Banks get punished if there was fradulent activity and they didn't publish a SAR. This means banks will file SARs even when there isn't any real fraud going on, just behaviour that their models flag as "suspicious".