Sanctions Screening Software: OFAC, UN & EU Lists

Technical Guide · March 2026

A comprehensive reference for compliance professionals navigating today’s complex sanctions landscape.

Sanctions screening is a critical compliance obligation for any organisation operating in the global financial system. Governments and international bodies maintain lists of individuals, entities, and organisations subject to economic restrictions—and dealing with these parties can result in severe civil and criminal penalties.

In 2026, the sanctions landscape has never been more complex. Geopolitical tensions have driven unprecedented designations, while the proliferation of global programmes means organisations may screen against dozens of lists simultaneously.

⚠ Important

The legal obligation to comply with sanctions applies regardless of intent. Even inadvertent dealings with a sanctioned party can result in significant penalties.

What is Sanctions Screening?

Sanctions screening is the process of checking individuals, entities, and transactions against sanctions lists to ensure compliance with applicable restrictions. Unlike AML compliance—which focuses on detecting criminal proceeds—sanctions compliance is specifically about preventing direct dealings with designated parties.

Sanctions can take several forms:

Asset Freezes

Preventing access to funds and economic resources

Travel Bans

Restricting entry or transit across borders

Trade Restrictions

Prohibiting specific exports or imports

Sectoral Sanctions

Targeting specific industries or economic activities

Major Sanctions Regimes

Organisations operating internationally must understand the key bodies that issue and maintain sanctions lists.

Regime	Body	Key List	Scope
United States	OFAC	SDN List	US persons, USD transactions, US jurisdiction
United Nations	UN Security Council	UNSC Resolutions	All member states obligated to implement
European Union	EU Council	Consolidated List	All EU member states
United Kingdom	OFSI / DBT	UK Sanctions List	UK persons and entities post-Brexit
Other Jurisdictions	DFAT, MAS, METI, etc.	Varies	Australia, Canada, Singapore, Japan & others

💡 Tip

Organisations operating across multiple jurisdictions should map their applicable sanctions regimes as a first step—different programmes may apply simultaneously depending on your customers, transactions, and currencies.

The Sanctions Screening Process

Customer Onboarding

Sanctions screening should occur at the outset of any customer relationship, following this structured process:

Collect Identifying Information

Name, date of birth, nationality, addresses, and identification numbers

Screen Against Applicable Lists

Check against OFAC, UN, EU, UK, and any other relevant sanctions lists

Resolve Potential Matches

Investigate any hits to determine true matches versus false positives

Document Outcomes

Record all screening results and any actions taken for audit purposes

Ongoing Monitoring

Sanctions status is not static. Individuals and entities are added to and removed from lists continuously. Effective programmes require real-time screening of new transactions, periodic reviews of existing customers, and prompt investigation of any alerts generated.

Transaction Screening

Beyond customer screening, organisations should screen transactions themselves—particularly payment details, counterparty information in trade transactions, and any references to sanctioned countries or entities.

Sanctions Screening Technology

Matching Algorithms

Exact matching identifies direct name matches, but sanctioned parties often use spelling variations, transliterations, or aliases. Fuzzy matching accounts for typographical variation, phonetic similarity, and name order differences.

⚠ Calibration matters

Setting thresholds too strict risks missing genuine matches. Too loose, and false positives overwhelm your compliance team—creating alert fatigue that can cause real risks to be overlooked.

List Coverage

Comprehensive screening should cover government-maintained lists, sectoral sanctions, state-owned enterprises, and associated parties including family members and close associates. Pure name matching is insufficient—organisations should also incorporate adverse media screening and enhanced due diligence for higher-risk customers.

Best Practices for Sanctions Compliance

Governance Framework

Board-level ownership: Sanctions risk should be elevated to board level given its significance
Designated compliance function: Clear individual or team responsibility for sanctions compliance
Policies and procedures: Documented screening processes, escalation paths, and record-keeping requirements
Training: Regular awareness training for all customer-facing or payment processing staff

Testing and Assurance

Regularly test your sanctions screening system across four dimensions: data quality, list coverage, matching logic, and alert management. Testing should verify that the system performs as expected against known test cases and that hits are investigated promptly.

Record-Keeping

Regulators expect comprehensive records covering all screening conducted and results, investigation and resolution of matches, escalations and approvals, and training completion. Records should typically be retained for at least five years.

Consequences of Non-Compliance

Civil Penalties

OFAC can impose penalties up to the greater of the transaction value or applicable statutory limits. Negligent violations can exceed $100,000 per violation.

Criminal Penalties

Willful violations can result in criminal prosecution. Individuals face imprisonment; organisations face substantial fines.

Reputational Damage

Sanctions violations attract significant media attention. Reputational consequences often far exceed the direct financial penalties.

False Negative Risk

Missing a sanctions match—maintaining a relationship with a sanctioned party—can be equally devastating beyond regulatory penalties.

Frequently Asked Questions

What is the difference between sanctions screening and PEP screening?

Sanctions screening checks individuals and entities against government-maintained lists of prohibited parties. Sanctions designations are legal restrictions—dealing with a sanctioned party is illegal. PEP screening identifies individuals in prominent public positions who present elevated compliance risk due to their roles. PEPs are not necessarily prohibited parties, but require enhanced scrutiny due to their positions of authority.

How often should sanctions lists be updated in screening systems?

Sanctions lists should be loaded into screening systems as close to real-time as possible. For high-volume transaction screening, list updates should occur multiple times daily. Some organisations subscribe to push notifications from list authorities to ensure immediate updates when new designations are made.

What should we do if we identify a potential sanctions match?

If screening identifies a potential match, halt the transaction immediately and investigate promptly. If confirmed, freeze any relevant assets and report to the appropriate authority. No transactions should proceed until the matter is resolved. False positives should be documented with clear rationale for clearance.

Do sanctions apply to all business activities?

Sanctions programmes vary in scope. Comprehensive sanctions prohibit virtually all dealings with designated parties. Targeted sanctions may apply only to specific sectors, activities, or asset types. It is important to understand the specific sanctions regime applicable to your organisation and activities.

Can sanctions be applied to entire countries?

Yes. Some programmes apply comprehensive restrictions on dealings with specific countries—often called “country sanctions.” These may prohibit virtually all trade, investment, and financial transactions. The most significant current examples include comprehensive sanctions on Russia, North Korea, Iran, Syria, and Cuba.

Need support with sanctions screening?

Find out how Nexiant can support your sanctions screening and AML compliance requirements.

Get in touch with our team

This article is for informational purposes only and does not constitute legal or compliance advice. Organisations should consult with qualified legal professionals for guidance specific to their circumstances.