Loading...
compliance

Casino Suspicious Activity Report Form

Document suspicious patron activity, transaction details, and surveillance references in one internal worksheet built to support Title 31 SAR review and escalation.

Trusted by frontline teams 15 years of frontline software AI customization in seconds

Built for: Casinos · Gaming And Hospitality · Tribal Gaming

Overview

This Casino Suspicious Activity Report Form is an internal worksheet for recording suspicious patron activity, transaction details, surveillance references, and escalation actions in a way that supports Title 31 SAR review. It is designed for the person who saw the event, the supervisor who needs a clean handoff, and the compliance team that must decide whether the matter belongs in a formal case file.

Use it when a patron’s behavior, transaction pattern, or location-based activity appears inconsistent, evasive, or otherwise unusual enough to warrant documentation. The structure helps you capture the report date and time, the event date and time, who observed it, where it happened, what indicators were seen, what evidence exists, and what was done immediately after discovery. That makes it easier to preserve facts while they are fresh and to support an audit trail.

Do not use this template as a generic incident log for routine customer service issues, noise complaints, or ordinary disputes that do not raise compliance concerns. It is also not the place to speculate, diagnose intent, or collect unnecessary PII. If the patron is unknown, document the best available identifier and description; if surveillance is unavailable, say so; if no follow-up is needed, state that clearly. The goal is a factual, minimal, reviewable record that can move quickly from observation to escalation without losing context.

Standards & compliance context

  • This template supports Title 31 documentation workflows by preserving the factual basis needed for internal review and potential SAR preparation.
  • Use data minimization and purpose limitation principles by collecting only the patron details and evidence references needed for compliance follow-up.
  • If the report includes any PII, include clear disclosure language in your process so reporters understand how the information will be used and retained.
  • Keep the report factual and time-stamped to support an audit trail and reduce ambiguity during compliance review.

General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.

What's inside this template

Report Overview

This section anchors the report in time and identifies who observed the event, which is essential for an accurate audit trail.

  • Date of Report (required)
  • Time of Report (required)
  • Reporter Name (required)
  • Reporter Department (required)
  • Date of Suspicious Activity (required)
  • Approximate Time of Activity

Patron and Location Details

This section captures the minimum identifying information needed to track the patron and pinpoint where the activity occurred.

  • Is the patron known to the property? (required)
  • Patron Identifier

    Use loyalty number, player card number, or internal reference if available. Avoid collecting full government ID unless required by policy.

  • Patron Description

    Brief physical or behavioral description if needed for internal identification.

  • Location / Area (required)
  • Location Details

Suspicious Activity Indicators

This section records the specific behaviors or transaction patterns that made the event concerning, not just the conclusion.

  • Observed Activity Types (required)
  • Other Activity Details
  • Why was the activity suspicious? (required)

    Describe the specific facts, observations, and patterns that led to concern. Avoid conclusions without supporting observations.

  • Estimated Amount Involved
  • Currency / Instrument Type

Transaction and Surveillance Details

This section links the report to amounts, transaction type, and supporting evidence so reviewers can verify the facts quickly.

  • Did the activity involve a transaction? (required)
  • Transaction Type
  • Transaction Details

    Include counts, denominations, sequence of events, and any observed structuring behavior.

  • Is surveillance footage or log evidence available? (required)
  • Evidence Reference

    Enter camera ID, log reference, incident number, or file name if available.

Immediate Actions and Escalation

This section shows what was done right away, who was notified, and whether the matter needs follow-up.

  • Immediate Action Taken (required)
  • Immediate Action Details
  • Team Notified
  • Is follow-up needed? (required)

Reporter Attestation

This section confirms the report is accurate to the best of the reporter’s knowledge and closes the documentation loop.

  • I confirm this report is accurate to the best of my knowledge and based on observed facts. (required)
  • Reporter Signature (required)
  • Additional Notes

    Use for any context that may help Compliance determine whether SAR filing review is warranted.

How to use this template

  1. 1. Enter the report date, report time, event date, and event time first so the record shows when the observation was made and when the activity occurred.
  2. 2. Identify the reporter and department, then describe the patron using the least amount of PII needed for internal follow-up, such as a loyalty number, physical description, or location-based identifier.
  3. 3. Select the suspicious activity types, add any other activity details, and explain the specific facts that made the behavior concerning in the suspicion_reason field.
  4. 4. Record any transaction details, estimated amount, currency type, and surveillance references so compliance and surveillance can trace the event without re-interviewing the reporter.
  5. 5. Document the immediate action taken, who was notified, and whether follow-up is needed, then complete the attestation and signature to confirm the report is accurate to the best of your knowledge.

