"Through the grapevine", the operations officer hears that one of her very young teller's boyfriend, who is not a customer at all of the bank, is an illegal and is using a stolen ID and SSN.
Since he's not a customer and this was a rumor in a small town, my initial thought is to document, discuss the rumor with select management, and keep an eye on the young teller. Monitor every e-mail, all web activity, items she carries out of the bank at night, etc. I don't see how the bank can really file a SAR, but at least acknowledge and document in a SIR.
Then there's the whole ID theft thing. Since he's not a customer with a covered account, what can we really do?
FYI, the police station is directly across the street from the bank. Maybe they heard the rumor too?
Thoughts?