Casino Suspicious Activity Report Form
Document suspicious patron activity, transaction details, and surveillance references in one internal worksheet built to support Title 31 SAR review and escalation.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Casinos · Gaming And Hospitality · Tribal Gaming
Overview
This Casino Suspicious Activity Report Form is an internal worksheet for recording suspicious patron activity, transaction details, surveillance references, and escalation actions in a way that supports Title 31 SAR review. It is designed for the person who saw the event, the supervisor who needs a clean handoff, and the compliance team that must decide whether the matter belongs in a formal case file.
Use it when a patron’s behavior, transaction pattern, or location-based activity appears inconsistent, evasive, or otherwise unusual enough to warrant documentation. The structure helps you capture the report date and time, the event date and time, who observed it, where it happened, what indicators were seen, what evidence exists, and what was done immediately after discovery. That makes it easier to preserve facts while they are fresh and to support an audit trail.
Do not use this template as a generic incident log for routine customer service issues, noise complaints, or ordinary disputes that do not raise compliance concerns. It is also not the place to speculate, diagnose intent, or collect unnecessary PII. If the patron is unknown, document the best available identifier and description; if surveillance is unavailable, say so; if no follow-up is needed, state that clearly. The goal is a factual, minimal, reviewable record that can move quickly from observation to escalation without losing context.
Standards & compliance context
- This template supports Title 31 documentation workflows by preserving the factual basis needed for internal review and potential SAR preparation.
- Use data minimization and purpose limitation principles by collecting only the patron details and evidence references needed for compliance follow-up.
- If the report includes any PII, include clear disclosure language in your process so reporters understand how the information will be used and retained.
- Keep the report factual and time-stamped to support an audit trail and reduce ambiguity during compliance review.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Report Overview
This section anchors the report in time and identifies who observed the event, which is essential for an accurate audit trail.
- Date of Report
- Time of Report
- Reporter Name
- Reporter Department
- Date of Suspicious Activity
- Approximate Time of Activity
Patron and Location Details
This section captures the minimum identifying information needed to track the patron and pinpoint where the activity occurred.
- Is the patron known to the property?
-
Patron Identifier
Use loyalty number, player card number, or internal reference if available. Avoid collecting full government ID unless required by policy.
-
Patron Description
Brief physical or behavioral description if needed for internal identification.
- Location / Area
- Location Details
Suspicious Activity Indicators
This section records the specific behaviors or transaction patterns that made the event concerning, not just the conclusion.
- Observed Activity Types
- Other Activity Details
-
Why was the activity suspicious?
Describe the specific facts, observations, and patterns that led to concern. Avoid conclusions without supporting observations.
- Estimated Amount Involved
- Currency / Instrument Type
Transaction and Surveillance Details
This section links the report to amounts, transaction type, and supporting evidence so reviewers can verify the facts quickly.
- Did the activity involve a transaction?
- Transaction Type
-
Transaction Details
Include counts, denominations, sequence of events, and any observed structuring behavior.
- Is surveillance footage or log evidence available?
-
Evidence Reference
Enter camera ID, log reference, incident number, or file name if available.
Immediate Actions and Escalation
This section shows what was done right away, who was notified, and whether the matter needs follow-up.
- Immediate Action Taken
- Immediate Action Details
- Team Notified
- Is follow-up needed?
Reporter Attestation
This section confirms the report is accurate to the best of the reporter’s knowledge and closes the documentation loop.
- I confirm this report is accurate to the best of my knowledge and based on observed facts.
- Reporter Signature
-
Additional Notes
Use for any context that may help Compliance determine whether SAR filing review is warranted.
How to use this template
- 1. Enter the report date, report time, event date, and event time first so the record shows when the observation was made and when the activity occurred.
- 2. Identify the reporter and department, then describe the patron using the least amount of PII needed for internal follow-up, such as a loyalty number, physical description, or location-based identifier.
- 3. Select the suspicious activity types, add any other activity details, and explain the specific facts that made the behavior concerning in the suspicion_reason field.
- 4. Record any transaction details, estimated amount, currency type, and surveillance references so compliance and surveillance can trace the event without re-interviewing the reporter.
