When must we file an SAR?

File when you detect known or suspected illegal activity, significant unexplained transfers, or patterns suggesting manipulation. The decision depends on facts and your AML program; document rationale for filing or not filing.

What should the narrative include?

Provide a clear chronology, refer to specific orders and executions, identify counterparties and accounts, describe why the activity is unusual, and reference attached evidence such as trade blotters and communications.

What are typical filing timeframes?

File as soon as practicable; many institutions target filing within 30 days of detection. Complex cases may require additional investigation; retain internal documentation explaining any extended timeline.

How is confidentiality preserved?

SARs are legally confidential. Limit access to a need-to-know basis, restrict distribution, and avoid disclosure to subjects or third parties except as permitted by law or authorized request.

How long must records be kept?

Maintain SARs and supporting documentation for at least five years from filing per FinCEN expectations and federal recordkeeping practices; follow longer retention where required by other regulators.

Can I use an eSignature platform for attachments?

Yes — use secure platforms that provide encryption, audit trails, and metadata retention. Confirm vendor compliance with ESIGN, UETA, SOC 2, and any applicable regulatory controls before use.

Electronic Signature
Templates
Finance
Financial Trading SAR

Financial Trading SAR

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

Financial Trading Suspicious Activity Report

Reporting Institution

Institution Name Entity Type (check all that apply)

Broker-Dealer Investment Adviser Bank/Depository Institution Custodian/Prime Broker Other

Institution Address Compliance Contact

Report Identifiers

Report Reference Number: Date of Report:

Subject Account / Customer

Account / Customer Name Account Number / Identifier Customer Type

Individual Corporate/Entity Other

Customer Identifiers (if known)

Summary of Suspicious Activity

Provide a concise factual summary describing the suspicious activity, including specific behaviors, deviations from expected pattern, and any internal alerts that prompted this report.

Transaction Details (List key transactions)

Enter up to five representative transactions that illustrate the suspicious pattern. Include date, instrument, side (buy/sell), quantity, unit price, and amount.

Transaction 1 — Date Instrument / Security

Side: Quantity: Unit Price: Amount:

Transaction 2 — Date Instrument / Security

Side: Quantity: Unit Price: Amount:

Transaction 3 — Date Instrument / Security

Side: Quantity: Unit Price: Amount:

Typology and Indicators

Select the indicators that best describe the suspicious activity observed.

Wash trading Layering/Spoofing Possible insider trading Market manipulation

Unauthorized account access Structuring (transaction layering to avoid detection) Other

Actions Taken

Account frozen or restrictions placed Pending orders canceled Internal investigation opened No action taken

If other actions taken, describe

Related Entities / Accounts

List any related accounts, counterparties, or known associated persons that bear on the suspicious activity.

Supporting Documentation

List and describe any attached documentation (trade blotters, order records, account statements, communications, surveillance screenshots).

Law Enforcement / External Notification

Has this matter been referred to law enforcement or a regulatory authority? Yes No

If yes, provide contact and reference

Certification and Confidentiality Notice

By submitting this Financial Trading Suspicious Activity Report, the reporting officer certifies that the information contained herein is true and accurate to the best of the reporting officer's knowledge and that all material facts known to the reporting institution concerning the activity have been disclosed. This report is made for the purpose of compliance with applicable reporting obligations. Disclosure of this report or its contents to the subject of the report or any third party not authorized by applicable law or regulation is strictly prohibited and may subject the disclosing person and the institution to civil or criminal penalties.

I certify that the facts set forth in this report are accurate and that this filing is being made in accordance with the reporting institution's legal and regulatory obligations.

Compliance Certification I certify under penalty of perjury that the information provided is true and correct to the best of my knowledge.

