Operations
8 August 2026·
5 min
What is Sanctions Screening?
Sanctions screening is more than just looking up a name on a list. Using up-to-date data, Fuzzy Matching, additional identity fields, ongoing monitoring, and structured case management are essential parts of the process.\n\nTruvali combines global and internal lists, PEP and Adverse Media checks, with a Fuzzy Matching and ongoing monitoring framework. By routing potential matches into alert and case workflows, it helps compliance teams make decisions with clearer justifications and a more structured workflow.
What is Sanctions Screening?\nWhat happens when a customer opens an account and the name they provide matches a name on an official sanctions list? Is the transaction immediately rejected, is the customer deemed high-risk, or is a more detailed investigation initiated?\n\nSanctions screening is the process of comparing customer, company, and counterparty information against national and international sanctions lists. The goal is to detect potential matches with sanctioned individuals, entities, organizations, vessels, or other records as early as possible.\n\nThis process does not only run during customer onboarding. Senders and beneficiaries in money transfers, corporate partners, UBO information, and the existing customer portfolio can also be rescanned at regular intervals.\n\nThe primary role of sanctions screening is not simply to say \"the name is similar, stop the transaction.\" The system flags a potential match; whether the match is genuine is then evaluated using other identity information and the institution's review process.\n\n## Why is Sanctions Screening Necessary?\nSanctions lists are not static. New individuals and companies can be added, existing records can be updated, or entries can be removed.\n\nOFAC publishes the SDN and other sanctions lists in an up-to-date format. OFAC’s own search system also uses fuzzy logic in the name field to capture spelling variations.\n\nThe United Nations Security Council publishes its list of individuals and entities subject to sanctions measures via the Consolidated List. In addition to names, these records may contain alternative spellings, previous names, addresses, and other information that helps distinguish identity.\n\nIn the UK, sanctions targets are tracked via the UK Sanctions List. The list can cover individuals, as well as companies, organizations, and, in certain types of sanctions, vessels.\n\nTherefore, just because a customer does not generate a match during the initial check does not mean they will not match in the future.\n\n## How Does Sanctions Screening Work?\nThe process generally progresses in four stages.\n\n### 1. Information to be screened is collected\n\nScreening is not performed on first and last names alone. Depending on the available data, the following information can be used:\n\n- First and last name\n- Date of birth\n- Place of birth\n- Nationality\n- Passport or ID number\n- Address\n- Company name\n- Trade registry information\n- Aliases and previous names\n- UBO and corporate partners\n\nFor example, finding a record similar to the name \"Anthony Black\" is not enough on its own. If fields such as date of birth, country, passport information, and address are different, the match may be a false positive.\n\n### 2. Data is compared against sanctions lists\n\nCustomer or counterparty information is compared against the official sanctions sources tracked by the institution and, if applicable, its own internal lists.\n\nThe same name can appear in different languages or with different spellings:\n\n- Muhammed\n- Mohammad\n- Mohamed\n- Muhammet\n\nA system based on exact matching may miss some of these variations. For this reason, sanctions screening systems typically utilize Fuzzy Matching.\n\nFuzzy Matching evaluates character, phonetic, and spelling similarities to generate potential matches even for names that are not identical. However, if the match tolerance is set too high, it can result in a large number of false positives.\n\n### 3. Match score and justification are generated\n\nWhen the system finds a similar record, it should not just return a generic \"matched\" result. The review team needs to be able to see the following information:\n\n- Which list did it match?\n- Which fields are similar?\n- What is the name similarity ratio?\n- Does the date of birth match?\n- Is the nationality or address the same?\n- Did it match via an alias?\n- Which sanctions regime does the record belong to?\n- When was it updated in the list?\n\nThis information makes it easier to distinguish between a genuine match and a mere name similarity.\n\n### 4. Results are routed to the review process\n\nFinding a potential match does not automatically mean the individual is a sanctioned person.\n\nDepending on the institution's policy, the result can be:\n\n- Sent for manual review\n- Requested for additional information or documentation\n- Placed on hold\n- Opened as a case\n- Escalated to the relevant compliance team\n- Closed with a justification of no match\n\nThe final action is determined based on the regulations the institution is subject to, the nature of the match, and its own risk policy.\n\n## Are Sanctions Screening and PEP Screening the Same Thing?\n\nNo.\n\nSanctions Screening focuses on identifying individuals and entities on sanctions lists.\n\nPEP Screening is used to identify politically exposed persons, their immediate family members, and close associates.\n\nA person being a PEP does not mean they are sanctioned or have committed a crime. However, due to their role and connections, a more detailed risk assessment or ongoing monitoring may be required.\n\nAdverse Media Screening scans for negative news about an individual or company in reliable open sources.\n\nIn short:\n\n- Sanctions Screening: Official sanctions records\n- PEP Screening: Political exposure and close relationships\n- Adverse Media Screening: Negative news and open-source information\n\nThese checks can be used together, but their results must be evaluated separately.