What is Sanctions Screening?

What is sanctions screening?

Sanctions screening is the process of cross-checking the parties you deal with against official sanctions lists. Organisations may also refer to it as a sanction screen, a sanctions check or a sanction search. This is not a general background check but a test against one specific class of list, published by governments and international bodies and carrying a legal prohibition behind it. In practice that means checking who you are dealing with and what you are moving before a transaction settles. Those lists name the individuals, entities and vessels that governments have designated. Country-wide restrictions work differently. They come from the sanctions programme and its regulations instead of from a name on a list, which is why no single master list of restricted countries exists. If a customer or a payment matches a listed party, you have to stop and investigate before the money moves.

Screening covers more than the name on the account. Depending on the risk, you check individuals, the entities behind them, the countries involved and, in the case of trade, the goods and vessels as well.

How does sanctions screening fit into AML and KYC?

Sanctions screening runs inside a firm's wider anti-money-laundering (AML) programme, alongside know-your-customer (KYC) checks, transaction monitoring and reporting. Sanctions and AML are separate legal frameworks, but they are closely connected in practice because they rely on many of the same compliance processes and controls. The KYC checks you run at onboarding are what give screening the customer information it needs, because a screening system can only match the names, dates of birth and identifiers you collected. What are AML Checks? sets out the wider set of controls.

It helps to distinguish between these related controls. Name screening is the broad act of matching a party against any watchlist. Sanctions screening is name screening against government sanctions lists specifically. Politically exposed person (PEP) screening has a different target: individuals entrusted with prominent public functions, whose position can present a higher risk of corruption, plus their family members and close associates. Adverse media screening looks for negative news and other risk information rather than a formal listing.

Sanctions screening is the one with a hard legal line behind it. An AML concern is a reason for further scrutiny. A confirmed sanctions match means that dealing with that party is prohibited outright, whether or not anything about the transaction looks suspicious.

Why does sanctions screening matter?

Sanctions screening matters because the penalties for getting it wrong are severe and the enforcement is real. In 2025 the US Office of Foreign Assets Control (OFAC) published fourteen enforcement actions totalling about 266 million US dollars, most of them settlements (see OFAC's 2025 enforcement list, figures as of September 2026). The largest was a penalty of about 216 million US dollars imposed on the venture capital firm GVA Capital in June 2025. The biggest sanctions case remains BNP Paribas, which in 2014 agreed to pay about 8.9 billion US dollars across US federal and state authorities for concealing references to sanctioned parties in thousands of transactions (see the US Treasury announcement). OFAC's own share of that was 963 million, a figure its 968.6 million dollar settlement with the crypto exchange Binance narrowly overtook in 2023.

The reputational damage runs alongside a fine. A breach becomes public and correspondent banks can reconsider the relationship for years afterwards.

Is sanctions screening a legal requirement?

What the law imposes is a prohibition instead of a procedure. Depending on the regime, these can prohibit dealing with a designated person's assets, making funds available to them or carrying out specified transactions. In the United States a breach can give rise to civil liability even without knowledge that the conduct was prohibited, while criminal liability generally requires a willful violation. Sanctions rules set out the prohibitions and restrictions that firms must follow, while applicable laws, regulations and supervisory guidance may also require or expect firms to maintain internal controls to ensure compliance. Screening is one of those controls. AML rules separately require their own systems and controls, which often overlap operationally with sanctions screening.

Internationally, the Financial Action Task Force (FATF) sets standards for countries rather than rules that bind firms directly. Its recommendations cover, among other things, targeted financial sanctions for terrorism, terrorist financing and the proliferation of weapons of mass destruction. They call on countries to freeze designated persons' funds without delay (see the FATF Recommendations). FATF standards shape national laws and supervisory frameworks, which in turn reach firms through the rules and expectations adopted at national level.

National law is where it gets concrete. In the United States, OFAC administers and enforces sanctions under authorities such as the International Emergency Economic Powers Act. OFAC also strongly encourages a risk-based approach and publishes a framework setting out the elements it expects a sanction compliance programme to contain. OFAC weighs that framework when it decides how to respond to an apparent violation.

In the European Union, measures are adopted under the Common Foreign and Security Policy and asset freezes take effect through Council regulations, which are directly applicable in every member state without national transposition. Implementation and enforcement are primarily the responsibility of the member states, within a minimum standard set at Union level for criminal offences and penalties for sanctions violations. Member states may go further.

