The Secretary of the Treasury delegated overall authority for enforcement of, and compliance with, BSA and its implementing regulations to the Director of FinCEN. FinCEN develops policy and provides guidance to other agencies, analyzes BSA data for trends and patterns, and pursues enforcement actions when warranted. It also relies on other agencies in implementing the BSA framework. These activities include (1) ensuring compliance with BSA requirements to report suspicious activity, (2) collecting and storing reported information, and (3) taking enforcement actions or conducting investigations of criminal financial activity. The Secretary of the Treasury delegated BSA examination authority for depository institutions to five banking regulators—the Federal Reserve, OCC, OTS, FDIC, and NCUA. The regulators conduct periodic on-site safety and soundness and compliance examinations to assess an institution’s financial condition, policies and procedures, adherence to BSA regulations (for example, filing of SARs and other BSA-related reports), and compliance with other laws and regulations. Financial institutions must report any suspicious transaction relevant to a possible violation of a law. In 1996, FinCEN required banks and other depository institutions to report, on a SAR form, certain suspicious transactions involving possible violations of law or regulation, including money laundering. In the same year, federal banking regulators required depository institutions to report suspected money laundering and other suspicious activities using the SAR form. IRS’s Enterprise Computing Center–Detroit serves as the central point of collection and storage of these data. Figure 1 summarizes the process for filing and accessing SARs. Federal regulators and FinCEN can bring formal enforcement actions, including civil money penalties, against institutions for violations of BSA. Formal enforcement actions generally are used to address cases involving systemic, repeated noncompliance; failure to respond to supervisory warnings; and other violations. However, most cases of BSA noncompliance are corrected within the examination framework through supervisory actions or letters that document the institution’s commitment to take corrective action. In addition, DOJ may bring criminal actions against individuals and corporations, including depository and other financial institutions, for money laundering offenses and certain BSA violations. The actions may result in criminal fines, imprisonment, and forfeiture actions. Institutions and individuals willfully violating BSA and its implementing regulations, and structuring transactions to evade BSA reporting requirements, are subject to criminal fines, prison, or both. Law enforcement agencies housed in DOJ and the Department of Homeland Security use SARs for investigations of money laundering, terrorist financing, and other financial crimes. Agencies in DOJ involved in efforts to combat money laundering and terrorist financing include FBI; DEA; the Department’s Criminal and National Security Divisions; the Bureau of Alcohol, Tobacco, Firearms, and Explosives; the Executive Office for U.S. Attorneys; and U.S. Attorneys Offices. The Secret Service and ICE (in Homeland Security) also investigate cases involving money laundering and terrorist activities. IRS-CI uses BSA information to investigate possible cases of money laundering and terrorist financing activities. Federal and multiagency law enforcement teams, which may include state and local law enforcement representatives, also use SAR data to provide additional information about subjects during ongoing investigations. From 2000 through 2007, depository institutions filed an increasing number of SARs each year and representatives from federal regulators, law enforcement, and depository institutions with whom we spoke attributed the increase to a number of factors. According to FinCEN data, SAR filings by depository institutions increased from approximately 163,000 in 2000 to more than 732,000 in 2008. In our report, our analysis of SAR and banking data from 2004 through 2007 indicates that the growth rates in SAR filings varied over time among depository institutions of different asset sizes. For example, the greatest increase in SARs filed during this period by the largest depository institutions occurred from 2004 to 2005, and SARs filed by small credit unions nearly doubled from 2005 to 2006. Representatives of federal banking regulators, law enforcement agencies, and depository institutions most frequently attributed the increase to two factors: technological advances and the effect of public enforcement actions on institutions. According to the representatives, automated transaction monitoring systems can flag multiple indicators of suspicious activity and identify much more unusual activity than could be identified manually. At the largest depository institutions, these systems conduct complex analyses incorporating customer profiles. The representatives also said that issuance of several public enforcement actions in 2004 and 2005 with civil money penalties and forfeitures up to $40 million against a few depository institutions prompted many institutions to file more SARs. FinCEN and the federal banking regulators took the actions because of systemic BSA program noncompliance, which included failures to meet SAR filing requirements. More recently in March 2010, government actions taken against one depository institution for BSA violations, including SARs violations, included $160 million in penalties and fines. Depository institution representatives with whom we spoke cited a third