A suspicious activity report (SAR) — called a suspicious transaction report in some jurisdictions — is a confidential disclosure that a regulated business files with its national financial intelligence unit when it knows or suspects, or has reasonable grounds to suspect, that funds are the proceeds of crime or are linked to money laundering or terrorist financing.
Definition
A suspicious activity report (SAR) — called a suspicious transaction report in some jurisdictions — is a confidential disclosure that a regulated business files with its national financial intelligence unit when it knows or suspects, or has reasonable grounds to suspect, that funds are the proceeds of crime or are linked to money laundering or terrorist financing. Filing is a legal obligation, not a choice, once the threshold of suspicion is reached, and the threshold is deliberately low — suspicion, not proof.
Two linked rules govern SARs. "Tipping off" is a criminal offence: the business must not tell the customer, or anyone else outside the proper channel, that a report has been or may be made, because it could prejudice an investigation.
And in some regimes the business must not proceed with a transaction it has reported without consent from the authorities (a "defence" or "no consent" regime), which can mean freezing an account without being able to explain why to the customer.
In context
In a gambling operator, front-line and monitoring staff raise internal concerns to the Money Laundering Reporting Officer (MLRO), a named, senior, regulator-approved role. The MLRO evaluates each internal report, decides whether the legal threshold for an external SAR is met, files it if so, and keeps the reasoning on record either way.
Triggers include unexplained wealth, deposits inconsistent with profile, use of third-party or untraceable funds, minimal genuine gambling with prompt withdrawal (a laundering pattern), reluctance to provide KYC, and structuring deposits to stay under thresholds.
For affiliates, SARs are invisible by design — an operator legally cannot say that a player, or an affiliate's account, is the subject of a report. But SAR obligations explain behaviour affiliates do observe: sudden account freezes with no explanation, withdrawals blocked pending "review", and relationships terminated without a stated reason.
An affiliate should understand that an operator going quiet and restrictive around a specific player or payment is often a compliance process that the operator is legally barred from discussing, not poor service or bad faith. Affiliates that are themselves regulated businesses in some capacity may have their own reporting duties; all affiliates should avoid marketing that explicitly appeals to secrecy, untraceable funds or avoiding checks, since that invites exactly the activity that generates reports.
Worked example
A player deposits large sums, gambles a small fraction, and requests withdrawal of the rest to a different payment method. Monitoring staff raise an internal report; the MLRO agrees the pattern suggests layering and files a SAR.
The account is restricted pending authority feedback, and staff are instructed not to disclose the reason to the player, as doing so would be tipping off.
Related terms
Frequently asked questions
Browse the full iGaming & affiliate glossary — hundreds of EN/RU terms with examples.
← Back to glossary