Sanctions List Screening: Obligation, Process and Treasury Software for Mid-Sized Companies
- Jul 17
- 8 min read
An international payment is ready for authorisation. The invoice verification process has been completed and the payment has been authorised. However, the payee has not been checked against current sanctions lists.
This gives rise to several risks for a company. The consequences extend beyond an abstract compliance issue. There may be specific risks relating to payment, liability and reputation.
This is why sanctions list screening are carried out. Sanctions lists include companies and individuals against whom sanctions have been imposed. Business relationships and payments to these companies are prohibited.
Sanctions lists are especially relevant for CFOs and treasury teams. As they work with payments and bank data every day, suppliers, customers and business partners must be checked carefully.
In this article, we explain what sanctions list screening is and how to implement it in line with regulations.
What Is Sanctions List Screening?
Sanctions list screening is the comparison of personal or company data with official sanctions lists. The aim is to determine whether a business partner is affected by international sanctions.
This helps companies avoid prohibited business relationships and payments. Sanctions list screening is an important part of compliance, risk management and treasury processes.
Before a payment transaction, the following data is checked against sanctions lists:
Name,
Company name,
Address,
Date of birth,
Account data,
Payment beneficiaries,
Business partner master data.
The transaction may only be carried out if there is no match on a sanctions list.
Is Sanctions List Screening Mandatory?
The rules do not prescribe a uniform, technically-defined process for sanctions list screening. However, companies must ensure that transaction partners cannot be found on any sanctions list. If this is violated, companies must expect fines and legal consequences.
Companies must therefore implement a suitable internal process for sanctions list screening. During audits, responsible persons must be able to provide the relevant documentation. The following is checked:
When was the check carried out?
Which lists were checked?
In the event of a match: Who assessed the match?
Why was a payment released or blocked?
What Is the Legal Basis for Sanctions List Screening?
The legal basis for sanctions list screening is based on EU sanctions regulations, embargo rules and anti-terrorism measures. These rules apply directly in all EU Member States.
BAFA is the Federal Office for Economic Affairs and Export Control. It is especially relevant for sanctions list screening. It does not issue sanctions, but explains how they should be implemented. On the BAFA website, you can find:
Embargoes against certain countries
Personal sanctions
Prohibitions on making funds available
Export restrictions
Compliance requirements
Which Sanctions Lists Must Companies Check?
There is no single sanctions list that is sufficient for every company. The lists that must be checked depends on the business model, business partners, countries, currencies and transactions. For German companies, the following lists are especially relevant:
List | Issuer | When relevant? | Meaning for Finance |
EU Consolidated Financial Sanctions List | EU | For all companies in the EU | Central list for financial sanctions |
FiSaLis (Financial Sanctions List) | Federal Office of Justice | For German companies | Access to relevant financial sanctions |
EU Sanctions Map | EU | Research and classification of sanctions | Overview of sanctions by countries and regimes |
UN Sanctions Lists | United Nations | International business relationships | Global sanctions and counter-terrorism |
OFAC / SDN List | US Department of the Treasury | US connection, USD payments, US business partners | Especially relevant for international payments |
If you are unsure, BAFA provides free resources. The consolidated EU list, FiSaLis and the EU Sanctions Map are considered important sources of information. However, be careful here. The lists may not be up to date or may only be available in modified form. In the end, only the published legal texts in the Official Journal of the EU and the Federal Gazette are legally binding.
Who Must Be Screened?
Sanctions list screening should cover all people and companies with whom a company is in contact with. The screening is not limited to new customers or new suppliers.
