ECSH33600 - Checking internal reporting and suspicious activity
Source: gov.uk (2025-12-05)


During a compliance check, you must confirm that suspicious activity is being reported to the National Crime Agency (NCA). Please refer to the technical page on Suspicious activity reports (https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh155000) before following the guidance below.

Consider the following:
- Confirm the business’s nominated officer (NO) is aware of their role to consider any disclosures in the light of any relevant information which is available to the business and determine whether it gives rise to knowledge or suspicion, or reasonable grounds for knowledge or suspicion, that a person is engaged in money laundering or terrorist financing (ML/TF). Regulation 21(5) (https://www.legislation.gov.uk/uksi/2017/692/regulation/21) Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017) refers. Please note, a sole proprietor or company director with no employees does not need to appoint a NO and is responsible for submitting suspicious activity reports (SARs) in relation to their business.
- Does the NO have a good understanding of the requirements under MLR 2017, Part 3 of the Terrorism Act 2000 (TACT) and Parts 7 and 8 of the Proceeds of Crime Act 2002 (POCA)?
- Does the NO know how to submit a SAR (https://www.nationalcrimeagency.gov.uk/what-we-do/crime-threats/money-laundering-and-illicit-finance/suspicious-activity-reports) and have an awareness of the SARs online facility?
- Are employees regularly given training in how to recognise and deal with transactions and other activities or situations which may be related to ML/TF and proliferation financing (PF)? You should review training material provided to relevant staff to ensure it is specific to the business – see ECSH33220 (https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh33220). It is good practice to ask individual employees about their understanding of the process.
- Is there a suitable procedure in place for employees to report suspicious activity to the NO? Again, it is good practice to ask individual employees about their understanding of the process.
- What information does the NO take into account regarding the customer when considering if a situation gives rise to reasonable grounds for suspicion of ML/TF/PF?
- Does the number of SARs seem reasonable to the size and nature of the business, considering the risk of ML/TF/PF identified?
- Does the business deal correctly with any situations requiring a defence against money laundering or terrorist financing (DAML/TF)?
Can you ask to see SARs submitted to the NCA?

Regulation 66(1A) MLR 2017, includes the power to “require the business to provide a copy of any suspicious activity disclosure made to the NCA”. Please see ECSH71500 (https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh71500) for guidance on when and how this power can be used.

This means that you can ask to see both internal reports made to the NO and review copies of SARs to ensure that suspicious activity and defence against ML/TF/PF are being reported appropriately. However, if the SAR has been submitted to the NCA via the SAR Portal (https://sarsreporting.nationalcrimeagency.gov.uk/), this may prove difficult if the business has not retained a copy. You can still ask to see the information used by the NO when considering whether a SAR should be submitted, and the information which was reported to the NCA, to assure the quality of the SAR.

(This content has been withheld because of exemptions in the Freedom of Information Act 2000)

What makes a good SAR

The following is a summary of what makes a good SAR and should help officers evaluate the quality of the SARs submitted by businesses:

There are six key features to include on all SARs (where the information is available):
- Who is the person? - Name, Date of Birth
- What is being reported? - Is the NO reporting a transaction or activity that has already happened, or seeking consent (DAML) to allow a transaction to proceed?
- When did the suspicious activity take place? - What period does the suspicion cover?
- Where do the parties to the transaction live? - Address details (including postcode)
- Why is there suspicion?
- How is the suspicious activity taking place?
- What is the criminal property / asset
- Are they reporting a suspect or a victim
- Glossary code – These are considered good practice, enable analysis of money laundering trends and identify high risk cases for immediate action.
The NCA regularly publishes reports on their website relating to “ (https://www.nationalcrimeagency.gov.uk/who-we-are/publications?category%5b0%5d=1&category_children=1)SARs in Action” and “SARs reporter booklets (https://www.nationalcrimeagency.gov.uk/who-we-are/publications?category%5b0%5d=1&category_children=1)” which you should review to increase your knowledge of the SARs regime.

What to consider when looking at SARs

You need to ensure that suspicious activity does not go unreported, and that information reported to the NCA can be used to investigate the matter. A business must not routinely report transactions without suspicion of ML/TF/PF or simply because a customer has reached a financial threshold. There does not need to be evidence of the suspected ML/TF/PF. The threshold for suspicion under POCA/TACT is generally considered to be low.

