Why sanctions screening matters
The US Treasury's Office of Foreign Assets Control (OFAC) maintains the Specially Designated Nationals (SDN) list and a series of sectoral and jurisdiction-based sanctions programs. Doing business with anyone on those lists is a strict-liability violation — intent doesn't matter. Penalties run into the hundreds of millions of dollars for large banks.
Add UN, EU, UK, and country-specific programs (e.g., HMT in the UK), plus FATF-driven AML watchlists, and you get a dense web that every regulated financial firm must screen against at onboarding and on an ongoing basis.
When screening runs
- Onboarding — at the KYC/KYB step, before the account is funded
- Rescreen — daily or as lists update, against the existing customer base
- Transaction-level — for cross-border payments, against the parties and the route
- Beneficial owners — every controlling individual gets screened, not just the entity
Common pitfalls
- Tuning for zero false positives. That's not a screening program; that's a rubber stamp.
- Tuning for zero false negatives without ops capacity. A flood of alerts your team can't clear is its own compliance failure.
- Underestimating fuzzy matching. Names transliterate; addresses move; programs evolve. Vendors matter.
Sanctions screening is one of the few compliance areas where automation isn't optional — the lists are too large and update too often.