Compliance

BSA Reporting (Bank Secrecy Act)

BSA reporting is the set of forms US financial institutions and certain non-financial businesses must file under the Bank Secrecy Act (31 USC 5311 et seq.) to record currency transactions, suspicious activity, foreign financial accounts, and cross-border movements of monetary instruments.

BSA reporting is the operational output of the Bank Secrecy Act, codified at 31 USC 5311 et seq. with implementing regulations at 31 CFR Chapter X. The BSA is the foundational US anti-money-laundering statute, enacted in 1970 and amended significantly by the USA PATRIOT Act of 2001 and the Anti-Money Laundering Act of 2020. The administrator is FinCEN, part of the US Treasury. For US founders running businesses that touch cash, foreign accounts, or large payments, BSA reporting is a small set of forms with very large penalty exposure.

How BSA Reporting Works

The reporting cycle has four primary instruments:

  • Currency Transaction Report (CTR), FinCEN Form 112. Required for currency transactions over 10,000 dollars at a financial institution. Same-day aggregation rule applies. Filed within 15 days of the transaction.
  • Suspicious Activity Report (SAR), FinCEN Form 111. Required when a financial institution detects suspicious activity at or above the applicable threshold. Filed within 30 days of detection (extendable to 60 days while a suspect is identified).
  • Form 8300. Required when any person in a trade or business receives more than 10,000 dollars in cash in one transaction or two or more related transactions. Filed within 15 days of receipt.
  • FBAR (Report of Foreign Bank and Financial Accounts), FinCEN Form 114. Required for US persons with foreign financial accounts whose aggregate value exceeded 10,000 dollars at any point in the calendar year. Filed annually by April 15, automatic extension to October 15.

A fifth report, the Currency or Monetary Instrument Report (CMIR), FinCEN Form 105, is required for physical transport, mailing, or shipping of more than 10,000 dollars in currency or monetary instruments into or out of the United States.

Who Must Report

Each report has its own scope:

  • CTR. Banks, credit unions, savings associations, broker-dealers, mutual funds, futures commission merchants, MSBs, casinos, and any other “financial institution” as defined in 31 USC 5312.
  • SAR. Same set as CTR, plus housing GSEs and certain other categories added by rule, plus (since 2024 final rule, phased) certain investment advisers.
  • Form 8300. Any person engaged in a trade or business, anywhere in the US. Not limited to financial institutions. Includes auto dealers, jewelers, art dealers, contractor businesses that receive large cash payments, and any other business in scope of IRC 6050I.
  • FBAR. All US persons (citizens, residents, US-organized entities, US trusts, US estates) with a financial interest in or signature authority over foreign financial accounts aggregating over 10,000 dollars at any point in the calendar year.

Reporting Thresholds and Deadlines

FormTrigger thresholdFiling deadlineRetention
FinCEN Form 112 (CTR)Cash transaction over 10,000 dollars15 days after transaction (25 days e-file)5 years
FinCEN Form 111 (SAR)5,000 dollars or above for banks (2,000 dollars for MSBs in some cases)30 days after detection, extendable to 605 years
Form 8300Over 10,000 dollars cash received in trade or business15 days after receipt5 years
FinCEN Form 114 (FBAR)Foreign accounts aggregating over 10,000 dollarsApril 15, automatic extension to October 155 years
FinCEN Form 105 (CMIR)Over 10,000 dollars in currency or monetary instruments transported across borderAt the time of entry or exit5 years

Penalties

  • CTR or SAR failure (civil). Up to 25,000 dollars per violation for negligent or willful failure, with higher amounts for pattern violations under 31 USC 5321.
  • CTR or SAR failure (criminal). Up to 250,000 dollars and 5 years of imprisonment per violation under 31 USC 5322, doubled for violations committed while violating another US law or as part of illegal activity exceeding 100,000 dollars in 12 months.
  • Form 8300 failure. Information-return penalties under IRC 6721 (currently 60 to 340 dollars per form depending on lateness, higher for intentional disregard), plus 31 USC 5321 civil penalties of up to 25,000 dollars per failure if filed under the BSA.
  • FBAR failure (non-willful, civil). Up to about 16,000 dollars per violation, indexed annually. The Supreme Court held in Bittner v. United States (2023) that the non-willful penalty is per FBAR, not per account.
  • FBAR failure (willful). Greater of 100,000 dollars (adjusted for inflation) or 50 percent of the account balance at the time of violation, per violation.
  • FBAR criminal. Up to 250,000 dollars and 5 years of imprisonment.

