You've filed the Suspicious Activity Report. Now comes the harder question: do you keep the client, exit them, freeze the account, or continue monitoring? The answer depends entirely on where you operate.
The Decision You Are Facing
After filing a SAR, you must decide how to manage the ongoing client relationship without breaching anti-tipping off provisions. This decision affects your institution's risk exposure, regulatory standing, and operational capacity. The wrong choice can trigger enforcement action or inadvertently alert the subject to your investigation.
Three factors determine your path:
- Jurisdictional requirements: What your local regulator and Financial Intelligence Unit (FIU) mandate or permit
- Transaction status: Whether funds are in motion, pending, or settled
- Client relationship complexity: Whether you hold long-term products like loans that can't be easily exited
Key Factors That Affect Your Choice
FIU authority and default periods
In some jurisdictions, you must either obtain explicit consent from the FIU before proceeding with a transaction or wait for a default period (such as 30 days) to expire. Other jurisdictions require you to proceed immediately to avoid tipping off. Know which model governs your operations.
Account freezing authority
If you freeze an account to prevent further transactions, you typically need approval from your Money Laundering Reporting Officer (MLRO) or senior staff. This action is voluntary in some jurisdictions and mandatory in others pending FIU guidance.
Anti-tipping off scope
Exiting a client after filing a SAR is standard practice in some places like Germany. In others, it constitutes illegal tipping off. The line between legitimate business decisions and prohibited disclosure varies widely.
Product obligations
If the client holds long-term products or substantial loans, immediate exit may be contractually or operationally impossible. You'll need to manage the relationship under enhanced monitoring instead.
Path A: Exit the Client Relationship
Choose this path when:
- Your jurisdiction permits or encourages client exit post-SAR
- The client relationship is transactional rather than contractual (no loans, no long-term commitments)
- The suspicion involves high-risk activity that warrants immediate disengagement
- You can execute the exit without explicit disclosure of the SAR filing
How to execute: Terminate the relationship using standard business reasons that don't reference the SAR. Document the decision separately in your SAR workflow, not in client-facing communications. Ensure your exit timing doesn't create an obvious correlation with suspicious activity that would alert the client.
Regulatory checkpoint: Verify that your jurisdiction doesn't classify client exit as tipping off. Review your internal policies to confirm senior management approval isn't required for this action.
Path B: Continue the Relationship Under Enhanced Monitoring
Choose this path when:
- You cannot exit the client due to long-term product commitments
- Your jurisdiction requires you to proceed with transactions to avoid tipping off
- The suspicion doesn't meet your internal threshold for immediate termination
- The client represents significant business value and the risk is manageable through monitoring
How to execute: Implement enhanced Customer Due Diligence (CDD) and Know Your Customer (KYC) monitoring immediately. Before filing the SAR, verify that your CDD/KYC information is current. This doesn't mean re-identifying the client (which could tip them off), but confirming that existing records are accurate or quietly correcting them.
File follow-up SARs as necessary when new suspicious activity emerges. Establish internal triggers for escalation: transaction thresholds, counterparty patterns, or geographic risk factors that warrant additional reporting.
Regulatory checkpoint: Document your enhanced monitoring framework. If questioned later, you must demonstrate that continued engagement was accompanied by heightened scrutiny, not passive acceptance of risk.
Path C: Freeze the Account Pending FIU Guidance
Choose this path when:
- Your jurisdiction mandates account freezes post-SAR
- The transaction involves imminent risk of funds dissipation or terrorist financing
- Your MLRO or senior staff approve the freeze based on the severity of suspicion
- The FIU has explicit authority to consent or deny transaction processing
How to execute: Obtain MLRO approval before implementing the freeze. Coordinate with the FIU to understand their timeline for guidance. In jurisdictions with consent regimes, you may be required to hold the transaction until you receive explicit permission to proceed.
Prepare for client inquiries. If the client questions the freeze, your response must be carefully scripted to avoid tipping off while providing a plausible operational explanation.
Regulatory checkpoint: Confirm that your jurisdiction recognizes account freezing as distinct from asset seizure, which typically requires law enforcement action. Understand the liability implications if the freeze is later deemed unjustified.
Special Consideration: Professional Services
The AML/CFT Act of 2009 requires lawyers to file SARs, but it doesn't automatically release them from client representation obligations. If you're a legal professional who has filed a SAR, you must weigh:
- The nature and severity of the suspicion
- The stage of the transaction or matter
- The risk of tipping off if you withdraw
- Your professional duties under applicable ethics rules
You may seek release from the engagement or negotiate cessation with the client, but you must do so without violating anti-tipping off provisions. This often means finding a neutral business reason for withdrawal that doesn't reference the underlying suspicion.
Summary Matrix
| Factor | Exit Client | Enhanced Monitoring | Freeze Account |
|---|---|---|---|
| Jurisdiction permits exit | Yes | Either | Either |
| Long-term products | Not feasible | Yes | Possible |
| FIU consent required | No | No | Yes |
| Transaction in motion | Stop if permitted | Proceed if required | Hold pending guidance |
| MLRO approval needed | Check policy | For monitoring framework | Yes |
| Tipping off risk | Low if done properly | Managed through CDD updates | Managed through operational explanation |
Remember: suspicion doesn't require evidence of criminal activity. You're filing based on reasonable grounds, not proof. Your post-SAR strategy must balance regulatory compliance, operational reality, and the fundamental principle that the client should never know you've reported them. When in doubt, consult your FIU and document your decision framework thoroughly.
