If neither the bank nor the customer sustained a loss in a fraud activity, is a SAR required if the Bank knows the suspect and the suspicious activity involves $5,000 or more? In other words, is it a correct understanding that whether the bank or customer sustains a loss is not a factor in determining if a SAR is required to be filed?