Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (2024)

  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • I
  • L
  • M
  • N
  • O
  • P
  • R
  • S
  • T
  • U
  • V
  • X

Account Takeover

Similar to identity theft, this type of fraud happens when an unauthorized individual gain access through online banking applications, capturing the account information to create and write bad checks.

Adverse Action

An adverse action notice is a document sent to a loan applicant stating a bank’s rationale for denying a loan. It may also contain a counteroffer, such as a lesser amount or a request for an approved co-borrower.

Aging Exceptions

The term “aging exceptions” refers to a group of critical exceptions that have not been resolved within a reasonable amount of time.

Altered Checks

Altered check fraud occurs when a fraudster changes the amounts and Payee from a stolen check.

Authorized Signer Form

An authorized signer form is a document that allows an account holder to grant a range of clearance levels to individuals to perform certain functions within a bank account.

Share via:

Suspicious activity monitoring is the procedure of identifying, researching, documenting—and, if necessary, reporting—an account holder’s banking pattern when it indicates possible illegal behavior. This practice is done to both manage a bank or credit union’s risk and comply with regulations.

Examples of suspicious activity include:

  • Unusual Large Business Deposits of Cash: Large amounts of cash regularly deposited into an account for a company that is not normally a cash business.
  • Personal Accounts with Suspicious Activity: A personal banking account that is established with a small deposit but regularly has large sums of money flowing through it.
  • Avoidance of CTR: Multiple deposits in cash, each just below $10,000. This attempts to avoid the need for a currency transaction report, or CTR, to be completed. (The CTR form is designed to deter money laundering and is required when a customer seeks to either deposit or withdraw more than $10,000 in a single transaction.)

How is Suspicious Activity Monitoring Initiated?

The initial burden of suspicious activity monitoring has traditionally fallen on frontline staff at financial institutions. The teller alerts a supervisor or manager, and then an investigation is conducted. In some instances multiple departments may be involved in researching an account. A suspicious activity report (SAR) would then be completed if warranted.

Some banks and credit unions are now also using features in their core software system and other electronic document management systems to delineate parameters that automatically trigger a suspicious activity notification. This is especially important for larger institutions with multiple branches; suspicious activity would otherwise be difficult to pinpoint if transactions were spread across a variety of locations with a number of tellers.

A Bank’s Responsibilities with SARs

Once an SAR is generated, a financial institution is required to file it with the Financial Crimes Enforcement Network (FinCEN) and retain all associated documentation for a five-year period, either as a hard copy or electronically. Auditors will also likely request SAR files, so it is imperative that these records be complete and easily retrievable.

Continue reading about SAR documentation best practices.

Tracking Resources

For more information about bank tracking and management, be sure to check out our extensive resource library with free spreadsheets, whitepapers, and eBooks.

Searching for more banking definitions? Check out our banking definitions page.

Explore more resources

Remote Deposit Capture (RDC) eBook

Remote deposit capture (RDC) ranks as a significant feature of modern banking. In fact, a San Global Research industry report projects the RDC market to grow at a compounded rate of 5.8% through 2032. As the banking industry continues its digital...

Read More »

Datasheet: Unify, Modern Deposits Automation Platform

Unify means modern simplicity for your bank or credit union - on any browser or operating system. With the market's only patent-pending, single API, and cloud-native solution, go-to-market your way: power all full- and self-service workflows with Unify, or...

Read More »

AccuAccount: Solution Overview Brochure

Track and manage every loan document in one system and streamline loan management from application through servicing with our core-integrated software platform. From loan application automation, to drag-and-drop document imaging, to document tracking, and five...

