Sanctions screening
Sanctions screening is the control that compares customers, related parties and payment data against sanctions lists, such as the EU consolidated list and UN lists, to stop dealings with designated persons or prohibited activities. It runs at onboarding, on list updates and in real time on payments.
Roles that need it
What it is
Sanctions are restrictive measures adopted by the EU, the United Nations and individual countries. Financial sanctions include asset freezes on designated persons and entities, bans on making funds available to them, and sectoral restrictions such as limits on certain securities or services. EU sanctions are adopted as Council decisions and regulations and bind every person and firm in the EU.
Sanctions screening is how a firm checks that it does not breach them. It has two main forms:
- Customer or name screening: the customer, beneficial owners, directors and key counterparties are compared with lists at onboarding and again whenever a list changes.
- Payment or transaction screening: each payment message is checked in real time, including names, addresses, banks, countries and free text, before it is released.
Screening tools use fuzzy matching to catch spelling variants and transliterations. Each potential match creates an alert that an analyst must clear as a false positive or escalate as a true match.
Why it matters
Sanctions breaches are usually strict-liability or close to it, and penalties can be severe, including criminal charges. A true match must be frozen and reported to the national competent authority. Screening also supports export control and trade finance checks, where goods, vessels and ports matter as much as names.
Worked example
Illustrative numbers.
A bank screens 200,000 outgoing payments a day. The tool raises alerts on 0.5% of them, so 1,000 alerts. Analysts clear 995 as false positives (common names, partial matches). Four are escalated for review. One is a true match on a designated entity’s subsidiary owned more than 50%, so the payment is blocked and reported.
If the bank tightens the fuzzy threshold to cut alerts to 600, it must test that it still catches known list variants. Fewer alerts at the cost of missed matches is a control failure.
Who uses it
- Sanctions analysts review alerts, research ownership and decide on escalation.
- AML analysts consider sanctions evasion typologies alongside money laundering.
- KYC analysts screen customers and related parties during onboarding.
- Payments operations and Swift messaging specialists handle held payments and repair message data.
- Trade finance analysts screen goods, vessels, ports and dual-use items in documentary transactions.
Common confusions
- Sanctions screening and PEP screening are different. A politically exposed person is a higher-risk customer; a sanctioned person must not receive funds at all.
- Lists are only part of the rule. EU guidance treats entities owned more than 50% or controlled by a designated person as caught, even if unlisted.
- Different regimes apply at once. A euro payment may also involve UK or US regimes depending on parties and currency.
- Clearing a false positive needs documented reasons. A quick release without evidence is a weak control.