Resolving ambiguous sanctions and adverse-media flags on a documented basis for onboarding
Compliance / AML — EU regulated firm · subject with a cross-border profile and non-Latin-script media coverage
Composite and anonymised engagement. No real client, party, or figure. Lawful, open-source methods only. GDPR-aware. Illustrative of a typical engagement.
Situation. During onboarding, a compliance team’s automated screening flagged a prospective client against both a sanctions match and a body of adverse media. The hits were ambiguous: enough to stop the onboarding, not enough to decide it. The team needed the flags resolved on a documented basis.
What we did. Conducted a structured sanctions, PEP and adverse-media review across the relevant jurisdictions and languages, separating genuine risk from false positives and assessing the reliability of each source.
Outcome. We established that the sanctions hit was a false positive against a namesake, while confirming one genuine area of adverse exposure and discounting the rest as recycled coverage. The team made a documented onboarding decision with the reasoning preserved for audit.
For the decision-maker
A screening tool that returns a sanctions hit and a page of negative articles has not done the hard part. It has raised the question, not answered it. Onboarding cannot proceed on an unresolved flag, and it should not be abandoned on one either. Our client needed to know which of these signals were real.
We scope this work to the decision the compliance team must make and record: is this person who the match suggests, is the adverse coverage substantiated, and what genuine risk remains once the noise is removed. We then resolve identity carefully, read the coverage in its original languages, and weigh each source on its reliability rather than its volume.
What the team receives is a clear, auditable resolution of every flag: which were false, which were real, and how each conclusion was reached. Here, the sanctions match belonged to a different individual with the same name, the bulk of the adverse coverage collapsed under examination, and one genuine concern remained and was reported as such. That let the team onboard the client with conditions, on a basis it could defend to a regulator.
For the practitioner
Complication 1 — a false-positive match that still required checking for nexus. The sanctions hit matched a sanctioned namesake, not the subject. Confirming that took disambiguation across corroborating attributes rather than a single date or spelling. Clearing the direct match was not the end of it: we then checked whether the subject had any indirect connection to sanctioned parties through ownership or association, because a false name match and a genuine nexus can coexist. None was established, and we documented the exclusion to the same standard we would have applied to a positive finding. A cleared flag is only useful if the clearing is itself defensible.
Complication 2 — adverse media that was thinner than it looked. The negative coverage existed largely in regional, non-Latin-script outlets of varying reliability. Read at face value and in translation, it suggested sustained adverse attention. On examination, most of it traced to a single original allegation, recycled across outlets that presented it as independent reporting. What looked like a body of coverage resolved to one unverified claim amplified many times. Separately, one substantive item had since been removed from its original source and survived only in archived form. We weighted the recycled material accordingly, preserved the archived item as a corroborating reference rather than proof, and reported the one genuine concern distinctly from the noise around it.
The discipline that matters here is weighing sources, not counting them. Identity was resolved on corroborated attributes. A sanctions match and a sanctions nexus were treated as different questions and answered separately. Coverage was assessed by reliability and provenance rather than volume, and removed sources were handled transparently. The result is a reputational picture the team can rely on: the real risk named, the false signals cleared, and the basis for each conclusion preserved for review.