STR and CTR Reporting to FIU-IND: A Banker's Guide
STR and CTR reporting to FIU-IND sits at the operational heart of every banker's anti-money-laundering duty, turning suspicious transactions and high-value cash movements into actionable intelligence for the state. Whether you are a branch officer flagging an odd deposit or a compliance candidate preparing the IIBF KYC, AML and CFT certification, you cannot afford to be vague here. Examiners love this topic precisely because it blends hard numbers — thresholds, deadlines, retention periods — with judgement-based reasoning, and that combination separates a confident banker from a nervous one.
This guide rebuilds the entire regime from the ground up under the Prevention of Money Laundering Act (PMLA), 2002 and the RBI KYC Master Direction. It explains what each report does, when it is due, who is accountable and how penalties bite — all framed for the latest released IIBF syllabus. Treat the specific figures below as the standard limits you must learn, but always confirm any time-sensitive change against the official IIBF notification and current RBI circulars before relying on it in the field.

Key takeaways
- CTR is threshold-based — cash above Rs 10 lakh in a calendar month — and is filed by the 15th of the next month.
- STR is judgement-based — any amount, cash or non-cash, including attempted transactions — filed within 7 working days of forming suspicion.
- All reports go electronically to FIU-IND via the FINnet 2.0 portal.
- The Principal Officer files; the Designated Director carries board-level accountability.
- Tipping-off the customer is an offence; records must be kept for 5 years.
What STR and CTR Reporting to FIU-IND Actually Means
The Financial Intelligence Unit-India (FIU-IND) is the central national agency that receives, processes, analyses and disseminates information about suspect financial transactions. It draws its authority from Section 12 of the PMLA, 2002 and Rule 3 of the Prevention of Money-Laundering (Maintenance of Records) Rules, 2005. In plain terms, banks are the eyes on the ground and FIU-IND is the brain that connects the dots across the financial system.
Every reporting entity — commercial banks, NBFCs, payment system operators and co-operative banks alike — must file prescribed reports to FIU-IND electronically through the FINnet 2.0 portal. There is no manual or paper route; the data is structured, validated and transmitted in defined formats, which is why data quality at the branch level matters so much.
STR and CTR reporting is shorthand for a small family of report types, and you should be able to name each one cold:
- CTR — Cash Transaction Report, for high-value cash movements.
- STR — Suspicious Transaction Report, for anything unusual, illogical or linked to crime.
- CCR — Counterfeit Currency Report, for forged notes detected.
- NTR — Non-Profit Organisation Transaction Report, for receipts by NPOs.
- CBWTR — Cross-Border Wire Transfer Report.
Accountability is personal, not abstract. The Principal Officer designated by each bank is responsible for timely, accurate filing, while the Designated Director carries board-level responsibility for the AML programme. Failure to report attracts monetary penalties under Section 13 of the PMLA. Grasping this architecture is the first marked-for-exam idea, and you can pressure-test it on the subject-specific KYC, AML and CFT mock tests.
CTR: Thresholds, the "Integrally Connected" Rule and Filing Timelines
A Cash Transaction Report captures the movement of physical cash above defined limits and is designed to surface structuring and layering. Because it is purely threshold-driven, the numbers must be second nature for STR and CTR reporting questions:
- A single cash transaction above Rs 10 lakh or its foreign-currency equivalent.
- A series of integrally connected cash transactions that together exceed Rs 10 lakh within a calendar month.
- All cash transactions involving forged or counterfeit currency — reported separately as a CCR.
The make-or-break concept here is the integrally connected rule. A customer cannot dodge reporting by splitting, say, Rs 12 lakh into several smaller deposits across the month. The bank's transaction-monitoring system must aggregate connected entries on the same account or by the same person and trigger a report once the monthly total crosses the limit. This is exactly the structuring behaviour the rule is built to catch.
Tip: Remember the CTR deadline as "the 15th of the next month". All qualifying cash transactions in June, for example, must reach FIU-IND by 15th July. Counterfeit Currency Reports follow the same monthly cadence.