Sanctions lists are updated continuously. For this reason, existing business partners should also be checked regularly. The most important target groups for screening are as follows:
Target group | Why is it screened? |
Customers | To avoid business with sanctioned people or companies |
Suppliers | Prevention of unauthorised payments and supply relationships |
Contract parties | Ensuring that business relationships comply with the law |
Payee | Avoiding payments to sanctioned parties |
Banks | Prevention of transactions via financial institutions subject to sanctions |
Payment service provider | Ensuring that payment processing complies with the rules |
Freight forwarders | Preventing non-compliance in the export and logistics process |
Insurance company | Securing international business with compliant partners |
Retailers and distribution partners | Avoiding indirect business relationships with parties subject to sanctions |
Staff | Risk minimisation in sensitive roles and regulated sectors |
Managing Director | Identification of sanctioned decision-makers |
Shareholder | Identification of shareholdings held by sanctioned persons |
Beneficial Owners (UBOs) | Prevention of indirect supplies to sanctioned persons |
Subsidiaries | Consistent compliance across the group of companies |
Existing customers and existing suppliers | Sanctions lists are constantly changing, so regular checks are necessary |
How Does Sanctions List Screening Work in Practice?
Anyone carrying out manual sanctions list screening usually follows these steps:
Identify the person or organisation to be checked
Clean and complete master data
Determine relevant sanctions lists
Carry out the comparison
Check hits or name similarities
Document false positives
Escalate real or unclear hits
Release, stop or block the payment or business process
Document the result in an audit-proof way
Define repeat checks
The manual process is time-consuming and highly prone to errors. For this reason, more and more companies rely on integrated software. Before every payment, they automatically check sanctions lists. If there is a match, the system alerts the responsible people.
How Often Must Sanctions List Screening Be Carried Out?
In principle, sanctions list screening should take place before a transaction with every new person the business is involved with. Checks should be carried out:
Before contract is concluded
Before payment approval
When bank data or recipient data changes
For ongoing business relationships, existing people should also always be checked. How often sanctions list screening should be carried out is not universally regulated.
The Düsseldorf Chamber of Industry and Commerce points out that sanctions lists can be subject to almost daily changes. It recommends recording all checks in a suitable form, even for long-standing business customers.
What Happens in the Event of a Match?
In the event of a match, two scenarios can occur. First, there may be a false positive. This means that the system has incorrectly produced a hit. This often happens when company names are similar. In this case, a second check is needed before the payment is approved.
The identification features should be checked again. It is advised to involve people from management and the legal department. The decision should then be documented precisely.
The second case is that the match may actually correspond to the sanctions list. In this case, the business process must be stopped immediately and the responsible authorities should be contacted.
Typical Mistakes in Sanctions List Screening in Mid-Sized Companies
Common mistake | Risk to the company | A better solution |
Assessment only during onboarding | Business partners may be added to a sanctions list at a later date and remain active without anyone noticing | Regular or automated checks on all active business partners |
Suppliers are not vetted | Prohibited business relationships and payments to sanctioned entities | Supplier vetting from the outset and on an ongoing basis throughout the business relationship |
Payees are not verified | Risk of unauthorised payments despite correct invoice approval | Integrate sanctions list checks immediately before payment authorisation |
Outdated sanctions lists | Hits are missed because new sanctions are not taken into account | Automatic updating of all relevant sanctions lists |
No clear responsibility | Unclear responsibilities in the event of hits and approvals | Defined roles and approval processes for compliance and treasury |
Manual Excel lists without versioning | High effort, error risk and lack of traceability | Central software solution with automatic logging |
False positives are not documented | Repeated manual checks and missing evidence during audits | Documented hit assessment with traceable reasoning |
No check before payment approval | Payments may be executed despite existing sanctions | Automated screening in the payment process before approval |
No audit trail | Evidence for auditors, banks or authorities is missing | Audit-proof documentation of all checks and decisions |
ERP, treasury and banking systems work separately | Data must be checked several times and media breaks occur | Integration of sanctions list screening into existing systems |
Business partner data is maintained decentralised | Different data statuses increase the risk of errors | Central master data basis as a single source of truth |
Hit processing takes place by email | Decisions are difficult to trace and not audit-proof | Structured workflows with documented approvals and escalations |
Manual, Online or Automated: Which Solution Fits?
