Sanctions Screening
Process of checking customers, counterparties, and transactions against government sanctions lists to prevent prohibited activity.
Sanctions screening is the compliance process of checking individuals, entities, vessels, and transactions against government-maintained sanctions lists to prevent prohibited financial activity with designated parties. The primary U.S. sanctions authority is OFAC (Office of Foreign Assets Control, Treasury Department), which maintains the SDN (Specially Designated Nationals) list and various country programs. EU, UN, and UK sanctions regimes maintain parallel lists.
Sanctions programs fall into two categories: comprehensive country sanctions (broad restrictions on transactions with specific countries—Cuba, Iran, North Korea, Syria, Crimea) and targeted (list-based) sanctions (restrictions on specific named individuals, entities, and vessels regardless of nationality). Violations can result in civil penalties up to $1 million+ per violation and criminal prosecution.
Financial institutions, fintech companies, and any business involved in international transactions must implement sanctions screening programs. Screening occurs at multiple points: customer onboarding (KYC/CDD screening against SDN and other lists), transaction monitoring (screening payment parties in real-time), and periodic re-screening of existing customers as sanctions lists update.
Screening tools use fuzzy matching algorithms to catch name variations, transliterations, aliases, and misspellings that exact-match systems would miss. The SDN list includes thousands of aliases per entry for this reason. Hit rates produce 'alerts' that compliance teams must review—distinguishing true matches from false positives.
OFAC's 50% rule deems any entity owned 50% or more by a sanctioned party to itself be sanctioned, even if not on the SDN list. Compliance teams screen UBO (Ultimate Beneficial Ownership) data against sanctions lists to identify indirect exposures.
Sanctions programs expand and contract with geopolitical events—Russia sanctions following the 2022 invasion of Ukraine required massive compliance program updates across global financial institutions.
FAQs
What happens if a company accidentally processes a transaction involving a sanctioned party?
Accidental processing of sanctioned transactions requires prompt self-disclosure to OFAC. Companies that self-disclose, cooperate fully, and have strong compliance programs typically receive significantly reduced penalties. OFAC's enforcement guidelines distinguish between willful violations (maximum penalties) and egregious non-willful violations (significant but reduced penalties), with self-disclosed, non-egregious violations receiving the lowest treatment. The company must also block and freeze the associated funds, reject future transactions, and implement remedial compliance measures. OFAC expects companies to demonstrate the violation was an isolated failure of an otherwise robust program, not a systemic deficiency.
What is the OFAC 50% rule and why does it matter?
OFAC's 50% rule provides that an entity owned 50% or more in aggregate by one or more SDN-listed parties is itself treated as a blocked party, even if not explicitly named on the SDN list. This prevents sanctioned individuals from evading restrictions by placing assets in nominally clean corporate entities. The rule means compliance teams must screen not just direct parties but also their ultimate beneficial owners (UBOs) against the SDN list. If a customer's 60% shareholder is on the SDN list, the customer entity is effectively sanctioned regardless of whether the customer itself appears on any list—making UBO identification and verification a core component of sanctions compliance.
How often should companies re-screen existing customers against sanctions lists?
Companies should re-screen existing customers whenever sanctions lists are updated (OFAC and other agencies publish updates daily), upon any changes to customer information (name, address, ownership), when media monitoring identifies adverse news, and on a periodic basis (at minimum annually for standard-risk customers, more frequently for higher-risk). Real-time monitoring systems that automatically re-screen the entire customer database when OFAC publishes updates are best practice for financial institutions. The 2022 Russia sanctions, which added hundreds of previously unsanctioned parties in rapid succession, demonstrated the importance of near-real-time monitoring capabilities.
Related Terms
Beneficial Ownership
Identification of natural persons who ultimately own or control a legal entity above a defined ownership threshold.
CDD (Customer Due Diligence)
Process of verifying customer identity and assessing risk before and during a financial relationship.
SAR (Suspicious Activity Report)
Confidential report filed by financial institutions with FinCEN when they detect potentially illegal activity.
BSA (Bank Secrecy Act)
U.S. primary anti-money laundering law requiring financial institutions to assist in detecting and preventing financial crimes.
