If we file a SAR on an individual and or business does that mean they automatically must to be placed on the high risk list? Also if this is a regulation where can I find that regulation?

Thank you

You won't see that anywhere but if they would not be considered as a high risk customer, who would?

Anyone that we file a SAR on is deemed a high risk customer until and unless there has been no continued suspicious activity for a least a year from the last SAR filed. I agree with devsfan's point!

There's no regulation that says who should be on your high risk list, period.

As has been noted here before by others, once you file a SAR you are going to be monitoring the customer for at least 90 days to see if the activity continues. One effect of being labeled "high risk" is that the customer is subjected to additional monitoring.

Automatically classifying a SAR suspect customer as "high risk" simply allows you to plug them into a already existing monitoring system.