Category: Suspicious Activity Reporting

Escalation to MLRO

Also known as: Internal Suspicious Activity Reporting, Internal SAR to MLRO, Internal Money Laundering Report

Simply put

Escalation to the MLRO is the internal step where a staff member reports a concern about possible money laundering or related suspicious activity to their firm's Money Laundering Reporting Officer. The MLRO then reviews the information to decide whether it needs further investigation and whether a report should be made to the relevant authorities. Making such an internal report does not by itself prove that any wrongdoing has occurred.

Formal definition

Escalation to the MLRO refers to the internal reporting mechanism by which an individual within an obliged entity refers knowledge or suspicion, or reasonable grounds for knowledge or suspicion, of money laundering or related activity to the designated Money Laundering Reporting Officer. In the UK context, staff are generally expected to make such an internal report where they know, suspect, or have reasonable grounds for knowing or suspecting that another person is engaged in money laundering. Upon receiving an escalation, the MLRO typically assesses the internal alert, may conduct further investigation, determines whether the matter warrants onward escalation, and decides whether to submit an external suspicious activity report to the relevant authority. This internal escalation is an operational and compliance step; it is distinct from an external filing and does not, in itself, constitute a determination of criminal wrongdoing. Precise obligations, trigger thresholds, and reporting timelines vary by jurisdiction and by the applicable regime governing the obliged entity, and should be confirmed against the relevant regulations and professional-body guidance.

Why it matters

Escalation to the MLRO is the pivotal internal control that connects front-line staff observations to a firm's formal decision-making on suspicious activity. Individuals interacting with customers and transactions are often best positioned to notice concerns, but they are generally not the ones who decide whether an external report should be filed. By channelling knowledge or suspicion, or reasonable grounds for knowledge or suspicion, of money laundering to a designated officer, the escalation process ensures that concerns are assessed consistently by someone with the authority, training, and context to act on them. In the UK, staff within a firm are typically expected to report to their MLRO where they know, suspect, or have reasonable grounds for knowing or suspecting that another person is engaged in money laundering.

The process matters because it separates the raising of a concern from any conclusion about wrongdoing. An internal report is an operational and compliance step; it does not, in itself, establish that money laundering has occurred, nor does it substitute for the MLRO's subsequent assessment and any external filing to the relevant authority. Treating escalation as a routine, protected part of the workflow encourages staff to surface concerns early rather than making individual judgments about materiality that could allow suspicious activity to go unreviewed.

A well-functioning escalation channel also supports broader governance. Because MLROs are generally expected to communicate important AML/CFT information upward, including to senior management or the board, the quality and completeness of internal reports feed directly into a firm's ability to manage and mitigate financial crime risk. Weak or under-used escalation routes can leave a firm unable to detect patterns, respond to emerging typologies, or demonstrate that its controls are operating as intended. Exact obligations and timelines vary by jurisdiction and should be confirmed against the applicable regulations.

Who it's relevant to

Front-line and customer-facing staff

Employees who interact with customers and transactions are typically the first to notice concerns and are generally expected to escalate to the MLRO where they know, suspect, or have reasonable grounds for knowing or suspecting that another person is engaged in money laundering. Understanding the internal reporting route, and that raising a concern does not itself establish wrongdoing, is central to their role.

Money Laundering Reporting Officers

The MLRO receives internal escalations, assesses the alerts, may conduct further investigation, determines whether a matter warrants onward escalation, and decides whether to submit an external suspicious activity report to the relevant authority. MLROs are also generally expected to communicate important AML/CFT information to senior management or the board and to understand when to escalate compliance concerns.

Compliance and AML program teams

Teams responsible for designing and maintaining the firm's AML framework must ensure the escalation channel is clear, accessible, and consistently applied, and that internal reports are documented and handled appropriately. They also manage related obligations, such as keeping the MLRO appointment current where supervisors require notification of changes to the role.

Senior management and boards of obliged entities

Because MLROs are generally expected to escalate significant AML/CFT information upward, senior leaders rely on a functioning internal reporting process to understand the firm's financial crime risk exposure and to demonstrate that controls to detect and manage that risk are operating. The quality of escalation directly affects governance and oversight.

Inside Escalation to MLRO

Internal Reporting Obligation

The duty of staff within an obliged entity to report knowledge, suspicion, or reasonable grounds for suspicion of money laundering or terrorist financing to the nominated officer. In the UK this internal reporting route to the Money Laundering Reporting Officer (MLRO) is grounded in the Proceeds of Crime Act 2002 and the Money Laundering Regulations; other jurisdictions use different titles and structures for the equivalent role.

The MLRO / Nominated Officer

The designated individual responsible for receiving internal disclosures, evaluating them, and deciding whether an external report should be made to the relevant financial intelligence unit. The specific title, statutory basis, and required seniority vary by jurisdiction, so the exact designation should be confirmed against the applicable regime.

Internal Suspicious Activity Report (Internal SAR/STR)

The mechanism, often a standardised form or workflow, through which an employee escalates a concern to the MLRO. This internal report is distinct from any subsequent external report the MLRO may file with the authorities, and terminology (SAR versus STR) differs by jurisdiction.

MLRO Assessment and Decision

The evaluation the MLRO performs on receiving an internal disclosure, considering the customer, transaction, and surrounding information to decide whether the threshold for external reporting is met. This is a judgment applied to the facts, not an automatic pass-through of every internal alert.

