What is Sanctions Screening?
Sanctions screening is the process of checking customers, counterparties, and transactions against government-maintained lists of sanctioned individuals, entities, and countries to ensure compliance with international sanctions regimes.
What Is Sanctions Screening?
Sanctions screening is the process of checking whether the people, businesses, or countries you are dealing with are subject to financial sanctions. In practical terms, it means running your customers, suppliers, partners, and transactions against official sanctions lists maintained by governments and international bodies to make sure you are not inadvertently doing business with someone who is prohibited.
Sanctions are restrictions imposed by governments and international organisations on certain individuals, entities, and countries. They are used as foreign policy tools to respond to threats like terrorism, nuclear proliferation, human rights abuses, and military aggression. When sanctions are imposed, it becomes illegal to make funds or economic resources available to the sanctioned parties -- and that includes processing their payments.
Why Sanctions Exist
Sanctions are not new. Countries have used trade restrictions and asset freezes as diplomatic tools for centuries. But modern sanctions regimes have become increasingly targeted and sophisticated. Rather than imposing blanket embargoes on entire countries (though these still exist in some cases), most contemporary sanctions are "targeted" or "smart" -- aimed at specific individuals, organisations, or sectors.
For example, following Russia's invasion of Ukraine, the UK and other countries imposed extensive sanctions on Russian oligarchs, banks, and businesses. These sanctions froze their assets, banned them from financial services, and prohibited anyone from making funds available to them. Failing to screen for these sanctions would mean potentially processing payments that fund sanctioned activities -- which is a serious criminal offence.
The Sanctions Lists
In the UK, the primary sanctions list is the UK Sanctions List, maintained by the Office of Financial Sanctions Implementation (OFSI), which sits within HM Treasury. This list includes all individuals and entities subject to UK financial sanctions. OFSI also publishes the Consolidated List, which brings together all designations under different UK sanctions regimes into a single searchable database.
Other key sanctions lists that UK businesses often need to consider include:
- UN Security Council sanctions lists -- Sanctions imposed by the United Nations, which all member states are required to implement
- EU sanctions lists -- While the UK is no longer in the EU, businesses that trade with or have customers in the EU still need to be aware of EU sanctions
- OFAC lists (US) -- The US Office of Foreign Assets Control maintains several lists including the Specially Designated Nationals (SDN) list. Even non-US businesses can be affected if they deal in US dollars or have any US nexus
How Sanctions Screening Works
The screening process itself is conceptually simple but operationally complex. At its most basic, you take the name, date of birth, nationality, and other identifying information of your customer or counterparty and compare it against the relevant sanctions lists. If there is a match, you cannot proceed with the transaction or business relationship until the match has been investigated and resolved.
In practice, this process is almost always automated. Screening software compares customer data against sanctions databases using fuzzy matching algorithms that can catch variations in spelling, transliteration differences (particularly important for names transliterated from non-Latin scripts), and common aliases. The software flags potential matches for human review, and trained compliance staff then investigate each flag to determine whether it is a genuine match or a false positive.
False positives are a significant challenge. Common names, similar-sounding names, and incomplete data can generate large numbers of flags that need to be manually reviewed. Businesses need to strike a balance between screening sensitivity (catching all genuine matches) and operational efficiency (not drowning in false positives that slow down legitimate transactions).
When Screening Must Happen
Sanctions screening is not a one-time check. It needs to happen at several points:
- Customer onboarding -- Before establishing a new business relationship, screen the customer against all relevant sanctions lists
- Transaction screening -- Before processing a payment, check both the payer and the payee against sanctions lists
- Ongoing monitoring -- Sanctions lists are updated frequently (sometimes daily), so existing customers must be re-screened whenever the lists change
- Trigger events -- Any change in a customer's circumstances (new directors, change of ownership, change of country) should prompt a fresh screening
Consequences of Getting It Wrong
Breaching financial sanctions is a criminal offence in the UK. OFSI has the power to impose monetary penalties and refer cases for criminal prosecution. Penalties can be severe -- there is no maximum limit on fines for sanctions breaches. Beyond legal penalties, the reputational damage from a sanctions breach can be devastating. Banks and payment processors may refuse to work with a business that has been found to have inadequate sanctions controls, effectively cutting it off from the financial system.
Relevance to Telephone and Phone Payments
Phone payments present specific considerations for sanctions screening. When a customer calls to make a payment, the transaction needs to be screened before it is processed, just like any other payment. The challenge is that phone payments often happen in real time, with a customer on the line expecting the transaction to be completed promptly.
For most businesses taking phone payments, sanctions screening happens behind the scenes. The payment processor or acquiring bank performs the screening as part of the transaction authorisation process. But the merchant still has obligations -- particularly if they are onboarding new customers over the phone. You cannot skip KYC and sanctions checks just because the customer is on a phone call rather than filling out an online form.
Businesses that handle high-value phone transactions, deal with international customers, or operate in sectors with elevated sanctions risk should ensure they have solid screening procedures integrated into their phone payment workflow. This might mean running automated screening checks before confirming a transaction, training agents to recognise red flags (such as a customer trying to make a payment on behalf of a third party), and having clear escalation procedures for when a potential sanctions match is flagged.
Practical Considerations
- Use automated sanctions screening software that covers all relevant lists (UK, UN, EU, and US OFAC as applicable to your business)
- Screen at onboarding, at the point of each transaction, and on an ongoing basis as sanctions lists are updated
- Establish clear procedures for handling potential matches, including escalation to a compliance officer and documentation of the investigation
- Train all relevant staff -- including call centre agents who handle phone payments -- to understand sanctions obligations and recognise warning signs
- Keep detailed records of all screening activity, including false positive investigations, for at least six years
- Review your screening processes regularly to ensure they are keeping pace with changes in the sanctions landscape
- If in doubt about whether a transaction involves a sanctioned party, do not process it -- seek advice from your compliance team or legal counsel
Sanctions screening might feel like an overhead, but it is a non-negotiable part of operating in the payments industry. The consequences of getting it wrong are too severe to treat it as an afterthought. A well-designed screening process protects your business, keeps you on the right side of the law, and ensures you are not inadvertently supporting activities that sanctions are designed to prevent.
Paytia's platform supports businesses across multiple payment channels. For phone payments specifically, Paytia's secure platform complements sanctions screening by covering the voice channel where customers prefer to pay by phone.
Frequently Asked Questions
What is sanctions screening?
Sanctions screening is the process of checking customers, counterparties, and transactions against government-maintained lists of sanctioned individuals, entities, and countries to ensure compliance with international sanctions regimes.
How does sanctions screening work with phone payments?
While sanctions screening primarily operates in other channels, businesses that also take phone payments can use Paytia to cover the voice channel securely.
Is sanctions screening PCI DSS compliant?
Any payment method that handles card data must comply with PCI DSS. The specific requirements depend on how the data is captured, transmitted, and stored.
See how Paytia handles sanctions screening
Book a personalised demo and we'll show you how our platform works with your setup.
Trusted by law firms, insurers, healthcare providers and regulated businesses worldwide. Learn more about Paytia