Best practices

  • Write the report as soon as possible after the event so the time stamps, sequence, and observations stay accurate.
  • Describe observable behavior and transaction facts, not assumptions about motive or criminal intent.
  • Use structured fields for amounts, dates, times, and locations instead of burying them in long narrative text.
  • Keep patron identification to the minimum necessary for internal review and avoid collecting extra PII that compliance will not use.
  • Reference surveillance by file name, camera zone, or case number so reviewers can find the evidence quickly.
  • If the patron is unknown, use a clear description and location trail rather than leaving the identifier section blank.
  • Note any immediate containment or escalation steps, including who was notified and when, so the audit trail is complete.

What this template typically catches

Issues teams running this template most often surface in practice:

The patron description is too vague to distinguish one person from another.
The report lists a suspicion without explaining the observable behavior that triggered it.
Estimated amounts are entered without a currency type or clear basis for the estimate.
Transaction details are missing even though the activity involved chips, cash, or cage interaction.
Surveillance is marked available, but no camera reference or evidence location is provided.
Immediate action taken is left blank, making it hard to see whether the issue was escalated.
The reporter signs off without confirming whether the facts were observed directly or relayed by another employee.

Common use cases

Casino floor supervisor documenting repeated buy-in and cash-out activity
A supervisor uses the form to record a patron who cycles chips with limited play and inconsistent explanations. The report captures the table area, estimated amounts, and the immediate escalation to compliance.
Cage manager logging a suspicious transaction pattern
A cage manager documents a series of transactions that appear structured or unusual for the patron’s stated activity. The template helps separate the transaction facts from the manager’s concern so the compliance team can review it cleanly.
Surveillance analyst attaching evidence references
A surveillance analyst completes the report after reviewing camera footage and notes the relevant camera zone, time window, and evidence reference. This creates a usable handoff for investigators without duplicating the full video review narrative.
Tribal gaming compliance intake for a patron of unknown identity
When the patron is not fully identified, the reporter uses the description, location, and observed conduct fields to preserve the event record. This is useful when the initial observation comes from the floor and identity is still being confirmed.

Frequently asked questions

What is this form used for?

This template is used to document suspicious patron behavior, related transactions, and the observations that support internal review and possible Title 31 SAR filing. It gives compliance, security, and surveillance teams a consistent record of what was seen, where it happened, and what action was taken. It is not the SAR itself, but the worksheet that helps prepare one.

Who should complete the report?

It is usually completed by the employee who observed the activity, such as a floor supervisor, cage team member, security officer, or surveillance analyst. The key is that the reporter can describe the event firsthand and provide enough detail for follow-up. If multiple people observed the same event, one person should submit the report and reference the others in the notes.

How often should this form be used?

Use it each time a suspicious event meets your property’s escalation threshold, rather than waiting to batch incidents later. Prompt completion preserves details, supports an audit trail, and reduces memory gaps in the narrative. If the same patron triggers multiple observations, create separate entries or linked reports according to your internal procedure.

What kinds of activity belong in the template?

Include behaviors and transaction patterns that raised concern, such as unusual buy-ins, rapid chip movement, inconsistent source-of-funds explanations, structuring indicators, or evasive conduct. Use the activity fields to describe what happened, then explain why it seemed suspicious in the suspicion_reason section. Avoid vague labels without facts, because the report should show observable indicators rather than conclusions alone.

Does this form replace a SAR?

No. This template supports internal documentation and escalation, but it does not replace the formal SAR filing process or your casino’s compliance review. The report should feed the team responsible for determining whether a SAR is required. Keep the worksheet factual so it can be reviewed, retained, and attached to the case file if needed.

What should we do if the patron is unknown?

Use the patron_identifier and patron_description fields to capture whatever is available, such as physical description, loyalty number, seat or table location, and other non-sensitive identifiers. If your process allows anonymous or limited identification at the observation stage, keep the report factual and note what was not available. Do not force a full identity field when it is not known.

How does surveillance fit into this report?

Use the surveillance fields to note whether video, still images, or system logs are available and where they are stored. This helps reviewers find supporting evidence quickly and maintain a clear chain of reference. If no surveillance is available, say so explicitly rather than leaving the section blank.

What are the most common mistakes when filling it out?

Common mistakes include writing conclusions instead of observations, leaving out time stamps, failing to identify the location area, and skipping the immediate action taken. Another frequent issue is using free text where structured fields would be clearer, such as entering estimated amounts without a currency type. The best reports are specific, timely, and easy for compliance to review.

Go deeper on the topic

Related concepts
  • Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
  • Job hazard analysis (JHA) — also called job safety analysis (JSA) — is the structured exercise of breaking a work task into sequential steps, identifying the...
  • A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
  • AI governance is the framework a company uses to decide what AI tools are allowed to do, who's accountable for their outputs, what data they're allowed to...
Related guides

Ready to use this template?

Get started with MangoApps and use Casino Suspicious Activity Report Form with your team — pricing built for small business.

Ask AI Product Advisor

Hi! I'm the MangoApps Product Advisor. I can help you with:

  • Understanding our 40+ workplace apps
  • Finding the right solution for your needs
  • Answering questions about pricing and features
  • Pointing you to free tools you can try right now

What would you like to know?