Ensure the NO has included all relevant information available to them. If you believe more information could have been provided to the NCA, discuss this with the NO to understand the reasons the information was excluded. Similarly, if the NO decided not to submit a SAR after considering an internal report, discuss the steps taken by the NO in making the decision that the person is not engaged in money laundering.

Consider the timing of the report in relation to the transaction. Has a report been submitted to the NO as soon as practical after the information came to light? Did the NO consider the report timely? Is there a valid reason for any delays in reporting?

Ask to the see other transactions carried out by the customer to establish and confirm if further transactions were carried out, or whether the business relationship was terminated as a result of the SAR. Discuss how the business withdrew its services and returned any funds to the customer, where applicable.

Tipping off offences

It is a criminal offence for anyone, following a disclosure to a NO or to the NCA, to do or say anything that might either ‘tip off’ another person that a disclosure has been made or prejudice the investigation. If you become aware that a business or its employees have committed a tipping off offence under section 333A POCA, you should follow the guidance for criminal referral (https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh34240).

What if the business has not raised any SARs

You will need to consider whether the lack of SARs is reasonable for the business. The business may only be involved in relevant activity on a limited basis, meaning suspicious activity is unlikely.

However, you need to be mindful that a lack of SARs could also be because its policies, controls or procedures or training is ineffective, leading to breaches under regulations 19/19A and 24 MLR 2017.

It may also indicate that the business is turning a blind eye to risk factors.

If you consider suspicious activity has occurred or is occurring, you will need to raise a SAR (https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh34225).

If a business has failed to report suspicion or knowledge of money laundering, terrorist or proliferation financing, the caseworker should discuss this with the NO to understand the reasons why a SAR was not submitted to the NCA.

The caseworker must establish whether the business has effective policies, controls and procedures (PCPs) (https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh33210) for reporting knowledge or suspicion to the NCA, or if it has but failed to follow them.

The caseworker must consider whether the business can demonstrate it will comply with its relevant obligations under MLR 2017, Part 3 TACT or Parts 7 and 8 POCA. If the caseworker has grounds to suspect that it, or any of its officers or managers, will fail to report suspicion or knowledge, they should consider whether it is appropriate to refuse (https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh47531) or cancel (https://www.gov.uk/hmrc-internal-manuals/economic-crime-supervision-handbook/ecsh48000) the business’s registration.

Failing to disclose knowledge or suspicion of money laundering

It is also important to consider whether there has been a breach of section 330 POCA or 21A TACT for failing to disclose in the regulated sector.

A person commits an offence if all the following conditions are met:
- They have reasonable grounds for knowing or suspecting that another person is engaged in money laundering.
- The information on which the suspicion is based came to them in the course of business in the regulated sector.
- They can identify the other person or the whereabouts of any of the laundered property, or believe that the information may assist in identifying that other person or the whereabouts of any of the laundered property, and
- They do not make the required disclosure to a NO as soon as is practicable after the information or other matter came to them.
An offence is not committed if:
- They have a reasonable excuse for not making the disclosure.
- Have not been provided with appropriate training.
- Are a legal adviser or relevant professional adviser and the information came to them in privileged circumstances.
A “relevant professional adviser” is an accountant, auditor or tax adviser who is a member of a relevant professional body (which is established for accountants, auditors or tax advisers and tests the competence of its members and ensures professional and ethical standards are maintained).

Professional privilege and accountancy service providers (ASP)

Failing to report suspicions of money laundering to the NCA should normally be referred as a criminal offence. However, Section 330(6)) of POCA provides a defence to legal and professional advisers when the information giving rise to a suspicion comes to them in "privileged circumstances".

This means that you must not challenge any professional privilege defence that is given for not submitting suspicious activity reports (SARs). You should however ask and record the specific circumstances why the ASP believes that professional privilege applies.

Caseworkers should make themselves fully aware of the Consultative Committee of Accountancy Bodies (CCAB) guidance (https://www.ccab.org.uk/anti-money-laundering-and-counter-terrorist-financing-guidance-for-the-accountancy-sector-2023/) on reporting before visiting ASPs.