Hey, welcome to VoraPrep Audio. Glad you could join me.
Let's talk about a situation that comes up all the time, both in the real world and on your exam. Imagine you're an operations manager at a broker-dealer. A customer deposits a large amount of cash over two consecutive days. The total comes to twelve thousand five hundred dollars. Then, soon after, someone you don't recognize, who isn't on the account, tries to withdraw six thousand dollars.
Your gut tells you something is off. But the exam doesn't test your gut. It tests if you know the exact rules. What reports do you file? When? And what are the specific dollar amounts that trigger them? Getting this right is crucial. These aren't just firm policies—they're federal law.
So, let's break down the three big reports you need to know. There are FOCUS reports, Currency Transaction Reports—or CTR.s—and Suspicious Activity Reports, which we call SAR.s.
Think of it like this. You have two different alarm systems for financial crime. A CTR is like a simple smoke detector. It's purely mechanical. If the amount of cash goes over a certain limit, the alarm goes off. Period. No judgment call is needed.
A SAR, on the other hand, is like a sophisticated security camera system. You have to watch the activity. You notice when someone is acting strangely. Then you use your professional judgment to decide if you need to alert the authorities. Two different tools for two different jobs.
Before we get to the alarms, let's talk about the foundation. The whole system is built on good record-keeping. SEC. Rules 17a-3 and 17a-4 require broker-dealers to keep detailed, accurate books and records of everything. Customer accounts, trade tickets, emails... all of it. This creates the audit trail.
Okay, with that foundation in place, let's look at the first big report. It's called the FOCUS report. That's F-O-C-U-S. It stands for Financial and Operational Combined Uniform Single Report. This one isn't about crime. It's about the health of the brokerage firm itself. The SEC and FINRA use it to make sure the firm is financially stable. They’re checking things like net capital. They also check if the firm is protecting customer funds under the Customer Protection Rule, or SEC. Rule 15c3-3.
Firms that carry customer accounts and clear their own trades file a FOCUS Report Part Two. Smaller firms that don't do that file a Part Two A. They file these monthly or quarterly. So, think of FOCUS reports as the firm’s regular financial check-up with its regulators.
Now for the crime-fighting tools. These are run by FinCEN, the Financial Crimes Enforcement Network.
First up is the smoke detector: the Currency Transaction Report, or CTR. The rule here is very specific. You must file a CTR for any cash transaction, or series of cash transactions, that adds up to more than ten thousand dollars. This applies to transactions by the same person, in a single business day.
Notice all the keywords there. It has to be cash. It has to be more than ten thousand dollars. And it's aggregated in one single business day. That's the part that trips people up. So if a client deposits six thousand dollars in cash in the morning, and comes back with five thousand in the afternoon, you add them together. That’s eleven thousand. It’s over the threshold. You have to file a CTR. Once a transaction triggers this, you have 15—that’s one-five—calendar days to file the report. It's automatic. No suspicion is required.
But what if the numbers don't trigger the CTR, but something still feels wrong? That's where the security camera comes in: the Suspicious Activity Report, or SAR.
A SAR is all about your professional judgment. You file one when you know or suspect that a transaction might involve illegal funds. Or maybe it's designed to hide something. Or it just has no logical business purpose. This is directly connected to your "Know Your Customer" obligations under FINRA. Rule 2090. You can't spot what's suspicious if you don't know what's normal for your client.
The dollar threshold for a SAR is generally five thousand dollars or more. So, if you spot a suspicious transaction involving at least five thousand bucks, you need to file a SAR. The timeline is different, too. You have 30 calendar days from the moment you first detect the suspicious activity. So, 15 days for a CTR, 30 days for a SAR.
And here is the most important rule about SAR.s. It's a huge deal on the exam and in real life. You are legally prohibited from telling the customer, or anyone involved, that you have filed a SAR. This is called the "no tipping off" rule. Breaking this confidentiality is a serious violation.
So let’s walk through that opening scenario step-by-step.
The customer deposits twelve thousand five hundred dollars in cash over two days. Let’s say seven thousand on Monday and five thousand five hundred on Tuesday. Then an unknown person tries to withdraw six thousand dollars.
First, let's check the CTR rule. Does it apply? The total is over ten grand. But wait. The rule is for a single business day. Since neither Monday's nor Tuesday's deposit alone was over ten thousand dollars, no automatic CTR is required. This pattern of making deposits just under the threshold is a classic red flag for "structuring." That's an attempt to evade the reporting requirement.
So that brings us to the next step: is it suspicious? Absolutely. The structuring of the deposits, followed by a withdrawal attempt from an unauthorized person... that's a collection of red flags.
Okay, since it's suspicious, we consider a SAR. Does it meet the dollar threshold? The activity involves transactions well over the five thousand dollar mark. So yes, a SAR is definitely required here. You'd have 30 days from when you first noticed this pattern to file it. And of course, you would say nothing to the customer about it. Confidentiality is key.
See how that works? You check the automatic rule first—the CTR. Then you apply your professional judgment for the second—the SAR.
Let's try a quick pop quiz. A customer deposits seven thousand dollars cash on Monday, and then another four thousand dollars cash on Tuesday. Do you need to file a CTR.?
The answer is no. The transactions happened on two separate business days. You don't aggregate them for CTR purposes. Neither day's total exceeded ten thousand dollars. Now, you should still be thinking if this is structuring. It might be, and that could lead you to file a SAR, but the automatic CTR isn't triggered.
Okay, one more. You notice a seven thousand five hundred dollar wire transfer from a client's account to an overseas company you've never seen before. This is totally out of character for this client. When you ask about it, they get very evasive. What do you do?
Well, it's not cash, so a CTR is irrelevant. But it is deeply suspicious. And it's over the five thousand dollar threshold. So you must file a SAR. You've got 30 days to do it, and you must not tip off the client.
To lock this in for exam day, just remember the key differences. A CTR is for cash. It's triggered by a number—over ten thousand dollars in one day. And you have 15 days to file. A SAR is for suspicion. It's triggered by your judgment about activity of five thousand dollars or more. You have 30 days to file, and you must keep it secret from the customer.
And don't forget the FOCUS report. That’s the firm’s own financial health report to the SEC and FINRA, making sure it’s stable and protecting its customers.
Understanding these reporting rules isn't just about passing the exam. It's about your role on the front lines, protecting the integrity of the financial system.
Alright, that's it for today. Keep up the great work, and I'll talk to you on the next one.
VoraPrep is a full exam-prep app — lessons, practice questions, and an AI tutor in one place. Get started at Vora Prep dot com.