The short answer
Solicitors face two separate money laundering regimes, and the criminal one is the sharper of the two. The Money Laundering Regulations 2017 govern systems and controls, enforced by the regulator. The Proceeds of Crime Act 2002 creates criminal offences, and for anyone in the regulated sector the threshold is deliberately low: under section 330 it is an offence to fail to report where you had reasonable grounds for suspecting money laundering, whether or not you actually suspected it. Suspicion itself, following R v Da Silva, need only be more than fanciful.
The point most firms miss
Section 330 of POCA applies an objective test. A solicitor who did not suspect money laundering can still commit an offence if there were reasonable grounds to suspect it. Compliance with the Money Laundering Regulations does not answer a section 330 allegation, because they are different regimes with different tests.
Key facts
- Principal offences: sections 327 to 329 POCA 2002, carrying up to 14 years on indictment
- Regulated sector duty: section 330, failure to disclose, applying an objective test
- Suspicion: more than fanciful, and need not rest on reasonable grounds (R v Da Silva [2006] EWCA Crim 1654)
- Predicate offence: need not be identified (R v Anwoir [2008] EWCA Crim 1354)
- Tipping off: section 333A
- Separate regime: Money Laundering Regulations 2017, enforced by the SRA
The two regimes, and why the difference matters
Firms routinely treat anti-money laundering as one subject. It is two, and conflating them is how solicitors end up exposed.
The Money Laundering Regulations 2017 impose obligations on the firm: a written firm-wide risk assessment, client and matter risk assessments, customer due diligence, ongoing monitoring, policies and controls. Breach is a regulatory matter, and the SRA enforces it with fines and published outcomes. Our guide to what regulation 18 requires covers the central document.
The Proceeds of Crime Act 2002 creates criminal offences committed by individuals. It does not care whether your firm’s risk assessment was compliant. It asks what you knew, what you suspected, and what you did about it.
In practice
A firm can hold an exemplary MLR compliance record and still have a fee earner commit a section 330 offence. The regulations govern the system; POCA governs the individual. Training that covers only the first leaves people exposed to the second.
How low is the suspicion threshold?
Lower than most practitioners assume, and deliberately so.
In R v Da Silva [2006] EWCA Crim 1654, the Court of Appeal rejected the argument that suspicion must rest on reasonable grounds. The court held it could not read a word such as “reasonable” into the statutory provision, noting that Parliament had used the phrase “having reasonable grounds to suspect” elsewhere and had chosen not to use it here. Judgment.
What the court did require is that the suspicion be more than fanciful. A vague feeling of unease does not suffice, but the defendant need only think there is a possibility, more than fanciful, that the relevant facts exist.
Two practical consequences follow. A fee earner cannot defend a failure to report by saying the suspicion was not well founded. And once a suspicion has formed, documenting the basis for it is worth doing, because a recorded reasoning process defeats any later suggestion of bad faith reporting.
Common mistake
Treating a colleague’s concern as automatically creating your own suspicion, or automatically not creating one. The High Court in Shah v HSBC confirmed that where concerns are raised by an employee, the person with the reporting duty should form their own view rather than adopt or dismiss someone else’s.
Do prosecutors have to prove the underlying crime?
No. This is the point that makes money laundering prosecutions viable where the predicate offending is untraceable.
In R v Anwoir [2008] EWCA Crim 1354, the Court of Appeal confirmed that the prosecution need not prove the property was the benefit of a particular or specific act of criminal conduct. Requiring that would unduly restrict the legislation. Instead the Crown may rely on evidence that the circumstances in which the property was handled give rise to an irresistible inference that it could only have been derived from crime.
For solicitors the significance is evidential rather than doctrinal. You do not need to identify the crime to have a suspicion worth reporting, and the absence of an identifiable offence is not a reason to conclude there is nothing to report.
The offence that catches solicitors
Section 330 of POCA, failure to disclose in the regulated sector, and it is the one most likely to catch a competent, honest practitioner.
The offence is committed where a person receives information in the course of a business in the regulated sector and thereby knows or suspects, or has reasonable grounds for knowing or suspecting, that another person is engaged in money laundering, and fails to make the required report.
That final limb is objective. Unlike the principal offences under sections 327 to 329, which require actual knowledge or suspicion, section 330 can be committed by someone who genuinely did not suspect anything, if the court concludes that a reasonable person in their position would have had grounds to.
The Crown Prosecution Service’s position is that the offence is committed by failing to report regardless of whether it later transpires that money laundering cannot be proven, or did not occur at all.
There is a statutory defence of reasonable excuse, and a further protection where the person has not been given the training their employer was required to provide, which places a real burden on firms to evidence that training actually happened.
Reporting, consent and tipping off
Three obligations that operate together, and getting the sequence wrong creates its own exposure.
The report. A suspicious activity report goes to the firm’s nominated officer, usually the MLRO, who considers whether to report onward to the National Crime Agency. A nominated officer has their own offence under section 331 for failing to disclose.
Consent. Where proceeding with a transaction would risk committing a principal offence, the firm may seek a defence against money laundering, commonly called consent, under section 335. The practical difficulty is timing: a client expecting completion may not accommodate the statutory notice periods, and the retainer should anticipate that possibility rather than discover it.
