Alert-to-SAR Conversion Rate

Alert-to-SAR Conversion Rate

The alert-to-SAR conversion rate is the share of monitoring alerts that end up becoming a suspicious activity report. It is a key measure of how efficient a firm’s transaction monitoring is, because most alerts turn out to be false positives that never lead to a report.

Key takeaways

  • The alert-to-SAR conversion rate is the share of alerts that become SARs.
  • It measures how efficient transaction monitoring is.
  • Most alerts are false positives, so the rate is usually low.
  • A very low rate can point to too many poor-quality alerts.
  • It is a diagnostic, not a target to be gamed.
  • Better rules and tuning can raise it without missing real risk.

Over 90%

Estimated share of monitoring alerts that are false positives

Source: Industry estimates

$800B to $2T

Laundered worldwide each year that monitoring targets

Source: UNODC

$3.09B

TD Bank penalty after monitoring failures, 2024

Source: US Department of Justice

What is the alert-to-SAR conversion rate?

The alert-to-SAR conversion rate is a simple ratio: of all the alerts a firm’s monitoring system raises, how many end up as a filed suspicious activity report. It measures how often an alert turns out to be worth reporting.

Transaction monitoring throws up alerts when activity looks unusual. Most of those alerts, after review, turn out to be innocent. The conversion rate captures how many survive that review and become an actual suspicious activity report.

It is one of the most watched metrics in AML operations. Read more: it reflects the quality of a firm’s transaction monitoring.

How it is calculated

The calculation is straightforward. It is the number of SARs filed divided by the number of alerts generated, over a period, usually shown as a percentage.

If a system raises 1,000 alerts in a month and 20 of them lead to a SAR, the conversion rate is 2 percent. The other 980 were reviewed and cleared. Firms track this over time and across different monitoring rules, to see which rules produce useful alerts and which mostly produce noise.

Why the conversion rate matters

The conversion rate matters because it measures efficiency. Every alert costs an analyst’s time, so a firm wants its alerts to be worth reviewing.

A very low conversion rate suggests a system generating far too many poor alerts, drowning analysts in false positives and risking that a real one is missed in the flood. A rate that gives useful signal means the monitoring is better targeted. The metric, in short, tells a firm whether its monitoring is working smart or just working hard.

It also has a cost dimension. Reviewing alerts is expensive, so improving the rate can save real money as well as sharpen detection.

What a good rate looks like

There is no single correct number, which surprises people who want a benchmark. What counts as good depends on the firm, its customers, and its rules.

Conversion rates are generally low across the industry, often just a few percent, because monitoring is deliberately cautious and flags far more than turns out to be suspicious. A rate that is extremely low may signal poorly tuned rules, while one that is unusually high may mean the firm is not casting a wide enough net. The right rate is one that balances catching real risk against wasting effort.

Get an indicative AML risk rating

See where your money laundering risk is concentrated so your monitoring can focus where it counts.

Try the AML Risk Assessment →

The false positive problem

Behind the conversion rate sits the biggest headache in monitoring: false positives. Most alerts are innocent, and each one still has to be reviewed.

Industry estimates often put the false positive rate in transaction monitoring above 90 percent, which is why conversion rates are so low. Every false positive consumes time that could go to real risk, and the sheer volume can bury a genuine alert. Reducing false positives, without losing the true hits, is the central challenge the conversion rate helps measure.

How to improve the conversion rate

Improving the rate means making alerts smarter, not simply making fewer of them. A few approaches help.

  1. Tune the rules. Adjust monitoring thresholds so they flag genuine risk, not noise.
  2. Use better data. Feed monitoring accurate customer and risk information.
  3. Apply smarter tools. Use machine learning to rank alerts by likely risk.
  4. Review and learn. Study which rules produce useful alerts and refine them.

Do this: keep a clear guide to the warning signs behind good alerts with our Red Flags Checklist.

The balance to strike

The conversion rate has to be handled with care, because it can be gamed. A firm chasing a higher number could simply raise its thresholds and file more readily, which misses the point.

The goal is not a high rate for its own sake; it is monitoring that catches real risk efficiently. Cutting alerts too aggressively to lift the rate can let genuine suspicion through, which is far worse than a few extra false positives. Effectiveness comes first, and efficiency second.

Worth knowing. The alert-to-SAR conversion rate is best read as a diagnostic, not a scoreboard. A regulator will be far more concerned that a firm missed a real SAR than that its conversion rate was low. Used well, the metric points to where monitoring can be sharpened; used badly, as a target, it can quietly push a firm toward under-reporting.

Using the conversion rate well

A firm gets value from the metric by treating it as a guide to improvement, not a goal in itself. A few principles keep it useful.

  1. Track it by rule. See which monitoring rules produce useful alerts.
  2. Investigate extremes. Look into rates that are unusually high or low.
  3. Never sacrifice detection. Keep effectiveness ahead of efficiency.
  4. Use it to tune. Let the metric guide better rules over time.

