Sanctions & PEP Screening: A Practical Primer

Screening is where compliance meets the real world of names, aliases and incomplete data. Done well, it protects your firm; done poorly, it buries your team in false positives.

Two obligations, often confused

Sanctions screening and PEP screening are related but distinct. Sanctions obligations are an absolute prohibition: it is an offence to deal with the assets of, or provide assets to, a designated person or entity. PEP status, by contrast, is a risk factor under your customer due diligence obligations, it is not prohibited, but it usually calls for a higher level of scrutiny.

Which sanctions lists to screen

Australia’s baseline is the DFAT Consolidated List, which brings together United Nations Security Council sanctions and Australia’s autonomous sanctions, administered by the Australian Sanctions Office. Firms with international clients or cross border exposure commonly screen additional regimes as well, such as the US (OFAC) lists, the EU consolidated list and the UK (OFSI/HM Treasury) list, to manage correspondent and counterparty risk.

Understanding PEPs

A politically exposed person holds, or has held, a prominent public position. PEPs are generally grouped as:

• Foreign PEPs, treated as inherently high risk, requiring enhanced due diligence, senior management approval to proceed, and steps to establish source of wealth and source of funds;
• Domestic PEPs and international organisation PEPs, assessed on a risk sensitive basis; and
• Family members and close associates, who can carry the same exposure as the PEP themselves.

Why fuzzy matching matters

Exact match screening fails in practice because real world data is messy: names are transliterated differently, dates of birth are missing, and aliases abound. Fuzzy matching scores how closely a customer resembles a listed person across name variants, spelling and other identifiers, so that genuine near matches are not missed. The trade off is volume, looser matching catches more, but generates more alerts to review.

Managing alerts and false positives

A workable screening process gives each alert a clear path: triage, review against additional identifiers, escalate genuine concerns, and record a reasoned decision to clear or act. Using extra data points (date of birth, country, identifiers) to discount obvious mismatches is the single biggest lever for reducing false positive workload, without weakening your controls.

Screening is not a one off

Sanctions lists change frequently, and a customer who was clear at onboarding may be listed later. That is why screening must be repeated, on a schedule and whenever lists are updated, as part of ongoing due diligence, not just at onboarding.