Onward External Reporting

Where the MLRO concludes suspicion is warranted, the filing of an external report to the competent financial intelligence unit. The internal escalation and the external filing are separate acts, and escalation to the MLRO does not itself constitute an external report.

Confidentiality and Tipping-Off Considerations

Escalation is generally handled on a restricted basis to manage the risk of tipping off a subject, which is a distinct offence in many regimes. Details of the applicable prohibitions and exemptions should be confirmed against the relevant law.

Record-Keeping of Escalations

The retention of records of internal disclosures made to the MLRO and the MLRO's decisions, typically expected as evidence of a functioning reporting framework. Exact retention periods vary by jurisdiction and should be checked against applicable regulation.

Common questions

Answers to the questions practitioners most commonly ask about Escalation to MLRO.

Does escalating a matter to the MLRO mean a Suspicious Activity Report (or Suspicious Transaction Report, depending on the jurisdiction) has been filed?

No. Internal escalation to the Money Laundering Reporting Officer is a distinct step from external reporting. An escalation typically brings a concern, alert, or unusual activity to the MLRO's attention for assessment; it is the MLRO (or nominated officer) who then evaluates whether the threshold for an external disclosure to the relevant Financial Intelligence Unit is met. In many jurisdictions the decision to file rests with that officer, and an escalation may be resolved without any external report being made. Escalation and reporting should therefore be tracked as separate events.

Does raising an internal escalation to the MLRO indicate that the customer or transaction involves confirmed criminal activity?

No. An escalation reflects an internal concern or the output of a control or alert, not a finding of wrongdoing. Alerts, matches, and unusual patterns are indicators that warrant review, not proof of money laundering, terrorist financing, or any other offence. The MLRO's assessment may conclude that there is a legitimate explanation. Staff and firms should avoid treating an escalation as establishing guilt, and should be mindful of tipping-off restrictions that generally apply while a matter is under consideration.

How should staff document an escalation to the MLRO?

Escalations are generally recorded in an internal report or case management system capturing who raised the concern, the date and time, the customer or transaction involved, the grounds for the concern, and any supporting information. Maintaining a clear, contemporaneous record supports the MLRO's decision-making and helps demonstrate that the firm's internal reporting process is operating. The specific format and retention expectations should be confirmed against the applicable regulations and the firm's own policies and procedures.

What information should an escalation include to help the MLRO make a decision?

An effective escalation typically sets out the factual basis for the concern rather than conclusions: the relevant transactions or activity, why it appeared unusual or inconsistent with the customer profile, any relevant customer due diligence information, and the output of any control that triggered the review. Providing the underlying facts allows the MLRO to independently assess whether grounds for suspicion exist and whether an external disclosure is warranted.

What should happen after a matter is escalated to the MLRO?

Once escalated, the MLRO (or nominated officer) generally reviews the information, may request further detail, and determines whether the threshold for an external report to the relevant Financial Intelligence Unit is met. Depending on the regime and the circumstances, the outcome may be an external disclosure, a decision to take no further action with the rationale recorded, or a request for enhanced review. During this period, restrictions on tipping off typically apply, and firms should follow their internal procedures on any decisions affecting the customer relationship or pending transactions.

Who can act as the point of escalation if the MLRO is unavailable?

Many firms designate a deputy MLRO or nominated officer to receive and assess internal escalations when the MLRO is unavailable, so that concerns are not delayed. The existence and authority of such alternates should be set out in the firm's policies and procedures, and the arrangement should be consistent with the requirements applicable in the relevant jurisdiction. Firms should confirm the precise expectations regarding the appointment and responsibilities of these roles against the applicable regulations.

Common misconceptions

Escalating a matter to the MLRO is the same as filing a SAR/STR with the authorities.

Internal escalation to the MLRO and the external report to the financial intelligence unit are distinct steps. The internal disclosure informs the MLRO's assessment; only the MLRO's subsequent decision may result in an external filing, and not every internal escalation leads to one.

Escalating a concern, or the MLRO filing a report, establishes that the customer has committed a crime.

An escalation or report reflects suspicion or reasonable grounds for suspicion in a compliance sense; it does not prove wrongdoing. The compliance threshold for reporting is separate from the criminal-law standard required to establish an offence.

The MLRO role and its obligations are defined identically across all jurisdictions.

The title, statutory basis, and precise duties of the nominated officer differ between regimes. The UK MLRO framework derives from the Proceeds of Crime Act 2002 and the Money Laundering Regulations, while other jurisdictions structure the equivalent function differently, so requirements should be confirmed against the applicable rules.

Best practices

Maintain a clear, documented internal escalation route so staff know how and to whom to report suspicions, and confirm that route against the reporting obligations in your applicable regime.

Treat internal escalation to the MLRO as a separate step from any external report, and preserve records of both the disclosure and the MLRO's decision as evidence of a functioning reporting framework.

Ensure the MLRO applies a documented assessment to each internal disclosure rather than automatically passing every alert onward, recording the rationale for reporting or not reporting.

Handle escalations on a confidential, restricted-access basis to manage tipping-off risk, and confirm the applicable prohibitions and exemptions against the relevant law.

Use neutral, factual language in internal reports that describes suspicion or reasonable grounds for suspicion, avoiding statements that assert a customer has committed a crime.

Verify jurisdiction-specific details, including the correct title of the nominated officer, applicable retention periods, and the external reporting authority, against the governing regulation rather than assuming a single global standard.