Sanctions screening vs AML vs fraud
Sanctions screening, AML monitoring, and fraud detection answer different questions on different clocks — and confusing them causes real design mistakes.
IN ONE LINE
An everyday analogy: a nightclub runs three different checks.
At the door, a bouncer compares each face against a short banned list — if you are on it, you do not come in, full stop.
Inside, cameras watch how people behave over the evening and flag suspicious patterns for review tomorrow.
Meanwhile, staff watch for pickpockets stealing from guests right now.
Sanctions screening is the door check: a comparison against a list, with an immediate stop.
Anti-money-laundering monitoring is the camera review: pattern analysis after the fact.
Fraud detection is catching the pickpocket: protecting victims from theft in real time.
The three share data but they are different jobs, done by different systems, on different clocks.
WHAT IT ACTUALLY IS
Screening compares data — customer records, payment messages — against lists of names and indicators.
Sanctions screening enforces a legal prohibition: a confirmed match stops the relationship or the payment, so it runs before or during processing.
AML transaction monitoring looks for behaviour consistent with money laundering across many transactions and typically produces a report to authorities rather than an immediate stop.
Fraud detection protects the customer and the bank from theft and manipulation.
Related screening types sit alongside sanctions: politically exposed person (PEP) screening identifies customers who need enhanced due diligence — being a PEP is not prohibited — and adverse media screening surfaces negative news as a risk input.
Only the sanctions match carries a hard legal stop.
HOW IT WORKS
The design consequences of the differences are concrete.
Sanctions screening must sit in the payment path, which means latency budgets, hold queues, and staff available to clear alerts while payments wait; AML monitoring can run overnight on a data warehouse.
False-positive economics differ too: a sanctions filter tuned too tight delays every payment, while an over-sensitive monitoring scenario wastes investigator time but delays nothing.
Disposition rules differ — a PEP or adverse-media hit feeds a risk review and hardly ever stops a payment, whereas a potential sanctions match must hold the payment until resolved.
Institutions vary in how they organise this: some run one screening utility for all list types, others keep sanctions separate precisely because its legal stakes and timing are unlike everything else.
THE WORDS
- Screening
- Checking customers and payments against sanctions lists and other watchlists to find possible matches before or as business is processed.
- PEP
- A person entrusted with a prominent public function, plus close family and associates. PEP status means higher due diligence, not prohibition.
- Adverse media
- Negative news coverage linking a party to crime or misconduct, used as a risk signal in due diligence and some screening programmes.
READ FIRST
CONNECTED TO
SOURCES
- Wolfsberg Group Sanctions Screening Guidance — The Wolfsberg Group
- Payments Signal editorial teaching models — Payments Signal
Derived from Sanctions screening vs AML vs fraud. Every claim on this card is sourced on that page.