Banks generate CTRs in batch from core banking data, but exception handling and data-quality checks remain a human responsibility — a wrong PAN or a mismatched name can get a file rejected. Candidates routinely confuse the CTR deadline with the STR window, so anchor this monthly date firmly before moving on. To drill thresholds and dates without the pressure of a full paper, the rapid-recall matching games are a useful warm-up.

STR: Triggers, Red Flags and the 7-Working-Day Rule
Unlike the threshold-driven CTR, a Suspicious Transaction Report is judgement-driven. An STR is required whether or not the transaction involves cash and regardless of amount, the moment reasonable grounds of suspicion arise. This is the more conceptually demanding half of STR and CTR reporting, because no number tells you when to file — your analysis does.
Common red flags that should prompt closer review include:
- Transactions inconsistent with the customer's known profile, income or business.
- Apparent attempts to avoid CTR thresholds through structuring or smurfing.
- Reluctance to provide KYC, or the use of mule and benami accounts.
- Rapid movement of funds with no economic rationale, or sudden activity in a dormant account.
- Links to sanctions lists, adverse media or terror financing.
Two points carry disproportionate exam weight. First, an STR must be filed even for attempted transactions that were never completed — the intent and the suspicion are enough. Second, the timeline is strict: once suspicion is established and the alert is reviewed, the STR must be filed with FIU-IND within 7 working days of arriving at that conclusion.
Layered on top is the tipping-off prohibition under Section 12: the customer must never be told that an STR has been, or may be, filed. Bankers building this kind of risk judgement should pair theory with structured coursework — the AML modules in the KYC, AML and CFT subject reinforce risk-based thinking across the whole syllabus rather than treating each rule in isolation.
CTR vs STR at a Glance
If you internalise just one table for this paper, make it this one. Side-by-side comparison is the fastest way to stop mixing up the two reports.
| Feature | CTR | STR |
|---|---|---|
| Basis | Threshold (objective) | Suspicion (judgement) |
| Trigger | Cash above Rs 10 lakh / month | Any amount, cash or non-cash |
| Attempted deals | Not covered | Must be reported |
| Timeline | By 15th of next month | Within 7 working days of suspicion |
| Filed via | FINnet 2.0 | FINnet 2.0 |
Record-Keeping, Confidentiality and Penalties
Reporting is only half the obligation. The PMLA imposes parallel duties on retention and secrecy that surface again and again in exam questions on STR and CTR reporting.
Record retention
- Transaction records must be preserved for 5 years from the date of the transaction.
- Customer identification and KYC records must be kept for 5 years after the business relationship ends or the account is closed.
- Records must be retrievable and producible to FIU-IND and other authorities on demand.
Confidentiality and tipping-off
Information in an STR is strictly confidential. Disclosing the existence of a report to the customer or any unauthorised person is an offence that undermines the entire intelligence chain. Only the Principal Officer and authorised compliance staff should be able to access it.
Penalties
Under Section 13, the Director of FIU-IND can issue warnings, direct corrective action, or impose monetary penalties on the reporting entity, its designated director or its employees — in the order of Rs 10,000 to Rs 1 lakh per failure as the standard band. Repeated or wilful non-compliance can escalate into enforcement action and serious reputational damage. Strong governance, periodic staff training and a tested monitoring system are the practical defences. Because limits and circulars do get revised, keep current via the broader set of KYC, AML and CFT guides and confirm any change on the official IIBF website.
A Simple Study Plan for This Topic
You do not need ten readings — you need the right sequence. Here is a compact, four-step plan that works well for working bankers short on time:
- Lock the numbers first. Rs 10 lakh, 15th of next month, 7 working days, 5 years. Write them on one card and review daily until automatic.
- Map the report family. Be able to expand CTR, STR, CCR, NTR and CBWTR and say what each captures in one line.
- Practise red-flag judgement. Read short scenarios and decide STR or no STR — this is where most marks are won or lost.
- Test under timed conditions. Attempt full mock tests, then revisit the explainers for any weak area instead of re-reading everything.
