The Money Laundering Reporting Officer (MLRO) is the named senior person responsible for receiving internal money-laundering concerns at a UK regulated firm and deciding whether to file Suspicious Activity Reports with the National Crime Agency. The MLRO must be senior, independent, accessible, and have sufficient authority to act. Done well it is a serious role. Done as a tick-box, it exposes the firm.

Every UK regulated firm (accountants, solicitors, estate agents, trust and company service providers) must appoint an MLRO. The role is personal and accountable. The MLRO carries individual criminal liability for failures, not just the firm.

Who can be an MLRO

The Money Laundering Regulations 2017 set basic requirements:

Sufficiently senior to make decisions independently.
Access to all relevant client information.
Knowledge of the regulations and the firm's risk profile.
No conflict of interest that would compromise their judgment.

In practice, this means a partner, director, or equivalent. The MLRO is often the same person as the Money Laundering Compliance Principal (MLCP), although smaller firms sometimes split the roles.

Larger firms sometimes have a deputy MLRO to handle volume and cover absences. Sole practitioners are necessarily their own MLRO.

The MLRO must be named to the firm's AML supervisor (ICAEW, SRA, HMRC, depending on regulation). The supervisor's records show who the MLRO is at any given time.

The day-to-day duties

The MLRO's responsibilities split into several routine tasks:

Receive internal reports

Staff who become suspicious of money laundering during their work must report internally. The MLRO is who they report to. The firm should have a clear, accessible channel for these reports (a dedicated email, a form, or escalation through a manager).

Internal reports vary in seriousness. Some are clear-cut. Most are uncertainties that need the MLRO's judgment.

Investigate the concern

The MLRO reviews the report:

What was the suspicious activity?
What was the trigger?
What other context exists (client file, history, transactions)?
Are there reasonable grounds for suspicion that money laundering or terrorist financing is involved?

The threshold for an external report is "knows or suspects, or has reasonable grounds to know or suspect". This is lower than the criminal standard (beyond reasonable doubt). It's more than mere unease.

Decide whether to file a SAR

The MLRO decides whether to file a Suspicious Activity Report to the National Crime Agency. If yes:

File through SAR Online (the NCA portal) without delay.
Include all relevant information.
Where consent is needed (Defence Against Money Laundering, DAML), wait for NCA response before proceeding.

If no SAR, the MLRO documents the decision and the reasoning. The internal report file becomes evidence of the firm's compliance.

Manage the tipping-off risk

After a SAR is filed, the MLRO is responsible for managing the firm's behaviour so the client is not tipped off. This includes:

Restricting who in the firm knows about the SAR.
Continuing to deal with the client as normal where possible.
Coordinating any "soft exit" from the client relationship.

Tipping off is a separate criminal offence with up to 2 years imprisonment for the individual.

Maintain records

For at least 5 years after the relationship ends:

All internal reports received.
All SAR decisions (filed or not), with reasoning.
All SARs filed and NCA correspondence.
Training records, policies, and procedures.

These records are what AML supervisor inspections examine.

Annual reporting and training

The MLRO typically:

Produces an annual AML report for the firm's senior management, summarising the year's activity, risks, training, and any issues.
Coordinates annual AML training for all relevant staff.
Updates the firm's policies and procedures as regulations change.

The SAR decision in practice

This is the hardest part of the role. Common triggers for internal reports:

Unusual transaction patterns. A client's transactions don't match the profile or stated business.
Cash transactions in businesses where cash is unusual.
Source of funds unclear for significant deposits.
Reluctance to provide identity documents by a client.
Information that conflicts with what the client previously said.
Public information suggesting concerns (sanctions, criminal proceedings, regulatory action).

The decision threshold is whether there are "reasonable grounds to suspect". This is interpreted by the courts and NCA guidance:

Not certainty.
More than mere unease or hunch.
Specific facts pointing to a possibility of money laundering or terrorist financing.

If the MLRO is uncertain, the safer position is to file. Defensive over-reporting is a recognised industry concern, but the legal risk is asymmetric: missing a genuine SAR can lead to personal criminal liability for the MLRO. Filing a SAR that wasn't strictly necessary doesn't.

Authority and independence

The MLRO's independence is crucial. They must be free to file a SAR even if it inconveniences:

A major client of the firm.
A senior partner who introduced the client.
The firm's commercial interests.

If the firm's structure or culture pressures the MLRO to not report, that's itself a regulatory breach.

Many MLROs report directly to the firm's senior partner or board. Some report to the firm's risk committee. The reporting line should be senior enough that the MLRO can exercise judgment without compromise.

What good MLRO work looks like

Effective MLROs do these things consistently:

Document everything. Every report received, every decision, every reason. If a supervisor or regulator ever questions a decision in three years' time, the documentation is the only evidence.
Stay current. Money-laundering typologies evolve. Sanctions lists change weekly. The MLRO must keep up.
Train staff well. Most internal reports come from staff. If staff don't know what to look for or how to escalate, the firm is blind to risk.
Be accessible. Staff need to be able to reach the MLRO quickly. A bottleneck delays reports and weakens the system.
Engage with the supervisor. Supervisor visits go better when there's an existing relationship. Annual returns, occasional informal conversations, attendance at supervisor events all help.

When to step away

An MLRO can step away from a specific report if they have a conflict of interest. In that case the report is escalated:

To a deputy MLRO if one exists.
To another senior partner.
In sole-practitioner firms, externally to the supervisor.

But personal awkwardness isn't a conflict. If the client is a friend, the MLRO can still handle the report; the test is whether the relationship would compromise the decision.

Common MLRO mistakes

Treating the role as administrative. The MLRO is a decision-maker, not a form-filler.
Not documenting "no SAR" decisions. Supervisors check both filed and unfiled decisions.
Late filing. SARs should be filed without delay once the threshold is met.
Tipping off. Continuing to act normally after filing is hard. Slipping up exposes the MLRO and firm to criminal liability.
Not training staff. Without training, internal reports either don't come or come for the wrong reasons.

Bottom line

The MLRO role is a real responsibility, not a title. The firm depends on the MLRO's judgment and documentation when supervisors inspect. The MLRO depends on the firm to give them authority, time, and training to do the role properly.

The MLRO role: duties and how to do it well