1What are sanctions?

Restrictive measures imposed by governments or international bodies against countries, entities, vessels or individuals to achieve foreign policy or national security objectives. They can restrict trade, freeze assets, block transactions, or prohibit dealings entirely.

2What is sanctions screening?

Checking customers, counterparties, payments and related parties against sanctions lists to identify prohibited dealings. It runs at onboarding, on an ongoing basis as lists change, and in real time on transactions.

3Why is sanctions compliance treated more seriously than most AML controls?

Because many sanctions regimes impose strict liability — a breach can be an offence regardless of intent or knowledge. Penalties are severe, can be personal as well as corporate, and there is no equivalent of the "reasonable suspicion" judgement that applies to AML reporting.

4What is the difference between sanctions screening and transaction monitoring?

Screening is a name and identifier match against lists, usually real-time, where a true match means blocking. Monitoring is behavioural and pattern-based, usually post-event, producing alerts for judgement. Screening prevents; monitoring detects.

5What are targeted sanctions?

Measures aimed at specific individuals, entities or vessels — typically asset freezes and prohibitions on dealing with them. They are designed to pressure decision-makers while limiting harm to the wider population.

6What are sectoral sanctions?

Restrictions on particular sectors or activities rather than a blanket prohibition — for example limits on financing, debt maturity, or supply of specific technology. They are more complex to apply because the same counterparty may be permitted for some dealings and prohibited for others.

7What is a comprehensive or country-wide sanctions programme?

A regime prohibiting substantially all dealings with a jurisdiction, rather than named parties only. It requires geographic controls in addition to name screening, since the restriction attaches to the territory.

8What is an asset freeze?

A requirement to block funds or economic resources belonging to a designated party. Blocked funds are not confiscated — they are immobilised, and cannot be released or dealt with without a licence.

9What does "making funds available" mean?

Providing funds or economic resources to, or for the benefit of, a designated party — directly or indirectly. It is prohibited even where the designated party is not the account holder, which is why indirect benefit must be considered.

10What is a sanctions licence or authorisation?

Permission from the relevant competent authority to carry out an otherwise prohibited transaction — for example humanitarian payments, legal fees or wind-down activity. Firms must hold the licence before acting, not seek it afterwards.

11What is the difference between blocking and rejecting a payment?

Blocking means holding the funds in a frozen account because a designated party has an interest. Rejecting means refusing to process and returning it. Which applies depends on the regime and the nature of the exposure, and misapplying it is itself a breach.

12Do sanctions apply to a firm's overseas branches?

Often yes. Many regimes have extraterritorial reach based on currency used, nationality of the parties, or corporate ownership. US dollar clearing in particular can bring a transaction within US jurisdiction regardless of where it takes place.

13Which sanctions authorities should a compliance professional know?

OFAC in the United States, OFSI in the United Kingdom, the European Union's consolidated regime, and the United Nations Security Council. Many jurisdictions maintain their own lists as well, and firms typically screen against several simultaneously.

14What is OFAC?

The Office of Foreign Assets Control, part of the US Treasury. It administers and enforces US sanctions programmes and maintains the SDN list. Its reach is broad because of the role of the US dollar in global payments.

15What is the SDN list?

The Specially Designated Nationals and Blocked Persons list — OFAC's list of individuals and entities whose assets are blocked and with whom US persons are generally prohibited from dealing.

16What is OFSI?

The Office of Financial Sanctions Implementation, part of HM Treasury, responsible for implementing and enforcing UK financial sanctions and maintaining the UK consolidated list.

17How do UN sanctions differ from national sanctions?

UN sanctions are adopted by Security Council resolution and member states are obliged to implement them, so they apply near-universally. National and regional regimes can go further, which is why lists diverge and firms screen against multiple sources.

18What happens when sanctions regimes conflict?

It arises where one jurisdiction prohibits what another requires, including under blocking statutes. It is a legal question, not an operational one — the correct answer is to escalate to legal and compliance rather than resolve it at analyst level.

19What is secondary sanctions risk?

The risk that a non-US party is itself sanctioned for dealing with certain sanctioned persons, even without US nexus. It means firms often avoid exposure that is technically permissible under their own law.

20What is the 50 percent rule?

Under OFAC and similar regimes, an entity owned 50 percent or more by one or more designated parties — individually or in aggregate — is treated as blocked even if not separately listed. Screening must therefore consider ownership, not just names.

21How does the UK's ownership and control test differ?

