Skip to main content
FinCrime Institute
Category: Suspicious Activity Reporting

Tipping Off

Simply put

Tipping off generally refers to improperly telling a customer or another person, directly or indirectly, that a suspicious activity report has been made or that a money laundering investigation is underway or being considered. Doing so can undermine the investigation by alerting the person who is the subject of it. In many jurisdictions this is treated as a criminal offence, though the exact elements and available defences vary by regime.

Formal definition

Tipping off is the disclosure, whether explicit or by implication, of information relating to a suspicious activity report (SAR), a suspicious matter report, or an ongoing or contemplated money laundering investigation, where that disclosure would or could reasonably be expected to prejudice the investigation. In the UK, related offences arise under the Proceeds of Crime Act framework as applied to persons in the regulated sector; the Law Society notes that a person does not commit the relevant tipping off offence if they do not know or suspect that the disclosure is likely to prejudice an investigation, and that statutory defences are available. In Australia, AUSTRAC frames tipping off as disclosing certain types of information to another person where it would or could reasonably be expected to prejudice an investigation. Because the precise scope, mental element (knowledge or suspicion), obliged entities covered, and defences differ across regimes, the applicable statute and regulator guidance should be consulted directly. Tipping off is generally a distinct compliance and criminal-law offence and should not be conflated with the underlying suspicion-reporting obligation; the existence of a report or suspicion does not itself establish that the subject engaged in wrongdoing.

Why it matters

Tipping off strikes at the effectiveness of the entire suspicion-reporting system. When an obliged entity files a suspicious activity report (SAR) or a suspicious matter report, the value of that intelligence depends in large part on the subject remaining unaware that they are under scrutiny. If a customer learns that a report has been made or that an investigation is underway or being contemplated, they may move or conceal assets, destroy records, or alter their behaviour in ways that frustrate law enforcement. For this reason, many jurisdictions treat tipping off as a distinct criminal offence rather than a mere breach of internal policy.

The offence also creates a delicate operational tension for compliance staff, relationship managers, and legal advisers, who must continue to interact with customers while a report or investigation may exist. Ordinary conversations, delays in service, or requests for additional documentation can inadvertently signal that something is amiss. Firms therefore need clear internal protocols so that staff understand both their reporting duty and their separate obligation not to disclose. It is important to keep the two concepts distinct: the existence of a report or a suspicion does not establish that the subject has engaged in wrongdoing, and tipping off is a separate matter from the underlying reporting obligation.

Because the precise elements, the mental element, the range of obliged entities covered, and the available defences differ across regimes, firms should not assume a single global rule applies. In the UK, related offences arise under the Proceeds of Crime Act framework as applied to persons in the regulated sector, and the Law Society notes that statutory defences are available, including that a person does not commit the relevant offence if they do not know or suspect that the disclosure is likely to prejudice an investigation. In Australia, AUSTRAC frames the offence as disclosing certain information where it would or could reasonably be expected to prejudice an investigation. The applicable statute and regulator guidance should be consulted directly.

Who it's relevant to

Money Laundering Reporting Officers and compliance teams
MLROs and compliance staff sit at the centre of the reporting process and are often the individuals with knowledge of a filed or contemplated report. They need to understand how to manage suspicion-reporting duties alongside the separate obligation not to disclose, and how the applicable regime treats the mental element and any available defences.
Relationship managers and front-line staff
Staff who interact directly with customers may inadvertently signal, explicitly or by implication, that a report or investigation exists, for example through unexplained delays or unusual documentation requests. Clear internal protocols help them continue servicing customers without prejudicing an investigation.
Legal advisers and professionals in the regulated sector
Lawyers and other regulated-sector professionals face particular exposure given their close client relationships. The Law Society's guidance highlights that in the UK a person does not commit the first tipping off offence if they do not know or suspect a disclosure is likely to prejudice an investigation, and that statutory defences exist; advisers should consult the applicable framework directly.
Obliged entities across regulated industries
Financial institutions, designated non-financial businesses, and other reporting entities must build confidentiality controls and training into their AML programmes. Because coverage and requirements differ by jurisdiction, such as under the UK Proceeds of Crime Act framework or AUSTRAC's framing in Australia, firms should confirm scope against the relevant statute and regulator guidance.

Inside Tipping Off

Prohibited Disclosure
The core of the offence is the making of a disclosure that is likely to prejudice an investigation into money laundering or terrorist financing, or a disclosure that a suspicious activity report (SAR) or suspicious transaction report (STR) has been, or is intended to be, made. The precise formulation depends on the applicable regime; for example, the UK Proceeds of Crime Act and the Terrorism Act contain tipping off offences, and the EU AML framework requires member states to prohibit tipping off, while exact wording and scope vary by jurisdiction.
Trigger Event
Tipping off typically arises in connection with an actual or contemplated SAR/STR filing or an ongoing investigation. The prohibition generally attaches once a report has been made or is being contemplated, or where the discloser knows or suspects that an investigation is underway. The exact triggering conditions should be confirmed against the applicable regulation.
Covered Persons and Entities
The prohibition generally applies to obliged entities, their employees, officers, and agents who become aware of a report or investigation. Scope over which persons and disclosures are captured varies by jurisdiction, and not every communication about a customer or transaction constitutes tipping off.
Permitted Disclosures and Exceptions
Many regimes provide carve-outs, such as disclosures within a group, between certain obliged entities, or to regulators, supervisors, and law enforcement, and disclosures made to dissuade a client from engaging in illegal conduct in some frameworks. The availability and conditions of these exceptions differ by jurisdiction and should be verified against the relevant instrument.
Mental Element
Tipping off is a criminal-law offence and generally requires a relevant mental state, such as knowledge or suspicion that a disclosure is likely to prejudice an investigation. The exact fault standard is set by the applicable statute and may differ between money laundering and terrorist financing regimes.
Relationship to Reporting Obligations
The tipping off prohibition operates alongside SAR/STR reporting duties. Filing a report is a compliance obligation, whereas tipping off constrains what the reporting entity may communicate afterward; the two are distinct but interconnected requirements.

