What is Suspicious Activity?
The short answer
Suspicious activity is activity that raises a reasoned concern requiring assessment under the relevant review or reporting process.
Suspicious Activity: why it matters
An onboarding or review decision can contain several different questions. Keeping this concept distinct helps the team assign the right evidence and decision owner, rather than rely on a single completed status.
How to assess it in practice
Record the observations and explanation sought, then use the applicable escalation route without treating suspicion as proof. Start by defining the question the team needs to answer. Identify the relevant record or evidence, check its scope and date, and retain the reasoning behind the result. If evidence conflicts, keep that conflict visible for review.
Worked example
Illustrative workflow: a team reviewing a business adds a separate check for suspicious activity. The reviewer’s task is to record the observations and explanation sought, then use the applicable escalation route without treating suspicion as proof. The outcome is recorded together with the supporting evidence; an unresolved question stays open rather than being converted into a positive result.
A sequence of transactions differs from the customer's stated business model. The analyst documents the pattern and refers it for assessment without labelling the customer guilty.
Distinctions that matter
Suspicious Activity belongs to the financial crime concepts topic family. Read Anti-Money Laundering (AML) alongside it to understand the adjacent question. Each page has its own intended scope; shared context does not make the concepts equivalent.
Evidence and review output
Review these
- Parties and observed activity
- Expected business purpose
- Escalation and decision rationale
The review should produce
An evidence-based case record that separates what was observed from what remains to be established.
Across this family
Distinguish facts about a customer from interpretation of activity and from a reporting decision. A suspicious pattern can justify investigation without proving an offence. Keep observations, explanations and conclusions traceable, and use the appropriate internal process when legal or reporting interpretation is required.
A note from practice
A useful suspicion record distinguishes observed behaviour from assumptions and identifies why the behaviour matters. Preserve dates, subjects and the explanation sought while following the applicable reporting and confidentiality process.
Limits and common mistakes
The practical boundary is important: Record the observations and explanation sought, then use the applicable escalation route without treating suspicion as proof. Do not substitute a related label for this check or assume that missing information is a negative finding. Source-specific and jurisdiction-specific rules require their own review.
Frequently asked questions
Which evidence should I review?
How is Suspicious Activity different from Anti-Money Laundering (AML)?
What should the result of the review contain?
Continue learning
Related topics
- Financial crime conceptsAnti-Money Laundering (AML)Anti-money laundering describes measures intended to prevent, detect and respond to attempts to disguise or use proceeds of crime.
- Financial crime conceptsFinancial Crime ComplianceFinancial crime compliance organises the controls used to address relevant financial crime risks and applicable obligations.
- Financial crime conceptsMoney LaunderingMoney laundering involves dealing with criminal proceeds in ways intended to disguise their origin or make them appear legitimate.
See the registry record behind every answer.
Primary, government-sourced data on 600M+ companies in 200+ countries, with full source attribution.