The UK considers both ownership above 50 percent and control in fact — the ability to direct an entity's affairs even without majority ownership. That makes the assessment more judgement-based than a purely numeric test.

22What are export controls and how do they relate to sanctions?

Export controls restrict the movement of specified goods, software and technology, particularly dual-use and military items. They frequently overlap with sanctions in trade finance, where the same transaction can raise both concerns.

23Who is responsible for sanctions compliance within a firm?

Ultimately senior management and the board. Operationally it sits with compliance and sanctions teams, but every staff member handling payments or onboarding has a role, and personal liability can attach in some regimes.

24How do you stay current on sanctions changes?

Designations change constantly, so firms rely on automated list feeds updated at least daily. Personally, I follow OFAC and OFSI notices and regulator publications — but the operational control is the list feed, not individual reading.

25What gets screened?

Customers and their beneficial owners and directors at onboarding and on an ongoing basis; counterparties and payment parties in real time; and often related data such as vessels, ports, goods and free-text payment references.

26What is batch versus real-time screening?

Batch re-screens the whole customer base against updated lists, typically overnight, catching newly designated parties. Real-time screens individual transactions before release. Both are needed — batch catches new designations, real-time prevents prohibited payments.

27Why must the customer base be re-screened when lists change?

Because an existing customer can become designated at any time. Without re-screening, they would only be caught on their next transaction — or not at all if the account is dormant but holds funds.

28What is fuzzy matching and why is it necessary?

Matching logic that catches near-matches — transliteration variants, reversed name order, missing middle names, typos. It is necessary because exact matching alone would miss almost any deliberate evasion and many legitimate spelling differences.

29What is match sensitivity or threshold tuning?

Setting how close a match must be to generate a hit. Loose settings create heavy false-positive volumes; tight settings risk missing true matches. Because the downside is asymmetric, sanctions screening is deliberately tuned conservatively.

30Why is sanctions tuning more conservative than AML tuning?

Because the consequences are asymmetric. A false positive costs analyst time; a missed true match can mean a strict-liability breach, severe penalties and reputational damage. Firms accept a higher noise level in exchange for lower miss risk.

31What is a whitelist or good-guy list?

A record of previously discounted matches so the same false positive does not require full re-investigation each time. It must be governed carefully — stale entries can suppress a hit that has since become genuine.

32What data quality issues affect screening?

Missing dates of birth or nationalities, incomplete addresses, truncated names in payment messages, inconsistent transliteration, and free-text fields that omit party details. Poor data both raises false positives and hides true matches.

33Why are payment message fields important?

Because parties can appear in free-text fields rather than structured ones. If screening only reads structured fields, a designated party named in a reference line may pass undetected — a known evasion technique.

34What is list coverage and why does it matter?

Which lists a firm screens against. Coverage should reflect the firm's jurisdictions, currencies and client base. Gaps — for example omitting a relevant national list — create exposure regardless of how well the system performs otherwise.

35How would you test whether screening is working?

Inject known test names, including variants and near-matches, and confirm they generate hits. Also test data completeness end to end. A system can appear healthy while screening incomplete data, which is the failure mode that matters most.

36What is vessel screening?

Screening ships by name and IMO number in trade and shipping contexts. It matters because vessels are designated in their own right and are commonly used in evasion, including through name changes and flag hopping.

37Should customer screening use the same settings as payment screening?

Not necessarily. Customer records usually contain richer identifiers — date of birth, address, nationality — allowing more precise matching, whereas payment messages are often sparse and require looser logic to compensate.

38What is screening a "related party"?

Checking parties connected to the customer — beneficial owners, directors, authorised signatories, and in trade finance the shipper, consignee, agents and vessel. Sanctions exposure frequently sits behind the named customer rather than with them.

39Walk me through how you resolve a screening hit.

I confirm what matched and against which list entry, then compare all available identifiers — full name, date of birth, nationality, address, entity registration, place of incorporation. If enough distinguishing data separates my party from the designation, I document a false-positive discount. If it does not, or the data is insufficient, I escalate. I never release on the basis that a match "looks unlikely".

40What identifiers are most useful for discounting a hit?

Date of birth and nationality for individuals; registration number and place of incorporation for entities. Name alone is rarely sufficient, particularly for common names or where transliteration is involved.

41What do you do when there is not enough data to discount a hit?

Escalate. Insufficient information is not evidence of a false positive — it is an unresolved match. The payment stays held pending a decision from the sanctions team.

