What Is a Sanctions Screening Programme?

Sanctions compliance is distinct from Anti-Money Laundering compliance, though the two operate in parallel and share infrastructure. AML controls are designed to detect and report suspicious activity — they are risk-based and require judgement. Sanctions controls are binary: a firm either does or does not have a relationship with a sanctioned party, and the answer determines whether the transaction can proceed at all. There is no risk-based discretion when a customer appears on the OFAC Specially Designated Nationals (SDN) list.

This creates a different operational challenge. Sanctions screening must be both comprehensive — covering every customer, every beneficial owner, and every payment counterparty — and accurate, since excessive false positives on common names create delays that damage customer experience and operational efficiency. Both failures carry consequences: false negatives create legal exposure, and unmanageable false positive rates signal a screening programme that is not fit for purpose.

This guide explains what sanctions are, which lists firms must screen against, how a sanctions screening programme is structured, and what the regulatory expectations are for firms operating across multiple jurisdictions.

1. What Are Financial Sanctions?

Financial sanctions create direct legal obligations for regulated firms. A bank that processes a payment for a sanctioned individual has committed a sanctions violation — regardless of whether it knew the individual was sanctioned at the time of the transaction. This strict liability principle is what makes sanctions screening a non-negotiable compliance requirement rather than a risk management option.

2. The Major Sanctions Regimes Firms Must Screen Against

Financial institutions and regulated firms operating internationally must screen against multiple sanctions regimes simultaneously. The lists are maintained by different authorities, updated at different frequencies, and can include different categories of designations. A firm that screens only against one regime while being subject to another is not compliant.

3. What Must Be Screened — and When

The scope of sanctions screening extends beyond simply checking a customer's name at onboarding. A complete sanctions screening programme covers multiple screening points and multiple subject types.

Who Must Be Screened

• Customers — individual and corporate clients at onboarding and throughout the relationship.
• Beneficial owners and UBOs — ownership chains of corporate customers must be traced to their ultimate beneficial owners, each of whom must be screened individually. A company that is not itself sanctioned may be majority-owned by a sanctioned individual — processing transactions for that company constitutes indirect sanctions exposure.
• Payment counterparties — the originator and beneficiary of every payment must be screened, not just the direct customer. This is particularly relevant for correspondent banking and cross-border wire transfers.
• Directors and authorised signatories — individuals with authority over a corporate account must be screened regardless of their ownership stake.
• Investors — for investment managers and fund managers, every investor in a fund must be screened at subscription and on an ongoing basis.

When Screening Must Occur

• At onboarding — before any business relationship is established or transaction processed.
• At transaction — payment screening checks each transaction in real time or near-real time against current sanctions lists before the payment is executed.
• On list updates — when a sanctions authority adds new designations, the entire customer base must be re-screened against the updated list. A customer who was clean at onboarding last month may now be designated. Firms that only screen at onboarding and never re-screen are carrying unquantified ongoing sanctions exposure.
• On customer change events — ownership changes, director appointments, or address changes may alter the sanctions risk profile of an existing customer relationship.

4. Sanctions Screening vs. AML Screening — Key Differences

In practice, sanctions screening and PEP screening are typically run through the same screening infrastructure — checking a customer's name against a combined dataset of sanctions lists, PEP databases, and adverse media sources in a single workflow. The distinction matters for how matches are handled: a sanctions hit requires immediate blocking action; a PEP match requires EDD. Conflating the two response workflows is a compliance failure in its own right.

5. The False Positive Problem in Sanctions Screening

Sanctions screening generates a significant volume of false positives — alerts on customers or transactions that share a name or partial identifier with a sanctioned party but are, on investigation, entirely unconnected. Common names, name variations across transliteration systems, and the breadth of certain sanctions programmes combine to create alert volumes that, in a manual screening environment, consume enormous compliance resource.

The consequences of poorly managed false positives are not merely operational. Correspondent banks and payment processors that cannot demonstrate a systematic, well-documented false positive management process face scrutiny from regulators and correspondent banking partners who view undifferentiated alert floods as evidence of an inadequate screening programme rather than a thorough one.

Effective sanctions screening systems address the false positive problem through several mechanisms: fuzzy matching calibrated to the sensitivity required by each sanctions regime, secondary identifier matching (date of birth, nationality, address, entity registration number) to disambiguate name matches, and risk-based alert prioritisation that allows analysts to focus on high-probability matches rather than processing the entire alert queue sequentially.

6. Sectoral Sanctions and the Ownership Rule

Individual name-based screening is only part of the sanctions compliance challenge. Sectoral sanctions — particularly those applied to Russia — restrict dealings with specific sectors of a country's economy, or with entities that are majority-owned or controlled by sanctioned persons even if the entity itself is not directly listed.

7. How One Constellation's Sanctions Screening Works

One Constellation's PEP and sanctions screening platform provides regulated firms with a single screening workflow covering sanctions lists, PEP databases, and adverse media — at onboarding, at transaction, and on a continuous basis throughout the customer relationship.

Key capabilities include:

• Multi-list coverage — simultaneous screening against OFAC SDN, OFSI UK Consolidated List, EU Consolidated List, UN Security Council list, and other jurisdiction-specific lists in a single check.
• Real-time list refresh — sanctions lists are updated continuously, ensuring customer and payment screening always runs against the most current designations.
• Payment screening — screen payment originators and beneficiaries in real time before transaction execution, with configurable block/review/pass logic.
• Beneficial ownership screening — trace UBO chains and screen every identified beneficial owner individually, applying the OFAC 50% rule and OFSI ownership test automatically.
• Calibrated fuzzy matching — reduce false positives without creating coverage gaps through configurable matching thresholds and secondary identifier disambiguation.
• Automated re-screening on list updates — when a new designation is added to any monitored list, the platform automatically re-screens the relevant customer segments and surfaces any new matches for review.
• Full audit trail — every screening result, match decision, and escalation is documented in a structured, regulator-ready audit trail.