The UK Financial Intelligence Unit (UKFIU), part of the National Crime Agency, has published updated Suspicious Activity Reports (SARs) Best Practice Guidance and consolidated its materials into a single Guidance Library.
For regulated firms, this development is significant. SAR obligations arise under the Proceeds of Crime Act 2002 (POCA) and the Terrorism Act 2000 (TACT), and failures in reporting can expose both individuals and firms to criminal liability.
Below, we summarise the changes and provide practical considerations for firms.
Background to the SAR Regime
Suspicious Activity Reports are a central component of the UK’s anti-money laundering (AML) and counter-terrorist financing (CTF) framework. They provide law enforcement with intelligence that would otherwise remain within the private sector, supporting investigations into money laundering, terrorist financing and wider serious and organised crime.
The UKFIU receives more than 850,000 SARs each year, which are analysed and disseminated to relevant law enforcement bodies. A single SAR may be used multiple times across agencies and may contribute to both tactical investigations and broader strategic assessments.
Under POCA and TACT, firms and individuals in the regulated sector are under a legal obligation to disclose suspicions using a SAR. Failure to do so may constitute a criminal offence. Separate offences relating to ‘tipping off’ and prejudicing an investigation also apply, requiring careful internal handling of SAR-related information.
Key Updates in the UKFIU Guidance Library
The updated Guidance Library consolidates best practice into three core areas, now housed in a single authoritative source. Previous guidance materials have been withdrawn and should no longer be relied upon.
The revised guidance covers:
1. Using the SAR Portal
Practical instruction on accessing and navigating the SAR Online system, including correct completion of reporting fields and the use of glossary codes. The new guidance highlights common technical errors and stresses the importance of consistent and accurate data entry to improve the quality of submissions.
2. Submitting a SAR
Clear expectations regarding concise and relevant narratives. Firms are reminded to properly identify subjects, transactions and assets, and, crucially, to explain why the activity is suspicious rather than simply describing what occurred.
3. Understanding DAMLs and DATFs
Clarification of the distinction between Defence Against Money Laundering (DAML) SARs and Defence Against Terrorist Financing (DATF) SARs, including when each is required. The guidance outlines the applicable legal thresholds and statutory timelines, such as the seven-working-day notice period and potential moratorium.
Practical Considerations for Firms
For EMIs and PSPs, the publication of consolidated guidance provides a clear opportunity to review internal arrangements.
Firms may wish to:
- Reassess SAR policies and escalation procedures.
- Review quality assurance processes prior to submission.
- Confirm that decision-making frameworks for DAMLs and DATFs are robust and properly documented.
- Provide refresher training to Money Laundering Reporting Officers (MLROs) and relevant staff on both legal thresholds and practical drafting techniques.
If you have questions about how this development affects your business, or would like support reviewing your SAR framework or delivering a targeted SAR best practice workshop for your team, please contact an API Compliance consultant using the form below.
