Suspicious Activity Reports (SARs) Explained: A Complete UK Compliance Guide for 2026
When a transaction raises credible concerns of money laundering or terrorist financing, the appropriate course of action in the United Kingdom is to submit a Suspicious Activity Report (SAR).
SARs are a foundational element of the UK’s anti-money laundering (AML) and counter-terrorist financing (CTF) framework. They provide law enforcement agencies—particularly the UK Financial Intelligence Unit—with actionable intelligence to identify, investigate, and disrupt financial crime. For firms and professionals operating within regulated sectors, SAR submission is not optional; it is a statutory obligation.
This article outlines the principal types of SARs and the core components required for an effective and compliant submission.
Types of Suspicious Activity Reports
1. Required SARs
A required SAR must be submitted when there is knowledge, suspicion, or reasonable grounds to suspect that an individual or entity is engaged in money laundering or terrorist financing.
This obligation applies across regulated sectors, including financial institutions, legal professionals, accountants, and estate agents, under the UK Money Laundering Regulations.
Typical indicators include:
- Unexplained or unusually large cash deposits
- Transactions inconsistent with a customer’s known profile
- Complex corporate or transactional structures lacking a clear commercial rationale
Failure to submit a required SAR when suspicion exists may constitute a criminal offence.
2. Defence Against Money Laundering (DAML) SARs
A Defence Against Money Laundering (DAML) SAR is submitted when there is suspicion that assets involved in a proposed transaction may represent the proceeds of crime, and the reporting entity seeks legal consent to proceed.
DAML SARs are governed by the Proceeds of Crime Act 2002. Where a transaction could expose a firm to a money laundering offence, a DAML request must be submitted prior to execution.
The UKFIU assesses these requests. If a refusal is issued, the reporting entity must not proceed during the statutory moratorium period.
Common use cases include:
- Property transactions involving unclear source of funds
- Release or transfer of suspicious funds
- High-value transactions with insufficient economic justification
3. Defence Against Terrorist Financing (DATF) SARs
A Defence Against Terrorist Financing (DATF) SAR operates similarly to a DAML SAR but applies specifically to suspected terrorist property or financing activities.
These submissions fall under the Terrorism Act 2000. Where a transaction is suspected to involve terrorist financing and there is an intention to proceed, a DATF SAR must be filed to obtain appropriate legal defence.
Given the severity of terrorist financing risks, DATF SARs are subject to heightened scrutiny and expedited handling.
Three Core Pillars of an Effective SAR Submission
A high-quality SAR must be clear, structured, and evidentially grounded. To ensure operational effectiveness and reduce follow-up queries, every SAR should address the following:
- Reason for Suspicion
Clearly articulate the basis for concern, supported by observable facts or patterns. - Identification of Criminal or Terrorist Property
Specify the assets or funds believed to be linked to illicit activity. - Description of the Prohibited Act (for DAML/DATF SARs)
Define the intended transaction or action requiring legal defence.
Incomplete or vague submissions significantly reduce the report’s utility for law enforcement.
How to Accurately Describe Property in a SAR
1. Clearly Identify the Asset
Specify the nature of the property, such as:
- Funds in personal or corporate accounts
- Cash deposits
- Cryptocurrency holdings
- Physical assets or goods
- Real estate or other tangible property
2. Provide Quantifiable Value
Include precise amounts where available, or clearly indicate estimates:
- “£50,000 held in a corporate current account”
- “Approximately £15,000 in cryptocurrency (estimated value)”
Quantification enhances risk assessment and prioritisation.
3. Establish the Basis for Suspicion
Directly link the asset to the suspicious activity:
- Inbound transfers from unrelated offshore entities
- Transaction volumes inconsistent with known financial behaviour
- Unexplained large deposits or irregular movement patterns
4. Specify Location or Traceability
Provide sufficient detail to enable tracing:
- Account numbers and financial institutions
- Branch identifiers
- Wallet addresses (for crypto assets)
- Transaction IDs or reference numbers
Structuring a Strong Suspicion Narrative
An effective SAR narrative should systematically answer the following:
- Who is involved? (Customer, counterparty, or entity)
- How are they involved? (Originator, beneficiary, intermediary)
- How did the situation arise? (Triggering event or anomaly)
- What constitutes the suspected criminal or terrorist property?
- What is the value? (Exact or estimated financial exposure)
- Where is the property held or transacted?
- When did the activity occur or when is it expected to occur?
A well-structured narrative significantly improves the ability of authorities to act swiftly and effectively.
Conclusion
Suspicious Activity Reports are a critical safeguard within the UK’s financial crime prevention ecosystem. Whether submitting a required SAR or seeking a defence under DAML or DATF provisions, accuracy, clarity, and completeness are essential.
Organizations that invest in robust SAR processes not only ensure regulatory compliance but also contribute meaningfully to the broader effort of combating financial crime.