Lesson 08 of 8
Practical Recap: Your SAR-Writing Checklist
5 min read · SAR
Pull it all together into one repeatable routine — decide, gather, write, review, file — covering the trigger, the six elements, the structure, the four review passes, and the deadlines and confidentiality guardrails.
Everything in one mental model
- Decide → gather → write → review → file
- One checklist that covers the whole workshop
- Built to run before any SAR leaves your desk
- Today: turn skills into a repeatable routine
We've covered a lot, so this final lecture pulls it into one mental model you can carry into real work. The whole workshop reduces to five moves in order: decide whether to file, gather the facts, write the narrative, review it, and file it on time. Around that runs a single checklist that touches everything we've learned, and the goal of this lecture is to make that checklist a routine, something you run automatically before any SAR leaves your desk.
Skills you have to think about hard are fragile; skills you've turned into a habit hold up under deadline pressure. So let's assemble the one-page checklist and walk it end to end.
Step 1 — The decision
- Threshold met for your institution type? ($5,000 bank aggregate)
- Know, suspect, or have reason to suspect — suspicion, not proof
- Filing → proceed; no-file → document the rationale
- Don't wait for certainty the rule never required
Step one, the decision, the question that has to come before any writing. Is the threshold met for your institution type, five thousand dollars in aggregate for a bank where there's a suspect, with the lower or different thresholds we noted for other institutions. And does the activity meet the standard, do you know, suspect, or have reason to suspect funds tied to illegal activity, evasion of Bank Secrecy Act rules, no apparent lawful purpose, or use of the institution to facilitate crime.
Remember the bar is suspicion, not proof, so don't stall waiting for certainty. If you're filing, proceed to the next step. If you're not, write a documented no-file rationale that would satisfy a skeptical reviewer a year from now, because that's exactly where under-filing gets caught.
Step 2 — Gather, then Step 3 — Write
- Gather: transactions, dates, parties, accounts, supporting docs
- Write the introduction: who, what, how much, when
- Body: chronological, concrete, money flow woven in
- Conclusion: state the suspicion plainly — no new facts
Step two, gather. Before you write, pull the actual transactions with dates and amounts, identify every party and account, and line up the supporting documents, so you're telling the story from facts, not memory. Step three, write, using the structure we built.
Open with a short introduction that gives who, what, how much, and when in a sentence or two. Tell the body chronologically, concrete and specific, grouping related transactions and weaving in the how so the money flow is traceable. Close with a conclusion that states the suspicion plainly and introduces no new facts.
And throughout, hit all six elements, who, what, when, where, why, and how, in plain English, with jargon defined and the narrative self-contained so it stands on its own. That's the draft.
Step 4 — Review (the four passes)
- Elements: all six present and specific (especially why and how)
- Clarity: stranger test; relevance: 'so what?' test
- Accuracy: names, dates, amounts match the fields and records
- Confidentiality and objective tone — suspicion, not guilt
Step four, review, running the four passes from the last lecture. First, the elements pass: confirm all six are present and specific, scrutinizing the why and the how hardest because those fail most often. Second, clarity and relevance: the stranger test, would an outsider understand it cold, and the so-what test, does every sentence advance the suspicion, cutting what doesn't.
Third, accuracy and completeness: do the narrative and the structured fields agree, and is every name, date, and dollar figure verified against the records. Fourth, confidentiality and tone: nothing that hints at tipping off, an objective factual voice, suspicion stated rather than guilt asserted. Four passes, a couple of minutes, and most of what a reviewer or examiner would flag is gone before they ever see it.
Step 5 — File, and the rules around it
- File within 30 days of detection (60 if no suspect)
- FinCEN SAR via BSA E-Filing; docs stay in the file
- Never tip off — 31 USC 5318(g)(2)
- Review continuing activity (~90 days); retain records (~5 years)
Step five, file, inside the guardrails we covered. File within thirty days of initial detection, or sixty if no suspect could be identified, and remember the clock started at detection, not at write-up. Submit the FinCEN SAR through the BSA E-Filing System, keeping supporting documents in the institution's file rather than in the narrative.
Honor confidentiality absolutely, never disclose the SAR to the subject or anyone unauthorized, directly or indirectly, under thirty-one U-S-C fifty-three eighteen g-two. And remember the after: review continuing activity at regular intervals, commonly around ninety days, and retain the SAR and its supporting records for the required period, generally five years. File it right, protect it, and keep watching.
Those steps close the loop on a single SAR.
Wrap: the one-page habit
- Decide → gather → write → review → file
- Six elements, clear structure, four review passes, the guardrails
- Practice on fact patterns; then apply to your own drafts
- A clear narrative is detection work that actually pays off
That's the workshop, in one page you can keep beside you. Decide, gather, write, review, file. Inside writing live the six elements and the introduction-body-conclusion structure; inside review live the four passes; around filing live the deadline, the confidentiality rule, continuing activity, and retention.
Practice it on fabricated fact patterns until the moves are automatic, then apply the same routine to your real drafts at work, and notice how much faster a clean narrative comes once the checklist is a habit. Here's the thought to leave with: somewhere downstream, a person you'll never meet reads your narrative to decide whether to act. A clear, complete, specific narrative is what makes all the detection work that came before it actually matter.
Write the one that holds up. Thanks for spending this time with AMLReady, now go practice.
Sources
- 31 CFR 1020.320 — Reports by banks of suspicious transactions
- 31 USC 5318(g)(2) — SAR confidentiality
- FinCEN, Guidance on Preparing a Complete and Sufficient Suspicious Activity Report Narrative (FIN-2003-G002)
- FFIEC BSA/AML Examination Manual — Suspicious Activity Reporting
Test your knowledge
A few SAR questions on this material — pick an answer to see the explanation.
Q1. For 'when,' the narrative describes a pattern spanning eight months. How should the writer present the timing?
Q2. A SAR narrative covers activity at multiple branch locations and involves correspondent accounts in two foreign countries. How should the writer handle 'where'?
Q3. A narrative states: 'The customer is a used-car dealer. Deposits of $142,000 in cash were made across 18 transactions from March through June 2024, averaging $7,900 each, despite the customer's stated monthly revenue of $25,000.' Which element of the five W's plus how does this sentence most directly serve?
Q4. A SAR narrative involves two subjects — the account holder and a third party who regularly drops off cash. How should the writer handle the 'who' for the third party?