Tipping off. Section 333A makes it an offence to disclose that a report has been made, or that an investigation is contemplated, where the disclosure is likely to prejudice any investigation. This is what makes the position awkward in practice: you may be unable to explain the delay to your own client.
Note on scope
This guide covers England and Wales. The criminal framework under POCA applies across the UK, but supervisory arrangements and guidance differ between jurisdictions.
Where legal professional privilege fits
Privilege provides an exemption from the section 330 reporting duty, but it is narrower than the profession sometimes hopes.
Information received in privileged circumstances is excluded from the duty to disclose. The exemption does not extend to information communicated with the intention of furthering a criminal purpose, which is the crime-fraud exception, and it does not convert every communication in a transactional retainer into privileged material.
That distinction is where the difficulty lies. Advice given in contemplation of litigation is on firm ground. Information received in the course of a conveyancing or corporate transaction frequently is not, and a fee earner who assumes privilege covers everything the client tells them has misunderstood the exemption.
The Law Society’s guidance on suspicious activity reports is the practical reference point, and any borderline case warrants advice rather than an assumption either way.
What the regulator is doing separately
The SRA has moved to a data-led approach, calling in documents and taking action on what it finds rather than waiting for complaints.
It reviewed 400 firm-wide risk assessments and took follow-up action on around 20% that did not meet the required standards. Its published fines increasingly turn on documentary failures rather than on any suggestion that laundering occurred, and the settlement agreements remain searchable against the firm’s name long after the penalty is paid.
One case is worth stating accurately, because it is often summarised loosely. In Dentons UK and Middle East LLP v SRA [2026] EWCA Civ 508, which concerned breaches of the Money Laundering Regulations 2007, the Court of Appeal held that a breach must be sufficiently serious to amount to professional misconduct under the relevant SRA standards. The court upheld the quashing of the tribunal’s original decision and remitted the matter to a freshly constituted tribunal to apply the correct test. The distinction concerns the disciplinary consequences of a breach, not the underlying obligation to comply.
Supervision itself is also changing. The government has confirmed the FCA will take over AML supervision of law firms as Single Professional Services Supervisor, though the transfer awaits legislation and the SRA remains the supervisor for now. Our guide to FCA AML supervision sets out the timing.
What to check in your firm
- Whether AML training covers POCA and the section 330 objective test, not only the regulations
- That training completion is recorded, since the training defence depends on evidence
- Whether fee earners know how to escalate a suspicion, and to whom, without discussing it with the client
- That the firm records the reasoning behind a suspicion, not just the outcome
- Whether retainers anticipate delay where consent has to be sought
- That someone has considered the privilege position on transactional retainers rather than assuming it
Frequently asked questions
What is the difference between POCA and the Money Laundering Regulations?
The Money Laundering Regulations 2017 impose systems and controls obligations on the firm, enforced by the SRA as a regulatory matter. The Proceeds of Crime Act 2002 creates criminal offences committed by individuals. Compliance with one does not answer an allegation under the other.
What counts as suspicion under POCA?
Following R v Da Silva [2006] EWCA Crim 1654, suspicion must be more than fanciful but need not be based on reasonable grounds. A vague feeling of unease is not enough. The person must think there is a possibility, more than fanciful, that the relevant facts exist.
Can a solicitor commit an offence without actually suspecting anything?
Yes, under section 330. The offence can be committed by someone who had reasonable grounds for knowing or suspecting money laundering, even if they did not in fact suspect it. That objective limb does not apply to the principal offences under sections 327 to 329.
Do prosecutors have to prove where the money came from?
No. R v Anwoir [2008] EWCA Crim 1354 confirmed that the prosecution need not prove the property was the benefit of a specific act of criminal conduct. It may rely on circumstances giving rise to an irresistible inference that the property could only have been derived from crime.
Does legal professional privilege exempt you from reporting?
Information received in privileged circumstances is excluded from the section 330 duty, but the exemption does not cover information communicated with the intention of furthering a criminal purpose, and much transactional work does not attract privilege at all. Borderline cases warrant advice.
What is tipping off?
An offence under section 333A of disclosing that a suspicious activity report has been made, or that an investigation is contemplated, where the disclosure is likely to prejudice an investigation. In practice it can mean being unable to explain a delay to your own client.
The key points
- Two regimes, two tests: MLR compliance does not answer a POCA allegation
- Section 330 is objective: not suspecting is not a defence if there were reasonable grounds to suspect
- Suspicion is a low bar: more than fanciful, and it need not be reasonable
- The predicate offence need not be identified: Anwoir removed that requirement
- Training is a legal defence: and it only works if the firm can evidence it happened
The practical takeaway
Most firms train their people on the regulations, because that is what the regulator inspects. The criminal exposure sits elsewhere, on individuals, with a lower threshold and an objective test, and it does not soften because the firm’s paperwork is in order.
The useful work is unglamorous: make sure fee earners understand section 330 rather than only customer due diligence, record the reasoning behind suspicions as well as the decisions, and keep the training records that the statutory defence depends on.