Authorized Signature

Printed Name:

Title:

Signature:

Date:

Contact Phone (signer):

What the Financial Trading SAR Is and when it applies

A Financial Trading SAR (Suspicious Activity Report) is a formal report used by broker-dealers, registered representatives, trading firms, and other financial institutions to notify the U.S. Department of the Treasury's Financial Crimes Enforcement Network (FinCEN) about transactions or patterns of trading activity that may indicate money laundering, market manipulation, insider trading, fraud, or other illicit conduct. The SAR documents who, what, when, where and why the activity is suspicious, and it is used by regulators, law enforcement, and compliance teams to investigate and disrupt criminal finance schemes.

Why filing a clear Trading SAR matters

Timely, accurate SARs protect the institution from regulatory enforcement, aid law enforcement, and reduce legal and reputational risk. A well-composed report preserves key facts, supports downstream investigations, and demonstrates a defensible compliance program under the Bank Secrecy Act and FinCEN guidance.

Who commonly prepares and reviews Financial Trading SARs

Final sign-off is often by a senior compliance or AML manager; involvement of legal counsel is common for high-risk or complex matters.

Compliance Officer — Reviews alerts, authorizes filings, and ensures program-level documentation and escalation are complete.
Trade Surveillance Analyst — Produces incident summaries, compiles trade logs, and identifies anomalous patterns for inclusion.
AML Investigator — Gathers KYC, account history, and external intelligence to substantiate the suspicious indicators in the SAR.

Essential elements every Financial Trading SAR should contain

A professional SAR systematically documents identifying data, transaction chronology, indicators of suspicion, supporting evidence, and the preparer certification so regulators can reconstruct and assess the reported activity.

Reporter Details

Include the reporting entity's legal name, LEI or B/D CRD number where applicable, internal compliance contact, and the preparer's full name and title so regulators can follow up quickly.

Subject Information

Provide the subject's full legal name, account numbers, known aliases, dates of birth, addresses, taxpayer ID if available, and any affiliated entities connected to the trading activity.

Transaction Timeline

List dates and times for each trade, order, or transfer, including instrument identifiers, volumes, prices, counterparty details, and how the sequence deviates from normal activity.

Suspicious Indicators

Describe the specific reasons the activity is suspicious: pattern-based anomalies, insider timing, layering, wash trading, spoofing, rapid account churn, or links to sanctioned parties.

Supporting Documentation

Attach trade blotters, audit logs, communications, KYC files, market data snapshots, and investigation notes that substantiate the narrative and enable verification.

Certifying Statement

Include a preparer certification with name, signature or electronic attest method, date, and a brief statement confirming the report's completeness and accuracy to the best of the preparer's knowledge.

Required data fields and minimum secure handling

Entity Identifier: LEI or CRD

Subject Name: Full legal name

Account Numbers: Primary and linked accounts

Transaction IDs: Order and trade IDs

Date/Time Stamps: ISO or MM/DD/YYYY

Investigation Notes: Redacted internal commentary

Step-by-step process for preparing and filing a Financial Trading SAR

Follow an orderly workflow to ensure accuracy, legal compliance, and an auditable trail from detection to filing.

01

Identify: Flag anomalous trading or information through surveillance rules.
02

Investigate: Collect trade records, communications, and KYC documents.
03

Document: Draft the SAR narrative and compile attachments.
04

File: Submit via the FinCEN BSA E-Filing System and retain confirmation.

Where and how an SAR is submitted

SARs are federal filings submitted to FinCEN through its BSA E-Filing System; maintain internal logs and follow regulator guidance for escalation and confidentiality.

Submission Portal: FinCEN BSA E-Filing System
Confirmation: Receive electronic filing receipt
Internal Log: Record filing ID internally
Regulatory Follow-up: Respond to any FinCEN or law enforcement inquiries

Typical digital workflow settings when using an e-filing process

Configure your case management or e-signature workflow to preserve metadata, enforce reviewer roles, and capture an audit trail.

Field	Configuration
Access Controls	Role-based reviewer permissions
Audit Trail	Capture IP, timestamp, and actions
Attachment Rules	PDF preferred, file size limits
Retention Policy	Automated retention per schedule

Technical and security considerations for eSubmission and storage

Ensure any vendor used for drafts, signatures, or storage supports regulatory controls, retains metadata, and can produce evidence for examiners or law enforcement.

