Sanctions and PEP Screening in the Netherlands

A Dutch investment firm learns that a customer's new owner is a former ambassador. A payment team finds a similar name on a sanctions list. Both need an investigation, but the decisions are different: one concerns PEP due diligence; the other may involve a legal prohibition.

Sanctions and PEP screening in the Netherlands starts with knowing whose identity you are checking, which rules apply to your activity and what the result means. This guide covers the European Netherlands, not the separate Wwft BES framework for the Caribbean Netherlands.

Start with your Dutch legal and supervisory scope

The Dutch Money Laundering and Terrorist Financing (Prevention) Act, known as the Wwft (Wet ter voorkoming van witwassen en financieren van terrorisme), sets customer due-diligence and unusual-transaction reporting obligations for the institutions and activities within Article 1a. A business is not subject to every Wwft duty merely because it operates in the Netherlands. Banks, investment businesses and specified non-financial professions must establish their own statutory scope and supervisor.¹

Sanctions are a separate question. Applicable EU restrictive measures and Dutch sanctions rules can prohibit dealings beyond the Wwft population. For financial institutions covered by the Regeling toezicht Sanctiewet 1977, specific controls and notification duties also apply. AFM and DNB supervise different populations; FIU-Nederland receives and analyses unusual-transaction reports, rather than acting as the general Wwft supervisor.²

Keep three things clear in the procedure: what the law requires, how relevant supervisory guidance explains it, and where the company adopts additional controls. A stricter internal risk appetite can extend checks, but cannot relax a sanctions prohibition.

Rules reviewed: 13 November 2026. The proposed Wet internationale sanctiemaatregelen remains a bill in the parliamentary record reviewed. Do not implement its proposed reporting arrangements as though they have already replaced the current system.³

Decide which people and companies to check

Start with the customer and the people identified through customer due diligence. For an ordinary Dutch BV, the implementing decree includes natural persons holding more than 25% of shares, voting rights or ownership interest, as well as control through other means. Other legal forms have their own tests. A percentage alone does not complete the ownership investigation.⁴

The customer’s UBO record and the sanctions ownership/control assessment answer different questions. A person below the UBO percentage can still matter to a sanctions assessment. Conversely, identifying a sanctioned minority shareholder does not by itself settle whether all company assets must be frozen: assess the applicable restriction, ownership, control and benefit to the listed person.⁵

The table is a practical way to organise checks. It does not replace the sector-specific definition of a relationship or make every director a UBO. For the wider ownership process, see UBO and related-party screening.

Check the designation and the underlying restriction

AFM's guidance identifies the EU sanctions list, UN sanctions list and Nationale sanctielijst terrorisme for institutions within its stated scope. The Dutch national terrorism list is a separate source to check, not simply another name for the EU list.⁶

A candidate profile helps locate the underlying designation. Read the relevant measure to establish what is prohibited, which funds or economic resources are affected and whether an exception or authorisation is relevant. Goods, services, destination and sectoral restrictions may apply even when no party name appears in the search results. The EU sanctions list overview explains that distinction in more detail.

Where a transaction has a US, UK or other jurisdictional connection, assess those rules separately. Additional lists may also be part of company policy or contractual requirements. Record why each source is included; do not assume a Dutch registration removes other applicable obligations.

Apply Dutch PEP measures to the right person

Dutch rules cover domestic and foreign politically exposed persons. Article 2 of the Uitvoeringsbesluit Wwft 2018 includes roles such as ministers, members of parliament, senior judges, ambassadors and specified senior positions in state enterprises and international organisations. It also defines relevant family members and known close associates. Establish the actual office or connection instead of relying solely on a database label.⁴

Where a customer or beneficial owner qualifies as a PEP, Wwft Article 8 requires senior-management approval, appropriate measures to establish the source of wealth and the source of funds involved in the relationship or transaction, and enhanced ongoing scrutiny. The statutory provisions also address qualifying family members and known close associates.⁷

A PEP result is not a sanctions designation or evidence of misconduct. The intensity of the checks should reflect the circumstances while meeting the required measures. If the company applies additional checks to other political connections, identify those as its own risk policy.

When the person leaves the public function, Article 8(8) requires appropriate risk-based measures for at least 12 months, and as long as needed until the PEP-related higher risk no longer exists. Twelve months is not an automatic clearance date. If a customer or UBO becomes, or is discovered to be, a PEP during the relationship, Article 8(10) requires action without delay.⁷

For evidence to request after a confirmed PEP identification, use the source of funds and source of wealth guide.

