Suspicious activity reports

Regulated sector

If you are an MLRO working in the regulated sector, you must make a SAR if you know or suspect, or have reasonable grounds for knowing or suspecting, that a person is engaged in money laundering.

Non-regulated sector

If you are an MLRO working in the non-regulated sector, you must make a SAR if you know or suspect that money laundering is taking place.

Concerns raised by an employee

You do not automatically have a suspicion because a concern is raised by an employee.

The High Court confirmed in Shah v HSBC [2012] EWHC 1283 (QB) that, where concerns are raised by an employee, you should form your own view about whether you have a suspicion.

It is appropriate for you to:

• ask questions about those concerns
• review information held on the client

There is no requirement for you to carry out extensive investigations to form or test a suspicion

Existing criminal property

To form a suspicion, there must be existing criminal property.

'Criminal property' is defined in the anti-money laundering guidance for the legal sector as:

"property which is, or represents, a person's benefit from criminal conduct, where the alleged offender knows or suspects that it is such."

Following the decision in Anwoir and others [2008] EWCA Crim 1354, you may form a suspicion of existing criminal property if:

1. you know or suspect that a specific type of criminal conduct is occurring (such as fraud or tax evasion) and you suspect this generated property
2. there are several warning signs that cannot be satisfactorily explained, giving rise to an 'irresistible inference' that the property you are being asked to handle must be criminal

In the first case, you're more likely to have direct information from the client, law enforcement agencies, media or other third parties.

For the second case, you're more likely to be looking at warning signs of money laundering.

Transferring suspicion

Suspicion is not automatically transferred if, for example, a police officer advises you that your client is under investigation for a criminal offence.

However, you should consider any investigation in light of all the information that you have on the client's file.

You may have information that clearly demonstrates the client's innocence, which would mean that you do not have a suspicion of money laundering.

If not, you should carefully consider the facts given to you by the police or other law enforcement agencies to support any allegation of wrongdoing.

A court may be unsympathetic to a solicitor who disregarded specific warnings from law enforcement about a client.

If you decide that you have a suspicion as a result of contact from the police or other agencies, you should carefully consider what you put in your SAR.

You cannot include any privileged information and, for the crime/fraud exception to apply, you'll need strong prima facie evidence that you're being involved in a criminal offence.

Any requests by law enforcement agencies for client files should be accompanied by an appropriate court order or notice.

For more information, read our practice note on responding to a financial crime investigation.

Identity information

You should include the subject's:

• full name and other names they're known by
• date of birth
• occupation
• phone numbers
• passport or driving licence number

If the subject is a legal entity, you should include the business':

• company registration number
• VAT number
• business type
• addresses (including postcodes)

If you do not know any of these details, enter the word 'UNKNOWN'.

Do not use other words or symbols (such as question marks or asterisks).

Glossary codes

It is good practice to include any relevant glossary codes. These help the NCA to:

• process your SAR accurately and efficiently
• allocate your SAR to the appropriate law enforcement agency
• analyse trends in suspected money laundering

Consult the NCA's SAR glossary codes booklet (PDF 14.5 KB)

There are glossary codes for particular criminal offences and types of SARs.

For example, when submitting a DAML, you should use the code XXS99XX where the value of the suspected criminal property is greater than £3,000.

Glossary codes should be inserted at the start of the reason for suspicion section.

Reason for suspicion

The free text section of the report is where you give a clear and concise explanation of the reason(s) for your knowledge or suspicion.

Your reason for suspicion should set out (in non-legal language):

• who – the identity of the party/parties involved and their connection with you
• what – the transaction you're involved in
• where – a description of the criminal property
• how – a description of the prohibited act(s)
• why – the criminal activity that you know or suspect they're engaging in
• when – any critical deadlines

If you are an MLRO working in the regulated sector, you must also give the:

• identity of the person(s) you know or suspect is involved in money laundering
• whereabouts of the known or suspected criminal property

What not to include

The NCA may take longer to consider your request if you:

• send or attach files
• include unnecessary details
• supply privileged information
• ask the NCA to verify your client's identity for you
• use complicated legal language
• ask for consent to take on a client when you haven't carried out, or have been unable to carry out, client due diligence

Exemptions

From 31 July 2025, the threshold amount specified in section 339A of POCA increased from £1,000 to £3,000.

This follows the Proceeds of Crime (Money Laundering) (Threshold Amount) (Amendment) Order 2025.

The threshold is the level below which a bank or similar firm (a deposit-taking body, electronic money or payment institution) can carry out a transaction in operating an account or returning money to terminate business relationships with a customer, without submitting a DAML or committing an offence under POCA 2002 even when criminal activity is suspected.

This increase is part of the government’s efforts to maximise collective response to threat across the public and private sector, by reducing low-value DAMLs and allowing resources to be focused on higher value activity.

When exiting a relationship with a customer

For law firms, this means you will be able to return up to £3,000 to a client when ending a business relationship without committing a money laundering offence under sections 327, 328 and 329 of POCA.

Under the threshold, you will not need to submit a DAML to the NCA even if there is knowledge or suspicion of criminal property involved.

Two key conditions apply:

• the amount returned must be £3,000 or less
• you must have completed appropriate Customer Due Diligence under the MLR 2017

You must still submit an information SAR to the NCA if you know or have reasonable grounds to suspect that the client is involved in money laundering or terrorist financing.

This change builds on amendments to POCA made under sections 182 and 183 of the Economic Crime and Corporate Transparency Act 2023 (ECCTA).

For reporters caught by POCA but not by the MLR 2017, there is no change.

