Profile Watchlist Management

Overview#

A compliance analyst at a financial institution is reviewing a batch of new account applications. One applicant's name is a close but not exact match to an entry on the OFAC SDN list: different spelling, same date of birth, same nationality. A strict exact-match screening engine would miss it. A well-tuned fuzzy and phonetic matching approach, drawing on consolidated watchlist data from multiple government sources, surfaces it as a potential match for review.

That is the core problem the Profile Watchlist Management module addresses: finding the matches that matter without drowning analysts in false positives. It aggregates sanctions lists, PEP databases, and adverse media sources continuously, applies multi-layered matching, and routes confirmed and potential matches to the right reviewers with the right level of urgency.

Open Standards#

• FollowTheMoney (FtM) data model: Watchlist entity data is ingested from OpenSanctions nightly bulk feeds in the FollowTheMoney newline-delimited JSON format, which defines the entity schema, property vocabulary, and relationship types used throughout the screening database.
• OpenSanctions open dataset: The primary sanctions and PEP reference catalogue is drawn from the OpenSanctions consolidated dataset, which aggregates and normalises data from OFAC (US Treasury), EU FSF, UN Security Council, UK HMT, and other authoritative lists into a single queryable corpus.
• OFAC SDN and Consolidated Sanctions Lists: The US Office of Foreign Assets Control Specially Designated Nationals list is a first-class source; OFAC entity identifiers, programmes, and match criteria are preserved and surfaced directly in screening results and compliance reports.
• FATF AML/CFT Recommendations: The screening audit trail, mandatory PEP tiering, and continuous-monitoring workflows are designed to satisfy the Financial Action Task Force customer due-diligence and record-keeping obligations; the screening history table is explicitly annotated for FATF regulatory compliance.
• GraphQL: All screening queries, watchlist mutations, and compliance report generation are exposed via a GraphQL API, with typed inputs, enumerations, and result types conforming to the GraphQL June 2018 specification.
• ISO 3166-1 alpha-2: Nationality and jurisdiction fields on sanctioned entities are stored and filtered using two-letter country codes throughout the entity schema and PEP classification system.
• LEI / ISIN / SWIFT BIC: Legal Entity Identifier, International Securities Identification Number, and SWIFT Business Identifier Code are extracted from FtM entity properties and stored as typed identifiers, enabling screening of financial counterparties by their regulated instrument identifiers.

Last Reviewed: 2026-02-05 Last Updated: 2026-04-14

Key Features#

• Multi-Source Watchlist Aggregation: Data is aggregated from government sanctions lists, PEP databases, and adverse media sources across multiple jurisdictions worldwide, with automated synchronisation ensuring data freshness through real-time, hourly, and daily update cycles with version control and conflict resolution.
• Real-Time Sanctions Screening: A high-throughput screening engine evaluates entities against consolidated watchlist data using configurable match thresholds, supporting person, organisation, vessel, and aircraft entity types with detailed match confidence scoring and field-level matching breakdowns.
• Advanced Matching Algorithms: Multi-layered matching combines exact name and identifier matching, fuzzy matching with edit distance and similarity scoring, and phonetic matching using multiple algorithms to maximise detection accuracy while minimising false positives across different languages and naming conventions.
• PEP Detection and Classification: Politically exposed persons are identified and classified by category, level, and jurisdiction, with tiered risk assessment covering current and former office holders, family members, and close associates, supported by ongoing position change monitoring across countries worldwide.
• Automated Continuous Monitoring: Entity profiles are continuously monitored against watchlist updates with configurable alert triggers for new matches, status changes, risk score increases, adverse media, sanctions additions, and relationship alerts, with severity-based routing and SLA-driven response workflows.
• Custom Watchlist Management: Organisations create and manage internal watchlists for investigation subjects, high-risk customers, suspicious vendors, known fraudsters, and other categories, with bulk import, approval workflows, expiry dates, sharing controls, and complete audit trails.
• Alert Prioritisation and Routing: Generated alerts are automatically classified by severity with configurable routing rules, delivering critical sanctions alerts for immediate action while routing lower-priority findings to appropriate review queues with SLA tracking and escalation policies.
• Automated Compliance Actions: Confirmed watchlist matches trigger configurable automated responses including account restrictions, transaction controls, enhanced due diligence workflows, investigation case creation, and compliance workflow initiation based on match type and severity.

Use Cases#

• Customer Onboarding Screening: New customers are screened against sanctions lists, PEP databases, and adverse media sources during onboarding, with match results informing risk classification and determining the appropriate due diligence level before account activation.
• Ongoing Regulatory Monitoring: Existing customer portfolios are continuously monitored for changes in sanctions status, PEP designations, and adverse media coverage, with automated alerts ensuring timely compliance response to regulatory developments.
• Investigation Subject Screening: Investigators screen persons and organisations of interest against comprehensive watchlist data to identify sanctions exposure, political connections, and adverse information relevant to active cases.
• Third-Party and Vendor Due Diligence: Compliance teams screen vendors, suppliers, and business partners against sanctions and PEP databases to identify prohibited relationships and assess counterparty risk before establishing commercial arrangements.
• Custom Internal Watchlists: Organisations maintain internal watchlists of subjects under investigation, terminated customers, known fraud actors, and other categories requiring enhanced monitoring, with automated screening of new entities against these custom lists.
• Regulatory Reporting: Comprehensive screening records, match documentation, and alert resolution histories provide audit-ready evidence of compliance with sanctions screening obligations for regulatory examinations and reporting requirements.

Integration#

The Profile Watchlist Management module integrates with the platform's profile management, risk scoring, investigation management, and alert management systems. Screening results feed into entity risk profiles and due diligence workflows, monitoring alerts connect to case management and compliance workflow systems, and watchlist data integrates with entity resolution for improved matching accuracy. Custom watchlists synchronise with investigation workspaces, and audit records feed into compliance reporting systems.