Currency Transaction Report (CTR): Definition and Use in Compliance

What is Currency Transaction Report (CTR)?

A Currency Transaction Report is a mandatory federal filing that financial institutions submit to FinCEN whenever a customer conducts cash transactions totaling more than $10,000 in a single business day. The filing is automatic: if the cash crosses the threshold, the report is required. No suspicion of wrongdoing is needed.

The legal basis is 31 U.S.C. § 5313 of the Bank Secrecy Act. Covered entities include banks, credit unions, savings associations, money services businesses, and casinos. Reports go to the Financial Crimes Enforcement Network (FinCEN) using FinCEN Form 112 and must be submitted within 15 calendar days of the triggering transaction.

What the report captures: the identity of the person conducting the transaction (name, address, date of birth, ID document number and type), the person on whose behalf it was conducted if different, account numbers involved, branch location, and a breakdown of transaction types: currency in, currency out, currency exchanged.

To make it concrete: a retail customer walks into a branch and deposits $12,500 in cash. The teller collects a government-issued ID, the system records full transaction details, and the compliance team has 15 days to file the CTR with FinCEN. The customer doesn't need to be doing anything illegal. The filing obligation is triggered solely by the cash amount.

Aggregation is where compliance teams spend significant daily effort. If the same customer conducts a $6,000 cash deposit in the morning and a $5,000 cash withdrawal in the afternoon, those transactions must be combined and reported as a single CTR. Institutions need to track currency transactions across branches and channels in real time, for every customer, every business day.

CTRs are distinct from Suspicious Activity Reports (SARs). A SAR requires judgment: the institution decides the activity is suspicious. A CTR requires no judgment at all. The same transaction can require both filings, and they are submitted independently.

FinCEN receives roughly 17 million CTRs per year, according to its published Financial Trend Analysis reports. That volume means automated filing systems aren't optional; they're a practical necessity.

How is Currency Transaction Report (CTR) used in practice?

Most institutions automate CTR triggering through their core banking or transaction monitoring platform. When a teller processes a cash transaction, the system checks it against that customer's running daily total across all locations. If the aggregated amount crosses $10,000, a CTR work item is created automatically and routed to the BSA compliance team.

The compliance officer's responsibilities from that point:

1. Verify the customer's identity information is current and matches what is on file
2. Confirm the aggregation logic captured all relevant transactions from that business day
3. Check whether the customer holds a valid Phase I or Phase II exemption
4. Review the underlying Customer Due Diligence (CDD) file for unusual patterns that might also require a SAR
5. Submit the CTR before the 15-day deadline

Exemption management creates ongoing work. Phase I exemptions for banks, government entities, and listed companies are automatic. Phase II exemptions for cash-heavy businesses (supermarkets, payroll processors, restaurant chains) require a Designation of Exempt Person filing and annual renewal. An expired exemption that goes unreviewed is one of the most common findings in BSA examinations.

Structuring alerts add a second layer of review. Customers who consistently deposit $9,800 followed by $9,950 a few days later show a pattern that warrants investigation even when no single transaction hits the threshold. Structuring is a federal offense under 31 U.S.C. § 5324 whether or not the underlying money is from illegal sources.

A scenario that catches smaller institutions: a business customer makes a $6,000 cash deposit in the morning and a $5,000 cash deposit at 4 PM for "different purposes." The BSA doesn't recognize purpose as a distinguishing factor. Same person, same institution, same business day: the transactions are aggregated and a CTR is required.

When a transaction also looks suspicious (unusual cash source, customer refusing to provide ID, inconsistent explanations), both a CTR and a SAR are filed. One does not substitute for the other.

Currency Transaction Report (CTR) in regulatory context

CTR filing is a core BSA obligation, and regulators treat it seriously. The OCC, FDIC, NCUA, and Federal Reserve all examine CTR compliance as part of their BSA/AML examination programs. Examiners look at three things: whether the institution is filing correctly (right entities captured, proper aggregation), whether it is filing on time (within 15 calendar days), and whether the exempt persons list is accurate and current.

Willful violations carry civil money penalties up to $25,000 per violation per day, plus potential criminal referrals. In practice, exam findings usually result in Matters Requiring Attention (MRAs) or formal enforcement actions rather than criminal charges, but serial non-filers have faced both.

