Integrate sanctions and watchlist screening (OFAC and other lists) into onboarding

Steps

1. Decide on your screening approach: direct integration with the OFAC SDN list (downloaded as XML/CSV from the OFAC website) parsed and matched locally, or a commercial watchlist screening vendor (e.g., ComplyAdvantage, Dow Jones, LexisNexis WorldCompliance, or similar) that provides pre-normalized, multi-list coverage via API.
2. For vendor-based screening, submit the individual or entity name, date of birth, nationality, and any identifiers via the vendor's API at onboarding; parse the response for match results categorized by list (OFAC SDN, OFAC consolidated, PEP, adverse media, etc.).
3. Implement a fuzzy name-matching threshold; exact-match-only screening misses transliteration variants and is insufficient for compliance—consult your compliance officer on acceptable match score thresholds.
4. Route potential matches (above your threshold) to a compliance analyst for manual review; implement a clear match/false-positive/true-positive adjudication workflow and maintain records of decisions.
5. Set up ongoing monitoring (re-screening existing customers when watchlists update) in addition to point-in-time onboarding screening; most commercial vendors provide ongoing monitoring as a subscription feature.
6. Document your screening program, match criteria, and escalation procedures in your AML/BSA policy; regulators expect written procedures, not just technical controls.