42What makes good documentation on a discounted hit?

A clear record of which identifiers were compared, what differed, what sources were used, and the conclusion drawn. Someone reviewing it later — including a regulator — should be able to follow the reasoning without repeating the work.

43A payment is urgent and the client is threatening to leave. The hit is unresolved. What do you do?

The payment stays held. Commercial pressure has no bearing on a sanctions decision, and releasing an unresolved match could constitute a strict-liability breach with personal consequences. I would escalate immediately so it is resolved quickly, and let relationship management handle the client communication.

44What if a relationship manager tells you they know the client personally and it is definitely a false positive?

Personal assurance is not evidence. I would ask for identifying documentation that allows a proper comparison and document what was provided. The decision has to rest on verifiable identifiers, not on a colleague's confidence.

45What happens when a true match is confirmed?

The funds are blocked or the transaction rejected as the regime requires, and it is escalated immediately. Most regimes also require prompt reporting to the competent authority within a set timeframe, and the frozen position must be maintained until a licence or delisting permits otherwise.

46Can you tell the customer their payment was blocked because of sanctions?

Communication is restricted and governed by the firm's approved procedure and legal advice. I would not improvise an explanation. In many cases limited disclosure is permitted, but it is not an analyst-level decision.

47What is the difference between a false positive and a discounted match?

In practice they describe the same outcome, but the wording matters. "Discounted" reflects that a documented assessment was made against identifiers, rather than an assumption that the match was noise.

48How would you handle a high volume of hits under time pressure?

Prioritise by risk and value, use whitelists for genuinely repeat false positives, and escalate resourcing rather than lowering the standard of review. The one thing I would not do is discount hits quickly to clear a queue.

49What if you discover a payment was released in error?

Report it immediately. Many regimes require self-disclosure, and voluntary reporting is treated far more favourably than a breach discovered by the regulator. Concealment turns an error into misconduct.

50What are the consequences of a sanctions breach?

Civil and criminal penalties, loss of licences or dollar-clearing access, remediation orders and monitorships, severe reputational damage, and in some regimes personal liability for individuals involved. Sanctions penalties routinely exceed AML fines by a wide margin.

51What is sanctions evasion?

Deliberate steps to disguise a sanctioned party's involvement in a transaction — using intermediaries, shell companies, false documentation, altered payment details or third countries. The transaction is engineered to look ordinary.

52What are the most common evasion red flags?

New intermediaries with no clear commercial role, sudden routing through a third country, vague or altered payment references, ownership structures that obscure control, newly incorporated counterparties, and reluctance to provide end-user details.

53What is a front company?

An entity that conducts some genuine business but exists partly to conceal a sanctioned party's involvement. It is harder to detect than a shell because there is real activity masking the exposure.

54What is transshipment risk?

Goods routed through an intermediate country to disguise their true origin or destination. A shipment to a neighbouring jurisdiction that is then forwarded onward is a classic pattern, particularly where the intermediate country has no plausible use for the goods.

55Why do neighbouring jurisdictions matter in sanctions analysis?

Because trade volumes into countries bordering a sanctioned state often spike after designations, indicating diversion. A sharp increase in exports to a small neighbouring market is a recognised indicator rather than a coincidence.

56What is stripping?

Removing or altering identifying information from payment messages so screening does not detect a sanctioned party. It has been central to several of the largest enforcement cases and is treated as deliberate misconduct rather than a control failure.

57What is flag hopping?

A vessel repeatedly changing its flag state to obscure ownership or evade restrictions. Combined with name changes, it is a strong indicator of sanctions evasion in shipping.

58What does AIS gaps or "going dark" mean?

A vessel switching off its automatic identification system so its position cannot be tracked. It frequently coincides with ship-to-ship transfers or calls at sanctioned ports, and is a well-established maritime red flag.

59What is a ship-to-ship transfer and why is it a concern?

Cargo transferred between vessels at sea rather than at port. It has legitimate uses, but it also breaks the documentary chain of origin, making it a common method of moving sanctioned oil and commodities.

60What are dual-use goods?

Items with both civilian and military application — certain electronics, machinery, chemicals and software. They attract heightened scrutiny because they are frequently diverted, and export controls apply alongside sanctions.

61What is an end-user certificate?

Documentation stating who will ultimately receive and use exported goods. It matters because the stated end user determines whether an export is permitted, and falsified certificates are a standard evasion tool.