You may wish to obtain legal advice as to your responsibilities under this change to POCA 2002.

Read the government guidance

Exemption for mixed property transactions

Under section 183, there is an exemption for mixed-property transactions under section 327, section 328 and section 329 which enables reporters to ring-fence funds they believe are criminal property and transact with funds outside the ring-fenced funds.

Reporters may wish to obtain legal advice as to their responsibilities under this change to POCA 2002.

Read the government guidance

For reporters caught by POCA but not by the MLR 2017, there is no change.

When submitting a request for a defence, include:

“We believe section [xxx] of POCA does not apply to this DAML as the activity falls outside the regulated sector.”

Making a DAML SAR

When you submit a DAML SAR, make sure you:

• tick the consent box and use the appropriate glossary code
• clearly identify the 'criminal property'
• state your reason(s) for suspecting the property is criminal
• explicitly describe the prohibited act(s) you plan to undertake involving the property
• identify the other party/parties involved in dealing with the property, including their dates of birth and addresses
• fully describe your reason for suspicion in relation to money laundering

It is important to make explicit, where necessary, where a DAML is for both yourself and your client, and which steps will be taken by each of you.

Be specific about the work you think you'll need a DAML for.

Outline all the remaining steps in the transaction that could be prohibited. For example:

• the release of funds in account A to party B
• the drawing up of contracts between parties C and D, transferring of ownership of the property from C to D and transferring of value of the funds

Avoid using vague terms like "we wish consent to proceed" or "we wish to maintain a business relationship".

The NCA cannot interpret or assume the proposed money laundering offence(s) from your report, so you need to be as explicit as possible.

The UK Financial Intelligence Unit (UKFIU) has provided a summary DAML template for solicitors. It shows the key elements to describe when constructing a DAML:

• purpose of report
• prohibited act
• reason for suspicion
• criminal property
• background
• summary

Tipping off

Once you’ve made a SAR, you’ll need to consider if and how you should change the way you interact with your client to avoid committing the offences of ‘tipping off’ and ‘prejudicing an investigation’.

Read our guidance on avoiding tipping off your client

After you've made a DAML SAR

The NCA has seven working days to decide whether to grant a DAML. This starts the next working day after you file your report.

Once you’ve submitted your report, it will be processed and checked against law enforcement databases.

If an investigation is needed, your SAR will be sent to the appropriate law enforcement agency.

If the NCA sends you a request for further information, you should respond as soon as possible. Consent may be refused within two working days of the information request if you do not reply.

Your DAML will be granted – or you may have ‘deemed consent’ – if after seven working days you:

• receive a letter from the NCA via SAR Online granting consent
• receive a letter in which the NCA neither grant nor refuse consent
• do not hear back from the NCA at all

If the NCA does not grant consent outright, you may want to consider whether it’s wise for you to go ahead with your transaction.

If your request is accepted

You are not obliged to carry out the specified activity or activities you described in your report if the NCA grants you a DAML.

For example, you may choose to:

• continue with the transaction
• carry out some but not all the activities described, or
• terminate the retainer

If you choose to continue, you have a defence against the principal offence(s) described in your report, but you may put yourself and your firm at risk of other criminal and/or civil consequences.

If you have had to file a DAML SAR for the same client on multiple occasions, you should consider your obligations under the MLR 2017 and whether you wish to continue the business relationship.

If your request is refused

A 31-day moratorium period will begin if your DAML request is refused within the seven-day notice period.

You must not carry out the prohibited act(s), but you can carry out other activities on the file.

The NCA will use this time to gather evidence and decide whether further action, such as restraint of funds, should take place.

A senior law enforcement officer can apply to the court for an extension of this moratorium period for up to 186 days. This will be granted if the criteria in section 336A POCA are met.

If you choose to continue with the prohibited transactions, you risk committing a principal money laundering offence under POCA.

Reasonable excuse defence

You do not commit an offence you have a "reasonable excuse" for not making a report. The scope of the defence has not been defined in POCA or by the courts.

You may be able to rely on the defence where, for example:

• the information that you would be providing is already in the public domain
• your knowledge or suspicion is based on privileged information and the crime/fraud exception does not apply
• the suspected offending takes place entirely outside the UK and there's no UK connection to the suspected criminal property

Clearly document your reasons for deciding that you have a reasonable excuse. You may want to seek independent legal advice before relying on the defence.

For more information, see section 6.7.1 of the anti-money laundering guidance for the legal sector.

Privileged information defence

Legal professional privilege

You must consider whether the information your suspicion is based on is subject to legal professional privilege (LPP).

You cannot make a SAR if the information is covered by LPP and the crime/fraud exemption does not apply.

Privileged circumstances

You must also consider whether the information your suspicion is based on came to you in 'privileged circumstances'. This applies where:

• you are a professional legal adviser
• the information or material is communicated to you by:
  • your client or their representative in connection with you giving legal advice
  • your client or their representative in connection with them seeking legal advice
  • any person for the purpose of or in connection with actual or contemplated legal proceedings
• the information cannot be communicated or given to you with a view to furthering a criminal purpose

You cannot make a SAR if you received the communication in privileged circumstances and the crime/fraud exemption does not apply.

Crime/fraud exemption

Under the crime/fraud exemption, you cannot disclose privileged information unless either:

• the documents themselves form part of the criminal act
• communications take place in order to obtain advice with the intention of carrying out an offence

You do not need to be aware that you are being used for a criminal or fraudulent purpose.

If the exemption applies, the information will still be confidential but you can make a SAR.

Section 7.4.5 of the anti-money laundering guidance for the legal sector describes this in more detail.