Read More »

Related articles

Monday 1 April 2024

[Playbook] Loan Management: Efficiently Manage Notices

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (4)

Jenn Mitchell,
Vice President Sales, AccuAccount

Although notices serve as an essential form of communication with account holders, managing notices can involve considerable administrative work for loan assistants, insurance clerks, and…

Learn More »

Tuesday 26 March 2024

Check Fraud: Common Examples and How to Stay Ahead of the Fraudsters

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (5)

Ashish Bhatia,
Vice President, Product Management

Check fraud is the most prevalent type of fraud at financial institutions, costing billions of dollars in losses annually, while impacting millions of account holders…

Learn More »

Wednesday 20 March 2024

Accelerating Efficiency by Leveraging Alogent’s Full Suite of Process Automation Solutions

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (6)

Cameron Marks,
Director, Product Management

Why should your bank or credit union consider implementing FASTdocs alongside AccuAccount? For financial institutions looking to retire legacy systems, consolidate vendors, and reduce paper-based…

Learn More »

Thursday 14 March 2024

Show Me the Money: Best Practices to Accelerate Funds Availability through Check Deposits

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (7)

Wendi A. Klein,
Vice President, Marketing & Communications

The Financial Brand recently published an article highlighting how faster access to funds could reshape the battle for deposits. Would you implement new processes if…

Learn More »

Tuesday 12 March 2024

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (8)

Jenn Mitchell,
Vice President Sales, AccuAccount

Delinquent loans seem to be on the rise at financial institutions across the United States. Such trends may indicate macroeconomic difficulties, but they also pose…

Learn More »

Tuesday 5 March 2024

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (9)

Cameron Marks,
Director, Product Management

Automating a single task may not seem like a big savings in the grand scheme of things. But, what if that task occurred multiple times…

Learn More »

Monday 26 February 2024

Banking Innovation: Are You Keeping Up with Transaction Processing Trends Shaping the Banking Market?

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (10)

Wendi A. Klein,
Vice President, Marketing & Communications

The payments landscape continues to take shape with alternative payment and cashless transaction methods, yet in the face of persistent digitalization, checks remain a viable…

Learn More »

Thursday 15 February 2024

Meeting Gen Z’s Banking Demands and Remaining Relevant with the Largest Generation in American History

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (11)

Wendi A. Klein,
Vice President, Marketing & Communications

The year is in full swing, and financial institutions are keenly observing the emerging powerhouse of economic influence: Generation Z. This generation isn’t just digitally…

Learn More »

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? (2024)

FAQs

Suspicious Activity Monitoring - What Is It & Why Do Banks Do It? ›

In the United States, financial institutions must file a SAR if they suspect that an employee or customer has engaged in insider trading activity. A SAR is also required if a financial institution detects evidence of computer hacking or of a consumer operating an unlicensed money services business.

What do banks do for suspicious activity? ›

Under the Bank Secrecy Act (BSA), financial institutions are required to assist U.S. government agencies in detecting and preventing money laundering, and: Keep records of cash purchases of negotiable instruments; File reports of cash transactions exceeding $10,000 (daily aggregate amount); and.

What is suspicious activity monitoring? ›

Suspicious activity monitoring is the procedure of identifying, researching, documenting—and, if necessary, reporting—an account holder's banking pattern when it indicates possible illegal behavior.

Why does my bank say suspicious activity? ›

Suspicious transactions are any event within a financial institution that could be possibly related to fraud, money laundering, terrorist financing, or other illegal activities. Suspicious transactions are flagged to be investigated, but many suspicious transactions are simply false positives.

What triggers a suspicious activity report? ›

If a customer does something obviously criminal – such as offering a bribe or even admitting to a crime – the law requires you to file a SAR if it involves or aggregates funds or other assets of $2,000 or more.

What are examples of suspicious activity? ›

Leaving packages, bags or other items behind. Exhibiting unusual mental or physical symptoms. Unusual noises like screaming, yelling, gunshots or glass breaking. Individuals in a heated argument, yelling or cursing at each other.

What happens if your bank account gets flagged for suspicious activity? ›

Bank accounts are typically frozen for suspected illegal activity, a creditor seeking payment, or by government request. A frozen account may also be a sign that you've been a victim of identity theft. Each situation requires specific actions to unfreeze the account.

