Suspicious Activity Report (SAR)

SARs are the operational output of an AML compliance programme. KYC and transaction monitoring identify suspicious patterns; SARs are the channel through which those patterns are reported to regulators. For payments businesses, SAR filing obligations arise from being classified as a reporting entity under local AML legislation — which typically covers banks, e-money institutions, payment service providers, and crypto asset businesses.

Who Must File

SAR filing obligations vary by jurisdiction but typically cover:

• Banks and deposit-taking institutions
• Payment institutions and e-money issuers
• Money service businesses (MSBs) — currency exchange, money transfer operators
• Crypto asset service providers (CASPs)
• Gambling operators, real estate agents, and legal/accounting professionals (designated non-financial businesses under FATF recommendations)

PSPs processing payments on behalf of merchants are generally in scope as payment institutions. This means a merchant’s PSP may file SARs on transactions flowing through the merchant’s account — without the merchant’s knowledge.

SAR Filing Process

The filing process has legally significant steps:

1. Detection: Transaction monitoring system or compliance analyst flags a suspicious pattern (structuring, unusual beneficiary, high-risk jurisdictions, velocity anomalies).
2. Internal review: A compliance officer or MLRO (Money Laundering Reporting Officer) reviews the flagged activity.
3. Decision: If reasonable grounds exist to suspect financial crime, the MLRO decides to file.
4. Filing: SAR submitted to the relevant FIU — FinCEN in the US, the National Crime Agency in the UK, AUSTRAC in Australia. Most jurisdictions have a 30-day filing deadline after the suspicion arises.
5. Tipping-off prohibition: The institution cannot inform the subject of the SAR that it has been filed. Even internally, SAR existence is restricted to need-to-know.

Tipping-Off

Tipping off — disclosing to a customer that a SAR has been filed or is under consideration — is a criminal offence in most jurisdictions with serious AML regimes. This creates a compliance tension: institutions that freeze or close accounts after SAR filing cannot explain why, and cannot respond truthfully if the customer asks whether a SAR was filed. This is sometimes called the “SAR gagging order.”

For payments businesses, this means customer communication and account management teams need training on what they can and cannot say when an account is restricted for AML reasons.

SAR Volume and Quality

Regulators receive millions of SARs annually. FinCEN receives approximately 3.5 million SAR filings per year; the UK NCA receives around 900,000. The challenge is signal quality: overfiling low-quality SARs (defensive filing to avoid liability) dilutes the actionable intelligence available to law enforcement.

Regulators increasingly pressure institutions for higher-quality, lower-volume filings that provide actionable intelligence — specific facts, transaction references, known associates — rather than generic flags on pattern-matching alone.

Consequences of Non-Filing

Failure to file a SAR when required is a criminal offence (not just a civil fine) in most major jurisdictions. High-profile enforcement actions have resulted in:

• Significant fines against institutions with systematic SAR filing failures
• Personal criminal liability for MLROs who knowingly failed to file
• Licence revocation for persistent AML compliance failures

For payments businesses, the SAR regime is not optional compliance paperwork — it is a core legal obligation that requires dedicated operational processes and system support.