A Suspicious Transaction Report (STR) must be filed in the Philippines when a bank, financial institution, casino, real estate business, or other legally covered person determines that a completed or attempted transaction is suspicious. The amount does not matter. Under current Anti-Money Laundering Council (AMLC) rules, the STR generally must be submitted by the end of the next working day after the institution establishes the suspicion, although the institution may first have a limited period to investigate an alert and decide whether it is genuinely suspicious.

What Is a Suspicious Transaction Report?

An STR is a confidential report submitted by a “covered person” to the AMLC when a transaction raises reasonable concerns about money laundering, terrorism financing, proceeds of crime, fraud, or another unlawful activity.

The governing law is Republic Act No. 9160, or the Anti-Money Laundering Act of 2001, as amended by laws including Republic Act No. 10365 in 2013 and Republic Act No. 11521 in 2021.

An STR is not a criminal complaint, conviction, or final finding that the customer committed a crime. It is financial intelligence that allows the AMLC to analyze transactions, connect related accounts, and determine whether further investigation or court action is justified.

Most importantly, an STR may be required regardless of the amount involved. A ₱20,000 transfer can be suspicious, while a legitimate ₱2 million transaction may simply require ordinary documentation and, depending on the circumstances, a Covered Transaction Report. (Supreme Court E-Library)

When Is a Transaction Considered Suspicious?

Under Section 3(b-1) of the Anti-Money Laundering Act, a transaction is suspicious when one or more of the following circumstances exist.

1. There is no clear legal or economic purpose

The transaction has no apparent underlying legal obligation, trade purpose, or reasonable economic justification.

Examples include:

A person repeatedly sending money to strangers without a credible explanation
A company receiving large payments unrelated to its registered business
Funds circulating through several accounts and returning to the original sender
A customer paying significantly more than the agreed price and requesting a refund to another account

An unusual transaction is not automatically illegal. The institution should consider whether the customer can provide a credible and documented explanation.

2. The customer cannot be properly identified

Suspicion may arise when the institution cannot establish the customer’s true identity or beneficial owner—the natural person who ultimately owns, controls, or benefits from an account or company.

Red flags may include:

Altered, inconsistent, or apparently fake identification documents
Refusal to disclose the company’s actual owners
Use of nominees without a reasonable business explanation
Different names, signatures, birth dates, or addresses across documents
An account apparently controlled by someone other than the registered holder

3. The transaction does not match the customer’s financial capacity

A transaction may be suspicious when its size, frequency, or nature is inconsistent with the customer’s known income, occupation, business, or financial profile.

For example, a minimum-wage employee receiving several million pesos may require closer review. However, the transaction may be legitimate if the money came from an inheritance, sale of property, insurance proceeds, family remittance, loan, or another documented source.

Institutions should examine the explanation and supporting documents rather than treat income level alone as proof of wrongdoing.

4. The transaction appears structured to avoid reporting

“Structuring” or “smurfing” means dividing a larger transaction into smaller transactions to avoid reporting thresholds or internal controls.

Examples include:

Depositing ₱490,000 several times instead of depositing ₱1.5 million at once
Using several branches, e-wallets, remittance outlets, or people to move one larger amount
Making repeated cash deposits just below a known threshold
Asking employees or relatives to transact on another person’s behalf without a legitimate reason

The institution may aggregate related transactions conducted within the same day or over a relevant period when assessing whether they form part of one arrangement.

5. The transaction deviates from the customer’s profile or past activity

A transaction may become suspicious when it is materially different from the customer’s normal behavior.

Examples include:

A dormant account suddenly receiving multiple international transfers
A payroll account being used to receive business payments from unrelated persons
A local retail company suddenly transferring funds to unrelated offshore entities
An elderly customer rapidly sending life savings to newly opened accounts
A personal account receiving hundreds of payments with identical descriptions

A change in behavior can be legitimate. The covered person should examine the customer’s explanation, supporting documents, and surrounding circumstances.

6. The transaction is connected to an unlawful activity

An STR is required when a transaction is reasonably related to an unlawful activity or money laundering that is about to be committed, is being committed, or has already been committed.

Relevant unlawful activities include, among others:

Estafa and other fraud under Articles 315 and 316 of the Revised Penal Code
Qualified theft under Article 310
Robbery, extortion, kidnapping for ransom, bribery, and malversation
Drug offenses under Republic Act No. 9165
Graft under Republic Act No. 3019
Plunder under Republic Act No. 7080
Human trafficking
Terrorism and terrorism financing
Securities fraud
Tax evasion covered by the AMLA
Cybercrime, online sexual exploitation, smuggling, environmental crimes, and other predicate offenses identified by law

The institution does not need a criminal conviction before filing an STR. Reporting is based on reasonable suspicion and the available facts, not proof beyond reasonable doubt.

