SAR data is the basis for much of the published statistical record on payment fraud in the United States, including FinCEN's financial trend analyses on business email compromise and mail theft related check fraud.
Filing is an institution obligation, not a customer one, and the existence of a SAR cannot be disclosed to the subject. For a defrauded business, the practical reporting path is the bank, the FBI IC3, and law enforcement.
A SAR describes suspicion, not a proven crime, and it is not an insurance claim, a police report, or a recovery request. None of those follow automatically from a filing, which is why a defrauded company still has to open each of those tracks itself.
What a finance team can usefully do is give its bank the facts a filing depends on: the exact payment references, the account and routing details used, the date and channel the instruction arrived through, and the person who received it. Supplying that in one message tends to matter more for recovery timing than any request about the filing itself.
Common questions
No. Filing is an obligation of financial institutions. A defrauded business reports to its bank and to the FBI IC3.
It is one of the few sources describing incident mechanics at national scale, and FinCEN publishes trend analyses derived from it.
No. The law prohibits an institution from disclosing the existence of a filing to the subject of the report, so the absence of confirmation says nothing about whether one was filed.
Not directly. Recovery depends on the receiving institution freezing funds, usually through the originating bank and the FBI IC3, and it runs on a separate and much shorter clock than the reporting obligation.
The payment references, the beneficiary account and routing numbers, the amount and settlement date, the channel the instruction arrived through, and who acted on it.
Sources and further reading
Citing this entry? Cite as Coffr, LLC and link to https://getcoffr.com/glossary/suspicious-activity-report.