Skip to main content
FinCrime Institute
Category: Sanctions Lists and Screening

Name Screening

Also known as: AML Name Screening, Watchlist Screening
Simply put

Name screening is a process where financial institutions compare the names of their customers (and sometimes related personal details) against various lists of people and entities associated with financial crime risk, such as sanctions lists and lists of politically exposed persons. The aim is to identify potential matches so the institution can investigate further and manage the associated risk. A match on its own is an alert to be reviewed, not proof that a customer has done anything wrong.

Formal definition

Name screening is a KYC/CDD control in which an obliged entity searches customer names, and frequently other identifying data, against reference datasets relevant to financial crime risk, typically including sanctions lists, politically exposed person (PEP) lists, other watchlists, and in some implementations adverse media. It is generally applied both at onboarding and on an ongoing basis, requiring continuous refinement to remain effective as list content and customer data change. Name screening should be distinguished from its component focuses: sanctions screening targets designated persons and entities subject to restrictive measures, while PEP screening targets individuals whose position may present heightened risk; these serve different purposes and should not be treated as interchangeable. Screening generates potential matches (alerts) that require disposition through review and, where appropriate, escalation; a match or alert does not itself establish wrongdoing, and the control detects and helps mitigate risk rather than guaranteeing prevention. Scope, list sources, and matching thresholds vary by institution and jurisdiction and should be configured against applicable regulatory expectations.

Why it matters

Name screening is one of the primary controls obliged entities use to identify customers and related parties who may present financial crime risk, including exposure to sanctions regimes and to politically exposed persons. Because sanctions obligations in many jurisdictions apply strictly, failing to detect a designated person or entity can expose an institution to significant regulatory and legal consequences. Screening therefore functions as a frontline mechanism for surfacing risk that would otherwise remain hidden within a customer base, allowing the institution to investigate and take appropriate action.

It is important to understand what name screening does and does not do. A screening match is an alert to be reviewed, not evidence that a customer has engaged in wrongdoing. The control detects and helps mitigate risk; it does not guarantee prevention, and its effectiveness depends heavily on the quality of the reference data, the customer data being screened, and the matching configuration. Poorly calibrated thresholds can generate excessive false positives that overwhelm review teams, or conversely can miss genuine matches, so screening must be treated as a process requiring ongoing tuning rather than a one-time check.

Name screening is best viewed as an ongoing process that requires continuous refinement to remain effective. List content changes as designations are added or removed, and customer data evolves over time, so a proactive and iterative approach is generally needed to keep screening aligned with applicable regulatory expectations. Institutions that treat screening as a static, set-and-forget control risk both compliance gaps and operational inefficiency.

Who it's relevant to

Compliance officers
Compliance officers are responsible for designing and maintaining name screening as part of the institution's KYC/CDD framework. They set the scope of screening, select list sources, calibrate matching thresholds, and ensure the process is applied at onboarding and on an ongoing basis. They also bear responsibility for demonstrating that the configuration aligns with applicable regulatory expectations, which vary by jurisdiction.
Financial intelligence analysts and alert reviewers
Analysts and reviewers handle the disposition of the potential matches, or alerts, that screening generates. Their role is to assess whether an alert represents a genuine match or a false positive, and to escalate where appropriate. They must work from the principle that a match is a trigger for review, not proof of wrongdoing.
Investigators
Investigators pick up escalated matches that require deeper examination, drawing on additional information to determine the nature and level of risk associated with a customer or related party. Screening outputs feed their work, but investigators must independently establish the facts rather than relying on the alert alone.
Risk and technology teams
Because name screening requires continuous refinement to remain effective, risk and technology teams support the ongoing tuning of matching logic, integration of reference datasets, and management of the balance between detection sensitivity and alert volume as list content and customer data change over time.

Inside Name Screening

Watchlist and Sanctions List Matching
The process of comparing customer, counterparty, or transaction party names against designated persons and entities on sanctions lists (such as those maintained by OFAC in the US, the UK's OFSI consolidated list, or the EU consolidated sanctions list). This is distinct from PEP screening and is typically driven by sanctions obligations that can carry strict-liability exposure in many jurisdictions.
PEP Screening
The identification of politically exposed persons, their family members, and known close associates against PEP data sources. PEP status is a risk indicator that generally triggers enhanced due diligence rather than prohibition, and it should be kept conceptually separate from sanctions screening.
Adverse Media Screening
Searching open-source and structured media data for negative news linking a name to financial crime, corruption, or other reputational or predicate-offence concerns. This is an intelligence and risk-assessment input and does not, by itself, establish wrongdoing.
Matching Logic and Fuzzy Algorithms
The technical rules used to detect matches despite spelling variations, transliteration differences, aliases, name ordering, and phonetic similarity. Configuration of match thresholds influences the balance between false positives and potential false negatives.
Alert Generation and Disposition
The workflow by which potential matches are surfaced as alerts, reviewed by analysts, and cleared as false positives or escalated as true or possible matches. A generated alert or match is an operational trigger for review and does not constitute proof of a relationship to a listed party or of criminal conduct.
Screening Timing and Frequency
The points at which screening occurs, typically at onboarding, on an ongoing periodic basis, and upon list updates or event-driven triggers, so that changes in list content or customer data are captured over time.
Data Quality and Reference Data
The completeness and accuracy of both the names being screened and the underlying list data, including secondary identifiers such as date of birth, nationality, or address that help confirm or discount a candidate match.

