The Bank Secrecy Act requires U.S. banks to report large transactions and suspicious activity to the government

The Bank Secrecy Act is a federal law passed in 1970 that forces banks and other financial institutions to keep records of customer transactions and report certain activity to the Treasury Department. The law does not keep your banking information secret—it does the opposite. Banks must file reports when you deposit, withdraw, or transfer cash in amounts that trigger reporting thresholds, and they must flag transactions that look unusual or potentially illegal.

The stated purpose is to help law enforcement detect money laundering, tax evasion, and financing of illegal activity. In practice, this means your bank is watching your account and has a legal duty to report you under specific circumstances, whether or not you have done anything wrong.

Understanding what triggers a report and how banks decide what counts as suspicious can help you avoid delays, frozen accounts, or unwanted government inquiries—even if you are conducting legitimate business.

Key Takeaways

  • Banks must file a Currency Transaction Report (CTR) when you deposit or withdraw more than $10,000 in cash in a single day or in a pattern of related transactions.
  • Banks must file a Suspicious Activity Report (SAR) when a transaction looks unusual or potentially illegal, regardless of the dollar amount, and they do not have to tell you they filed one.
  • The law applies to all U.S. financial institutions—banks, credit unions, money transmitters, casinos, and insurance companies—not just banks.
  • Structuring deposits or withdrawals to avoid the $10,000 reporting threshold is itself illegal, even if the money itself is legal.
  • You have no right to know whether your bank has filed a report about you, and banks are prohibited from telling you in most cases.

Currency Transaction Reports and the $10,000 threshold

When you deposit or withdraw $10,000 or more in cash on a single day, your bank is required to file a Currency Transaction Report (CTR) with the Financial Crimes Enforcement Network (FinCEN), a bureau of the Treasury Department. The report includes your name, address, account number, the amount, and the date. This is automatic and does not mean you are suspected of a crime.

The $10,000 figure has been the threshold since 1970 and has never changed, even as inflation has eroded its value. A single transaction over $10,000 triggers one report. Multiple transactions that add up to more than $10,000 in a single day also trigger a report if the bank believes they are related—for example, two $6,000 deposits made hours apart.

Banks file CTRs routinely for legitimate business owners, retirees withdrawing savings, and people buying cars or paying contractors in cash. The report itself carries no implication of wrongdoing. However, the report does create a record that law enforcement can access, and it can draw attention if the pattern looks unusual for your account history.

Suspicious Activity Reports and what banks consider red flags

A Suspicious Activity Report (SAR) is filed by a bank when a transaction or pattern of transactions looks potentially illegal or unusual, regardless of the amount. Unlike CTRs, which are automatic at $10,000, SARs depend on the bank's judgment and training. Common triggers include deposits that do not match your stated income, frequent large cash deposits followed by immediate wire transfers, transactions that fit a known money-laundering pattern, or activity that contradicts your profile.

A SAR does not require proof of a crime. The bank files it based on suspicion alone. You will not be notified that a SAR has been filed—banks are prohibited by law from telling you in most cases. The report goes to FinCEN and can be shared with law enforcement, the IRS, and other agencies.

What counts as suspicious varies by bank and by the account holder's history. A self-employed contractor depositing $8,000 in cash weekly might trigger a SAR at one bank and be routine at another. A retiree suddenly receiving wire transfers from overseas might raise flags. A business owner making large cash deposits might not, if the deposits match their stated business type.

Structuring and why breaking up large deposits is illegal

Structuring—also called "smurfing"—is deliberately breaking up a large cash deposit or withdrawal into smaller amounts to stay under the $10,000 reporting threshold. For example, depositing $9,500 on Monday and $9,500 on Wednesday to avoid filing a CTR is structuring, and it is a federal crime even if the money itself is completely legal.

The law against structuring exists because it is a known money-laundering technique. However, it is prosecuted even when the underlying money is legitimate—a business owner who deposits cash in chunks to avoid paperwork, or someone who withdraws their own savings in multiple transactions. The government does not have to prove the money is illegal; it only has to prove you knew about the $10,000 rule and deliberately structured to avoid it.

Structuring can result in civil forfeiture, meaning the government can seize the money, or criminal charges. The best defense is not to structure at all. If you have a legitimate reason to deposit or withdraw large amounts of cash, deposit it all at once and let the CTR file automatically.

