the reasoning can be evidenced later.
An alert, screening hit, or PEP match automatically requires a filing.
Alerts and matches are trigger sources that prompt review, not conclusions. Whether a report is warranted depends on assessing the facts against the applicable suspicion standard, and many alerts are resolved without a filing.

Best practices

Confirm the applicable suspicion or reporting threshold against the specific governing regime (for example FinCEN rules under the BSA, or the UK Proceeds of Crime Act) rather than assuming a single global standard, and apply the correct local terminology (SAR versus STR).
Document the decision rationale for both file and no-file outcomes, clearly linking the available facts to the applicable threshold.
Retain the supporting investigation record and identify the trigger source, while recognizing that an alert or screening match is not by itself a basis to conclude wrongdoing.
Ensure the decision is made by a duly authorized decision maker within the compliance governance structure, consistent with the roles defined in the applicable jurisdiction.
Keep the compliance determination separate from any assertion of criminality in all internal documentation and communications.
Periodically review decision quality and consistency against internal policy, confirming that exact thresholds and procedures remain aligned with current regulatory requirements.