The Proceeds of Crime Act 2002 (POCA) is the United Kingdom’s primary legislative framework for identifying, restraining, confiscating, and recovering the proceeds of criminal conduct.
It establishes powers for asset recovery, defines money laundering offenses, and prescribes reporting obligations for regulated entities.
POCA is central to the UK’s AML/CFT regime, providing mechanisms to disrupt criminal enterprises by targeting illicit assets, regardless of whether they are held domestically or abroad.
POCA applies to financial institutions, professional service providers, accountants, auditors, estate agents, casinos, virtual asset service providers (under later amendments), and other regulated sectors.
Its scope covers criminal confiscation, civil recovery, taxation of unexplained wealth, and stringent requirements for suspicious activity reporting.
POCA was introduced to streamline and strengthen the UK’s asset recovery and anti–money laundering landscape.
Before POCA, asset recovery legislation was fragmented across multiple Acts.
POCA consolidated these powers into a single, comprehensive statute with a clear objective: Deprive criminals of financial gain by enabling authorities to trace, freeze, seize, and confiscate illicit wealth.
A key feature of POCA is its expansive definition of “criminal property,” which includes any benefit from criminal conduct and applies whether or not the criminal activity occurred in the UK.
POCA also sets out a set of principal money laundering offenses that apply to everyone, not just those in regulated sectors, although regulated businesses have additional reporting obligations.
POCA operationalises the Suspicious Activity Report (SAR) regime and gives law enforcement the power to restrain assets pending investigation.
It created the Assets Recovery Agency (later merged into the National Crime Agency) and grants broad civil recovery powers on a balance-of-probabilities threshold.
In AML/CFT compliance, POCA serves as one of the cornerstone statutes governing:
For regulated entities, POCA codifies expectations around vigilance, escalation, and timely SAR filing.
It also links to sector-specific rules issued under the Money Laundering Regulations (MLRs).
POCA and the MLRs work together: POCA defines offenses and reporting, while the MLRs prescribe detailed preventive measures such as CDD, EDD, and record-keeping.
POCA Part 7 outlines three primary money laundering offenses:
These offenses apply regardless of jurisdictional origin and carry severe penalties, including imprisonment and unlimited fines.
POCA requires regulated entities to report knowledge or suspicion of money laundering to the UK Financial Intelligence Unit (UKFIU).
Failure to do so constitutes a criminal offense.
After filing a SAR, individuals must not disclose information that could prejudice an investigation.
Tipping-off is a prosecutable offense under POCA.
POCA provides several mechanisms:
Under POCA, SARs may request a moratorium period.
During this time, law enforcement can investigate and freeze transactions to prevent dissipation of illicit funds.
While POCA itself is a legislative framework, its operational enforcement aligns with typical AML/CFT risks, including:
Criminals often use methods that POCA aims to disrupt, such as:
POCA’s powers enable authorities to intervene at multiple stages, from detection to asset forfeiture.
A bank detects rapid inbound cash deposits inconsistent with a client’s profile.
A SAR is filed, and the bank requests a DAML.
Law enforcement uses the moratorium window to freeze the funds and trace a linked criminal network.
Authorities identify a property portfolio owned by an individual with no legitimate income sources.
Under POCA’s civil recovery powers, assets are seized without requiring criminal conviction.
A fraudster convicted of a large investment scam faces a POCA confiscation order equal to the assessed proceeds of crime.
Assets across multiple jurisdictions are restrained and recovered.
An accountant facilitates layered transactions for a client involved in narcotics trafficking.
POCA applies to both the laundering activity and the accountant’s failure to report suspicious behaviour.
Failure to comply with POCA obligations exposes institutions to material consequences:
Institutions must maintain robust governance frameworks, adequate training, and intelligence-driven monitoring to ensure compliance.
POCA compliance is complex due to:
Technology-enabled detection, improved data quality, cross-border cooperation, and risk-based escalation frameworks are essential to meeting POCA obligations.
POCA enforcement involves multiple agencies, including the FCA, HMRC, NCA, SFO, and UKFIU.
Regulatory expectations include:
Regulators expect firms to demonstrate proactive risk management rather than reactive, minimum-standard compliance.
POCA is fundamental to UK financial crime prevention because it:
Effective implementation of POCA protects institutions from exposure to criminal networks and strengthens national and global AML/CFT defences.
Move at crypto speed without losing sight of your regulatory obligations.
With IDYC360, you can scale securely, onboard instantly, and monitor risk in real time—without the friction.