Your customer had a suspicious transaction in their account at your financial institution. It doesn't matter if there is a loss or not, it was suspicious. I assume law enforcement has already been involved. If that is the case, it should be indicated in the SAR.
_________________________
My opinion is mine only- not my employer's!