Common questions

Answers to the questions practitioners most commonly ask about Tipping Off.

Does tipping off only occur if you directly tell a customer that a suspicious activity report has been filed?
No. This is a common misconception. Depending on the jurisdiction, the tipping off offence is generally framed more broadly than an explicit statement that a SAR or STR has been filed. It may also capture disclosures that a report is being considered, that an investigation is underway or contemplated, or information likely to prejudice an investigation. The precise scope depends on the applicable regime, for example the UK provisions under the Proceeds of Crime Act and related legislation differ in wording from other frameworks, so the boundaries of what constitutes a disclosure should be confirmed against the law that applies to your entity. Indirect or inadvertent disclosures, including through the manner in which a query or account restriction is communicated, may fall within scope.
Isn't tipping off just an internal compliance policy rather than something that can lead to personal liability?
This understates the position in many jurisdictions. Tipping off is frequently established as a criminal offence rather than merely an internal policy matter, and individuals, not only institutions, may be exposed to liability where the elements of the offence are met. That said, the existence of the offence, the required mental element (such as knowledge or suspicion), available defences, and applicable penalties vary between regimes and should be confirmed against the specific statute in force. It should not be assumed that a single global standard applies or that liability rests only with the organisation.
How can staff respond to customer questions about a delayed or blocked transaction without tipping off?
Firms typically address this through pre-agreed, neutral messaging that does not reference any report, suspicion, or investigation. Frontline staff are generally trained to avoid speculating about the reason for a delay and to escalate customer queries to a designated function, such as the money laundering reporting officer or equivalent, rather than improvising an explanation. Because acceptable responses depend on the applicable regime and the facts of each case, many organisations maintain scripted holding responses reviewed by compliance or legal. The aim is to manage the interaction without making a disclosure likely to prejudice any consideration or investigation; it should not be treated as a guarantee against inadvertent disclosure.
Who within an obliged entity should be told that a suspicious activity report has been made?
Access to information about a report is generally restricted on a need-to-know basis, with the reporting function, often the MLRO or nominated officer, coordinating what is shared internally. Many jurisdictions provide exceptions permitting certain disclosures, for example within the same institution or group, between institutions in defined circumstances, or to supervisors and legal advisers, subject to conditions. The exact permitted disclosures and their conditions vary by regime and should be confirmed against the applicable law. As an operational matter, firms typically limit knowledge of a filing to those who require it to perform their functions.
Can a firm still conduct enhanced due diligence or ask a customer for information after a report has been made?
Firms often continue customer interactions and information-gathering after a report, but the manner in which this is done matters. Requests should generally be framed in a way consistent with ordinary due diligence and account-servicing activity, so as not to convey that a report has been made or that an investigation may be underway. Some regimes and guidance address the interaction between ongoing due diligence, continued transactions, and the tipping off offence, and firms may seek guidance from their reporting function or legal advisers before proceeding. The appropriate approach depends on the applicable regime and the specific circumstances.
What controls help an organisation manage tipping off risk in practice?
Common measures include staff training on what may constitute a disclosure, scripted neutral responses for customer-facing teams, restricted access to reporting information, clear escalation routes to the MLRO or nominated officer, and involvement of compliance or legal before communicating with a subject where risk is heightened. These are measures intended to mitigate and manage the risk of an unlawful disclosure rather than guarantees that tipping off will never occur. Because the scope of the offence and available defences differ across jurisdictions, controls should be calibrated to the specific regime and confirmed against the applicable law.

Common misconceptions

Tipping off means you can never continue a normal business relationship or conversation with a customer after filing a SAR/STR.
The prohibition targets disclosures likely to prejudice an investigation or that reveal a report has been or will be made. Ordinary business communications that do not disclose the report or the investigation are generally not caught, though practitioners should proceed carefully and confirm the boundaries under their applicable regime.
Tipping off and the failure to report are the same offence.
They are distinct. Failure to report concerns not making a required SAR/STR, while tipping off concerns making a prohibited disclosure about a report or investigation. Different regimes address these as separate offences with different elements.
Any internal discussion about a suspicious customer amounts to tipping off.
Internal escalation and permitted disclosures, such as those to a nominated officer, compliance function, regulator, or law enforcement, are typically outside the offence or expressly exempted. The exact permitted disclosures vary by jurisdiction and should be checked against the applicable regulation.

Best practices

Establish clear internal protocols governing who may communicate with a customer after a SAR/STR has been filed or contemplated, and what may and may not be said, to avoid inadvertent prejudicial disclosures.
Train front-line and relationship staff to recognise that a report or investigation exists on a need-to-know basis, and to avoid confirming, denying, or hinting at any filing or investigation to customers or third parties.
Route customer queries about delayed, declined, or under-review transactions through pre-approved, neutral messaging that does not reveal that a report has been made or that an investigation is underway.
Confirm the specific tipping off offence, its mental element, and any permitted disclosure exceptions under the applicable regime (for example, the UK Proceeds of Crime Act and Terrorism Act, or the transposing EU member-state law) rather than assuming a single global rule.
Maintain documented guidance on permitted intra-group and inter-entity disclosures, and verify the conditions and availability of those exceptions against the relevant instrument before relying on them.
Consult the nominated officer, MLRO, or legal counsel before making any disclosure where there is doubt about whether it could prejudice an investigation or reveal a report.