Common Pitfalls

  • Structuring. Breaking a single 25,000 dollar cash transaction into three deposits of 8,000 dollars each to avoid CTR triggers is itself a felony under 31 USC 5324, separate from the underlying money-laundering analysis.
  • Late SARs. The 30-day clock starts at detection, not at completion of internal investigation. Long investigations that delay the SAR are themselves a violation.
  • Form 8300 in non-financial businesses. A contractor or business that takes a large cash payment must file Form 8300 within 15 days. Many small businesses overlook this entirely.
  • FBAR scope. Foreign accounts include checking, savings, brokerage, mutual funds, foreign-issued life insurance with cash value, and certain foreign retirement accounts. Not just bank accounts.
  • Signature authority counts. A US-resident executive with signature authority over a foreign subsidiary’s account has an FBAR obligation even if they have no economic interest in the funds.
  • AML: the broader compliance regime that the BSA forms support.
  • KYC: the identity-verification subsystem that feeds SAR detection.
  • OFAC Sanctions Screening: the parallel screening regime often run together with BSA monitoring.
  • FATCA: the parallel reporting regime focused on foreign financial accounts of US persons (Form 8938), distinct from the FBAR.

Omnivoo Contract Management tracks cash receipts that trigger Form 8300, integrates SAR-quality transaction monitoring, and produces the documentation trail US examiners expect on the BSA side of contractor operations.

Frequently asked questions

What is a Currency Transaction Report (CTR)?
A CTR is filed on FinCEN Form 112 for each currency transaction (or aggregated same-day currency transactions by or for the same person) that exceeds 10,000 dollars at a financial institution. The 10,000 dollar threshold has been in place since the BSA's enactment in 1970 and is not indexed for inflation. The CTR must be filed within 15 calendar days of the transaction (25 days if filed electronically through BSA E-Filing).
What is a Suspicious Activity Report (SAR)?
A SAR is filed on FinCEN Form 111 by a financial institution that detects a transaction or pattern of transactions that it knows, suspects, or has reason to suspect involves money laundering, terrorist financing, BSA violations, or other criminal activity. The threshold varies by institution type. Banks file at 5,000 dollars or above when a suspect is identified, or 25,000 dollars or above regardless of suspect identification. Money services businesses file at 2,000 dollars or above. The SAR is due within 30 days of detection (extendable to 60 days while a suspect is identified).
What is the FBAR?
The FBAR is the Report of Foreign Bank and Financial Accounts, filed on FinCEN Form 114. A US person (citizen, resident, or US-organized entity) with a financial interest in or signature authority over one or more foreign financial accounts whose aggregate value exceeded 10,000 dollars at any point in the calendar year must file an FBAR. The deadline is April 15 of the following year, with an automatic extension to October 15. The legal basis is 31 USC 5314 and 31 CFR 1010.350.
What is Form 8300?
Form 8300 is filed by any person engaged in a trade or business who receives more than 10,000 dollars in cash in one transaction (or two or more related transactions) from a single payer. The form is filed jointly under Internal Revenue Code section 6050I and Bank Secrecy Act section 5331 with the IRS, with a copy furnished to the payer. The filing is due within 15 days of receipt. Cash includes US and foreign currency and, for designated reporting transactions, cashier's checks, money orders, bank drafts, and traveler's checks.
How long must BSA records be retained?
Generally five years. Per 31 CFR 1010.430 financial institutions must retain BSA-required records for five years from the relevant date (typically the date of the transaction or filing). FBAR records must be retained for five years per 31 CFR 1010.420. Form 8300 records must also be retained for five years. Records must be available for inspection by Treasury within a reasonable period.

Related articles

Omnivoo handles this for you

Stop worrying about Indian payroll and compliance terms. Omnivoo manages everything (PF, ESI, TDS, professional tax, and more) across all 28 states.

Get started