Common questions

Answers to the questions practitioners most commonly ask about Name Screening.

Does a name screening match mean the customer is a criminal or a sanctioned party?
No. A screening match is an indication that a name (or other data element) resembles an entry on a list being screened against; it is not proof of identity or wrongdoing. Matches are frequently false positives caused by common names, transliteration variations, or incomplete data. Each alert generally requires review and disposition to determine whether it is a true match, and even a confirmed match to a list is a compliance and risk trigger rather than a criminal-law finding. Establishing actual wrongdoing is a separate matter handled through investigation and, where relevant, law enforcement or regulatory processes.
Is name screening the same thing as PEP screening or sanctions screening?
Not exactly. Name screening is the broader technique of matching customer or transaction party names against reference data. Sanctions screening and PEP screening are specific applications of that technique against different types of lists with different purposes and consequences. Sanctions screening supports compliance with applicable restrictive-measures regimes and can carry strict obligations, while PEP screening is a risk-classification measure that typically informs whether enhanced due diligence may be warranted. Treating a PEP match as equivalent to a sanctions hit, or vice versa, can lead to inappropriate handling. The applicable obligations and lists differ by jurisdiction and should be confirmed against the relevant regime.
How often should name screening be performed on the customer base?
Practice generally distinguishes between screening at onboarding, ongoing or periodic re-screening of the existing customer base, and event-driven re-screening triggered by list updates or changes to customer information. Many programs re-screen the customer base when relevant lists are updated so that newly added entries are captured, and the appropriate frequency is typically informed by a firm's risk assessment and the applicable regulatory expectations. Exact requirements vary by jurisdiction and by the type of obliged entity, so specific frequency expectations should be confirmed against the applicable rules and internal policy.
How should fuzzy matching thresholds be calibrated to manage false positives?
Fuzzy or approximate matching is used because exact-match logic can miss legitimate hits caused by spelling variants, transliteration, or word order. Calibration involves balancing sensitivity, which raises the likelihood of catching true matches, against specificity, which reduces the volume of false positives that must be reviewed. Setting thresholds too loosely can overwhelm review capacity, while setting them too tightly can cause genuine matches to be missed. Threshold settings are generally treated as risk-based decisions that should be documented, justified, and periodically tested rather than fixed universally, and the appropriate configuration depends on data quality, list characteristics, and risk appetite.
What data quality issues most affect name screening effectiveness?
Screening quality depends heavily on the quality of both the input data and the reference data. Common issues include incomplete customer records, inconsistent formatting, transliteration and character-set differences, use of aliases or abbreviated names, and missing secondary identifiers such as dates of birth or nationality that could help distinguish individuals. Poor input data can produce both missed matches and excessive false positives. Addressing these issues typically involves data standardization, enrichment with additional identifying attributes where available, and using secondary data points to support alert disposition. Reference-data currency and coverage also affect results.
How should screening alerts be documented and dispositioned?
Alerts are generally reviewed against available identifying information to determine whether they are true matches, potential matches requiring further inquiry, or false positives, with the rationale for each decision recorded. Documentation typically supports auditability, allows for consistent treatment, and enables model or process testing over time. Where a match cannot be discounted, escalation and further steps may follow depending on the list type and applicable obligations, which can differ significantly between sanctions and other lists. The specific record-keeping, escalation, and any reporting obligations vary by jurisdiction and should be confirmed against the applicable regulation and internal procedures.

Common misconceptions

Name screening and sanctions screening are the same thing.
Name screening is a broader operational capability that can be applied to sanctions lists, PEP data, and adverse media. Sanctions screening is one application of it, and sanctions obligations differ in nature and legal consequence from PEP or adverse media screening, which are generally risk indicators rather than prohibitions.
A screening match confirms that the customer is a sanctioned person or a criminal.
A match is a candidate result requiring analyst review to confirm or dismiss. Because of name similarities, aliases, and limited identifiers, many matches are false positives. A match does not by itself establish identity, wrongdoing, or a reporting obligation, and it must be assessed against the applicable regulatory framework.
Screening a name once at onboarding is sufficient.
Lists and customer circumstances change over time, so screening is typically expected to be ongoing and responsive to list updates and event-driven triggers. Point-in-time screening alone may miss designations added after onboarding; exact frequency expectations should be confirmed against the applicable regulation and supervisory guidance.

Best practices

Configure and periodically test matching thresholds and fuzzy-matching logic to manage the trade-off between excessive false positives and the risk of missed matches, documenting the rationale for chosen settings.
Enrich screening with secondary identifiers such as date of birth, nationality, or address where available to support faster and more defensible alert disposition.
Maintain clearly separated workflows and criteria for sanctions matches, PEP hits, and adverse media results, reflecting that they carry different regulatory consequences and response expectations.
Ensure list and reference data are sourced from the lists relevant to the entity's jurisdictional obligations and are updated promptly, with rescreening triggered on material list changes.
Document alert disposition decisions with clear reasoning and audit trails so that cleared and escalated alerts can be reviewed by compliance and supervisors.
Validate the completeness and accuracy of the input data being screened, recognising that poor data quality can undermine even well-configured screening controls, and treat screening as a measure to detect and manage risk rather than a guarantee of prevention.