Before providing suspicious activity report documentation to an authorized requestor, the institution should first:

According to the guidance issued by FinCEN and the Federal banking agencies, when a financial institution receives a request for SAR supporting documentation from FinCEN or an appropriate law enforcement or supervisory agency, it must first verify that the requestor is, in fact, a representative of such an agency. This is to ensure the confidentiality and security of the SAR information and to prevent unauthorized disclosures. A financial institution should have procedures for such verification in its BSA/AML compliance program, which may include, for example, independent employment verification with the requestor’s field office or face-to-face review of the requestor’s credentials.