Retention and deletion
Bank data has no single retention period. A deletion policy connects record type, legal basis, start date and justified exceptions with the data actually held.
First version: Updated:
Read articleArticle
AML sanctions screening: reviewing matches and documenting decisions
Sanctions screening requires current legal and list data, appropriate matching and traceable alert handling. A similar name starts an investigation.
In daily work
Identify the applicable sanctions regime
EU financial sanctions can freeze funds, prohibit making them available or restrict particular business. A consolidated name list supports screening but does not represent every sectoral or transaction-specific restriction. The relevant legal act remains decisive. Business activities, country connections, counterparties and ownership or control determine what needs to be assessed.
Overview
Maintain reliable list and master-data processing
Record the list source, version and successful ingestion of updates. Customer and counterparty records need usable names and additional identifying information. Matching logic should account for spelling variants and different writing systems. An outdated list or failed ingestion must not appear as a clean screening result. Define escalation when screening becomes unavailable.
Overview
Separate alerts, false positives and confirmed matches
A similarity score creates a case for review. The responsible person compares further attributes and records the outcome. Identical names do not establish identical persons. Conversely, ownership or control by a listed person can be relevant even when the direct counterparty is not named on the list.
| Step | Question | Evidence |
|---|---|---|
| Identity | Do birth date, location or registration details match? | Compared information and sources |
| Legal basis | Which specific restriction may apply? | Legal act, annex and current version |
| Ownership/control | Is there a relevant indirect relationship? | Assessed structure and reasoning |
| Decision | False positive, unresolved or confirmed match? | Reason, reviewer and timestamp |
| Consequence | What restriction, notification or permission is required? | Action and responsible authority |
Overview
Route confirmed matches to the correct process
Confirmed matches trigger the measures required by the applicable regime. These can include freezing, preventing funds from being made available and notifying the competent authority. In Germany the Bundesbank is the central administrative authority for funds. An exception or authorisation must fit the actual circumstances. Keep identity checks, legal assessment and operational execution distinct.
Overview
Account for the specific rule on instant euro transfers
Article 5d of Regulation (EU) No 260/2012 requires providers offering instant transfers to screen their payment service users immediately after new or amended targeted financial restrictive measures and at least once every calendar day. During execution of an instant transfer, the payer and payee are not checked again for those same targeted measures. Other sanctions rules and AML obligations remain unaffected. This is neither a general prohibition on screening nor a broad exemption from controls.
Overview
Evaluate detection quality, not just alert volume
A practical test set includes clear matches, similar names with different identifiers, spelling variants and relevant indirect relationships. Before changing a rule, assess its effects on detection and workload. False positives and missed test cases are different errors. Sanctions screening, AML transaction monitoring, fraud detection and verification of payee serve different purposes. Their results must not be treated as interchangeable.
FAQ
Frequently asked questions
Is every name match a confirmed sanctions match?
No. It creates an alert to investigate. Further identifiers and the applicable legal act determine the assessment.
Is the consolidated EU list sufficient?
It is an important tool. Ownership, control and sectoral or transaction-specific prohibitions can require additional checks.
Does fraud detection replace sanctions screening?
Not automatically. Objectives, data, legal bases and decision processes differ. Coverage must be demonstrated for the specific use case.
Sources & further reading
- Deutsche Bundesbank: Merkblatt zur Einhaltung von Finanzsanktionen, Juni 2024, korrigiert 05.07.2024bundesbank.de
- Verordnung (EU) 2024/886: Artikel 5d der Verordnung (EU) Nr. 260/2012eur-lex.europa.eu
- EU: konsolidierte Liste der Finanzsanktionendata.europa.eu
- EU Sanctions Map: Maßnahmen und zugehörige Rechtsaktesanctionsmap.eu
Related options
You may also be interested in these.
IT and AI consulting
T-NEX advises banks and insurers on software projects and GRC processes, with functional specifications, technical planning and an agreed implementation scope.
Explore serviceWhich task would you like to solve next?
Bring a concrete task. Together, we will define what the application needs to do.
Discuss your project