A-P08 · TOPIC · financial-sanctions-riskGRA dossier · service level R0
GRAFinancial Crime and Fraud RiskIn development
Topic dossier · Financial Crime and Fraud Risk

Financial sanctions risk

Financial sanctions freeze assets and restrict dealings with listed persons, entities and sometimes whole sectors or countries. Institutions screen customers and payments and must look through ownership and control. Evasion uses front companies, intermediaries, trade and virtual assets. This page sets out how sanctions risk arises, how compliance is measured, and which authorities and institutions decide.

01In brief

The short answer.

Financial sanctions risk is the risk that an institution deals with designated persons, entities or prohibited activities, directly or through owned entities and intermediaries. It depends on differing regimes, ownership tests and screening quality. Sanctions authorities, compliance functions, boards and customs authorities hold the decisions.

02Spatial finance

Settlement dependencies, and what fails with a node.

How a failure at one financial centre can spread through settlement links. Design links, not real dependencies.

Sixteen financial centres, and how a failure at one spreads through settlement links.Design links, not the real dependencies of any infrastructure.
03The question

Financial sanctions risk: how the risk develops.

Due diligence and exclusion policies. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

Mechanism

Regimes differ and change

UN, EU, UK, US and other regimes list different targets with different rules, and lists change quickly. Firms operating across jurisdictions must reconcile them.

Mechanism

Ownership and control hide targets

Entities owned or controlled by listed persons are often caught even if not named. Opaque ownership makes this hard to determine.

Mechanism

Evasion through intermediaries

Transshipment, front companies and third-country intermediaries route prohibited trade and payments. Detection needs trade and payment data together.

Mechanism

Screening quality decides exposure

Name screening depends on data quality, transliteration and matching rules. Too loose and alerts swamp analysts; too strict and matches are missed.

04Key terms

Terms used on this page.

Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.

TermDefinition
Designated personAn individual or entity listed under a sanctions regime and subject to its restrictions.
Sanctions screeningChecking customers and transactions against sanctions lists to identify possible matches.
LicenceAn authorisation from a sanctions authority permitting an otherwise prohibited activity.
05Indicators

What is measured, and how well.

Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.

IndicatorUnitCadenceSource typeLabel
Designations by regimecount of listed persons and entitiescontinuousOfficial sanctions listsOFFICIAL
Sanctions enforcement actionscount and penaltiesannualEnforcement authority recordsOFFICIAL
Screening alert volumesalerts per thousand transactionsperiodicFirm dataDECLARED
Assets frozencurrencyperiodicGovernment reportsOFFICIAL
Voluntary self-disclosures of breachescountannualEnforcement recordsOFFICIAL
Export control and sanctions evasion alerts issuedcountannualGovernment advisoriesOFFICIAL
06Canvas

From sources to decisions.

The topic as a computational graph: named sources feed the methods, an evidence review gates the outputs, and the decisions stay with the authorities that hold them.

Pipeline canvas · Financial sanctions risk as a run graphDesign, not a record
Financial sanctions risk: from customer due diligence to suspicious activity reportCustomer due diligence sets a risk rating; transaction monitoring scenarios raise alerts; analysts triage and investigate; the MLRO decides whether to report to the financial intelligence unit; feedback tunes the scenarios. Design of the process, not a record of a run.

Fig. 02Nodes carry their type, two metric rows and a state; connectors show what feeds what; dashed frames name the owners; the timeline is the cadence. Design of the pipeline, not a record of a run.

07Sources

Where the evidence comes from.

Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.

SourceWhat it givesLicence class
OFAC Specially Designated Nationals list and enforcement informationUnited States sanctions list and penaltiesPublic domain
UN Security Council Consolidated ListUN sanctions designationsPublic, UN terms
EU consolidated list of financial sanctionsEU designationsFree, EU reuse terms
UK OFSI consolidated list and enforcement reportsUK designations and penaltiesOpen Government Licence
OpenSanctions datasetAggregated sanctions and politically exposed persons dataCC BY-NC for non-commercial use, commercial licence otherwise
08Decisions

Who decides, and what the evidence serves.

Financial Crime and Fraud Risk prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

Who decidesThe questionEvidence this page serves
Sanctions authoritiesWhom to designate, license and penaliseIntelligence, policy aims and enforcement evidence
Firm sanctions compliance functionsHow to screen, investigate and escalateList data, ownership information and alert outcomes
BoardsWhich jurisdictions and activities to avoidSanctions exposure and enforcement trends
Trade and customs authoritiesHow to detect evasion through tradeTrade data and advisories

Outputs this topic produces

  • Guide to major sanctions regimes and their differences
  • Brief on ownership and control tests
  • Method note on screening quality and name matching
  • Questions for boards on sanctions risk appetite
09Core questions

What experts ask.

Sanctions researchers ask how compliance works when regimes overlap and change quickly.

  • How do multiple, overlapping sanctions regimes affect institutions operating across jurisdictions?
  • How effective is screening, and how are false positives and negatives managed?
  • How do evaders use ownership structures, intermediaries and trade to circumvent sanctions?
  • How do institutions decide on exclusion policies that go beyond legal requirements?
  • How do sanctions obligations interact with competition law when firms discuss common approaches?
10Mechanisms and drivers

Legal obligation, not industry choice.

Sanctions are imposed by governments and international bodies, each with its own lists, scope and enforcement. Institutions must comply with the regimes that apply to them, which may include regimes with extraterritorial reach. Screening matches names against lists, but evaders use front companies, complex ownership, false documentation and trade misdescription to disguise sanctioned parties.

Some institutions adopt exclusion policies beyond legal requirements, for risk or reputational reasons. Such decisions must be made individually by each firm. Industry discussion of sanctions is lawful when it concerns understanding obligations and typologies, but coordinated decisions by competitors to exclude particular customers or markets, beyond what the law requires, could raise competition concerns.

11Methods and data

How the evidence is built, and where it stops.

  1. 01

    Regime comparison

    Comparing sanctions regimes and their scope. Regimes change frequently.

  2. 02

    Screening analysis

    Evaluating name matching and ownership analysis with data engineering. Data quality limits accuracy.

  3. 03

    Evasion typologies

    Studying evasion methods with network science. Detected cases may not be representative.

  4. 04

    Legal analysis

    Examining interaction of sanctions and competition law. Requires jurisdiction-specific counsel.

12Methods

How it is studied, and what the methods cannot say.

14Questions

Questions and answers.

What does an asset freeze mean?
That funds and economic resources owned or controlled by a designated person must not be dealt with or made available to them, subject to licences.
What is the ownership rule?
Rules in several regimes that treat entities owned or controlled by a designated person as subject to sanctions even if not listed themselves, with thresholds that differ.
How do sanctions regimes differ?
They list different targets, use different ownership tests and have different licensing and enforcement approaches, so firms must apply each that binds them.
Can GRA tell firms whom to exclude?
No. Exclusion decisions beyond legal requirements are for each firm to make individually. GRA does not coordinate such decisions, consistent with its designed competition safeguards.
Does GRA provide sanctions screening?
No. GRA is not a law enforcement body, financial intelligence unit or regulator. It does not investigate cases, receive reports of suspicious activity, screen customers or hold customer data.
Why do sanctions and competition law meet?
Because firms discussing sanctions together must stay within discussion of legal obligations and typologies, and avoid agreeing on commercial exclusions.
Financial Crime and Fraud Risk

Bring your expertise to this field.

The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.

Skip to toolbar