7. The circumstances are similar to the statutory warning signs

The AMLA includes a catch-all category for transactions analogous to the circumstances above. This allows institutions to respond to new schemes, technologies, payment methods, and criminal typologies that may not have existed when the law was enacted. (Supreme Court E-Library)

Who Is Legally Required to File an STR?

The formal duty to file an STR belongs to covered persons, not ordinarily to the customer or general public.

Covered persons include:

Banks, digital banks, quasi-banks, trust entities, and other BSP-supervised institutions
Pawnshops, foreign exchange dealers, money changers, and remittance companies
Electronic money issuers, payment service providers, and regulated virtual asset service providers
Insurance and pre-need companies and other Insurance Commission-supervised entities
Securities brokers, dealers, investment houses, mutual funds, and other SEC-supervised financial businesses
Casinos
Real estate developers and brokers
Dealers in jewelry, precious metals, and precious stones within the scope of the law
Company service providers
Persons who professionally manage client money, securities, accounts, companies, or legal arrangements

Lawyers and accountants may be covered when providing specified financial or company-management services. However, independent Philippine lawyers and accountants are not required to report information obtained under professional secrecy, legal professional privilege, or protected client confidences. (Supreme Court E-Library)

An ordinary person who suspects a scam, fraud, or money-laundering operation does not normally prepare an STR. The person may instead notify the relevant bank or e-wallet provider and report the suspected offense to the Philippine National Police, National Bureau of Investigation, Securities and Exchange Commission, or another appropriate agency.

What Is the Deadline for Filing an STR?

The statutory rule

Section 9(c) of the AMLA states that covered and suspicious transactions must be reported within five working days from their occurrence, unless the AMLC prescribes another period not exceeding 15 working days. (Supreme Court E-Library)

The current GoTRACS operational rule

Under the AMLC’s Guidelines on Transaction Reporting and Compliance Submissions, commonly called GoTRACS, an STR—including an attempted transaction—must generally be filed electronically through the AMLC File Transfer and Reporting Facility within the next working day after occurrence.

For an STR, “occurrence” does not necessarily mean the date when the money was deposited, withdrawn, or transferred. It generally means the date when the covered person established or determined the suspicious nature of the transaction.

The deadline is therefore best understood as follows:

Once the institution concludes that the transaction is suspicious, it normally has until 11:59:59 p.m. of the next working day to file the STR.

The AMLC may treat a submission made after that cutoff as late and noncompliant.

How long may the institution investigate before deciding?

A transaction-monitoring alert is not automatically an STR. The institution may review the account, transaction history, customer profile, source of funds, beneficial ownership, and supporting documents before deciding.

Current GoTRACS rules provide different determination periods depending on the type and urgency of the case.

Type of alert or transaction	Usual determination or action period	STR filing deadline
Ordinary suspicious circumstance under Section 3(b-1)	Generally within 10 calendar days from the triggering transaction or event	Next working day after suspicion is established
Highly unusual or apparently suspicious activity	Suspicion should be established promptly, generally on the same date	Next working day
High-priority matters such as terrorism financing, trafficking, or online sexual exploitation	Prompt or same-date establishment of suspicion	Next working day
Other transaction-monitoring system alerts	Depending on the applicable GoTRACS category, review may extend up to 60 calendar days from case creation	Next working day after determination
AMLC referral identifying a particular unlawful activity	Generally within the period stated by the AMLC or the applicable accelerated period	As directed, sometimes immediately or by the next working day
Confirmed targeted financial sanctions match	Immediate freezing and reporting rules apply	Generally on the same day the freeze is implemented

Specialized cases connected to a known unlawful activity may require initial and final reports using the particular workflows and transaction codes in the GoTRACS annexes.

The investigation period is not permission to delay a report after suspicion has already been established. An institution should not wait until the tenth or sixtieth day merely because that is the outer review period. GoTRACS recognizes actual knowledge, awareness of facts that would indicate suspicion to a reasonable person, and circumstances that should reasonably place the institution on inquiry.

How are working days counted?

For GoTRACS reporting, working days generally exclude:

Saturdays
Sundays
Regular national holidays
Officially declared nonworking days
Work suspensions affecting the AMLC’s location
Days formally declared by the AMLC as non-reporting days

For example, if suspicion is established on Friday and the following Monday is an ordinary working day, the STR is normally due by 11:59:59 p.m. on Monday.