Which institutions must follow the Bank Secrecy Act

The law applies to more than just banks. Covered institutions include commercial banks, credit unions, savings and loan associations, money transmitters (including wire transfer services and check-cashing businesses), casinos and card clubs, insurance companies, securities brokers, and pawn shops. Each type has slightly different reporting requirements, but all must file CTRs and SARs.

Money transmitters and wire transfer services are particularly active filers because their customers frequently move large amounts of cash. A wire transfer over $10,000 triggers a CTR just as a cash deposit does. Casinos file reports on large cash transactions at the tables. Pawn shops file reports on high-value purchases.

If you move money through any of these channels, you may trigger reporting. The institution does not need your permission, and you will not receive advance notice.

How to learn about a report was filed about you

You cannot directly request a copy of a CTR or SAR filed about you. Banks are prohibited from disclosing that a SAR was filed, and CTRs are not public records. However, you can learn about reports indirectly if law enforcement contacts you or if you are under investigation.

If you believe your bank has filed a report in error—for example, a CTR for a legitimate business deposit—you can contact the bank's compliance department and ask them to review the transaction. They cannot undo a filed report, but they can correct errors in future filings or provide context to regulators if you are questioned.

If you are contacted by the IRS, FBI, or another agency asking about a transaction, that usually means a report was filed and has been reviewed. At that point, you should consult a lawyer before answering questions.

The difference between reporting and investigation

Filing a CTR or SAR does not automatically trigger an investigation. FinCEN receives millions of reports per year and shares them with law enforcement agencies, but most reports are never acted on. A CTR for a $15,000 cash withdrawal by a retiree is filed and filed away. A SAR for a small business owner's deposits might be reviewed once and closed.

However, a report can become the starting point for an investigation if it matches a pattern law enforcement is already tracking, or if it is combined with other reports or information. Multiple SARs from different banks about the same person, or a SAR combined with a tip from another source, can escalate to active scrutiny.

The risk of investigation increases if your transaction pattern matches known money-laundering or tax-evasion schemes, or if you have prior criminal history. It also increases if you react to a report by suddenly changing your banking behavior—for example, switching banks or moving to cash-only transactions after a SAR is filed.

What you should know about your rights under the Bank Secrecy Act

The Bank Secrecy Act does not give you the right to know when your bank reports you, and it does not require the bank to ask your permission. You have no opt-out. You cannot prevent a CTR from being filed when you deposit $10,000 in cash, and you cannot prevent a SAR if the bank decides your activity looks suspicious.

You do have the right to know your bank's policies about reporting. Most banks publish their suspicious activity guidelines in their account agreements or compliance documents. You can ask your bank what triggers a SAR filing for your type of account, though they may decline to give specifics for security reasons.

If you are contacted by law enforcement about a report, you have the right to legal counsel. You are not required to answer questions without a lawyer present, and you should not assume that being reported means you are under investigation or suspected of a crime.

Frequently Asked Questions

Does a Currency Transaction Report mean I am under investigation?

No. CTRs are filed automatically for any cash deposit or withdrawal over $10,000 and are routine for many legitimate transactions. Millions of CTRs are filed each year. A report by itself does not indicate suspicion or wrongdoing. However, if law enforcement contacts you about a specific transaction, that suggests the report has been reviewed and flagged for some reason.

Can my bank tell me they filed a Suspicious Activity Report about me?

No. Banks are prohibited by law from notifying you that a SAR has been filed in most cases. The only exception is if you are the subject of a law enforcement investigation and the bank is required to disclose it as part of legal process. Otherwise, you will not know unless law enforcement tells you.

What happens if I deposit $9,500 twice in one week to avoid reporting?

That is structuring, which is illegal even if the money is legal. The government can prosecute you for structuring alone, without proving the money itself is illegal. You can face criminal charges, fines, or civil forfeiture of the money. If you have a legitimate reason to deposit large amounts of cash, deposit it all at once and let the report file automatically.

Do I need to report my own transactions to the IRS if my bank files a CTR?

The bank's CTR does not replace your own tax reporting obligations. If the cash deposit is income, you must report it on your tax return regardless of whether a CTR was filed. If it is not income—for example, a transfer from savings or a loan—you do not have to report it. The CTR is a separate record that the IRS can access, but it does not automatically trigger a tax audit.

Can I use multiple banks to avoid the $10,000 reporting threshold?

No. Banks are required to look for structuring patterns across multiple accounts and institutions. If you deposit $9,500 at Bank A and $9,500 at Bank B on the same day, both banks may file SARs for structuring. The reporting system is designed to catch this behavior, and attempting it can result in criminal charges.