Sanctions Screening Hit and False Positive
You are a sanctions compliance analyst at a global bank. The automated screening system flags a payment from a customer, Mr. C, to a beneficiary in a sanctioned country. The beneficiary's name is 'Ahmed Al-Rashid', which matches an entry on the OFAC SDN list. The payment amount is $15,000, described as 'family support'. Mr. C has been a customer for five years with no prior alerts. The system also shows a partial match: the SDN entry's date of birth is 1970, while Mr. C's beneficiary has a date of birth of 1980. The address on the payment instruction is in a different city from the SDN entry. The payment is time-sensitive, and the relationship manager is asking for immediate release. The bank's policy requires resolving sanctions alerts within 24 hours.
1. How should you assess this alert? What steps should you take to determine whether it is a true match or a false positive?
Read the worked answer
The alert requires careful analysis to determine if it's a true match or false positive. Steps:
- Compare all available data points: Name is a match, but date of birth differs by 10 years and address is in a different city. These are significant discrepancies.
- Check other identifiers: Look for passport number, national ID, or other identifiers in the payment instruction that may not match the SDN entry.
- Review the SDN entry details: The SDN entry may have additional information such as aliases, place of birth, or associated entities that can help differentiate.
- Assess the context: The payment is described as 'family support' to a sanctioned country. This could be legitimate, but the sanctioned country itself may be subject to broad sanctions. Check if there are any general licenses or exemptions that apply.
- Consult with the sanctions team and possibly legal counsel if uncertainty remains.
- Document the analysis. If the discrepancies are sufficient to rule out a match, the alert can be closed as a false positive. However, given the name match and the sanctioned country, a cautious approach is warranted. The date of birth mismatch is strong evidence of a false positive, but further verification (e.g., requesting additional identification from the customer) may be needed.
2. What should the bank do with the payment while the investigation is ongoing? Should it be released due to time sensitivity?
Read the worked answer
The payment should not be released until the alert is resolved. Sanctions regulations require that funds be blocked immediately if there is a potential match to a sanctioned party. Releasing funds without resolution could violate sanctions laws and expose the bank to severe penalties. The bank should:
- Place a hold on the payment.
- Expedite the investigation to resolve within the 24-hour policy, but not at the expense of proper due diligence.
- Communicate with the relationship manager that the payment cannot be released until screening is cleared.
- If the investigation confirms a false positive, release the payment promptly.
- If it is a true match, block the funds and report to the relevant authority (e.g., OFAC). The time sensitivity does not override sanctions compliance obligations.