A law firm can clear a prospective client at intake and still encounter new sanctions questions when a matter opens, ownership information changes, a counterparty appears, a third party funds the work or client money is due to move.
The operational question is:
Which supplied client and matter parties enter sanctions screening, at what event, with which identifiers, and who owns the separate identity and legal decisions?
This guide maps that lifecycle. It does not replace the practical sanctions-screening guide, jurisdiction-specific legal analysis or professional advice on a live matter.
Keep the legal-services controls separate
Client intake, conflicts checking, CDD, source-of-funds work, matter-risk assessment, sanctions screening and sanctions legal analysis may use the same client or matter data, but they answer different questions. A completed conflicts or CDD check is not sanctions clearance, and a screening candidate is not a legal decision.
FATF provides international AML/CFT standards, including customer-due-diligence context, for implementation through national systems.1 It does not create one universal private-sector sanctions-screening workflow for every law firm. Use the KYC, KYB and customer due diligence guide for the underlying identity and relationship process.
Map parties and events across the client and matter lifecycle
The matrix is a relevance map, not a requirement to screen every listed role in every matter.
| Party or event | When it may become known | Why it may matter | Useful supplied identifiers | Possible screening route | Decision outside screening |
|---|---|---|---|---|---|
| Prospective client | Client intake | The relationship or proposed service may involve a restricted person, entity or activity | Full legal name, date of birth or company identifiers, address, nationality or jurisdiction | Portal, intake API or controlled batch | Whether to accept the client or instruction |
| Beneficial owner or controller | CDD/KYB or later ownership update | An unlisted entity may be affected under an applicable ownership/control test | Name, date of birth, ownership path, voting or control evidence and source date | Linked party screening with escalation | Whether the legal ownership/control test is met |
| Director, representative or authorised person | Intake, authority verification or matter work | The person's role may be relevant to identity, authority or exposure | Full name, date of birth, nationality, role and relationship | Portal, API or batch according to the workflow | Whether the person can bind the client and what legal effect follows |
| Matter counterparty | Conflict search, matter opening or later filing | The matter may involve a person or entity subject to a relevant restriction | Legal name, entity identifiers, address, jurisdiction and matter role | Matter-opening or event-triggered screening | Whether acting against or interacting with the party is permitted |
| Funder, payer or client-money sender | Funding arrangement or receipt instruction | The source or transfer may introduce a party not captured at client intake | Account-holder or legal name, bank, jurisdiction and transaction reference | Event-triggered screening where the approved control requires it | Whether funds may be accepted, held, returned or reported |
| Beneficiary or payment recipient | Settlement, completion or disbursement | A proposed payment can introduce a new recipient or intermediary | Legal name, bank, jurisdiction, account-holder information and transaction reference | Payment-event screening where relevant | Whether funds may be transferred, frozen, licensed or otherwise handled |
| Agent, local counsel, expert or intermediary | Matter planning or appointment | A third party can become part of the service or payment chain | Legal name, company identifiers, jurisdiction and matter relationship | Portal, procurement process or matter event | Appointment, instruction and any legal restrictions on services or payment |
| Material matter change | New party, ownership, service, geography or payment route | Earlier screening may no longer represent the actual matter | Changed identity, relationship, ownership or transaction data | Re-screen the affected records | Whether the matter risk and legal analysis must change |
| Relevant sanctions-source change | After approval | A previously screened party may become a new candidate | Persistent party IDs and retained screening context | Configured monitoring or controlled re-screening | Whether the new result affects the client, matter or funds |
Preserve the client ID, matter ID and party role with every request and result. The same company can be the client in one matter and a counterparty in another. Reviewers need that context to understand why screening occurred and which decision is pending.
For the broader population distinction, see customer screening vs counterparty screening.
Client intake does not complete matter screening
Client acceptance may capture the client, representatives and ownership information known through CDD. A new matter or later change can introduce different counterparties, funders, banks, beneficiaries, services, jurisdictions or payment routes. Define which of those events return affected records to review; these are firm-specific controls, not a universal legal cadence.
SRA guidance provides a UK example for SRA-regulated firms, including firm-wide controls, client and matter risk, ownership and funds.2 It is sector-specific UK guidance, not a worldwide rule for legal services.
Resolve the candidate before the legal question
A candidate means configured logic found similarity to a source record. Review the complete official entry and available identifiers before concluding that the supplied party is the listed person or entity.
OFSI's UK financial-sanctions guidance distinguishes a name match from a target match and explains that the action depends on the sanctions in force.3 That is UK guidance. Other jurisdictions have their own sources, legal instruments and decision paths.
After identity resolution, the firm still needs to determine any ownership/control issue, applicable jurisdiction and restriction, effect on the service or funds, relevant exception, licence or reporting route, and authorised decision owner. The screen cannot answer those questions automatically. Use the guide to documenting a sanctions alert investigation for the detailed process.