Screen a customer behind an alert

Run one search across sanctions, PEP, and adverse media data to add context to a monitoring alert.

Try Combined AML Screening →

Weigh a customer’s country risk

Look up a country against FATF, sanctions, and corruption data to judge the risk behind an alert.

Try the Country Risk Checker →

Frequently asked questions

What is the alert-to-SAR conversion rate?

The alert-to-SAR conversion rate is the share of transaction monitoring alerts that end up becoming a filed suspicious activity report. It measures how often an alert turns out to be worth reporting. Because most alerts are false positives that are cleared on review, the conversion rate is usually low, which makes it a key measure of monitoring efficiency.

How is the alert-to-SAR conversion rate calculated?

It is calculated as the number of suspicious activity reports filed divided by the number of alerts generated over a period, usually shown as a percentage. For example, if a system raises 1,000 alerts and 20 lead to a SAR, the conversion rate is 2 percent. Firms track it over time and by monitoring rule to see which rules produce useful alerts.

Why does the alert-to-SAR conversion rate matter?

It matters because it measures the efficiency of transaction monitoring. Every alert costs an analyst’s time, so a firm wants alerts worth reviewing. A very low rate suggests a system generating too many poor alerts, burying analysts in false positives and risking that a real one is missed. The metric shows whether monitoring is working smart or just working hard.

What is a good alert-to-SAR conversion rate?

There is no single correct number. Conversion rates are generally low across the industry, often just a few percent, because monitoring is deliberately cautious. A rate that is extremely low may signal poorly tuned rules, while an unusually high one may mean the firm is not casting a wide enough net. The right rate balances catching real risk against wasting effort.

Why are most monitoring alerts false positives?

Most alerts are false positives because monitoring systems are deliberately cautious and flag far more activity than turns out to be suspicious. Industry estimates often put the false positive rate above 90 percent. Casting a wide net helps avoid missing real risk, but it means analysts spend most of their time reviewing and clearing activity that is entirely innocent.

How can a firm improve its alert-to-SAR conversion rate?

A firm improves the rate by tuning monitoring thresholds so they flag genuine risk rather than noise, feeding monitoring accurate customer and risk data, using tools such as machine learning to rank alerts by likely risk, and studying which rules produce useful alerts. The aim is smarter alerts, not simply fewer of them, so real risk is not lost.

Can the alert-to-SAR conversion rate be gamed?

Yes, which is why it must be handled carefully. A firm chasing a higher number could raise its thresholds and file more readily, but that misses the point. Cutting alerts too aggressively to lift the rate can let genuine suspicion through, which is far worse than a few extra false positives. Effectiveness should always come before efficiency.

What does a very low conversion rate mean?

A very low conversion rate usually means a monitoring system is generating a large number of poor-quality alerts, most of which are cleared as false positives. This buries analysts in noise and raises the risk that a genuine alert is missed in the flood. It often points to rules that need tuning so they flag real risk more precisely.

How does the conversion rate relate to false positives?

The two are closely linked. A high false positive rate means most alerts do not lead to a SAR, which produces a low conversion rate. Reducing false positives, without losing the true hits, raises the conversion rate. So the conversion rate is, in effect, a measure of how well a firm is managing the false positive problem in its monitoring.

Is the alert-to-SAR conversion rate a regulatory requirement?

The conversion rate itself is a management metric rather than a specific regulatory requirement. However, regulators expect firms to have effective monitoring and to file SARs when required. A firm may track the conversion rate to manage and improve its monitoring, but a regulator will be far more concerned about missed reports than about the rate itself.

What is the difference between an alert and a SAR?

An alert is a flag raised by a monitoring system when activity looks unusual, and it may or may not indicate a real problem. A suspicious activity report, or SAR, is a formal report filed with the authorities when a firm concludes that activity is genuinely suspicious. An alert is the starting point; a SAR is the outcome when suspicion is confirmed.

Should firms aim for a high conversion rate?

Not for its own sake. The goal is monitoring that catches real risk efficiently, not a high number on a metric. A firm that raises thresholds just to lift the rate risks letting genuine suspicion through, which defeats the purpose of monitoring. The conversion rate is best used as a diagnostic to guide better rules, not as a target to maximize.

Read more: our ultimate guides, whitepapers and templates

Related guides and resources to help you act on what you just read.

Last reviewed July 12, 2026 · 11 min read · Written for compliance and risk professionals · By the WhoWiki editorial team

Key takeaway: the alert-to-SAR conversion rate is the share of monitoring alerts that become suspicious activity reports, a key measure of how efficient a firm’s monitoring is.

Learn & stay current

A compliance reference that keeps up with the regulators

Plain-English explainers, country rules, and data you can cite, updated as the landscape moves.

Comparing tools before you commit?

See how WhoWiki lines up against the platforms you already know, and which free tools fit which job.

See how current your screening could be

Book a walkthrough with our team, or start with the tools today. No account needed to run your first check.