Suspicious Activity Report Redaction with anonym.plus

Strip customer identifiers from an internal SAR copy used for review or training.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

A Suspicious Activity Report is a disclosure to the UK Financial Intelligence Unit at the National Crime Agency. POCA 2002 s.330 makes it an offence in the regulated sector to fail to report a suspicion of money laundering. Terrorism Act 2000 s.21A carries the same duty for terrorist financing. anonym.plus removes names, National Insurance numbers, and account details from an internal copy on your device.

When this applies

The NCA was created by the Crime and Courts Act 2013 s.1, and its UKFIU receives every SAR. An analyst often wants a peer or an adviser to read a draft first. That copy needs the typology and the timeline, not the customer. You clear the identifiers from it and never from the live disclosure.

How anonym.plus handles it

  1. Open the internal copy in anonym.plus on your workstation.
  2. Local OCR reads any scanned statement attached to it.
  3. The tool flags names, NINOs, and account numbers.
  4. Confirm each flag and keep the typology notes intact.
  5. Replace each identifier with a steady label.
  6. Save the clean draft locally with no network call.

What you need to provide

PII & financial identifiers detected

Categoryanonym.plus entity typeExample
NamesPERSONMaria Voss → [SUBJECT]
IdentifiersUK_NINOQQ 12 34 56 C → [NINO]
FinancialUK_BANK_NUMBERacct 4412 9087 → [ACCOUNT]
MoneyMONEY£48,200 transfer → [AMOUNT]
ContactEMAIL_ADDRESSvoss@example.co.uk → [EMAIL]
DatesDATE_TIMEtxn 04/12/2026 → [DATE]

Compliance achieved

Anonymise internal SAR copies offline — see plans & start free →

Limitations & cautions

Never redact the disclosure itself. The UKFIU needs full identifiers, and s.330 is not answered by a cleaned form. This suits internal review or training copies only. POCA 2002 s.333A also makes tipping off an offence, so handle even a clean copy with care.

Frequently asked questions

Can I redact the SAR I submit to the NCA?

No. The disclosure needs full identifiers to be acted on. POCA 2002 s.330 is answered by a complete report, so redact an internal review or training copy instead.

Does the tipping-off rule still apply to a clean copy?

Yes. POCA 2002 s.333A makes it an offence to reveal that a disclosure was made. Removing names does not lift that duty, so share even a redacted copy with care.

What is a defence against money laundering request?

It asks the NCA for appropriate consent under POCA 2002 s.335 before suspect funds move. The NCA has 7 working days to respond, and a refusal starts a 31-day moratorium. Your internal copy of that request is the one to clean.