When should estate agents submit a suspicious activity report?

An estate agency business (EAB) must submit a suspicious activity report (SAR) to the National Crime Agency (NCA) as soon as possible once it knows or suspects, or has reasonable grounds to know or suspect, that someone is engaged in or attempting money laundering. A parallel obligation applies to terrorist financing. 

In practice, frontline staff raise an internal report with the business's nominated officer, usually the Money Laundering Reporting Officer (MLRO), who assesses whether the reporting threshold is met before the SAR is submitted to the NCA's UK Financial Intelligence Unit (UKFIU).

The suspicion, not the completion date, starts the clock, and there's no fixed number of days written into statute or guidance. Businesses must report even if the transaction never proceeds and even if they cannot identify who is responsible. Spotting a red flag is the start of that process, not the end of it: it should prompt further investigation or enhanced due diligence, and only escalates to a SAR if genuine suspicion, or reasonable grounds for suspicion, remains once that's done.

What is a suspicious activity report (SAR) in the UK?

A suspicious activity report is a formal notification submitted to the NCA, the UK's financial intelligence unit. Estate agency businesses, a term defined broadly enough to catch most agents who carry out estate agency work, are part of the regulated sector under the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 (MLR 2017) and the Proceeds of Crime Act 2002 (POCA). Letting agency businesses are treated as a distinct category under the regulations, with their own scope and registration thresholds, so this article focuses specifically on EABs.

Internally, a member of staff who spots something concerning raises it with the business's nominated officer. The nominated officer, often the MLRO, decides whether the report meets the threshold to escalate, and it's the nominated officer, not the individual member of staff, who submits the SAR to the NCA online. This mirrors the reporting structure that banks, lawyers, and accountants operate under as fellow members of the regulated sector.

There's no pound threshold for filing a SAR. It's triggered by suspicion, not transaction value. A modest deposit and a multi-million pound purchase can both warrant a SAR if the surrounding facts raise genuine concern.

What is the legal test for suspicion in the UK?

For the regulated sector, POCA sets an objective standard for money laundering: a business commits an offence if it fails to disclose when it knows, suspects, or has reasonable grounds for knowing or suspecting, that a person is engaged in money laundering. This is broader than a purely subjective suspicion standard, meaning a business can be liable for failing to report even where no individual actually suspected wrongdoing, if a reasonable person in the agent's position would have.

Terrorist financing is reported under a near-identical failure-to-disclose provision in the Terrorism Act 2000, rather than under POCA. The two obligations run in parallel and use the same "knows, suspects, or has reasonable grounds" language, but they sit in separate pieces of legislation, so it's worth treating them as related but distinct duties.

Agents do not need proof of a crime, and do not need to know which offence is involved or who is responsible for it. The threshold sits deliberately below "beyond reasonable doubt" so that businesses report early, before completion, rather than waiting for certainty that may never arrive.

What are the red flags that estate agency businesses should watch out for, and how do they lead to a SAR?

This is the point where care matters most. A red flag is a risk indicator, not proof of suspicion, and treating the two as interchangeable is a common and risky misreading of the obligation. The correct sequence looks like this: identify the risk, investigate or apply enhanced due diligence (EDD), escalate internally to the nominated officer if concerns remain, and let the nominated officer decide whether the reporting threshold is actually met.

HMRC's risk guidance for estate agency businesses highlights a range of indicators, including:

• A buyer or seller who is secretive or evasive about source of funds
• A purchase price well above or below market value with no credible explanation
• Multiple property transactions in a short window, or the unexplained use of several different solicitors or agents
• Complex or opaque corporate structures, trusts, or overseas entities that obscure beneficial ownership
• Payments from a bank account or third party unconnected to the buyer, or a sudden change of bank account mid-transaction
• Clients linked to cash-intensive businesses or high-risk jurisdictions. 

No single indicator proves wrongdoing, but multiple indicators appearing together on the same client or transaction should prompt closer scrutiny.

