AML Screening: What It Is and How It Works

AML screening (Anti-Money Laundering screening) is the process of checking an individual or entity against official watchlists, regulatory databases and public records to detect money laundering, terrorist financing, sanctions or corruption risks before and during a business relationship.

It is a core component of broader Know Your Customer (KYC) and Know Your Business (KYB) obligations: while KYC confirms who a customer is, AML screening confirms whether that identity carries a regulatory red flag.

Illicit financial flows are not a marginal problem.

This scale is why global regulators coordinate so closely. The Financial Action Task Force (FATF), which describes itself as "the global money laundering and terrorist financing watchdog," sets the international standards that shape national AML laws across the EU, UK and US alike.

AML screening is not a single check. It combines four complementary controls, each addressing a different risk.

Sanctions screening verifies whether an individual, entity or country is subject to restrictive measures: asset freezes, transaction bans or embargoes.

Two points matter here. First, the UK list landscape changed in 2026: since 28 January 2026, the UK Sanctions List is the single source for all UK designations, and the OFSI Consolidated List of Asset Freeze Targets has closed — although OFSI, part of HM Treasury, remains the authority responsible for implementing and enforcing financial sanctions. Second, the EU operates over 40 distinct sanctions regimes, some mandated by the UN Security Council and others adopted autonomously.

Enforcement can be severe and extraterritorial. In 2014, BNP Paribas agreed to pay penalties totalling $8.9 billion for processing transactions in breach of US sanctions. More recently, in November 2023, crypto exchange Binance settled with the US Treasury for a $968 million OFAC penalty alongside a $3.4 billion FinCEN penalty — the largest ever for each agency.

PEPs are individuals who hold or have held prominent public functions — ministers, ambassadors, senior judges, state-owned company executives. Statistically, their position carries a higher risk of corruption and money laundering.

Under regulation 35 of the UK Money Laundering Regulations 2017, a firm entering or continuing a business relationship with "a PEP, or a family member or a known close associate of a PEP" must obtain senior management approval, establish the source of wealth and funds, and conduct enhanced ongoing monitoring.

Adverse media screening searches public sources — news articles, court records, regulatory sanctions announcements — for negative information linked to a person or entity: criminal convictions, fraud investigations, financial scandals. It adds a qualitative layer that official registers don't always capture, particularly for recently compromised profiles.

AML screening is not a one-off check at onboarding. UK law is explicit: under regulation 28(11), "the relevant person must conduct ongoing monitoring of a business relationship," including keeping customer due diligence documents and information up to date.

AML obligations extend well beyond banks. In the UK, regulation 8 of the MLR 2017 applies them to a broad list of "relevant persons":

• Credit institutions and financial institutions (including insurers and payment firms)
• Auditors, external accountants, tax advisers and insolvency practitioners
• Independent legal professionals and trust or company service providers
• Estate agents and letting agents
• High value dealers, casinos and art market participants
• Cryptoasset exchange providers and custodian wallet providers

How large is the false positive problem? A Bank Policy Institute study of 19 large US financial institutions found that, when screening wires and customer accounts for potential OFAC matches, "institutions reported true matches with an overall median of 0.00004%, with some institutions reporting no true customer matches at all." In other words, screening teams spend most of their time clearing noise — which is exactly why manual, spreadsheet-based processes don't scale.

Manually checking every new customer against dozens of international lists — and keeping those lists up to date — is time-consuming, error-prone, and impossible to sustain at volume. This is exactly the gap Youtrust's watchlist screening capability, part of the Verify suite, was built to close.

Youtrust offers two complementary products to address the full compliance lifecycle:

• Watchlist Screening — a one-time check of an individual against PEP and sanctions lists at a specific point in time (e.g. onboarding).
• Ongoing Monitoring — continuous surveillance that automatically re-checks individuals after the initial screening and alerts you when a new match or relevant risk change is detected.

Both products are available via API, and together form the recommended Watchlist Monitoring bundle.

With Youtrust:

• You screen an individual directly from your onboarding flow, via API.
• Youtrust checks the person against more than 280 international sanctions and PEP lists, including EU lists, OFAC, asset-freeze lists and the French Treasury (DG Trésor).
• You assess the risk level of every new customer in seconds, with results feeding straight into your decisioning.
• Databases are updated daily or weekly (depending on the list), with human verification included to reduce false positives and eliminate duplicate entries.
• Every check produces a reliable audit trail — traceable, exportable evidence for your supervisor.

Because watchlist screening works at the individual level, it pairs particularly well with company verification: once you've identified a company's legal representatives, you can immediately screen them against sanctions and PEP lists — the exact workflow regulators expect for KYB/AML compliance.

• Enrich customer data: collect exact date of birth, full address and nationality to reduce false positives.
• Set a risk-based re-screening frequency: more frequent for high-risk clients, lighter for low-risk relationships.
• Document every check: keep an auditable record of each screening decision for regulatory inspection.
• Train your compliance team: on naming conventions, transliteration issues, and escalation procedures.
• Automate where possible: reduce manual workload and response time with API-based screening tools.

AML screening has become a cornerstone of modern compliance — not a bureaucratic formality, but a genuine safeguard against financial crime and regulatory penalties. Sanctions checks, PEP identification, and ongoing monitoring together form a coherent risk management framework that every regulated business should treat as a priority, regardless of size.

Organisations facing growing onboarding volumes gain real reliability, traceability and regulatory confidence by relying on automated, API-based screening rather than manual processes.