What is a Suspicious Activity Report (SAR) under the Swedish Money Laundering Act?

A Suspicious Activity Report (SAR) is a formal report to the Swedish Financial Intelligence Unit about suspected activity that may indicate money laundering or terrorist financing.

What is the difference between a SAR and a Suspicious Transaction Report (STR)?

A SAR can cover suspicious activities even without a specific transaction, while an STR is used when the suspicion relates to one or more identified transactions.

Suspicious Activity Report (SAR)

Suspicious Activity Report, or report of suspected activity, is a central component in the fight against money laundering and terrorist financing.

Glossary
Suspicious Activity Report (SAR)

Explained – what does a Suspicious Activity Report (SAR) mean?

A Suspicious Activity Report (SAR), often referred to as a money laundering report or report of suspected activity, is a formal notification submitted to the Swedish Financial Intelligence Unit (Finanspolisen) when a reporting entity suspects that an activity may be linked to money laundering or terrorist financing. If the suspicion involves a specific transaction, the report type Suspicious Transaction Report (STR) is used instead. In addition to these report types, there are: a supplement to an STR or SAR without transactions (AIF), a supplement to an STR or SAR with transactions (AIF_T), a response to a request from the Swedish Financial Intelligence Unit without transactions (RIF), and a response to a request with transactions (RIF_T). Reporting is a statutory obligation under the Swedish Money Laundering Act. An AML lawyer or an anti money laundering lawyer commonly ensures that procedures for identifying and reporting suspicious activity comply with applicable requirements.

Suspicious activity reporting is primarily used by financial institutions, law firms, estate agents and other businesses subject to the Swedish Money Laundering Act. Reporting forms part of the organisation’s duty to maintain effective systems for customer due diligence and risk assessment in AML.

AML lawyer guidance – when does activity reporting become relevant?

Suspicious activity reporting becomes relevant when a reporting entity detects behaviour that deviates from a customer’s normal pattern and there is reason to suspect the aim may be to conceal or legitimise the proceeds of crime. Examples of suspicious activity include requests to conduct large cash deposits, transfers to high-risk countries, or unusual corporate structures—common money laundering red flags that an anti money laundering lawyer would expect a transaction monitoring system to surface.

It is also relevant where conflicting or insufficient information emerges about the purpose of the business relationship or the origin of funds. Under the Swedish Money Laundering Act, reporting must occur without alerting the customer, so as not to jeopardise any potential investigation.

AML officer at computer with warning symbol and security icons, illustrating suspicious activity reports (SAR), red flag alerts and compliance with the Swedish Money Laundering Act.

Anti money laundering lawyer: key points on Suspicious Activity Reports (SAR)

To meet reporting obligations under the Swedish Money Laundering Act, businesses should work systematically and document how suspicions are handled. The central elements below should be in place to satisfy AML documentation requirements and support an effective AML compliance programme.

Provide AML staff training on how to identify suspicious activity and report it.
Ensure internal procedures set out when a report should be filed with the Swedish Financial Intelligence Unit.
Maintain documentation evidencing the assessments made prior to reporting.
Define clear responsibilities for who files and follows up on SARs, reflecting the responsibilities of the Money Laundering Reporting Officer.
Integrate the SAR process with other reporting routines and the AML compliance programme.
Use technical tools and a transaction monitoring system to detect anomalous transaction patterns.
Follow up to ensure reported events lead to necessary internal actions.

By handling the reporting of suspicious activity clearly and correctly, the organisation strengthens its defence against money laundering and contributes to a safer financial system across Europe.

Suspicious Activity Report (SAR)

Why are Suspicious Activity Reports important?

SARs are among the most important tools in combating money laundering and terrorist financing. By quickly identifying and reporting suspicious activity, companies help prevent criminal proceeds from being integrated into the financial system. Systematic reporting enables authorities to trace illicit flows and stop illegal funds entering the legitimate economy.

For firms subject to AML legislation, accurate reporting is also a legal duty. Filing a Suspicious Activity Report demonstrates that the organisation takes its obligations seriously and that risk management aligns with the rulebook. A well-functioning process also provides confidence to staff managing customer relationships.

Over time, consistent SAR reporting strengthens public trust in the financial sector, signalling that firms actively prevent misconduct and support a healthy market.

A Suspicious Activity Report is a report to the Swedish Financial Intelligence Unit about suspicious activities or behaviours that may be linked to money laundering or terrorist financing—what a SAR is in practice.

A SAR should be filed when there is reasonable suspicion that an activity relates to money laundering, terrorist financing or crime. Reporting must take place promptly and without informing the customer—i.e., to file a suspicious activity report without tipping off.

The reporting entity is responsible for submitting SARs. This is typically done by a designated AML lawyer or MLRO in the organisation. The key responsibilities include:

Assessing suspicions and documenting the decision basis.
Ensuring the report is submitted to the Swedish Financial Intelligence Unit via goAML in the correct format.
Following up on any requests from the authority.

The process begins when suspicious activity is identified. An internal assessment follows and, if the suspicion remains, the matter is reported through the FIU’s goAML e-service. Typically, the process follows these steps:

Identification of suspicious activity.
Internal documentation and assessment.
Reporting to the Swedish Financial Intelligence Unit.
Any internal follow-up.

Once received, the Swedish Financial Intelligence Unit may commence analysis or forward the information to law-enforcement authorities. The company must not inform the customer. The subsequent handling depends on the nature of the matter and the authority’s assessment.

Both concepts are used in AML, but they have different focuses. A SAR covers all types of suspicious activities, including those not involving specific transactions, whereas an STR includes one or more concrete suspicious transactions. Understanding the difference between SAR and STR supports effective customer due diligence and risk assessment in AML.

Across Europe, an AML lawyer or anti money laundering lawyer can help design proportionate controls, align procedures with AML documentation requirements, and calibrate your transaction monitoring system within a robust AML compliance programme to identify suspicious activity efficiently.