Politically exposed persons (PEPs) are a good example of why this distinction matters. PEP status alone is not grounds for a SAR. It does trigger a mandatory requirement to apply enhanced due diligence, and under current HMRC guidance, UK domestic PEPs, their family members, and close associates should generally be treated as inherently lower risk than non-domestic PEPs, with a correspondingly lighter level of EDD, unless other risk factors are present. Non-domestic PEPs must be treated as higher risk by default. Either way, a PEP connection on its own is a prompt to investigate further, not an automatic trigger to file.

It's also worth remembering that an EAB cannot assume a solicitor, conveyancer, bank, or other party in the transaction will make the report instead. Each regulated business in the chain has its own independent reporting obligation, and relying on someone else in the transaction to file does not discharge an EAB's own duty.

How long do agents have to submit a SAR?

The reporting clock starts at the moment of suspicion, not at completion, exchange of contracts, or when the deal falls through.

For a general SAR covering money laundering or terrorist financing, the report should be made as soon as possible after suspicion forms; no fixed number of days is set out in guidance.

A Defence Against Money Laundering (DAML) request is different, and is used where consent is needed before a transaction can proceed. Here, the NCA has 7 working days to respond. If it refuses consent, a moratorium period of a further 31 calendar days applies before the business can proceed anyway. 

However, that 31-day moratorium isn't necessarily the end of the story: under POCA, a court can extend the moratorium period on application by a senior law enforcement officer, in increments of up to 31 days at a time, with total extensions capped at 186 days. Combined with the initial 31-day moratorium, that means a matter can be frozen for up to 217 days in total from the point consent was first refused.

This moratorium mechanism doesn't apply to suspected terrorist financing, where actual consent is required before proceeding. 

Businesses must submit even when the transaction never proceeds, and even when they cannot identify who the offender is. The obligation attaches to the suspicion itself, not to the outcome of the deal.

How do you lodge a SAR with the NCA?

Any staff member who spots something suspicious raises it internally with the business's nominated compliance officer, who assesses whether it meets the threshold to escalate. If it does, the nominated officer submits the SAR to the NCA's UKFIU online.

The report itself asks for the facts that led to the suspicion: who was involved, what raised concern, and when the suspicion formed. It does not require the business to prove an offence occurred or to name a specific crime.

Businesses unsure whether a scenario clears the reasonable grounds threshold should still document their reasoning at the time, even if they ultimately decide not to escalate. A clear, time-stamped record protects the business's position and speeds up any future report if new facts emerge.

What happens if you report a client you've already flagged?

A prior SAR does not close the file on a client. If a new suspicion arises later, whether on the same transaction or a new one, the nominated officer submits a further SAR to the NCA.

This matters because ongoing relationships with buyers, sellers, or repeat clients can generate multiple, separate reportable events over time. Treating an earlier SAR as a box already ticked is a common and risky misreading of the obligation.

Why is "tipping off" a criminal offence?

Disclosing information that is likely to prejudice an investigation into money laundering, where that disclosure reveals that a SAR has been made or that an investigation is being contemplated or carried out, is a criminal offence under POCA's tipping-off provisions for the regulated sector. The test isn't simply that any direct or indirect disclosure to a client automatically amounts to an offence: the disclosure must be likely to prejudice the investigation, and the information must have come to the person through the regulated sector.

That said, the safest and most practical approach for an EAB is still to keep SAR-related discussions strictly internal, limited to the nominated officer, compliance staff, and, where relevant, legal counsel, and never the client or the client's representatives. The rule exists to protect the integrity of the NCA's intelligence function: if a suspect learns they are being reported, they may move funds, destroy records, or walk away from the transaction before authorities can act.

How does APLYiD help agents meet SAR obligations?

APLYiD helps your nominated officer and frontline staff apply HMRC's lengthy indicator list consistently, rather than relying on memory. You set your risk assessment criteria in APLYiD's templates, and the platform flags matching risk indicators as they appear in a transaction, supports the customer due diligence (CDD) and enhanced due diligence (EDD) checks that should follow, and captures the evidence behind each decision.

The decision on whether a red flag amounts to genuine suspicion, and whether the reporting threshold is met, always sits with the nominated officer. APLYiD doesn't make that call. What it gives estate agency businesses is a consistent, documented process for getting to that decision: every flag and every EDD step is backed by the business's own risk framework, which matters both for day-to-day AML compliance and for demonstrating to the NCA or another regulator how a decision was reached.