Skip to main content
FinCrime Institute
Category: Sanctions Lists and Screening

Sanctions List

Also known as: Sanction List, Sanctions List Service (SLS)
Simply put

A sanctions list is an official register that identifies individuals, entities, vessels, or economic sectors that are subject to legal restrictions imposed by a government or international body. These restrictions can limit or prohibit dealings with the listed parties, such as trade, travel, or access to financial services. Businesses use these lists to check whether the people or organizations they deal with are subject to such restrictions.

Formal definition

A sanctions list is an official register maintained by a designating authority that identifies individuals, entities, vessels, or sectors subject to specific legal restrictions, which may include asset freezes and trade, financial, military, or travel prohibitions. Different countries and international organisations maintain their own lists; for example, OFAC (part of the US Treasury) publishes lists through its Sanctions List Service (SLS), and consolidated views aggregating designations across multiple jurisdictions also exist. Practitioners should note that a screening match against a sanctions list is an alert requiring investigation and, where appropriate, confirmation and action under the applicable regime, and does not by itself establish wrongdoing. The precise designating authorities, listing criteria, and legal effect of a listing vary by jurisdiction and should be confirmed against the applicable sanctions program.

Why it matters

Sanctions lists sit at the core of a firm's obligation to avoid dealing with parties subject to legal restrictions. Because designations may carry legal effects such as asset freezes and trade, financial, military, or travel prohibitions, obliged entities generally screen customers, counterparties, vessels, and transactions against the relevant lists to detect and manage exposure. Failing to identify a listed party can expose a firm to significant regulatory and, in some regimes, criminal consequences, so maintaining access to up-to-date list data is an operational necessity rather than a formality.

A critical point for practitioners is that a screening match is an alert requiring investigation, not proof of wrongdoing. Sanctions lists frequently contain limited identifying information, and common names or partial data matches can generate false positives that must be reviewed, resolved, and, where appropriate, confirmed and actioned under the applicable program. Treating an unconfirmed match as a conclusion of misconduct risks both unfair customer outcomes and gaps in the audit trail that regulators expect to see.

Because different governments and international organisations maintain their own lists with differing designating authorities, listing criteria, and legal effects, there is no single global sanctions list. A firm's screening scope should reflect the jurisdictions to which it is exposed. Consolidated views that aggregate designations across multiple jurisdictions can support broader coverage, but the legal effect of any given listing must still be assessed against the specific sanctions program that imposed it.

Who it's relevant to

Sanctions and Compliance Officers
Responsible for defining which lists a firm screens against based on its jurisdictional exposure, ensuring list data is kept current, and setting the policies and procedures that govern alert handling. They must be able to justify the scope of screening and confirm the legal effect of relevant designations against the applicable sanctions programs.
Financial Intelligence and Screening Analysts
Handle the day-to-day review of screening alerts generated by potential matches against sanctions lists. They investigate whether an alert reflects a true match or a false positive, document their conclusions, and escalate confirmed matches, treating each alert as requiring investigation rather than as evidence of wrongdoing.
Investigators
Use identifying details from sanctions list entries, including information on the restricted activities of listed parties, to support enhanced review and casework where a match may be relevant to a broader inquiry.
Legal and Risk Professionals
Advise on the legal effect of a listing under a given sanctions program and on the actions a firm must take when a match is confirmed. Because designating authorities and listing criteria differ across jurisdictions, they assess how divergent regimes apply to the firm's activities and confirm obligations against the applicable regulation.

Inside Sanctions List

Designated Persons and Entities
The named individuals, companies, organizations, and sometimes vessels or aircraft that a competent authority has identified as subject to restrictive measures. Entries typically include identifying details such as name variations, aliases, dates of birth, nationalities, and known addresses to support screening, though the completeness of such data varies by list.
Issuing Authority
The body responsible for maintaining the list, which differs by regime. Examples include the US Treasury's Office of Foreign Assets Control (OFAC) for the SDN List, the UK's Office of Financial Sanctions Implementation (OFSI) for the UK consolidated list, the EU consolidated list maintained under EU sanctions instruments, and the UN Security Council Consolidated List. Practitioners should confirm which lists apply to their operations and jurisdiction.
Legal Basis and Sanctions Program
Each entry is generally tied to a specific sanctions program or legal instrument (for example, counter-terrorism, non-proliferation, or country-based measures) that defines the prohibited activity. The applicable program determines the nature and extent of the restrictions imposed.
Nature of Restrictions
Lists may carry different consequences depending on the measure, such as asset freezes, prohibitions on making funds or economic resources available, or trade restrictions. The specific obligations attaching to a listing depend on the governing instrument rather than a single global standard.
Identifiers and Reference Data
Supporting data points used to match records against customers and transactions, which may include passport or identification numbers, registration numbers for entities, and program tags. The quality and granularity of identifiers affects screening accuracy and the rate of potential false positives.

Common questions

Answers to the questions practitioners most commonly ask about Sanctions List.