In the European Union, the regulatory framework also sets expectations for how firms implement sanctions compliance. For instance, the European Banking Authority's guidelines on internal policies, procedures and controls to ensure the implementation of Union and national restrictive measures have applied since 30 December 2025. One set covers institutions across the EBA's supervisory remit. A second set applies specifically to payment service providers and crypto-asset service providers. For a firm in scope, a working screening programme is a supervisory expectation in its own right and not only the practical answer to a prohibition.

United Nations sanctions bind member states under Article 25 of the UN Charter rather than firms directly, so the obligation a firm actually faces is the national measure that implements the resolution. In the United Kingdom, OFSI implements and enforces financial sanctions and can impose a monetary penalty of up to one million pounds. Where the breach relates to particular funds or economic resources whose value can be estimated, the cap is the greater of one million pounds and 50 percent of that value. OFSI does not have to show that the firm knew or suspected that its conduct was a breach. Those are the figures as of September 2026. In January 2026 OFSI announced that it will seek two million pounds and 100 percent of the breach value. That change needs legislation and is not yet in force.

Across the national regimes that impose obligations directly, the expectation is broadly similar. Organisations in scope are expected to have a screening programme, to keep it current and to be able to demonstrate that it works.

Who needs to do sanctions screening?

Any person or organisation that could handle money, goods or services for a sanctioned party has reason to screen. In most regulated sectors supervisory expectations make it the practical standard. Banks sit at the centre of it, because a payment that clears through them can carry a sanctions nexus that neither end of the transaction created. Sanctions screening in banking therefore has to cover the payment flow as well as the customer book, which is a heavier obligation than most other sectors carry. The same applies to payment providers, crypto exchanges, investment firms and insurers.

Sanctions obligations reach well beyond financial services. Depending on the jurisdiction, they can apply to law firms, accountants, real estate agents, logistics companies and exporters, because sanctions generally apply according to jurisdictional rules rather than only to a particular regulated sector. Whether a firm is also expected or required to maintain a documented screening programme depends on the sector and the jurisdiction.

What are the types of sanctions screening?

Screening is commonly grouped by the moment at which you screen, which in turn follows the risk. Some sources identify only a handful of types while others use more detailed classifications, by the moment of screening, by the data being screened or by the list source.

Customer screening happens at onboarding, as part of the know-your-customer checks you run before you open the relationship. Transaction screening is usually run before a payment is executed, often in real time, so a payment to or from a listed party can be stopped before it settles. In a bank it runs against the payment message itself rather than only against the customer record. Ongoing screening, sometimes called delta or re-screening, runs your existing customer base against the lists whenever they change, which for the major regimes means several times a week and, in a fast-moving crisis, more than once in a day. This last type is what catches a long-standing customer who is newly added to a list. Firms that move goods add trade screening as a further category. It checks the goods, the vessels and the ports involved alongside the counterparty, because an export can be prohibited even when every name on the paperwork is clean.

How does sanctions screening work?

Sanctions screening works by matching your data against list data, identifying potential matches and resolving those alerts before a prohibited transaction proceeds. There is no single universal screening workflow: the exact approach varies depending on the jurisdiction, applicable sanctions rules and the organisation's procedures.

The process starts with data. Screening is only as good as what you feed it. You need accurate names, dates of birth, countries and identifiers for your customers, plus clean payment details for every transaction. That data is then matched against the relevant sanctions lists. An exact match is rare and is not enough, because names are transliterated differently, misspelled or otherwise varied. Screening systems can use fuzzy matching to catch the close variants as well as the exact ones. Potential matches are then assessed to determine which should raise an alert. Depending on the system, this can involve match scores, thresholds, rules or a combination of them. Set the matching criteria too loose and you drown in false alarms. Set it too tight and you risk missing a real hit.

Alerts that cannot be resolved automatically require further review. A compliance analyst reviews each alert and compares additional identifiers, such as date of birth, nationality, address or identification numbers, to determine whether the alert is a true match or a false positive. A confirmed match then has to be assessed against the applicable sanctions rules to determine what action and reporting are required, both of which the section on screening hits sets out in full.

Technology carries the process. Sanctions screening software keeps the sanctions data current and applies consistent matching logic, which is where the available systems differ most from one another. Analysts can then spend their time on the alerts that require investigation. Decisions and the information used to reach them should be documented and retained. Screening a name will not surface an entity that is blocked because of who owns it rather than because it is listed itself. OFAC Sanctions: An Overview sets out how that works under OFAC's 50 percent rule.

Which sanctions lists do you screen against?