\n\n## Why is Ongoing Monitoring Important?\n\nIf sanctions screening is only performed during customer onboarding, it creates a significant gap.\n\nAn individual who is not on any list today may be added later due to a new sanctions decision. If the institution does not rescreen its existing customers, it may fail to notice this change.\n\nOngoing monitoring is the periodic rescreening of the customer base against updated lists.\n\nIn this process:\n\n- New list entries are checked\n- Changes to existing records are captured\n- New alias information is evaluated\n- Removed entries are tracked\n- Changes in customer or company information are rescreened\n\n## Why Do False Positives Occur in Sanctions Screening?\n\nHaving the same or similar names across different individuals is one of the most common causes of false positives.\n\nFor example, a customer may share the same name as a sanctioned individual on a list, but:\n\n- Their dates of birth are different\n- Their nationalities do not match\n- Their addresses are different\n- Their passport details do not match\n- The record belongs to a different person or entity\n\nIf the system only performs name checks, the review team may receive a high volume of unnecessary alerts.\n\nTo reduce false positives, other available identity fields should be used alongside name similarity. However, setting the match threshold too narrow can also lead to missing genuine connections.\n\nThe goal here is not to generate the maximum number of alerts, but to highlight matches worth investigating with accurate justifications.\n\n## How Does Truvali Add Value to the Sanctions Screening Process?\n\nTruvali's approach to sanctions screening goes beyond simply comparing names against a single list.\n\n### Evaluates spelling variations with Fuzzy Matching\n\nRecords that do not match exactly due to character and phonetic differences in names can still be checked. This reduces matching risks arising from different alphabets, spellings, and transliterations.\n\n### Consolidates official and custom lists in a single framework\n\nIn addition to global sanctions sources, the institution's own blacklists, PEP, Adverse Media, or internal watchlists can be integrated into the screening process.\n\n### Rescreens existing customers with Ongoing Monitoring\n\nIndividuals who did not generate a match during onboarding can be rechecked when lists are updated. This ensures that screening is not a one-time transaction limited to the onboarding phase.\n\n### Links Adverse Media results to risk assessment\n\nTruvali supports adding results from open-source and news screening to internal lists alongside official lists. This allows institutions to create custom watchlists tailored to their own risk policies.\n\n### Routes matches to the case workflow\n\nPotential matches are not just displayed on a screen. By generating alerts or cases, the investigation, justification, documentation, and decision steps can be fully recorded.\n\nThis structure enables compliance teams to conduct a structured review process rather than just seeing a \"name matched\" notification.\n\n## Frequently Asked Questions\n\n### Is sanctions screening only performed during customer onboarding?\n\nNo. It can be used during onboarding, at the time of transaction, or for periodic rescreening of the existing customer portfolio.\n\n### Is a name similarity on a sanctions list sufficient to stop a transaction?\n\nNot always. Name similarity must be evaluated alongside other identity information. The final action is determined based on the institution's risk policy and relevant regulatory obligations.\n\n### What is Fuzzy Matching?\n\nFuzzy Matching is a matching method used to find names that are similar but not identical. It enables the evaluation of spelling errors, different alphabets, and name variations.\n\n### Are Sanctions Screening and Adverse Media Screening the same?\n\nNo. Sanctions Screening reviews official sanctions lists, while Adverse Media Screening analyzes negative news and open sources published about an individual or company.
Related
Operations
11 Aug 2026·
6 min
What is the Risk-Based Approach?
The core logic of the Risk-Based Approach is not to apply the same control to everyone, but to direct more attention and resources to high-risk areas.
A robust risk assessment evaluates the customer profile, transaction behavior, device, IP, location, counterparty, and historical activity together. As the risk changes, the level of control and investigation applied is shaped accordingly.
Truvali supports the implementation of this approach in operational processes through its Real-Time Risk Scoring, Event Score Engine, Dynamic Rule & Scenario Engine, Cross-Entity Checking, and Case Managemen
Operations
8 Aug 2026·
6 min
How Does the Event Score Engine Work?
The Event Score Engine is not a simple control mechanism that evaluates transactions solely based on amount. It analyzes financial movements, user behavior, device, and network data within the same context.
Truvali combines this evaluation with Rule Engine, custom time window, Cross-Entity Checking, Rule Sandbox, alert, case, and Callback processes. Consequently, the risk score does not remain just a number on a screen; it transforms into decision support that can be utilized in the institution's actual operations.
Operations
8 Aug 2026·
6 min
What is Real-Time Transaction Monitoring and How Does It Work?
Monitoring financial transactions in real time is no longer a "luxury"—it is a fundamental requirement for survival in the digital ecosystem. However, a good infrastructure must do more than just run fast; it needs to clearly explain why it triggered an alert, offer flexible rule management, and simplify the operations team's workload.
By unifying transaction data, behavioral signals, and practical case management under a single roof, stopping risks before they escalate becomes far easier.