What are three suspicious activities? ›

Some common examples of suspicious activities include: A stranger loitering in your neighborhood or a vehicle cruising the streets repeatedly. Someone peering into cars or windows. A high volume of traffic going to and coming from a home on a daily basis.

What is an indicator of suspicious activity? ›

Impersonation of authorized personnel (e.g., police/security officers, janitor, or other personnel). Misrepresentation. Presenting false information or misusing insignia, documents, and/or identification to misrepresent one's affiliation as a means of concealing possible illegal activity. Theft/Loss/Diversion.

What is an example of a suspicious movement? ›

Example of suspicious movements
  • Someone peeping into cars or windows.
  • A stranger standing in a particular place for a long time.
  • A vehicle crossing the streets repeatedly.
  • Mass movement going up and down the street.
  • Someone arriving or leaving from home at unusual hours. Etc.

What happens when a bank closes your account for suspicious activity? ›

Debits will be blocked and deposits won't make it in. You'll get your money back (usually). You may receive a check in the mail for the remaining balance, unless the bank suspects terrorism or other illegal activities. You can also go to a branch and receive a cashier's check for the account balance.

What is an example of a suspicious transaction in banking? ›

high volumes of transactions being made in a short period of time. depositing large amounts of cash into company accounts. depositing multiple cheques into one bank account. purchasing expensive assets, such as property, cars, precious stones and metals, jewellery and bullion.

Why is my bank investigating my account? ›

In these cases, the bank may be required to verify the amount of assets held in an account to ensure they're divided properly. It may also be due to a lawsuit, or investigation of a suspected crime like embezzlement or money laundering. In any of these cases, the bank is legally obligated to follow these orders.

What is considered suspicious bank activity? ›

A lack of proof of legal, commercial practice, or even any commercial activities by many of the parties to the transaction(s). For example, a bank might use AML solutions to flag a transaction as suspicious if it is made between two individuals who do not have any apparent business relationship.

What amount of money triggers a suspicious activity report? ›

Dollar Amount Thresholds – Banks are required to file a SAR in the following circ*mstances: insider abuse involving any amount; transactions aggregating $5,000 or more where a suspect can be identified; transactions aggregating $25,000 or more regardless of potential suspects; and transactions aggregating $5,000 or ...

Who can see suspicious activity reports? ›

The Federal Reserve Board and the 12 Federal Reserve Banks, the Office of the Comptroller of the Currency, and Federal Deposit Insurance Corporation, the Office of Thrift Supervision, and the National Credit Union Administration each have access to SARS at offices throughout the U.S.

How long can a bank block your account for suspicious activity? ›

The duration of a bank account freeze depends on the circ*mstances. Simple misunderstandings may be resolved in 7-10 days, while more complex scenarios could take 30 days or longer. In cases where the freeze is due to tax obligations or legal disputes, there's no set time limit.

Do banks contact you about suspicious activity? ›

Do banks notify you when there is suspicious activity on your account? Your bank may or may not contact you if there is suspicious activity on your account. Sometimes they do and sometimes they don't.

What happens after your bank account is investigated? ›

The seriousness of the investigation varies, and depending on the severity of the reason for the investigation, you might have full or partial access to your account. In more serious cases, the bank account can be frozen, meaning you lose total control or access to the account until the investigation is finalised.

References

Top Articles
Latest Posts
Article information

Author: Allyn Kozey

Last Updated:

Views: 5456

Rating: 4.2 / 5 (43 voted)

Reviews: 90% of readers found this page helpful

Author information

Name: Allyn Kozey

Birthday: 1993-12-21

Address: Suite 454 40343 Larson Union, Port Melia, TX 16164

Phone: +2456904400762

Job: Investor Administrator

Hobby: Sketching, Puzzles, Pet, Mountaineering, Skydiving, Dowsing, Sports

Introduction: My name is Allyn Kozey, I am a outstanding, colorful, adventurous, encouraging, zealous, tender, helpful person who loves writing and wants to share my knowledge and understanding with you.