62How can crypto be used for sanctions evasion?

Through unhosted wallets, non-compliant exchanges, mixers, and conversion into privacy coins to break traceability. Several jurisdictions have designated specific wallet addresses and mixing services in response.

63What behavioural red flags might a customer show?

Reluctance to identify counterparties or end users, unexplained changes to payment routing, pressure to process quickly, inconsistent explanations, and requests to omit details from documentation.

64How would you spot exposure hidden behind ownership?

By tracing beneficial ownership rather than stopping at the named counterparty, aggregating stakes held by multiple designated parties, and checking for control indicators — board influence, signing authority, or funding dependence — not just percentages.

65Why is trade finance high risk for sanctions?

Because a single transaction involves many parties and jurisdictions — buyer, seller, shipper, vessel, insurer, ports, agents — each a potential exposure point. Documentation is paper-based and easy to falsify, and goods themselves may be controlled.

66What would you screen in a letter of credit transaction?

All named parties — applicant, beneficiary, banks, shipper, consignee, notify party — plus the vessel, ports of loading and discharge, countries of origin and destination, and the goods themselves against controlled-item lists.

67What documentary red flags concern you in trade finance?

Inconsistencies between documents, pricing far from market value, vague goods descriptions, routing that makes no commercial sense, last-minute changes to consignee or destination, and documents that appear altered.

68Why is correspondent banking a sanctions concern?

Because you process payments for another institution's customers whom you cannot see or screen directly. You depend on the respondent's controls, and nested relationships add further layers of invisible exposure.

69What is a nested relationship?

Where a respondent bank provides access to its own correspondent account to other institutions. The originating bank may have no visibility of those downstream institutions or their customers, which is why nesting requires specific due diligence.

70What is a payable-through account?

An arrangement allowing a respondent's customers to transact directly through the correspondent's account. It effectively gives third parties access to your institution and is treated as high risk for that reason.

71How do you assess a respondent bank's sanctions controls?

Through due diligence on their programme — screening systems and list coverage, governance, regulatory history, jurisdiction, and whether they permit nesting. Wolfsberg-style questionnaires are the standard tool, supplemented by testing and periodic review.

72What is USD clearing risk?

Because US dollar payments typically clear through the US financial system, they can fall within US jurisdiction regardless of where the parties are located. Loss of dollar-clearing access is one of the most severe consequences a bank can face.

73What is maritime sanctions screening?

Screening vessels by name and IMO number, checking flag history, ownership and management, port call history, and AIS behaviour. The IMO number matters most because it is permanent, whereas names and flags change.

74What is a price cap regime?

A measure permitting trade in a commodity only below a set price, enforced through service providers such as shipping and insurance. It requires attestation-based compliance rather than a simple prohibition, which makes verification harder.

75How would you handle a counterparty in a jurisdiction bordering a comprehensively sanctioned country?

Apply enhanced scrutiny rather than blanket refusal — verify the counterparty's genuine business, check whether goods or funds plausibly terminate there, and look for onward routing indicators. Proximity raises risk; it does not by itself prohibit dealing.

76What is a sanctions clause in trade documentation?

A contractual provision allowing a party to refuse or halt performance where sanctions would be breached. It is useful protection but does not substitute for screening — the legal obligation remains regardless of contract terms.

77What are the components of a sanctions compliance programme?

Senior management commitment, a documented risk assessment, internal controls including screening, testing and audit, and training. OFAC's framework sets out these five pillars, and enforcement actions are routinely assessed against them.

78What goes into a sanctions risk assessment?

Exposure by customer type, jurisdiction, product, delivery channel and currency — including indirect exposure through correspondents and supply chains. It should drive screening coverage and tuning, and be refreshed when the business or the sanctions landscape changes.

79What is independent testing?

Assurance work by a party independent of the sanctions function — internal audit or an external firm — testing whether screening actually works: coverage, data completeness, tuning and decision quality.

80What is a lookback review?

A retrospective review of historical transactions to identify breaches missed at the time, usually required after a control failure is discovered. They are expensive and often imposed as part of a settlement.

81What is voluntary self-disclosure and why does it matter?

Reporting an apparent breach to the authority before they identify it. Most regimes treat it as a significant mitigating factor, often halving penalties, which is why concealment is far riskier than disclosure.

82What aggravating factors increase penalties?

