What to do after a sanctions screening match: a UK firm checklist

The short answer: investigate before you clear or act

When a client or other relevant party returns a UK sanctions alert, preserve the result, identify the person and the proposed work, and compare the available identifiers with the current UK Sanctions List entry. Keep any affected payment, transfer or service decision on hold while a plausible match remains unresolved. Escalate promptly to the person who can assess the applicable restriction and reporting duty. Record why the result was cleared, remains open or is treated as a likely target match. The exact legal action depends on the facts and the sanctions regime; a software alert alone does not establish a breach.^[1]

OFSI distinguishes a name match from a target match. A shared name does not necessarily identify the listed person. If the details match all the information in the list, OFSI says a target match is likely; if you remain unsure after consulting the list, you can contact OFSI. This distinction matters for a small practice: clearing every alert automatically creates a blind spot, while treating every similar name as a confirmed designation can needlessly disrupt a client matter.^[1]

This guide is about the first review and decision record after a financial-sanctions screening alert. It does not determine whether your firm has a separate money-laundering suspicion, whether a trade-sanctions rule applies, or whether particular client information is privileged. Those questions need their own route through your firm.

Preserve the alert and identify the decision at risk

First capture the exact name searched, any aliases, search time, source or provider, list entry, available identifiers and the person who received the alert. Keep the original result as well as later searches. If the result came from a batch or an integration, check that it was a completed search against the intended source, not a failed request or a stale export. An empty result and an incomplete check should never share the same outcome label.

Then state what the practice is about to do. An accountant may be accepting a new tax engagement, submitting a filing, handling payroll or paying a third party. A solicitor may be opening a matter, receiving client money or completing a property transaction. Write down the specific action, who would receive funds or services, and its deadline. That makes a hold proportionate and gives the reviewer enough context to assess the applicable prohibition.

Where the alert is plausible and the next step could make funds, economic resources or a prohibited service available, stop that affected step pending review and tell the appropriate internal decision-maker. This is a prudent workflow recommendation, not a claim that every fuzzy name hit legally requires the whole client relationship to be frozen. OFSI says the prohibitions depend on the regime and advises checking the current legislation for the case.^[1]

• Save the original query, source, timestamp and matching list entry.
• Record which transaction, payment, filing, engagement or matter milestone is pending.
• Assign an owner and a time for the next review; do not silently mark an open alert as passed.

Compare identifiers, not just spellings

Open the current UK Sanctions List record and compare the fields it actually contains. OFSI lists possible identifiers including aliases, date and place of birth, nationality, passport or national ID details, address and position. A difference in a reliable identifier can help explain a false name match; a missing field is simply missing evidence. Do not invent a date of birth, treat a shared country as confirmation or assume that a vendor similarity score is a legal conclusion.^[1][2]

Ask whether the name searched is a legal person, an individual, a trading style or an intermediary. A company number, incorporation jurisdiction and documented former name may be more useful than punctuation or word order. If a receptionist entered a shortened name, repeat the search with the full legal name and relevant known aliases, while retaining the first result. If the client supplies new identity details, note where they came from and whether they were independently checked.

A defensible clearance note is specific: it says which identifiers differ, why the source is reliable, what was unavailable and who approved the decision. “Different person” without the comparison is hard to audit. Equally, a slight spelling difference is not enough to dismiss a plausible result where another identifier aligns. OFSI gives an example of a close name and similar birth date that may indicate a new alias and says OFSI should be contacted immediately in that scenario.^[1]

If the evidence remains mixed, leave the case unresolved and obtain a second review or specialist advice. Ask for information that answers a defined question rather than repeatedly running the same name through different search settings. Record any material discrepancy and the next step; an unresolved case should have an owner and a deadline, not disappear into an inbox.