Is there a single global sanctions list that all firms must screen against?
No. There is no single, universal sanctions list. Different authorities maintain their own lists, such as the US Office of Foreign Assets Control (OFAC) lists (including the Specially Designated Nationals and Blocked Persons List), the UK's list maintained under the Office of Financial Sanctions Implementation (OFSI), the EU consolidated list, and lists reflecting United Nations Security Council designations. These lists overlap but are not identical, and a name or entity appearing on one does not mean it appears on all. Firms generally need to determine which sanctions regimes apply to them based on their jurisdiction, corporate structure, currencies, and counterparties, and screen against the relevant lists accordingly. Exact obligations should be confirmed against the applicable regulations.
Does a screening match against a sanctions list prove that a customer is a criminal or is engaged in wrongdoing?
No. A screening alert or potential match is an operational signal that a name, entity, or other identifier resembles an entry on a sanctions list; it is not a finding of wrongdoing. Many alerts are false positives arising from common names, incomplete data, or transliteration differences. A match must generally be reviewed and either discounted or confirmed as a true match before any action, such as blocking or rejecting a transaction, is taken. Sanctions designation itself is an administrative or regulatory measure rather than a criminal conviction, and the compliance meaning of a match should not be conflated with a criminal-law determination of guilt.
Which sanctions lists should our firm screen against?
The applicable lists generally depend on where the firm operates, its ownership and corporate structure, the currencies it transacts in, and the jurisdictions of its counterparties. Firms subject to US jurisdiction typically screen against OFAC lists, those in the UK against the OFSI consolidated list, and those in the EU against the EU consolidated list, while UN-designated entities are commonly incorporated across regimes. Many firms screen against multiple lists where more than one regime applies to their activity. Scope determinations should be documented and confirmed against the specific requirements of each applicable regime.
How often should sanctions lists be updated in our screening system?
Sanctions lists can change frequently, sometimes with little notice, so screening data generally needs to be refreshed promptly to remain effective. Many firms configure automated updates to ingest list changes as soon as they are published by the relevant authorities. The appropriate frequency typically reflects the firm's risk profile and transaction volumes, and firms should be able to demonstrate that their screening reflects current designations. Specific update expectations should be checked against applicable regulatory guidance.
What is the difference between sanctions screening and PEP screening?
Sanctions screening and PEP (politically exposed person) screening are distinct processes, though they are often performed within the same systems. Sanctions screening compares customers, counterparties, and transactions against lists of designated persons and entities subject to restrictive measures, where a true match typically triggers mandatory action such as blocking or reporting. PEP screening identifies individuals who hold or have held prominent public functions, and their associates, to inform a risk-based assessment that may lead to enhanced due diligence rather than an automatic prohibition. Being identified as a PEP is not itself a restriction and should not be treated as equivalent to a sanctions designation.
What should be done when a potential sanctions match is identified?
When a potential match is generated, it is generally reviewed to determine whether it is a false positive or a true match, based on available identifying information. Where a match cannot be discounted, firms typically escalate for further review and, if confirmed as a true match, take the action required under the applicable regime, which may include freezing or blocking, rejecting the transaction, and reporting to the relevant authority. Firms usually maintain records of the alert, the review, and the decision rationale. Because required actions and reporting channels differ by jurisdiction, the specific steps should be confirmed against the applicable sanctions regime and internal procedures.

Common misconceptions

A single global sanctions list exists that all firms must screen against.
There is no single universal list. Multiple authorities maintain distinct lists under their own legal frameworks, including OFAC, OFSI, the EU, and the UN, and these do not always align. Which lists an obliged entity must apply generally depends on its jurisdiction, corporate structure, and the nexus of its activities, and exact obligations should be confirmed against the applicable regime.
Sanctions screening and PEP screening are the same control.
They are distinct. Sanctions screening checks parties against lists of designated persons and entities subject to legal restrictions such as asset freezes. PEP screening identifies politically exposed persons to assess a risk factor that may warrant enhanced due diligence, but a PEP is not, by virtue of that status, subject to sanctions or presumed to have done anything wrong.
A name match against a sanctions list confirms that the person is a sanctioned party and establishes wrongdoing.
A screening alert typically indicates only a potential match that requires investigation and disposition. Matches can be false positives due to common names or incomplete data, and even a true match reflects a legal designation and its associated restrictions rather than proof of criminal conduct on the part of the customer being screened.

Best practices

Determine which sanctions lists apply to your organization based on its jurisdiction, ownership structure, and the geographic nexus of its activities, and document that scoping decision rather than assuming a single list suffices.
Screen against current, authoritative source data and establish a process to promptly ingest updates, since designations and delistings change over time and stale data can lead to missed matches or improper action.
Calibrate matching logic to balance detection against false positives, accounting for name variations, aliases, and transliterations, and periodically review and tune screening thresholds.
Maintain a clear alert investigation and escalation workflow that treats a match as a potential match requiring analysis and disposition, not as confirmation of wrongdoing, and document the rationale for each decision.
Distinguish sanctions screening from PEP screening in policies and procedures so that the different legal consequences and required responses are handled appropriately.
Keep auditable records of screening runs, alert dispositions, and the list versions used to demonstrate the reasonableness of controls to supervisors, while recognizing that screening mitigates but does not eliminate sanctions exposure.