A local holiday that applies only where the covered person is located does not necessarily extend the deadline automatically. The institution may need an approved deviation or other relief under GoTRACS.

GoTRACS also contains technical-outage rules. An extended failure of the AMLC reporting facility may result in reporting suspension or designation of a non-reporting day. The covered person should document the outage, preserve system evidence, notify the appropriate AMLC channel, and monitor official advisories.

How an STR Is Prepared and Filed in Practice

A covered person’s internal process will normally involve the following steps.

Detect the alert or unusual activity. The alert may come from automated transaction monitoring, branch personnel, customer due diligence, sanctions screening, a complaint, law-enforcement information, or an attempted transaction.
Preserve the relevant records. The institution should secure transaction records, identification documents, account-opening records, communications, IP or device information where applicable, and related-account data.
Review the customer’s profile. Compliance personnel compare the activity with the customer’s occupation, business, expected transactions, source of funds, transaction history, and declared purpose of the account.
Identify connected persons and accounts. The review may include senders, recipients, beneficial owners, authorized signatories, common addresses, telephone numbers, devices, companies, and accounts that appear to be acting together.
Obtain clarification when appropriate. The institution may request invoices, contracts, bank statements, tax documents, proof of employment, sale documents, or other evidence. It must avoid asking questions in a way that reveals that an STR is being considered.
Escalate the matter through the reporting chain. The case is reviewed by the designated compliance officer, committee, or authorized senior personnel under the institution’s Money Laundering and Terrorism Financing Prevention Program.
Decide whether to file. The institution either establishes suspicion and proceeds with the STR or documents why the alert did not justify filing. A decision not to file should still be supported by a clear internal record.
Prepare a useful narrative. The STR should explain who was involved, what happened, when and where it occurred, how the transaction was carried out, why it is suspicious, and which accounts or parties are connected. A vague statement such as “transaction is unusual” is generally inadequate.
Submit electronically. STRs are transmitted through the AMLC File Transfer and Reporting Facility using the applicable reporting format and transaction codes.
Confirm that the report was accepted. An upload receipt does not always mean that every record passed validation. The institution should review its upload history, identify rejected or defective records, correct the errors, and resubmit them using the proper submission type.
Maintain confidentiality and records. Access should be restricted to personnel with an operational need to know. Supporting records must be preserved for the legally required retention period.

The detailed operational requirements appear in the AMLC Guidelines on Transaction Reporting and Compliance Submissions.

Suspicious Transaction Report vs. Covered Transaction Report

An STR is different from a Covered Transaction Report, or CTR.

Question	Covered Transaction Report	Suspicious Transaction Report
What triggers it?	A transaction reaches the applicable statutory threshold	Suspicious circumstances or links to unlawful activity
Is suspicion required?	No	Yes
Does the amount matter?	Yes	No
Can an attempted transaction be reported?	Generally based on the applicable covered-transaction rules	Yes
Is a large legitimate transaction reportable?	It may be reportable as a covered transaction	Not necessarily suspicious
Can a small transaction be reportable?	Usually not as a CTR	Yes, if suspicious

For most covered persons, the general covered-transaction threshold is more than ₱500,000 within one banking day. Different thresholds apply to sectors such as casinos, real estate developers and brokers, and dealers in jewelry, precious metals, or precious stones.

Crossing a threshold does not automatically make a person suspicious. Conversely, staying below the threshold does not provide protection when the transactions appear structured or otherwise suspicious.

When a transaction qualifies as both covered and suspicious, it should be reported as a suspicious transaction under the applicable reporting rules. (Bureau of the Treasury)

Does Filing an STR Automatically Freeze the Account?

No. Filing an STR does not, by itself, automatically freeze a customer’s bank account, e-wallet, investment, or other property.

In an ordinary money-laundering case, the AMLC normally conducts an investigation and applies through a verified ex parte petition to the Court of Appeals. If the Court of Appeals finds probable cause that the funds or property are related to an unlawful activity, it may issue a freeze order initially effective for 20 days. After a summary hearing, the order may be modified, lifted, or extended, but the total freeze period under that provision cannot exceed six months.

Different rules apply to targeted financial sanctions involving designated persons and proliferation financing. In those cases, the AMLC has authority to issue an ex parte freeze without delay, subject to the remedies provided by law. (Supreme Court E-Library)

An institution may nevertheless delay, reject, restrict, or subject a transaction to further review under its contractual terms, fraud controls, sanctions obligations, or regulatory duties even when no court-issued freeze order exists.