Criterion | Manual Online Check | Sanctions List Screening Software | Treasury-Integrated Screening |
Suitable for | Individual checks and low case numbers | Regular compliance checks | Companies with high payment volume and treasury processes |
Costs | Mostly free | Licence costs | Part of a treasury or payment platform |
Screening effort | High | Low | Medium |
Updating lists | Manual | Automatic | Automatic |
Checking existing data | Only with high effort | Automated possible | Automatd and ongoing |
Check before payment approbval | Manual | Often only via separate processes | Directly in the payment workflow |
Match processing | Manual | Often only via separate processes | Directly in the payment workflow |
Documentation | Separate filing required | Automatic logging | Complete documentation including payment reference |
Audit Trail | Often incomplete | Available | Complete and audit-proof |
ERP-Integration | None | Often available | Usually fully integrated |
Banking integration | None | Partially available | |
Scalability | Low | High | Very High |
Risk of manual errors | High | Reduced | Reduced |
Evidence for auditors | Time-consuming | Well documentable | Especially easy to trace |
Advantage | Fast and free for individual checks | Systematic compliance screening | Control directly where the risk arises: in master data, approvals and payments |
Disadvantage | Time-consuming, error prone and hard to scale | Often a separate solution alongside treasury and ERP | Higher implementation effort |
How Treasury Software Supports Sanctions List Screening
Integrated treasury software makes the process of sanctions list screening easier. The software centralises bank data for all customers and suppliers. Checks are carried out automatically on an ongoing basis. This gives companies more security in everyday payment processes.
Financial Navigator embeds compliance-relevant controls into payment and finance processes. This means the Treasury Management System does not replace legal assessment. However, it can help carry out checks more consistently, with better documentation and more efficiently. For finance departments, this means among other things:
Higher transparency
Security in payment transactions
Complete audit trails
Role-based rights management
Bank and ERP integration
secure payment approvals.
Automatic Comparison Before Payment Approval
Before payments can be approved, treasury software compares the data with sanctions lists. This automatic check is especially important because it protects against incorrect transactions. Automation reduces manual errors and helps prevent fraud.
Documentation and Audit Trail
Treasury software documents all processes related to sanctions list screening. This includes, among other things:
Checked person or organisation
Date and time
List or source used
Screening result
Hit assessment
Responsible person
Approval or escalation decision
In later business audits, it is important to be able to provide this information. The documentation also helps track payment processes.
ERP and Bank Integration for Less Manual Work
Treasury Management Systems integrate all ERP and bank data into a single system. This reduces manual exports and unclear displays. The system provides a central control point through which all transactions pass. This increases the efficiency of the finance department without major IT effort.
Checklist: Setting Up Sanctions List Screening Correctly in Mid-Sized Companies
With this concrete checklist, you can carry out sanctions list screening in a more structured way:
Define relevant sanctions risks
Analyse affected countries, currencies and business partners
Define relevant sanctions lists
Define target groups to be checked
Determine screening points: onboarding, contract conclusion, payment approval, existing partner screening
Clarify responsibilities between Finance, Treasury, Legal and Compliance
Define hit process and escalation paths
Define documentation obligations internally
Reduce manual processes and Excel files
Check software or treasury integration
Conclusion: Sanctions List Screening Belongs in Controlled Finance Processes
Sanctions list screening is not an isolated compliance step or a side process in Excel. It is a control process that should take place in a scalable, traceable way and as close as possible to the payment process, especially in mid-sized companies.
Anyone who makes mistakes may face legal consequences. With specialised sanctions list screening software or solutions integrated into treasury software, checks can run quickly, legally securely and efficiently.
Manage Sanctions List Screening More Efficiently in Treasury. Learn how Financial Navigator centralises treasury and payment processes, reduces manual screening effort and makes compliance-relevant evidence more transparent.
