In accordance with 31 CFR 1022.320, covered financial institutions are required to report suspicious activity and maintain the records for a period of five years. Covered financial institutions may satisfy these requirements by using their internal records management system.
The latest form for Reports by money services businesses of suspicious transactions expires 2023-09-30 and can be found here.