Why the Customer Usually Is Not Told About the STR

The AMLA strictly prohibits “tipping off.” A covered person and its officers or employees may not tell a customer or another person:

That an STR was filed
That an STR is about to be filed
What the STR contains
What information was provided to the AMLC
That a particular compliance review relates to suspicious-transaction reporting

This means a bank employee may ask for source-of-funds documents or say that a transaction is undergoing compliance review without confirming whether an STR exists.

A breach of STR confidentiality may result in imprisonment of three to eight years and a fine of ₱500,000 to ₱1 million. (Supreme Court E-Library)

Common Real-Life Scenarios

An OFW receives or sends a large remittance

A large remittance is not automatically suspicious. It may be consistent with the OFW’s employment, savings, family support, property purchase, or investment.

Concern may arise when:

The amount is inconsistent with known employment or income
Funds come from many unrelated persons
Money is rapidly withdrawn and transferred elsewhere
The customer cannot explain the purpose or source
Several accounts appear to be used as pass-through accounts

Employment contracts, payslips, foreign bank statements, remittance records, and sale or investment documents can help explain the transaction.

A scam victim receives and forwards money

A person may unknowingly become a “money mule” after being instructed to receive funds and forward them in exchange for a commission, job opportunity, romance-related request, or online task.

Even when the account holder claims to be a victim, rapid receipt and onward transfer of suspected fraud proceeds may require an STR. The institution should record the explanation, identify the origin and destination of funds, and assess whether the person knowingly participated.

A business deposits cash in several smaller amounts

Frequent deposits below ₱500,000 may be normal for a cash-intensive business. They become more concerning when the business cannot explain its sales, the deposits do not match its operations, or the customer appears to be deliberately avoiding thresholds.

A foreign buyer transfers funds for Philippine property

A foreign buyer’s nationality does not, by itself, make the transaction suspicious. However, the institution or real estate business may examine:

The buyer’s identity and country of residence
The lawful source of funds
The beneficial owner of any purchasing company
The purpose and structure of the purchase
Compliance with Philippine constitutional restrictions on land ownership
Whether the funds came from an unrelated third party
Whether the price and payment arrangements are commercially reasonable

Foreign public documents may need certified translations, authentication, or an apostille when required by the receiving institution or relevant Philippine authority.

A company will not disclose its beneficial owner

A corporation’s refusal or inability to identify its true controlling person is a serious warning sign. Suspicion becomes stronger when ownership passes through several jurisdictions, nominee shareholders have no credible role, or payment instructions come from undisclosed third parties.

Documents Commonly Requested to Explain a Transaction

The required documents depend on the customer and the nature of the funds.

Source or purpose of funds	Documents commonly requested
Salary or professional income	Employment certificate, contract, payslips, invoices, tax return
Business revenue	Sales invoices, contracts, financial statements, permits, tax records
Sale of real property	Deed of absolute sale, title, tax declaration, proof of payment, tax documents
Sale of shares or business	Share purchase agreement, corporate records, proof of ownership
Inheritance	Death certificate, will, settlement documents, court order, estate-tax records
Loan proceeds	Loan agreement, approval letter, lender’s identity, disbursement record
Insurance proceeds	Insurance policy, claim approval, settlement statement
Foreign remittance	Overseas employment records, foreign bank statements, remittance receipts
Gift or family support	Donor’s identification, proof of relationship, deed or written explanation, donor’s source of funds
Investment redemption	Account statement, redemption confirmation, broker or fund documents
Corporate transaction	SEC records, general information sheet, board resolutions, beneficial-ownership documents

Submitting documents does not guarantee that no STR will be filed. The institution must assess whether the documents are authentic, internally consistent, and sufficient to explain the activity.

Common Compliance Mistakes

Treating ₱500,000 as the only relevant rule

The ₱500,000 figure relates mainly to the general covered-transaction threshold. An STR may be required for any amount.

Waiting for proof of a crime

An institution does not need to prove fraud, estafa, tax evasion, drug trafficking, or another predicate offense before filing. Requiring courtroom-level proof would defeat the purpose of early financial intelligence.

Starting the deadline only when senior management approves

The reporting clock cannot be manipulated by leaving an alert unreviewed. GoTRACS considers not only actual knowledge but also facts that should reasonably place the institution on inquiry.

