What Is AML Screening? Sanctions, PEP and Watchlists Explained

Anti-money laundering (AML) rules exist to keep the proceeds of crime out of the financial system. AML screening is one of the checks that put those rules into practice: before doing business with a person or a company, and sometimes during the relationship, an organization checks the name against lists and sources that signal elevated risk. This guide explains what those checks cover, how a screening runs, why the results need a human reviewer, and where the limits are.

Screening is one control among several. Customer due diligence (knowing who the customer is), transaction monitoring and a written risk assessment sit alongside it. Screening answers a narrow question: does this name appear somewhere it should not?

What AML screening checks

Most screening programs combine a few families of data:

• Sanctions lists. Governments and international bodies publish lists of people, companies, vessels and sometimes crypto wallet addresses that others are restricted from dealing with. Well-known examples are the consolidated list of the United Nations Security Council, the lists kept by the US Treasury's Office of Foreign Assets Control (OFAC), the European Union's consolidated financial sanctions list and the United Kingdom's consolidated sanctions list. Which lists apply to an organization depends on where it operates and who its customers are.
• Politically exposed persons (PEPs). A PEP is someone who holds, or recently held, a prominent public function, such as a minister, a judge, a senior military officer or an executive of a state-owned company. Relatives and close associates are often included. Being a PEP is not wrongdoing. The category exists because public office carries a higher exposure to corruption, so international standards, including those of the Financial Action Task Force (FATF), call for closer scrutiny of these customers.
• Watchlists and enforcement lists. Regulators, law enforcement agencies and international organizations publish further lists: debarred companies, wanted persons, regulatory warnings and similar notices.
• Adverse media. Negative news coverage about a subject, such as reports of fraud, bribery or other financial crime. It has its own way of being read, so it gets its own guide: What Is Adverse Media Screening?

How a screening works

The mechanics are similar whichever tool or provider is used:

1. Collect the identifiers. For a person: full name, date of birth, nationality or country of residence. For a company: legal name, country of registration and a registration number. The more identifiers you have, the easier it is to rule candidates in or out.
2. Normalize the name. Names are written in different scripts and spellings, with titles, initials and different name orders. Good screening compares transliterations and common variants rather than only exact strings.
3. Match against the data. The system compares the name with the entries of each list and returns candidates, often with a score that expresses how close the match is.
4. Review the candidates. A person compares each candidate with what is known about the subject and decides whether it is the same person or company.
5. Record the outcome. The decision, the evidence and the reasoning are written down, so the result can be explained to a colleague, an auditor or a regulator later.

Why matches need a human reviewer

Matching names is fuzzy by design, and fuzzy matching produces false positives. A common name can match dozens of entries. Mohammed, Muhammad and Mohamed are the same name in three spellings. Two unrelated companies can share a trading name. The usual way to resolve a candidate is to compare the secondary identifiers: date or year of birth, nationality, place of residence, a registration number, the people connected to a company. If those do not line up, the candidate is probably a different subject. If they do, the case moves up for further review.

That is why a match is best read as a candidate match. It is a reason to look closer, not a finding that a person is sanctioned or that a company is controlled by someone who is.

What a clear result does and does not mean

A screening that returns nothing is useful information, but it is not a clearance. Lists lag behind events, a designation can be added after the check was run, names can be spelled in a way the data does not capture, and a subject can pose a risk without being on any list. A no-match result tells you only that nothing matched in the sources searched at that moment. Whether to accept a customer, ask for more documents or escalate remains a judgment for the organization that owns the risk.

One-off checks and ongoing monitoring

Many regulated firms screen at onboarding and then again at intervals or whenever a list changes, because a customer who was clean last year can be designated today. How often and how deeply to screen depends on the organization's legal obligations and its own risk assessment. A screening that runs when a person submits a request, as in OSINT Search Engine, answers the question for that moment and should be repeated when circumstances change.

Good practice for screening reviews

• Decide the purpose first. Screen because there is a documented business, compliance or risk reason, not out of curiosity.
• Use more than a name. Add a date of birth, a country or a registration number wherever you have one.
• Collect only what you need. Personal data brought into a check should be limited to what the check requires and kept no longer than necessary.
• Read the source. Open the underlying list entry or record before you act on a match.
• Write down the decision. Note who reviewed it, what was compared and why you concluded what you did.
• Escalate by policy. Decide in advance who reviews a confirmed match, and what happens next.

How AML screening works in OSINT Search Engine

The AML screening workflow checks a person or a company against sanctions, PEP and watchlist data. You submit the subject with the context fields analysts use to tell similar names apart, review the candidate matches, and keep the case: every screening is saved to My Searches. Detailed candidate-result content is available only for a limited review period (currently up to 24 hours), so write the findings you need into your own case notes.

Two points matter if you are evaluating the service. First, access is restricted: AML screening is available to approved institutional customers whose accounts have an explicit AML entitlement, not for personal or consumer use. Second, results are research aids. A match is a candidate match and a no-match is not a clearance, so the final decision stays with your organization. The Service Providers page lists what is shared with each provider and why. Related checks have their own pages: wallet screening for crypto addresses and adverse media screening for source-linked news coverage.