Encryption: TLS 1.2/1.3 in transit
Data at Rest: AES-256 encryption
Audit Logs: Comprehensive action history

Timing expectations and internal deadlines for SAR handling

Timely processing and internal escalation windows help meet filing expectations and support downstream enforcement requests.

Detection to Investigation:

Initiate investigation within 24–72 hours of an automated alert

Investigation to Decision:

Complete reasonable investigation and reach a filing decision within 30 days where feasible

Filing Window:

File an SAR as soon as practicable; many programs target 30 days after detection

Extension Consideration:

Up to 60 days may be reasonable for complex, ongoing investigations

Record Retention Start:

Begin retention clock from the filing date or last investigative action

Common mistakes to avoid when preparing a Trading SAR

Insufficient chronology — omitting precise timestamps or sequence of orders makes reconstruction difficult for regulators.
Poor attachment labeling — unlabeled or compressed files frustrate reviewers and can delay investigations.
Speculative language — avoid conjecture; provide factual observations and supporting evidence instead of assumptions.
Inconsistent identifiers — mismatched account numbers, names, or instrument symbols reduce matchability across systems and agencies.

Consequences of failing to file or filing incorrectly

Civil Fines: Potential monetary penalties

Criminal Liability: Possible prosecution in serious cases

Regulatory Action: Exam findings and enforcement

Reputational Damage: Customer and market trust erosion

Operational Risk: Increased oversight costs

Evidence Loss: Poor retention undermines defense

Realistic examples of trading activity that commonly trigger SARs

Two brief scenarios illustrate how to translate observed trading anomalies into reportable SAR narratives.

Example 1

A small account executed repeated large buy-and-sell orders at near-identical prices over hours, creating apparent wash patterns.

The pattern matched a surveillance rule for layering and wash trading.
Attach order timestamps, execution reports, communications, and KYC files; describe prior account history and any steps taken to contact the client before filing.

Example 2

An offshore-linked account placed sizable orders ahead of a market-moving announcement and quickly liquidated positions after late fills.

The timing suggested possible insider information.
Include order routing logs, counterparty IDs, IP/device metadata, and any related alerts or prior warnings to support agency scrutiny.

eSignature vendor comparison relevant to SAR documentation workflows

Key vendor criteria for SAR workflows include per-user pricing, trial availability, bulk-send capability for batch disclosures, audit trails, HIPAA/BSA-related compliance, and any envelope caps that affect high-volume operations.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	Yes, 7-day trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes	Yes	Yes	Yes	Varies
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently asked questions about Financial Trading SAR preparation

Answers to common SAR questions cover filing thresholds, required contents, timing, confidentiality, recordkeeping, and use of e-signature platforms for supporting documents.

Need help? Contact support

When must we file an SAR?
File when you detect known or suspected illegal activity, significant unexplained transfers, or patterns suggesting manipulation. The decision depends on facts and your AML program; document rationale for filing or not filing.
What should the narrative include?
Provide a clear chronology, refer to specific orders and executions, identify counterparties and accounts, describe why the activity is unusual, and reference attached evidence such as trade blotters and communications.
What are typical filing timeframes?
File as soon as practicable; many institutions target filing within 30 days of detection. Complex cases may require additional investigation; retain internal documentation explaining any extended timeline.
How is confidentiality preserved?
SARs are legally confidential. Limit access to a need-to-know basis, restrict distribution, and avoid disclosure to subjects or third parties except as permitted by law or authorized request.
How long must records be kept?
Maintain SARs and supporting documentation for at least five years from filing per FinCEN expectations and federal recordkeeping practices; follow longer retention where required by other regulators.
Can I use an eSignature platform for attachments?
Yes — use secure platforms that provide encryption, audit trails, and metadata retention. Confirm vendor compliance with ESIGN, UETA, SOC 2, and any applicable regulatory controls before use.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now