SAR (Suspicious Activity Report)

A suspicious activity report, or SAR, is a report a firm files with the authorities when it has grounds to suspect that money it is handling is tied to crime. It is not a charge and it is not a finding. It is a disclosure, made because the law asks for one. What happens next belongs to the authorities, not to the business that filed it. In the UK that means a report to the National Crime Agency, and other markets run their own version.

The duty sits on regulated firms. In payments that typically takes in banks, acquirers and e-money firms, and, depending on the market and how they operate, other businesses within the regulated sector. The global frame behind it comes from the Financial Action Task Force, and most national rules are built on what it sets out. What a firm does after filing is also set in law, and in the UK section 335 of the Proceeds of Crime Act 2002 governs consent, the notice period and the moratorium.

What Counts As Suspicion

The bar is lower than most people assume, and it is not proof. In the UK, courts have interpreted suspicion as more than fanciful and less than certain, and other markets apply their own tests, so a firm does not need evidence of a crime to be under a duty to report. That is on purpose. The regime exists to gather leads, not to settle cases, and the digging is done by people with powers a payments business does not have.

Where Suspicion Comes From In Payments

It seldom comes from one dramatic payment. It builds from a pattern: funds that arrive and leave within hours, amounts that sit just under a reporting threshold, or a customer doing nothing like the business they described at sign-up. A sharp change in habits with no reason given does the same. A risk engine and a velocity check bring some of it up, and a person still has to look.

Who Files It Inside The Firm

A regulated firm names someone to take reports from staff and decide whether to file one outside. Staff who spot something raise it with that person, who weighs it up and makes the call. That routing matters, because staff are not expected to judge the law and are expected to pass it on. A clear internal form, a named recipient and a record of what was decided are the practical core of the arrangement.

Tipping Off Is A Separate Offence

This is the part that catches businesses out. Telling a customer that a report has been made can itself be an offence in many markets. So can saying anything likely to harm an inquiry. That puts a real limit on what support teams may say when a payment is held. The wording used with customers here is worth agreeing with a compliance adviser well in advance, not drafting on the spot.

What Happens To The Money

Filing a report does not by itself freeze anything. Where a firm needs to go ahead with a payment it suspects, it can seek consent. The UK regime then runs on a notice period, followed by a moratorium if consent is refused. Those periods are set in the law, they are revised, and other markets run their own, so the local position governs. In the meantime the payment may sit as a quarantine payment while the position is worked out.

Onboarding Does Most Of The Work

A report is more useful when the firm knows who it is reporting on. That is the payoff from know your customer checks at sign-up and from know your business work on company accounts. Naming the ultimate beneficial owner behind a structure does the same job. Thin onboarding produces thin reports, and a firm that cannot say who its customer really is has a bigger problem than the report itself.

Quality Beats Volume

Filing the lot is not a safe bet. A stream of thin reports is a poor use of the authorities' time, and to a supervisor it reads as a firm that has stopped thinking. A good report says what was seen, why it looked wrong and what the firm knows about the parties, in enough detail for someone else to act on. Filing too much and filing too little can both draw supervisory attention.

Records Outlast The Report

The file does not close when the report is sent. Firms are expected to keep records of what was reported, what was decided inside the firm and why, often for years. Those records are what a supervisor asks for first. A book of high risk merchant accounts draws that attention sooner. Duties differ by local jurisdiction too, so a firm trading in several markets keeps several sets of records.

Getting The Process Right Before You Need It

Name the person who receives internal reports and make sure staff know who it is. Give them a form that captures what was seen, not what someone concluded. Train the front line to pass things up instead of digging. Agree the customer-facing wording with a compliance adviser in advance. The moment you need it is the wrong time to draft it. Keep the record of what you decided, including the cases you chose not to report. And review the pattern of reports now and then, because what a firm reports says a good deal about what it grasps. This guide to fraud and risk management covers the surrounding controls, and payment fraud detection is designed to help surface the patterns worth a second look.

‍