Mortgage Fraud Prevention 2026: SAR Obligations, BSA Compliance, and MLO Training Requirements

Mortgage fraud prevention is not just about catching bad actors. It is a regulatory compliance framework that MLOs must understand to protect their licenses and avoid participation liability. The Bank Secrecy Act, Suspicious Activity Report requirements, and state-level obligations all apply depending on the originator's charter type.

Suspicious Activity Reports (SARs)

Financial institutions covered by the BSA, including most banks and credit unions, are required to file SARs with FinCEN when they know, suspect, or have reason to suspect a transaction involves funds from illegal activity, or is structured to evade reporting requirements, or lacks a lawful purpose. MLOs employed by covered institutions have an internal obligation to escalate. Independent mortgage companies (non-bank) are not all subject to the same SAR requirement but may be under state law.

• ✦Covered institutions: banks, thrifts, credit unions, and MSBs with mortgage licenses
• ✦SAR filing threshold: $5,000 for suspicious activity with a known suspect, $25,000 without
• ✦SAR filing deadline: 30 days from detection, or 60 days if no suspect is initially identified
• ✦Safe harbor: good-faith SAR filers are shielded from civil liability to the subject of the SAR
• ✦Never tip off the subject: alerting a borrower that a SAR was or will be filed is a federal crime

Document Retention Requirements

Under RESPA and most state mortgage laws, MLOs must retain loan files for a minimum of 3 years. BSA records must be retained for 5 years. SARs and supporting documentation must be retained for 5 years from the date of filing. NMLS licensing requires MLOs to maintain records sufficient to support license renewal audits.

Training Requirements

BSA-covered institutions must provide annual AML training to all MLOs. NMLS continuing education requirements include a federal law component that covers fraud and fair lending. State-specific requirements vary but most require annual continuing education with a fraud awareness component.