Sanction screening is the process of checking individuals, entities, and financial transactions against government-issued sanctions lists to identify and prevent business relationships with prohibited parties.  

Screening takes place during customer onboarding, transaction processing, and ongoing monitoring to ensure compliance with sanctions regimes, including those issued by OFAC, EU, UN, and HMT. Financial institutions, regulated entities, and any organisation conducting international transactions must perform sanction screening. Failure to comply can result in severe financial penalties. 

Why sanction screening matters 

Sanction screening serves as a critical defence mechanism in the global fight against financial crime. It prevents financial institutions and regulated organisations from doing business with sanctioned individuals, entities, or countries involved in terrorism, money laundering, human rights violations, or other illicit activities. 

Beyond being a legal obligation under AML (Anti-Money Laundering) and CFT (Combating the Financing of Terrorism) regulations, effective sanction screening protects institutions from severe regulatory penalties, reputational damage, and loss of correspondent banking relationships. Failed screening processes can enable terrorism financing and money laundering schemes, undermining business and global financial stability. 

Sanction screening also supports broader international security and foreign policy objectives by enforcing economic pressure on hostile regimes, terrorist organisations, and individuals who threaten peace and security. For compliance teams conducting CDD (Customer Due Diligence), sanction screening provides essential risk intelligence and creates an audit trail for regulatory adherence. 

Types of sanctions lists 

Effective sanction screening requires checking against multiple sanctions lists maintained by international organisations and national governments. These lists are consistently updated to reflect evolving geopolitical threats and compliance requirements. Here are the most critical ones. 

UN Security Council Sanctions List 

UN Security Council sanctions lists represent the global baseline. These target individuals and entities involved in terrorism, nuclear proliferation, and threats to international peace. All 193 UN member states are legally obligated to enforce these sanctions under the UN Charter.  

EU Consolidated Sanctions List 

The EU Consolidated Sanctions List enforces restrictive measures across all 27 EU member states, including asset freezes, trade restrictions, and travel bans. The block maintains over 40 active sanctions programmes targeting human rights violations, terrorism, and threats to territorial integrity. 

OFAC Specially Designated Nationals (SDN) List 

Another critical list is created by the OFAC (Office of Foreign Assets Control) in the US. OFAC administers U.S. sanctions, but because of the interconnected nature of the US banking system, the list carries global reach. OFAC's Specially Designated Nationals (SDN) List contains over 12,000 entries and carries significant enforcement power. Any transaction touching the U.S. financial system or involving USD falls under OFAC jurisdiction, even for non-U.S. entities. This makes OFAC compliance critical for any organisation engaged in international finance. 

UK Sanctions List 

Individual countries also maintain their own sanctions regimes that can move faster and target more specifically than international lists. The UK Sanctions List became increasingly independent post-Brexit, particularly in response to Russia's invasion of Ukraine, where the UK sanctioned individuals and entities within days.  

How sanction screening works 

Sanction screening operates through a multi-layered process that combines automated technology with human expertise to identify prohibited parties while minimising disruption to legitimate business.  

Sanction screening begins during onboarding as part of KYC (Know Your Customer) and CDD (Customer Due Diligence) processes. Customer data (including names, dates of birth, addresses, and identification numbers) is matched against multiple sanctions lists using automated systems. These systems flag potential matches based on data point similarities, generating alerts for compliance review.  

When alerts are generated, human review is generally the next step. Compliance analysts manually review each flagged case, comparing the customer's detailed information against biographical data, adverse media reports, and other intelligence sources. 

If analysts confirm a true sanctions match, the institution must immediately block the transaction or freeze the account and report the match to the sanctions authority that issued the list. For false positives, analysts need to document their reasoning for clearing the alert, creating a comprehensive audit trail that demonstrates due diligence to regulators. This combination of automated screening and expert human review ensures that genuine threats are identified while legitimate customers can proceed without unnecessary delays. 

But sanctions screening doesn't stop at onboarding. Organisations need to conduct continuous screening of existing customers through daily re-screening against updated sanctions lists and real-time transaction screening to catch prohibited payments before processing. And given that sanctions lists are updated multiple times per week, organisations may also need to periodically conduct bulk re-screenings.  

The cost of non-compliance 

The financial and reputational consequences of sanctions screening failures are severe and growing. Enforcement actions have intensified significantly, with 2023 marking the highest aggregate penalty total in OFAC's history: over $1.5 billion across 17 enforcement actions, representing a 36-fold increase from the previous year.  

Beyond direct financial penalties, sanctions violations may trigger a loss of banking relationships, restrictions on USD clearing privileges, personal liability for compliance officers, and permanent reputational damage that affects customer trust and shareholder value. Regulatory authorities increasingly pursue criminal charges against institutions and individuals, not just civil penalties.  

Sanction screening with Fourthline 

With so much at stake, maintaining a comprehensive audit trail of all screening decisions and robust AML monitoring is essential for demonstrating due diligence to regulators and mitigating penalties in enforcement actions.  

Fourthline's platform ensure continuous compliance with sanctions-screening requirements from customer onboarding through the entire customer relationship. Our platform performs real-time screening against comprehensive sanctions lists — including OFAC, EU, UN, and HM Treasury designations, alongside PEP databases and adverse media sources — integrated directly into our identity verification, AML, and fraud detection workflows. All screening results flow into comprehensive CDD reports that provide a complete audit trail for regulatory examination, covering identity verification, document authentication, biometric matching, and AML monitoring.  

Learn more about Fourthline’s AML screening and compliance solutions here.  

FAQs 

What's the difference between sanction screening and PEP screening? 

Sanction screening checks whether a customer appears on prohibited sanctions lists (meaning you cannot do business with them). PEP (Politically Exposed Person) screening identifies individuals in prominent public positions. While these individuals can be onboarded, they require enhanced due diligence and monitoring. 

How often should financial institutions perform sanction screening? 

Sanction screening should occur at multiple touchpoints: during initial customer onboarding (KYC), continuously throughout the customer relationship as sanctions lists are updated (often daily), and in real-time for transactions. Many institutions use automated systems that screen against updated lists daily (or even hourly) to ensure compliance. 

What happens if a customer matches a sanctions list? 

If a customer matches a sanctions list, the institution must immediately halt the transaction or account opening and conduct a thorough investigation. For true positive matches, the institution must block the transaction, freeze any assets, and report the match to the relevant regulatory authority (such as OFAC in the US or national financial intelligence units in the EU). False positive matches require documentation explaining why the match was dismissed. 

Can sanctions screening be fully automated? 

Whilst automated screening technology significantly improves efficiency and accuracy, human oversight remains essential. Automated systems flag potential matches, but compliance teams must review matches to distinguish false positives from true hits, especially given common names, spelling variations, and transliteration issues. Modern AI and machine learning reduce false positives but cannot eliminate the need for human judgment entirely.