What are sanctions checks?

A sanctions check starts with data capture: full legal name, trading names, date of birth, address history, company registration numbers and beneficial owners, plus vessel or aircraft identifiers where relevant. That data is standardised and matched against sanctions lists. Exact matching is used for unique identifiers such as company numbers and passport numbers; name matching surfaces possible hits, which are then confirmed or cleared using other attributes such as date of birth and jurisdiction.

Australian obligations attach to the DFAT consolidated list, but most institutions also screen UN, US OFAC, EU and UK lists and commercial watchlists because of correspondent banking and cross-border exposure, and refresh those feeds daily. A hit across several lists raises confidence. Every search, list version, match and decision is logged so the process is auditable.

Financial institutions, fintechs, payment processors, brokers, insurers and super funds all screen, as do exporters, freight forwarders and businesses with cross-border exposure. Screening happens at onboarding for every new customer, at transaction level for payments, imports, exports and high-value transfers, periodically for existing customers at a cadence that matches their risk, and after trigger events such as adverse media, a merger or an update to the sanctions lists.

Sanctions screening complements a business's AML/CTF program rather than replacing it. Policies should say who owns onboarding checks, transaction monitoring and escalation, and link them to the business's AUSTRAC obligations. Enhanced due diligence applies where the risk is higher: high-risk jurisdictions, complex ownership chains, large cross-border transactions, PEPs or adverse media.

On a possible match, the first step is triage: record the list source, entry ID, matched fields and time, then review the disambiguating details. If the date of birth or company number does not line up, the alert is a false positive, documented and closed. If the match is probable or confirmed, the transaction is halted where required, senior compliance and legal are brought in, and any prohibited benefit is withheld.

Dealing with a designated person or a controlled asset is a criminal offence, with strict liability for bodies corporate, and holding or controlling an asset of a designated person triggers a mandatory notification to the Australian Federal Police, separate from any suspicious matter report to AUSTRAC. Australian Sanctions Office permits can authorise otherwise prohibited activity in some circumstances, such as humanitarian supplies, so a true match may lead to a permit application rather than a dead end. Staff must avoid tipping off the subject, and the case file keeps the watchlist snapshot, reviewer notes and the final disposition.