Onlayer logo
GLOSSARY

Suspicious Activity Report (SAR)

Last Update: 18 Mar 2026

A Suspicious Activity Report (SAR) is a formal document that financial institutions, acquiring banks, and payment processors must file with regulatory bodies (such as FinCEN in the United States) whenever they detect transaction behavior that suggests money laundering, fraud, or terrorist financing.

 

Filing SARs is a strict legal requirement under global Anti-Money Laundering (AML) laws. If a payment processor identifies suspicious behavior—such as sudden, unexplained spikes in processing volume or multiple large transactions from high-risk countries—but fails to file a SAR, they face massive regulatory fines and the potential loss of their processing licenses.

Identifying Suspicious Activity

 

To know when to file a SAR, risk teams must continuously monitor their merchant portfolios. Suspicious activity isn't always obvious; it can involve complex transaction laundering networks or sophisticated card testing fraud that mimics normal shopping behavior.

Catching Fraud Early with Onlayer

 

You cannot file a SAR if you do not detect the fraud. Onlayer identifies up to 3x more fraud risk signals than internal KYM sources alone by monitoring external operational behavior. It detects hidden external blacklists, scam tags, and sudden drops in public sentiment, allowing your risk team to catch suspicious activity definitively and generate transparent audit logs to support your SAR filings.

CONTACT US

Ready to take control of merchant risk?

See how Onlayer fits your workflow in a short demo.