You screen against the official lists published by governments and international bodies. Most programmes will need to cover several at once. The main ones are OFAC's lists in the United States, the EU consolidated list, the United Nations Security Council list and the UK Sanctions List published by the Foreign, Commonwealth and Development Office. Several countries publish their own national lists in addition to the regime they belong to. OFAC's sanctions lists and EU Sanctions set out what each one covers.

The UK list changed shape recently. Since 28 January 2026 it has been the only source for UK sanctions designations, after OFSI's Consolidated List of Asset Freeze Targets closed. That older list stays online for reference but is no longer updated. Entities subject to financial and investment restrictions under the Russia regime remain on a separate published list, so a firm exposed to those restrictions needs to take that list into account as well.

You may need to screen against more than one source because the same party can appear on several lists at once or on one list but not another. Those lists also change constantly, which is why a single snapshot is never enough.

What is global sanctions screening?

Global sanctions screening covers every regime your business is exposed to and not only the one you are incorporated in. A firm with customers, payment flows or correspondent banks in more than one country is usually exposed to several regimes at once. A payment processed through a US financial institution, for example, can bring US sanctions requirements into the transaction even where the originator and beneficiary are outside the United States. An entity incorporated under the law of an EU member state generally remains subject to EU sanctions when doing business outside the Union.

That means identifying the sanctions sources relevant to your exposure and keeping them current as they change. A party can appear on one jurisdiction's list and not another, and screening cannot identify a designation that is missing from the source data being checked. Sanctions Screening in Europe covers the European picture in detail. In practice a global programme will commonly cover the US, EU, UK and UN lists, with Swiss, Canadian, Australian and Japanese measures, or any other national or regional sanctions regimes relevant to where the business operates, transacts or has other jurisdictional exposure.

How do Russia sanctions affect screening?

Russia is where the pace of listing shows what a screening programme has to keep up with. Since February 2022 the US, EU and UK have added designations at a rate rarely seen before and had not stopped as of September 2026. These measures run across three autonomous regimes at once rather than through a UN one, so what applies to a firm is the national or EU measure. Some are prohibitions on imports, exports or investment rather than designations, which name screening alone will not surface. Because the lists change this often, a counterparty that was clear one week can be designated the next. Ongoing re-screening therefore carries particular weight in Russia-related business.

What happens if you get a sanctions screening hit?

A screening hit is not automatically a confirmed sanctions match. You first investigate the alert using the available identifiers to establish whether the person or entity you are dealing with is actually the listed or otherwise sanctioned party. If the match is confirmed, what happens next depends on the applicable sanctions regime and the restriction involved.

Under the US framework, what you do next depends on whether a sanctioned party has an interest in the property. Where a blocked party has an interest in property within the United States or within the possession or control of a US person, the property must be blocked. Blocking is not seizure: the owner keeps title, but the property cannot be transferred or otherwise dealt in without authorisation. Where the transaction is prohibited but there is no blockable interest, it must instead be rejected or not proceed. The distinction matters for how you handle the funds and what you report.

Why are there so many false positives?

Many sanctions alerts are not real matches. Because screening systems commonly use fuzzy matching to avoid missing a variant spelling, it also flags ordinary customers who happen to share a name or similar details with a listed person. A customer with a very common name may therefore generate several potential matches, none of which makes the person in front of you the sanctioned party. In most programmes a large share of alerts turn out to be these false positives, at a rate that depends heavily on how thresholds are set and how rich the underlying data is.

Confirmed matches, by contrast, are rare. For 2024/25 the UK Financial Conduct Authority reported that 70 percent of the firms filing financial crime returns (REP-CRIM) used automated screening and 81 percent ran repeat customer screening. Among those screening firms, 95 percent had not identified a true sanctions match for a client since 2022. For screened payments the figure was 98 percent. The challenge is to reduce that noise without making the matching so narrow that genuine matches are missed. Richer identifying data and well-tuned thresholds can help reduce false positives while preserving effective screening.

Best practices for sanctions screening

Good sanctions screening starts with a risk-based approach. You match the depth of screening to the risk of the customer, the product and the geography instead of treating every case the same.

OFAC's own compliance framework names five essential components, namely management commitment, risk assessment, internal controls, testing and auditing, plus training. Beyond that, tune your matching deliberately and test the result as your data and customer base evolve, document every alert and its resolution in your own records, and re-screen your existing customers when the lists change.

Screening the lists with dilisense

With dilisense you can search OFAC's SDN and consolidated lists, alongside EU, UN, UK and other sources, through a single API. The data updates hourly and every match is traceable to its origin.