Recheck when facts or lists change

An onboarding search cannot cover a designation made next month. AFM describes continuous screening of relationships and recommends a system that addresses onboarding, relationship changes, list changes and the end of a relationship. Its guidance allows the practical screening moments to depend on the institution and relationships.⁶

Build these events into the process: a new owner, a different authorised representative, updated identifiers, a new designation or a newly identified public role. Periodic customer-file reviews complement those events; a low AML risk rating does not permit a sanctions breach. Set timing and escalation responsibilities that let the team respond before a prohibited dealing occurs.

Investigate a candidate before clearing it

Compare the customer information with the source record: full name, aliases, birth details, addresses, registration numbers, public role and relevant dates. Check whether apparent differences are reliable or merely missing, approximate or outdated information.

Where the evidence is insufficient, keep the identity question open and escalate promptly. Follow the appropriate transaction controls while it is unresolved; do not clear the result because the customer is waiting. Where the evidence supports a different identity, record the reasons and sources. A confirmed sanctions match then needs a separate assessment of the restriction and affected assets or activity.⁸

Separate sanctions notifications from FIU reporting

For institutions under the relevant supervisory regime, a confirmed sanctions hit must be notified without delay to the appropriate supervisor. DNB's guidance explains its route; AFM describes reporting for its own supervised population. Follow the applicable freezing and prohibition requirements promptly. Do not return frozen funds or close an account as a way around the restriction.⁸²

Wwft reporting is different. Article 16 requires reporting an executed or intended unusual transaction to FIU-Nederland without delay after its unusual nature becomes known. Apply the indicators for your reporting group: there is no single €15,000 rule for every Dutch institution or transaction. FIU-Nederland assesses unusual transactions and may designate them suspicious.⁹

A report is neither a sanctions licence nor a routine request for FIU permission to proceed. Assess transaction execution separately under the applicable law and any authority instruction. Since 1 July 2026, Wwft Article 17a gives FIU-Nederland a distinct power to request temporary suspension of transactions; institutions must comply without delay. Keep such a request separate from the fact of having submitted a report.¹⁰

Wwft Article 23 governs confidentiality around reporting. Article 17a separately requires informing the customer of a suspension under that provision. Have compliance handle that communication without disclosing a confidential report.¹

Three examples of decisions worth documenting

These examples are fictional; they do not describe actual listed people or Checklynx customers.

A similar name with incomplete identifiers

A customer's name resembles a designated person's, but the source has no full birth date. The analyst cannot treat the missing date as a mismatch. They request relevant identifiers, examine aliases and source details, and escalate the unresolved identity question. The record shows what remains unknown and who owns the next action.

A new owner who is a former ambassador

A BV previously had two owners with 60% and 40%. The second owner sells the whole 40% stake to an ambassador who left office two months ago. The team verifies the new UBO's identity, office and departure date, screens the supplied information and applies the relevant PEP measures. It separately assesses sanctions ownership/control. The file records approval and source-of-wealth/funds work; it does not label the company sanctioned because an owner is a PEP.

An existing individual customer becomes a minister

The team confirms the appointment against an official source and matches the minister to its individual customer. It applies the required PEP measures without delay, obtains senior approval and updates ongoing scrutiny. It records the appointment date and the evidence. The appointment alone does not trigger a sanctions freeze or an unusual-transaction report.

Keep a record another analyst can follow

Use the correct retention clock. Wwft Article 33(3) generally requires the specified CDD records for five years after relationship termination or the relevant transaction. Article 34(2) requires unusual-transaction reporting records and the FIU receipt to be kept for five years from filing and receipt respectively. AFM's guidance also explains the distinct sanctions-report record rule. Do not give every document one automatic deletion date.¹¹

Limit personal data to what the purpose requires, protect access and document the applicable basis and retention requirements. The GDPR and screening guide covers the broader privacy questions.

Test screening software against your Dutch process

Use representative customers and identified owners to test the sources, matching and review process you need. Include common names, incomplete identifiers, ownership changes and former public roles. Verify dataset scope and update handling rather than assuming that “global coverage” answers every Dutch requirement.

Checklynx brings source records together into enriched profiles, giving analysts structured information to compare with the person or company they are checking. That context can help resolve false positives and reduce repeated review work. The team still decides identity, legal consequences and escalation.

Explore sanctions screening, PEP screening and pricing against the same test population and requirements.

Frequently asked questions

Is every Dutch business subject to the Wwft?

No. Establish whether the institution and activity fall within Article 1a. Applicable sanctions prohibitions remain a separate assessment.

Can a PEP customer be accepted?

PEP status alone is not a prohibition. Apply the required due diligence, senior approval and ongoing scrutiny, alongside the company's risk policy and any other applicable restrictions.

Does a clear EU name search settle Dutch sanctions compliance?

No. Check the relevant national and international sources, and assess ownership, control and activity restrictions separately.

Does reporting to FIU-Nederland release a blocked payment?

No. A report does not override a sanctions freeze or another applicable restriction. A specific FIU suspension request also has its own legal requirements.