Ignoring attempted transactions

A transaction may remain reportable even when it was rejected, cancelled, blocked, or abandoned before completion.

Filing an incomplete narrative

An STR that merely lists transactions without explaining the suspicious pattern may have limited intelligence value and may fail completeness requirements.

Assuming an upload receipt means successful filing

The filer should confirm validation and acceptance of the report and promptly correct rejected records.

Revealing the STR to the customer

Even well-intentioned statements such as “We reported you to the AMLC” may violate the tipping-off prohibition.

Consequences of Failing to File

A covered person that knowingly fails to report a covered or suspicious transaction required by the AMLA may itself commit a money-laundering offense.

The statutory penalty for knowingly failing to report is imprisonment from six months to four years, a fine of ₱100,000 to ₱500,000, or both. Separate administrative sanctions may also be imposed on the institution, directors, officers, employees, or other responsible persons.

The AMLC and sector regulators may impose monetary penalties, warnings, reprimands, corrective measures, license-related sanctions, or other consequences depending on the violation. (Supreme Court E-Library)

On the other hand, persons who submit CTRs or STRs in good faith and in the regular performance of their duties are generally protected from administrative, criminal, or civil proceedings arising solely from the reporting. This safe-harbor protection supports prompt reporting without requiring the filer to prove that a prosecution will ultimately follow. (Bureau of the Treasury)

Frequently Asked Questions

Is every transaction above ₱500,000 suspicious?

No. A transaction above ₱500,000 may require a Covered Transaction Report, but it is not automatically suspicious. Suspicion depends on the customer’s profile, source of funds, purpose, structure, and surrounding circumstances.

Can an STR be filed for less than ₱500,000?

Yes. There is no minimum amount for an STR. Even a small transaction may be reportable if it appears connected to fraud, money laundering, structuring, terrorism financing, or another unlawful activity.

Must an attempted transaction be reported?

Yes, when the attempt is suspicious. A rejected transfer, attempted cash withdrawal, unsuccessful account opening, or abandoned transaction may still contain valuable information and may require an STR under GoTRACS.

How soon must a bank file an STR?

Once the bank establishes that the transaction is suspicious, it generally must file by the end of the next working day. Before that determination, the bank normally has a limited investigation period, often up to 10 calendar days for an ordinary suspicious circumstance.

Can a bank wait until the investigation is complete?

It may complete a reasonable review within the applicable determination period. However, once suspicion has already been established, it should not delay filing merely to collect every possible document or reach absolute certainty.

Will the bank tell me whether it filed an STR?

Usually not. The AMLA prohibits the bank and its personnel from revealing that an STR was filed or is about to be filed.

Does an STR mean my account will be frozen?

No. An STR does not automatically freeze an account. In an ordinary case, the AMLC generally must investigate and obtain a freeze order from the Court of Appeals. Targeted financial sanctions follow different rules.

Can a foreigner or OFW be reported simply because funds came from abroad?

Foreign origin alone does not make funds suspicious. The institution may nevertheless request proof of employment, business activity, sale proceeds, inheritance, investment income, or another lawful source, especially when the transaction is unusually large or inconsistent with the customer’s profile.

Can an ordinary customer file an STR directly?

The statutory STR filing obligation rests on covered persons. A customer or member of the public may report suspected fraud or criminal activity to the financial institution and the appropriate law-enforcement or regulatory agency.

What should I do when a bank asks for proof of source of funds?

Provide documents that clearly connect the transaction to its lawful source, such as contracts, payslips, deeds of sale, bank statements, tax documents, inheritance papers, loan agreements, or corporate records. The documents should be complete, consistent, and authentic.

Key Takeaways

An STR is required when a covered person determines that a completed or attempted transaction is suspicious.
Suspicious transactions are reportable regardless of amount.
Statutory red flags include lack of economic purpose, identification problems, activity beyond financial capacity, structuring, deviation from the customer profile, and links to unlawful activity.
Under current GoTRACS rules, an STR is generally due by 11:59:59 p.m. of the next working day after suspicion is established.
Ordinary suspicious alerts are generally assessed within 10 calendar days, while specialized monitoring cases may have different or longer determination periods.
An institution should not delay filing after it already has sufficient facts to establish suspicion.
Filing an STR does not automatically prove wrongdoing or freeze an account.
Customers are usually not told about STRs because Philippine law prohibits tipping off.
Knowingly failing to file a required STR can result in criminal and administrative penalties.
Clear customer identification, beneficial-ownership information, and credible source-of-funds documents are central to resolving unusual transactions.