A bank employee files a Suspicious Activity Report (SAR) on a commercial customer. The customer later calls asking why his recent transactions are under review. What should the bank employee tell the customer?

Nothing — bank employees are prohibited from disclosing that a SAR has been filed Confirm that a SAR was filed but decline to provide specific details Refer the customer to FinCEN directly for any information about the report Explain that a SAR was filed and provide a copy of the report upon request