factor for increases—concerns they would receive criticisms during examinations about decisions not to file SARs. To avoid such criticism, they said their institutions filed SARs even when they thought them unnecessary—a practice sometimes called “defensive SAR filing.” However, according to the federal regulators and some law enforcement officials with whom we spoke, there is no means of determining what, if any, portion of the increase in filings could be attributed to defensive filing. The representatives suggested additional factors as contributing to the increase, including greater awareness of BSA requirements after September 11, 2001, more regulator guidance for BSA examinations, and more BSA-related training at the institutions. FinCEN and law enforcement agencies have taken multiple actions to educate filers about SARs usefulness and improve the quality of SAR filings. Since 2000, FinCEN has issued written products with the purpose of educating filers and making filings more useful to law enforcement. These include (1) a regularly issued publication that gives tips on topics such as the preparation of SARs and (2) guidance for depository institutions and other SAR filers. For example, in its SAR Activity Review: Trends, Tips and Issues—FinCEN regularly provides information on suspicious activity reporting, trends, and data analyses, law enforcement cases assisted by BSA data, and other issues. In 2008 and in 2009, the publication included information on suspicious activity reviews by a state banking regulator and securities regulators, respectively. In 2009, FinCEN issued guidance on filing SARs for mortgage loan modification and foreclosure rescue scams and in 2010 began an effort to promote electronic filing of BSA forms targeted at current paper filers. FinCEN representatives regularly participate in outreach events on BSA and anti- money laundering issues, including events on SARs. FinCEN also chairs the Bank Secrecy Act Advisory Group—a forum for federal agencies and financial industry representatives to discuss BSA administration, including SAR-related issues. Federal law enforcement agency representatives said they improved SARs’ usefulness by conducting outreach events and establishing relationships with depository institutions in their local areas to communicate with staff about crafting useful SAR narratives. Representatives from some multiagency law enforcement teams told us that they subsequently noticed improved SAR narratives from local depository institutions. FinCEN, law enforcement agencies, and banking regulators use SARs in investigations and depository institution examinations and took steps in recent years to make better use of them. FinCEN uses SARs to provide a number of public and nonpublic analytical products to law enforcement agencies and depository institution regulators. In 2004 and 2005, several federal law enforcement agencies signed memorandums of understanding with FinCEN to receive bulk BSA data, including SARs. They combined these data with information from their law enforcement databases to facilitate more complex and comprehensive analyses. Different team structures have been established to better analyze SARs. For example, in 2000 and again in 2003, DOJ issued guidance that encouraged the formation of SAR review teams with federal, state, and local representation. Each month, these teams review SARs filed in their areas to determine which would merit additional investigation. In 2006, DOJ and IRS-CI collaborated on a pilot to create task forces and augment SAR review teams with federal prosecutors in selected districts. These task forces specifically investigate possible BSA violations with potential for seizures or forfeitures. The regulators also use SARs for scoping their depository institution examinations and review SARs relating to known or suspected unlawful activities by current and former institution-affiliated parties, including officers, directors, and employees. Although law enforcement agency representatives generally were satisfied with their ability to access BSA data, various agencies and multiagency teams we interviewed said that formatting and other issues related to the data system slowed their downloads and reviews. In 2009, FinCEN officials described how features of FinCEN’s planned modernization effort for information technology could address these issues. FinCEN and IRS officials said that, when budgetary resources were available, these and other data management challenges would be addressed as part of FinCEN’s modernization plan, developed in collaboration with IRS. FinCEN officials recently told us that they have begun the first phase of the information technology modernization, which they anticipate will last through fiscal year 2014. We reported in 2009 that FinCEN encountered a number of problems in its 2006 revision of the SAR form and in 2008, developed a new process for form revisions. However, the available information on the process was limited and did not fully indicate how FinCEN would avoid or address some of the problems previously encountered. In 2006, FinCEN and the federal banking regulators issued proposed substantive and formatting revisions to the SAR form. The revisions were finalized but, because of technology limitations with IRS’s data management system, the revised form has not been implemented. Law enforcement agency officials we interviewed had mixed views on the proposed revisions. They generally supported most of the proposed revisions, but some felt they had been insufficiently consulted and also expressed concerns that some revisions could affect their work negatively.