Continuous Sanctions Monitoring
Sanctions lists change daily. A customer, employee, or vendor who was clear at onboarding can appear on a sanctions list, PEP database, or law enforcement watchlist at any time. Continuous monitoring keeps your compliance programme current.
Why One-Time Screening Is Not Enough
Sanctions lists are living documents. OFAC updates the SDN list multiple times per week. The EU Consolidated Sanctions List is amended whenever the Council of the EU adopts new restrictive measures. The UN Security Council can add new designations at any time in response to emerging threats. PEP databases change with every election, government reshuffle, and appointment to a senior public function.
An individual or entity that passed screening at the start of a business relationship may be designated weeks, months, or years later. If an organisation continues to transact with a newly designated person without performing re-screening, it is in violation of sanctions from the moment of designation — regardless of when the relationship was established. This is particularly relevant under OFAC's strict liability framework, where neither intent nor knowledge is required for a violation to be actionable.
The FATF explicitly requires ongoing due diligence as a core component of Customer Due Diligence (Recommendation 10). The UAE Central Bank AML/CFT guidance, the EU Anti-Money Laundering Directives, and UK regulations all mandate ongoing monitoring that includes periodic re-screening against sanctions and PEP databases. An organisation that can demonstrate robust initial screening but no ongoing monitoring programme has a fundamental compliance gap.
Types of Ongoing Screening
Scheduled re-screening of your entire customer base, employee roster, or vendor list at regular intervals — monthly, quarterly, or annually depending on risk classification. This catches designations that occurred between screening cycles.
Triggered by specific events — a change in a customer's beneficial ownership, a geopolitical event affecting a country you have exposure to, or adverse media about a business partner. Event-driven screening addresses risks that periodic screening alone might miss.
Screening performed at the point of each transaction — essential for payment processors, correspondent banks, and money service businesses where every transfer must be screened before execution.
When a sanctions list is updated, all existing relationships are automatically checked against the new entries. This is the most proactive approach, catching new designations on the day they are published rather than waiting for the next periodic screen.
Building a Continuous Monitoring Programme
An effective continuous monitoring programme begins with risk segmentation. Not all relationships carry the same sanctions risk, and monitoring resources should be allocated proportionally. High-risk categories — PEPs, customers in sanctioned or high-risk jurisdictions, complex ownership structures, correspondent banking relationships — should receive more frequent screening than lower-risk categories.
The programme should document the screening frequency for each risk category, the databases screened, the process for investigating and resolving matches, and the escalation procedures when a confirmed match is identified. These procedures should be reviewed and updated at least annually, and whenever there is a material change in the sanctions landscape.
Wirestork provides on-demand screening at AED 25 per check against 320+ databases. For organisations establishing a periodic re-screening programme, each check produces a timestamped compliance-ready PDF report that documents the screening date, databases queried, and results — creating the audit trail that regulators expect to see during inspections. For volume re-screening needs, contact our team for batch pricing and API access.