FATF's 40 Recommendations don't mandate CTRs by name, but Recommendation 29 requires countries to collect and analyze financial intelligence on large cash transactions. The U.S. CTR is the implementation. Australia's AUSTRAC mandates reporting cash transactions of AUD 10,000 or more; Canada's FINTRAC requires reports for CAD 10,000 or more. The thresholds differ, but the principle is the same.

Know Your Customer (KYC) is foundational to CTR accuracy. If the identity of the conductor or the person on whose behalf the transaction was conducted is wrong or missing, the CTR is deficient. For business accounts, understanding the Ultimate Beneficial Owner (UBO) matters when reporting on whose behalf a large cash transaction was conducted.

Law enforcement access to CTR data is broad. Federal, state, and local agencies query the BSA database routinely. Operation Casablanca in 1998, which targeted Mexican banking complicity in drug cartel money laundering, relied heavily on CTR and SAR data. The operation led to 167 arrests and the seizure of more than $100 million.

Common challenges and how to address them

Aggregation failures are the most common CTR deficiency in BSA exams. Many institutions configure their systems to flag cash deposits over $10,000 or cash withdrawals over $10,000, but not the combined daily total of both. The BSA requires aggregating all currency transactions, in and out, by the same person on the same business day. A $6,000 deposit in the morning plus a $5,000 withdrawal in the afternoon equals $11,000 in currency activity. That's a CTR.

Exemption list drift is the second major issue. A business that qualified for Phase II exemption four years ago may have changed ownership, shifted its business model, or dramatically altered its cash patterns. If the exemption file isn't reviewed annually and the institution keeps suppressing CTRs for that account, it's non-compliant. The fix is straightforward: calendar-driven exemption reviews tied to the original filing date.

Teller coaching is underappreciated as a risk. Tellers who warn customers "you'll need to fill out paperwork if you go over $10,000" are facilitating structuring, even if unintentionally. That's a federal violation. BSA training programs need to explicitly cover what front-line staff can and cannot say when customers ask about the threshold.

Cross-channel aggregation creates blind spots. If a customer deposits $6,000 at a branch and $5,000 at a cash-accepting ATM on the same day, those transactions should be aggregated. Many transaction monitoring systems don't link branch and ATM activity in real time. Closing that gap requires better data integration, not just better policies.

For accounts where cash activity is high and the business profile is complex, pairing CTR filing with Enhanced Due Diligence (EDD) gives compliance teams the context to separate routine business cash flows from genuine placement or layering activity.

Related terms and concepts

The CTR connects directly to a broader set of AML filings and customer risk processes. Understanding how they relate helps compliance teams avoid gaps and duplication.

Suspicious Activity Report (SAR): The SAR is judgment-based; the CTR is threshold-based. A single transaction can require both, filed independently. Tipping off a customer about a SAR is prohibited; there is no equivalent prohibition for CTRs, but most institutions treat both with the same discretion.

Suspicious Transaction Report (STR): Outside the U.S., the STR is the common term for what Americans call a SAR. Some non-U.S. jurisdictions also have mandatory threshold-based transaction reports similar to the CTR, though filing mechanics vary by country.

Know Your Business (KYB): For commercial accounts, KYB tells compliance teams whether cash activity makes sense for that business type and size. A hair salon depositing $200,000 in cash monthly warrants closer scrutiny than a supermarket with the same volume.

Structuring: Deliberately breaking up cash transactions to stay below the $10,000 CTR threshold is called structuring, sometimes "smurfing." It is a federal crime under 31 U.S.C. § 5324 regardless of whether the underlying funds are legal. U.S. courts have upheld structuring convictions even when defendants had no illegal proceeds, including a widely cited case involving a dairy farm in rural New York. The lesson for compliance teams: structuring alerts require investigation on their own merits, independent of the source of funds.

Currency exchange reporting: Money services businesses conducting foreign currency exchanges above the threshold face similar reporting obligations, though the specific form and timing rules differ from standard CTR filing.

In practice, CTRs often function as the first data point in a longer investigation. A customer's cash patterns visible across multiple CTR filings can reveal structuring, layering, or placement behaviors that, once identified, require escalation to a SAR and potentially a law enforcement referral.