Posts

SAR Volume Is Not SAR Quality: What the Latest UK Figures Show

AML Suspicious Activity Reports in the UK and Europe: Volume Is Not Quality The NCA's UK Financial Intelligence Unit has published its annual report for April 2025 to March 2026. It counts 896,414 SARs received, up 3% on the year before. Headlines about record volumes follow easily. The harder question is what the number tells you, and what it leaves out. In short: the number of SARs filed shows how much reporting is happening. It does not show whether each report gave the NCA enough to act on. Quality needs its own measure. What the figures show Reporting year SARs received by the UKFIU 2023 to 2024 872,048 2024 to 2025 866,616 2025 to 2026 896,414 What they do not show Nothing in a total reveals narrative quality. A flat or rising count is compatible with any mix of strong and weak reports, so it cannot be used to judge whether firms are getting better at explaining suspicion. Two signals worth noticing First, volume responds to rules as well as to risk...

Six Questions an MLRO Can Ask Before Signing Off Alert Closures

AML Closure Review in the UK and Europe: Questions That Test the Decision A closure rate tells you how many alerts left the queue. It does not tell you whether they left for good reasons. For an MLRO, that gap matters, because every closure is a decision someone may later ask you to explain. In short: sample a few closures each month and ask six questions about what the analyst could see, what they considered and what they could not reach. The answers show where the process is thin. Why the review matters now The UKFIU's latest annual report counts 896,414 SARs received between April 2025 and March 2026, up 3% on the year before. Closure decisions sit upstream of that stream: each one is a choice to report or not to report. Quality at the closure stage shapes what reaches the NCA, and what does not. The six questions What could the analyst see when the alert opened? Not what they found later. What was on the screen. Was an earlier case on this customer or a linke...

One Payment, Three Meanings: Why AML Alerts Need a Customer Baseline

AML Alerts in the UK and Europe: Same Payment, Different Customer Picture a £4,000 payment arriving in three accounts on the same day. This is a hypothetical, but familiar. One account belongs to a freelance designer paid by a client abroad. One belongs to a market-stall owner banking a busy weekend. One belongs to a student receiving a first transfer from an unfamiliar sender. A monitoring rule sees three identical amounts. An investigator can tell them apart, but only if they can see what is normal for each customer. In short: an AML alert means something only against the customer's own normal. Investigators who can see that baseline decide faster and more consistently. Those who cannot fall back on a generic benchmark. Why generic benchmarks mislead Customer bases have become more varied: gig workers, marketplace sellers, small businesses with seasonal income, contractors paid across borders. A threshold designed for a typical retail account will flag many ordinary...

What an AML Investigation Should Leave Behind for the Regulator

AML Decision Evidence in the UK and Europe: What a Closed Case Should Show When a case closes, what stays behind? For many firms the honest answer is a status flag, a few notes and an analyst's memory. That is enough until someone senior, internal or external, asks how a particular decision was reached. In short: a closed AML case should let a stranger see what triggered it, what was examined, what was found, why the outcome follows and who approved it. Anything less tests someone's memory instead of recording a decision. The five things a reviewer looks for Element The question it answers Trigger Why was this case opened? Evidence examined What did the investigator look at, and what was unavailable? Findings What was material, and what was set aside? Rationale Why does the outcome follow from the findings? Approval Who agreed, and at what level? The level of detail should match the risk. A routine closure needs less than a network of linked transact...

Why AML Teams Keep Investigating the Same Customers Twice

AML Investigations in the UK and Europe Have a Memory Problem Ask an investigation team whether they have seen a customer before and you will often get a pause, then a search. That pause is the problem. The institution holds the answer somewhere, in a case closed last year or a note from a colleague who has since moved on, but the alert on the analyst's screen carries none of it. In short: investigation memory is the ability to see what an institution has already decided about a customer at the moment a new alert opens. Where it is weak, teams repeat work, and where work is repeated, decisions start to drift. What forgetting looks like It rarely looks dramatic. It looks like four ordinary habits: A prior case filed under a trading name that nobody searches for. An outcome recorded only inside a free-text note. A narrative retyped from scratch because the last one cannot be reused. Two analysts reaching different conclusions on near-identical facts, because neither ...

5 Places AML Investigation Costs Hide

AML investigation costs extend beyond analyst salaries. Information retrieval, supervisory reviews, repeated work and training all consume valuable capacity. Before increasing headcount or investing in technology, financial crime leaders need to understand where that time goes. Where Do AML Investigation Costs Accumulate? Growing case queues can make additional investigators seem like the obvious solution. But first, teams should measure five sources of workload. 1. Initial Case Handling Measure the time spent reviewing alerts, understanding triggers and deciding what further investigation is needed. Separate routine administration from analytical work where possible. 2. Information Retrieval Searching multiple systems for transaction records, customer details and previous case outcomes can consume significant time. Track delays caused by missing or inconsistent information. 3. Supervisory Review Record why cases are returned for further work. Distinguish genuine judgement...

What Do FCA AML Monitoring Expectations Require?

FCA AML monitoring expectations focus on whether a firm's controls reflect its money laundering risks and remain effective as its business changes. UK-regulated firms need to demonstrate that transaction monitoring is appropriate for their customers, weaknesses are identified and addressed, and decisions can be explained. A monitoring system being operational does not automatically make it effective. What matters is whether the controls reflect actual customer activity, support meaningful investigations and provide evidence that identified risks are being managed. What Should FCA AML Monitoring Expectations Look Like in Practice? The FCA's Financial Crime Guide , Chapter 3, explains that firms should conduct ongoing monitoring on a risk-sensitive basis. Transactions should be scrutinised against what the firm knows about its customers, while relevant customer due diligence (CDD) information must remain current. Where the risk associated with a business relationship increa...