For a deeper conceptual base before you start, the companion explainers on the PMLA, FATF and Customer Due Diligence framework and on FATF Recommendations and FIU-India reporting connect the dots between global standards and India's reporting machinery. If you want a focused recap of the reporting triad itself, the FIU-India reporting: STR, CTR and CDD guide is a tight revision read.
Common Mistakes Candidates Make
- Swapping the deadlines. The CTR is monthly (15th of the next month); the STR is event-driven (7 working days). Mixing these up is the single most common error.
- Thinking STRs need cash. An STR applies to any suspicious transaction — cheque, transfer, trade finance, anything — not just cash.
- Ignoring attempted transactions. A deal that was abandoned can still require an STR. Suspicion, not completion, is the trigger.
- Forgetting the integrally connected rule. Several small cash deposits that together cross Rs 10 lakh in a month still require a CTR.
- Underrating tipping-off. Warning the customer is not a courtesy — it is a punishable offence under the PMLA.
Frequently Asked Questions
What is the difference between an STR and a CTR?
A CTR is threshold-based and reports cash transactions above Rs 10 lakh in a calendar month. An STR is judgement-based and reports any transaction — cash or non-cash, of any amount — where reasonable grounds of suspicion exist. STRs even cover attempted transactions, whereas CTRs capture only completed cash movements.
What is the timeline for filing an STR with FIU-IND?
A Suspicious Transaction Report must be filed with FIU-IND within 7 working days of the reporting entity reaching a reasonable conclusion that a transaction is suspicious. The Principal Officer is responsible for ensuring it is filed electronically through the FINnet 2.0 portal within that window. Always confirm the current procedure against the latest IIBF notification.
When must a Cash Transaction Report be submitted?
CTRs must be furnished to FIU-IND by the 15th day of the month following the month in which the cash transactions occurred. The report aggregates single cash transactions above Rs 10 lakh as well as integrally connected transactions that together exceed Rs 10 lakh within a calendar month.
What does "tipping-off" mean in AML compliance?
Tipping-off means informing a customer, directly or indirectly, that a Suspicious Transaction Report has been or may be filed about them. It is prohibited under the PMLA because it lets suspects destroy evidence or move funds before any action can be taken. Only authorised compliance staff may know that an STR exists.
Who is responsible for filing reports to FIU-IND in a bank?
The designated Principal Officer is operationally responsible for filing accurate reports on time, while the Designated Director carries board-level accountability for the bank's overall AML programme. Branch staff feed alerts and data upward, but final filing and sign-off sit with the Principal Officer.
What penalty applies for failing to report to FIU-IND?
Under Section 13 of the PMLA, the Director of FIU-IND can issue warnings, order corrective steps, or levy monetary penalties — broadly in the Rs 10,000 to Rs 1 lakh per failure band — on the entity, its designated director or its employees. Persistent or wilful default can escalate to wider enforcement action, so treat the exact current figures as something to verify against the latest rules.
Conclusion and Next Steps
Confident command of STR and CTR reporting to FIU-IND — the Rs 10 lakh CTR threshold, the 15th-of-next-month CTR deadline, the 7-working-day STR window and the 5-year retention rule — will carry you through a large block of the IIBF KYC, AML and CFT paper, and make you genuinely useful at your branch. Lock the numbers, then practise the judgement, because that is where real marks and real protection for your bank are earned. Start with a full-length practice test, review your weak areas, and you will walk into the exam hall with quiet, well-earned confidence.
Related Guides
📚 Free Learning Sessions resources — connect & crack your exam
- 📝 Free mock tests — chapter-wise, exam-pattern, with instant solutions
- 🎮 Matching games — gamified revision of key terms & concepts
- 📄 Study notes & PDFs — downloadable chapter material
- 🎥 Video classes on YouTube — subscribe to @learningsessions
💬 Want the full course? WhatsApp your course name to 8360944207 and our team will set you up.
📱 Study on the go — get our iOS & Android app at iibf.store/app.
Quick quiz on this topic
5 exam-style questions from our free test bank — check yourself before you move on.
Practice this topic
Take a free mock test, download chapter PDFs, or watch a video class — all included on iibf.store.
Keep reading