If your firm handles anti-money laundering (AML) compliance, you’ll need to use the SAR Portal—the UKFIU’s secure platform for submitting Suspicious Activity Reports (SARs). It replaces the old SAR Online system, so even if you had an account before, you must register again.
The full UKFIU guidance on using the SAR Portal can be found here.
Why It Matters
SARs are a legal requirement under POCA and TACT for reporting suspicions of money laundering or terrorist financing. They are not crime reports—you must still report crimes or safeguarding concerns to the police or relevant agencies.
How to Register
Step 1: Check Existing Accounts
Before creating a new account, confirm whether your organisation already has one. Duplicate accounts cannot be merged later.
Step 2: Choose the Right Option
- Private Individual: For personal SARs only. Requires a unique email and phone for two-factor authentication.
- Organisation: For firms submitting SARs on behalf of clients. The first registrant sets up the organisation account and invites colleagues.
Step 3: Provide Key Details
- Organisation name and AML supervisory body.
- Main contact details (ideally a shared inbox and mobile for the MLRO/Nominated Officer).
- Registration number (e.g., Companies House).
Adding Users
Any registered user can invite colleagues via Manage Users. Invitation links expire after 7 days.
Multiple Entities
If you manage SARs for linked entities, you can:
- Use one organisation account and specify the entity in the “Business Unit” field.
- Or create separate accounts (requires unique emails for each).
Best Practice
- Keep contact details up to date—especially for MLROs.
- Save a copy of your SAR before submission (you can’t access it afterwards).
- Ensure secure storage of SARs to comply with POCA, TACT, and data protection laws.
Quick Checklist
- Confirm if your organisation already has a SAR Portal account.
- Decide: Private Individual or Organisation registration.
- Gather details:
- Email (unique and active)
- Phone for two-factor authentication
- Organisation name, AML supervisor, registration number
- Main contact info (shared inbox recommended)
- Complete registration and verify phone.
- Invite colleagues via Manage Users (link expires in 7 days).
- Update contact details regularly.
- Print or save SAR before submission for your records.
Need Help?
- Technical issues: UK*******@*****ov.uk
- Guidance/support: UK*************@*****ov.uk
Bottom Line: Registering correctly saves time and avoids compliance headaches. Assign your MLRO or compliance lead as the first registrant and keep login details secure.