In a SAR narrative, the 'When' section should include which information?

• A. Date range of the suspicious activity
• B. The suspect's middle name
• C. Provide individual dates for significant suspicious activity
• D. The weather

Answer: (C)

Timing of events is the focus here. In a SAR narrative, the When section should document the specific dates of each significant suspicious activity, not a broad date range. Recording individual dates (and times if available) creates a clear, chronological timeline investigators can follow to understand the sequence of actions, assess patterns, and correlate with other records. For example, noting the exact dates for each significant transaction or action helps establish what happened and when, which is essential for risk assessment and case linking. Details like a middle name or weather don’t illuminate when the activity occurred, and a date range can blur the order of events and obscure critical timing. If available, include times as well to sharpen the timeline.