For a company alert, examine ownership and control separately

A clear search for the client company does not rule out financial-sanctions exposure. OFSI explains that an entity owned or controlled, directly or indirectly, by a designated person can be subject to an asset freeze and some financial-services restrictions even if the entity is not named on the list. The general guidance includes more than 50% of shares or voting rights, board appointment rights and a wider factual-control test. Which restriction applies still depends on the regime.^[1]

Map the chain between the client and the people or entities above it. Record each intermediate company, the source and date of its ownership information, any relevant voting or appointment rights, and any unexplained control arrangements. If the alert concerns a parent, director or apparent beneficial owner, do not convert a no-match result for the operating company into a positive clearance of the whole structure. A Companies House filing can support the assessment, but it may not answer every current control question.^[1][3]

Separate the identity question from the control question in the case note. You may be confident that the person on the list is the same as a shareholder while still needing to establish whether that person controls the client. Conversely, a name alert against a director may be a false positive even though the wider ownership review is incomplete. These are different conclusions and should not be collapsed into one traffic-light status.

Decide what can proceed and who must be told

For each result, record one of three operational outcomes: reasonably cleared as a different person; unresolved and held for further investigation; or likely target match requiring immediate restrictions and legal assessment. These labels are an internal workflow aid, not OFSI classifications. A reviewer should state the evidence, the work affected, the regime or list entry considered and the action authorised. A senior sign-off is especially useful when there is a deadline or client money.

Where an asset freeze applies, OFSI explains that dealing with frozen funds or economic resources and making funds or economic resources available to a designated person are generally prohibited unless an exception or licence permits the activity. Freezing means preventing access or dealings; it does not mean taking ownership of the assets. Check the precise rule, any exception and licence terms before changing a payment or releasing property. A contemplated application for a licence is not itself permission to proceed.^[1]

Accountancy and legal firms can be “relevant firms” for OFSI reporting. Under the UK financial-sanctions regimes described by OFSI, a relevant firm must inform OFSI as soon as practicable when, through its business, it knows or reasonably suspects that a person is designated or has breached specified sanctions obligations. The report needs the basis for the knowledge or suspicion and identifying information; if the designated person is its customer, the firm must also state the nature and amount or quantity of funds or economic resources it holds for them. Check the applicable regulations and seek legal advice if the duty is uncertain.^[1][4]

OFSI directs reports about a suspected designated person, frozen assets and suspected breaches to its relevant online forms. Its suspected-breach form asks for a narrative and supporting facts, including the regime, people involved, transaction details and when the issue was discovered. Keep a copy of what was reported, when and by whom. For solicitors, legal professional privilege requires a careful assessment of the information concerned; OFSI says the reporting rules do not require disclosure of privileged information and cautions against a blanket privilege assertion.^[1][5]

A UK financial-sanctions question is not automatically an OFSI-only question. A legal practice should consider its SRA duties and whether a separate suspicion calls for an anti-money-laundering report; an FCA-regulated business should consider its FCA notification duties. Trade sanctions and services restrictions may need a different authority and analysis. Route those issues to the appropriate specialist instead of assuming one screening alert or one OFSI form resolves everything.^[6][7]

Keep a record another reviewer can reconstruct

Store the input and original hit; the current list entry and its identifier; the comparison evidence; any ownership map; the pending work; all holds and releases; advice sought; the final rationale; and any report reference. Date each step and identify the reviewer. Where evidence changes, preserve the earlier decision rather than overwriting it. This gives a later partner or compliance officer a clear sequence of what was known at the time.

Set a review trigger where appropriate: new identity information, a changed owner, a new designation, a fresh instruction or a resumed transaction. A false-positive decision tied to a particular person and identifiers should not be copied indiscriminately to every similar name. Likewise, a previously clear client may need a fresh assessment when the facts or lists change. The UK Sanctions List has been the sole current UK designation source since 28 January 2026; do not rely on the retired OFSI Consolidated List for a fresh check.^[2]

Sanction Search can support the name search, potential-match review and evidence record for this workflow. It does not decide identity, ownership and control, legal privilege, whether to file a report, or whether a service may lawfully proceed. Use the related accountancy and solicitor guides for sector-specific onboarding points, and review the coverage and plan details before relying on a particular product workflow.

• Can a second reviewer see the original list entry and all identifiers used?
• Is the decision to clear, hold or escalate explained against the proposed work?
• Are ownership, reporting, licence and privilege questions separately assigned where relevant?
• Is there a dated record of the decision, any report and the next review trigger?