BSA reporting is the operational output of the Bank Secrecy Act, codified at 31 USC 5311 et seq. with implementing regulations at 31 CFR Chapter X. The BSA is the foundational US anti-money-laundering statute, enacted in 1970 and amended significantly by the USA PATRIOT Act of 2001 and the Anti-Money Laundering Act of 2020. The administrator is FinCEN, part of the US Treasury. For US founders running businesses that touch cash, foreign accounts, or large payments, BSA reporting is a small set of forms with very large penalty exposure.
How BSA Reporting Works
The reporting cycle has four primary instruments:
- Currency Transaction Report (CTR), FinCEN Form 112. Required for currency transactions over 10,000 dollars at a financial institution. Same-day aggregation rule applies. Filed within 15 days of the transaction.
- Suspicious Activity Report (SAR), FinCEN Form 111. Required when a financial institution detects suspicious activity at or above the applicable threshold. Filed within 30 days of detection (extendable to 60 days while a suspect is identified).
- Form 8300. Required when any person in a trade or business receives more than 10,000 dollars in cash in one transaction or two or more related transactions. Filed within 15 days of receipt.
- FBAR (Report of Foreign Bank and Financial Accounts), FinCEN Form 114. Required for US persons with foreign financial accounts whose aggregate value exceeded 10,000 dollars at any point in the calendar year. Filed annually by April 15, automatic extension to October 15.
A fifth report, the Currency or Monetary Instrument Report (CMIR), FinCEN Form 105, is required for physical transport, mailing, or shipping of more than 10,000 dollars in currency or monetary instruments into or out of the United States.
Who Must Report
Each report has its own scope:
- CTR. Banks, credit unions, savings associations, broker-dealers, mutual funds, futures commission merchants, MSBs, casinos, and any other “financial institution” as defined in 31 USC 5312.
- SAR. Same set as CTR, plus housing GSEs and certain other categories added by rule, plus (since 2024 final rule, phased) certain investment advisers.
- Form 8300. Any person engaged in a trade or business, anywhere in the US. Not limited to financial institutions. Includes auto dealers, jewelers, art dealers, contractor businesses that receive large cash payments, and any other business in scope of IRC 6050I.
- FBAR. All US persons (citizens, residents, US-organized entities, US trusts, US estates) with a financial interest in or signature authority over foreign financial accounts aggregating over 10,000 dollars at any point in the calendar year.
Reporting Thresholds and Deadlines
| Form | Trigger threshold | Filing deadline | Retention |
|---|
| FinCEN Form 112 (CTR) | Cash transaction over 10,000 dollars | 15 days after transaction (25 days e-file) | 5 years |
| FinCEN Form 111 (SAR) | 5,000 dollars or above for banks (2,000 dollars for MSBs in some cases) | 30 days after detection, extendable to 60 | 5 years |
| Form 8300 | Over 10,000 dollars cash received in trade or business | 15 days after receipt | 5 years |
| FinCEN Form 114 (FBAR) | Foreign accounts aggregating over 10,000 dollars | April 15, automatic extension to October 15 | 5 years |
| FinCEN Form 105 (CMIR) | Over 10,000 dollars in currency or monetary instruments transported across border | At the time of entry or exit | 5 years |
Penalties
- CTR or SAR failure (civil). Up to 25,000 dollars per violation for negligent or willful failure, with higher amounts for pattern violations under 31 USC 5321.
- CTR or SAR failure (criminal). Up to 250,000 dollars and 5 years of imprisonment per violation under 31 USC 5322, doubled for violations committed while violating another US law or as part of illegal activity exceeding 100,000 dollars in 12 months.
- Form 8300 failure. Information-return penalties under IRC 6721 (currently 60 to 340 dollars per form depending on lateness, higher for intentional disregard), plus 31 USC 5321 civil penalties of up to 25,000 dollars per failure if filed under the BSA.
- FBAR failure (non-willful, civil). Up to about 16,000 dollars per violation, indexed annually. The Supreme Court held in Bittner v. United States (2023) that the non-willful penalty is per FBAR, not per account.
- FBAR failure (willful). Greater of 100,000 dollars (adjusted for inflation) or 50 percent of the account balance at the time of violation, per violation.
- FBAR criminal. Up to 250,000 dollars and 5 years of imprisonment.
Common Pitfalls
- Structuring. Breaking a single 25,000 dollar cash transaction into three deposits of 8,000 dollars each to avoid CTR triggers is itself a felony under 31 USC 5324, separate from the underlying money-laundering analysis.
- Late SARs. The 30-day clock starts at detection, not at completion of internal investigation. Long investigations that delay the SAR are themselves a violation.
- Form 8300 in non-financial businesses. A contractor or business that takes a large cash payment must file Form 8300 within 15 days. Many small businesses overlook this entirely.
- FBAR scope. Foreign accounts include checking, savings, brokerage, mutual funds, foreign-issued life insurance with cash value, and certain foreign retirement accounts. Not just bank accounts.
- Signature authority counts. A US-resident executive with signature authority over a foreign subsidiary’s account has an FBAR obligation even if they have no economic interest in the funds.
- AML: the broader compliance regime that the BSA forms support.
- KYC: the identity-verification subsystem that feeds SAR detection.
- OFAC Sanctions Screening: the parallel screening regime often run together with BSA monitoring.
- FATCA: the parallel reporting regime focused on foreign financial accounts of US persons (Form 8938), distinct from the FBAR.
Omnivoo Contract Management tracks cash receipts that trigger Form 8300, integrates SAR-quality transaction monitoring, and produces the documentation trail US examiners expect on the BSA side of contractor operations.