Wilful or reckless conduct, senior management awareness, concealment, repeated conduct, prior warnings ignored, and harm to sanctions programme objectives. Deliberate evasion such as stripping sits at the most serious end.

83What common failures appear in sanctions enforcement cases?

Incomplete list coverage, screening only structured fields, poor data quality, ignoring known system gaps, inadequate ownership analysis, weak correspondent oversight, and staff overriding alerts under commercial pressure.

84What is a monitorship?

An independent monitor imposed as part of a settlement to oversee remediation and report to the authority. They are intrusive, lengthy and costly, which is why firms treat avoiding one as a priority.

85How should sanctions training be structured?

Role-specific rather than generic — payments staff need message-field and escalation knowledge, trade finance staff need documentary and vessel awareness, relationship managers need to understand why they cannot pressure for release.

86How does sanctions escalation differ from AML escalation?

It is faster and more prescriptive. AML escalation ends in a judgement-based suspicion decision; sanctions escalation is time-critical, often requires blocking before analysis is complete, and carries statutory reporting deadlines.

87What records must be kept?

Screening results, hit investigations and rationale, blocked and rejected transactions, reports to authorities, licences, and system configuration and tuning decisions. Retention periods are set by the applicable regime.

88What is a delisting?

Removal of a party from a sanctions list following a successful challenge or policy change. Firms must act on delistings as promptly as designations, since continuing to block funds without legal basis creates its own liability.

89A payment references a company 45 percent owned by a designated individual. Do you process it?

Not without escalation. Forty-five percent falls below the 50 percent aggregation threshold, but I would check whether other designated parties hold stakes that aggregate above it, and whether the individual exercises control in fact — which some regimes capture regardless of percentage. I would hold and refer to the sanctions team rather than release on the percentage alone.

90An existing customer appears on a list published this morning. What happens?

Their assets are frozen and no further transactions processed. I would escalate immediately, ensure batch re-screening has caught all related accounts and any parties connected to them, and support the reporting obligation to the competent authority within the required timeframe.

91A long-standing exporter suddenly starts shipping to a country bordering a sanctioned state, with volumes tripling. Your view?

The pattern is consistent with diversion. I would examine whether the destination market plausibly consumes those goods at that volume, who the new counterparties are and when they were incorporated, whether the goods are controlled, and whether documentation shows onward routing. A genuine new market is normally easy to evidence; diversion usually is not.

92A vessel in a trade transaction has changed name twice and shows AIS gaps. What do you do?

Treat it as high risk and escalate before processing. I would check the IMO number rather than the name, review flag and ownership history, and look at port calls around the AIS gaps. Name changes plus dark periods is a well-documented evasion signature.

93You notice a colleague routinely discounting hits with minimal documentation. What do you do?

Raise it — with the colleague if appropriate, otherwise with my manager or compliance. Poorly documented discounting is exactly the failure regulators penalise, and staying silent would expose the firm and potentially me.

94A payment involves a humanitarian shipment to a sanctioned country. Can it proceed?

Possibly, but only under a licence or a specific exemption. I would not assume humanitarian purpose is sufficient on its own. I would hold, escalate, and confirm the authorisation is in place before anything is released.

95Your screening system is down and payments are queuing. What is the right response?

Payments should not be released unscreened. The correct response is to hold, invoke the manual or contingency screening procedure, and escalate the outage. Processing without screening to clear a backlog is precisely the shortcut that produces enforcement cases.

96Why do you want to work in sanctions?

Give a genuine reason. Strong answers reference the precision the work demands, the geopolitical dimension, and the fact that decisions carry real consequences. Avoid framing it as a stepping stone into something else.

97How do you cope with the pressure of time-critical decisions?

By relying on process rather than instinct — following the escalation path, documenting as I go, and accepting that holding a payment is always the safer default. Pressure is a reason to follow procedure more closely, not less.

98Tell me about a time you had to hold your position under pressure.

Use a real example with structure: the situation, the pressure applied, what you did, and the outcome. If your experience is training-based, say so honestly — invented examples fail under follow-up questioning.

99How do you keep up with a fast-changing sanctions landscape?

Automated list feeds are the operational control. Personally, I follow authority notices and enforcement actions, because enforcement shows exactly which failures regulators are penalising and where expectations are moving.

100What questions do you have for us?

Ask about the screening system and list coverage, how hits are allocated and escalated, what the false-positive rate looks like, how tuning decisions are governed, and how the team handled the most recent major designation event. These show you understand operational reality.