- 5. Document the immediate action taken, who was notified, and whether follow-up is needed, then complete the attestation and signature to confirm the report is accurate to the best of your knowledge.
Best practices
- Write the report as soon as possible after the event so the time stamps, sequence, and observations stay accurate.
- Describe observable behavior and transaction facts, not assumptions about motive or criminal intent.
- Use structured fields for amounts, dates, times, and locations instead of burying them in long narrative text.
- Keep patron identification to the minimum necessary for internal review and avoid collecting extra PII that compliance will not use.
- Reference surveillance by file name, camera zone, or case number so reviewers can find the evidence quickly.
- If the patron is unknown, use a clear description and location trail rather than leaving the identifier section blank.
- Note any immediate containment or escalation steps, including who was notified and when, so the audit trail is complete.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What is this form used for?
This template is used to document suspicious patron behavior, related transactions, and the observations that support internal review and possible Title 31 SAR filing. It gives compliance, security, and surveillance teams a consistent record of what was seen, where it happened, and what action was taken. It is not the SAR itself, but the worksheet that helps prepare one.
Who should complete the report?
It is usually completed by the employee who observed the activity, such as a floor supervisor, cage team member, security officer, or surveillance analyst. The key is that the reporter can describe the event firsthand and provide enough detail for follow-up. If multiple people observed the same event, one person should submit the report and reference the others in the notes.
How often should this form be used?
Use it each time a suspicious event meets your property’s escalation threshold, rather than waiting to batch incidents later. Prompt completion preserves details, supports an audit trail, and reduces memory gaps in the narrative. If the same patron triggers multiple observations, create separate entries or linked reports according to your internal procedure.
What kinds of activity belong in the template?
Include behaviors and transaction patterns that raised concern, such as unusual buy-ins, rapid chip movement, inconsistent source-of-funds explanations, structuring indicators, or evasive conduct. Use the activity fields to describe what happened, then explain why it seemed suspicious in the suspicion_reason section. Avoid vague labels without facts, because the report should show observable indicators rather than conclusions alone.
Does this form replace a SAR?
No. This template supports internal documentation and escalation, but it does not replace the formal SAR filing process or your casino’s compliance review. The report should feed the team responsible for determining whether a SAR is required. Keep the worksheet factual so it can be reviewed, retained, and attached to the case file if needed.
What should we do if the patron is unknown?
Use the patron_identifier and patron_description fields to capture whatever is available, such as physical description, loyalty number, seat or table location, and other non-sensitive identifiers. If your process allows anonymous or limited identification at the observation stage, keep the report factual and note what was not available. Do not force a full identity field when it is not known.
How does surveillance fit into this report?
Use the surveillance fields to note whether video, still images, or system logs are available and where they are stored. This helps reviewers find supporting evidence quickly and maintain a clear chain of reference. If no surveillance is available, say so explicitly rather than leaving the section blank.
What are the most common mistakes when filling it out?
Common mistakes include writing conclusions instead of observations, leaving out time stamps, failing to identify the location area, and skipping the immediate action taken. Another frequent issue is using free text where structured fields would be clearer, such as entering estimated amounts without a currency type. The best reports are specific, timely, and easy for compliance to review.
Related templates
Go deeper on the topic
-
Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
-
Job hazard analysis (JHA) — also called job safety analysis (JSA) — is the structured exercise of breaking a work task into sequential steps, identifying the...
-
A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
-
AI governance is the framework a company uses to decide what AI tools are allowed to do, who's accountable for their outputs, what data they're allowed to...
-
MangoApps AI agents now take action across 21 apps—approving leave, advancing candidates, managing schedules—not just surfacing recommendations.
-
Unregulated generative AI exposes companies to data leaks, compliance violations, and productivity blind spots. Learn how to govern AI adoption before...
-
Overcome enterprise-wide AI deployment challenges with scalable GenAI strategies that cut costs, boost adoption, and deliver measurable ROI.
-
Deploy collaboration tools successfully with 5 proven tips to boost adoption, align teams, and improve communication from day one.
Ready to use this template?
Get started with MangoApps and use Casino Suspicious Activity Report Form with your team — pricing built for small business.