Ownership and control need current matter context
A clean company-name result does not establish that an unlisted company is unaffected by sanctions, and an AML beneficial-ownership threshold is not automatically the sanctions test. OFAC's 50 Percent Rule is a US-specific example and not a global formula.4 Use sanctions ownership and control for the regime-specific analysis.
Legal services can be restricted programme-specifically
Particular regimes can prohibit or condition specified professional services. For example, EU Regulation 833/2014 contains Russia-programme restrictions on specified legal-advisory services, subject to its scope, exceptions and authorisation provisions.5 This is a programme-specific EU rule, not a general rule for every listed person. Name screening cannot determine whether a proposed service is prohibited, exempt, licensed or outside scope.
Treat client-money and payment events as separate decision points
A client cleared at onboarding does not establish that every later payer, recipient, bank or transaction is unrestricted. Connect any payment-party screen to the matter and payment event. A potential match does not itself authorise the firm to hold, return, reject, freeze or transfer money; an internal hold is not the final legal disposition. SRA and OFSI materials provide UK-specific guidance on frozen assets, reporting and licences.23 Other jurisdictions require their own law and authority route.
Design re-screening around meaningful change
Re-screening may follow relevant changes to official sources, identity, ownership, matter parties, services, geography or payment arrangements. Persistent party records help connect a change to the correct client and matter. There is no universal rule requiring continuous screening or one fixed interval; define meaningful events and any periodic backstop under the firm's applicable requirements and risk assessment.
Preserve a client-and-matter decision record
Another qualified reviewer should be able to connect the client, matter, party role and business event to the supplied identity, source, candidate, reviewed identifiers, rationale, decision and later reassessment. Store sensitive matter and privilege material in the appropriate authorised system; a screening case should not be assumed to hold every legal note.
Where Checklynx fits
Checklynx can support screening of supplied client and matter parties through portal, CSV batch, API and configured monitoring workflows, with candidate review, cases and audit evidence. Explore Checklynx sanctions screening after defining the firm's populations and triggers.
Checklynx does not provide conflicts checks, identity-document verification, complete CDD, source-of-funds verification, matter-risk assessment, UBO discovery, legal advice, privilege decisions, licensing or reporting decisions, or final sanctions clearance.
Frequently asked questions
When should a law firm screen a client for sanctions?
Client acceptance is a common control point, but the appropriate timing depends on the applicable jurisdiction, services and firm policy. Existing clients may also require review when a new matter or material change introduces different parties, ownership, services, geographies or payments.
Should every party named in a legal matter be screened?
There is no universal worldwide rule requiring every name in every file to be screened. Map roles and events to the firm's applicable sanctions perimeter, services, exposure and approved control. Preserve why each population is included or excluded.
Is a conflicts check the same as sanctions screening?
No. A conflicts check addresses professional duties and relationships. Sanctions screening compares supplied identity data with relevant sanctions sources. The controls can share party data but produce different decisions.
Does CDD complete the sanctions check?
No. CDD helps establish client, ownership and relationship information. Sanctions screening and legal analysis use that evidence for separate questions. A clean name result also does not resolve an applicable ownership/control test.
Does a sanctions candidate mean the firm must reject the client or matter?
No. Resolve identity and then determine the applicable regime, restriction, ownership/control position, service or payment context and any exception, licence or reporting duty. The authorised outcome depends on the law and facts.
Can a law firm receive client money while a sanctions result is unresolved?
The answer depends on the applicable regime, identity, ownership/control, restriction, licence position and facts. A screening system cannot give permission. Escalate under the firm's approved legal and operational procedure before receiving, returning or transferring funds.
Can sanctions screening software provide legal clearance?
No. Software can identify candidates, support review and preserve evidence. It cannot determine every applicable law, resolve privilege, provide legal advice or issue final sanctions clearance.
Official sources
Footnotes
-
Financial Action Task Force, The FATF Recommendations, international AML/CFT/CPF standards implemented through national systems, amended June 2026, accessed 10 September 2026. ↩
-
Solicitors Regulation Authority, Complying with the UK sanctions regime, UK sector guidance for SRA-regulated firms, accessed 10 September 2026. ↩ ↩2
-
UK Office of Financial Sanctions Implementation, UK financial sanctions general guidance, official UK guidance covering identity, ownership and control, asset freezes, reporting and licensing, updated 12 May 2026, accessed 10 September 2026. ↩ ↩2
-
US Department of the Treasury, Office of Foreign Assets Control, Entities Owned by Blocked Persons: 50 Percent Rule, official US-specific sanctions guidance, accessed 10 September 2026. ↩
-
European Union, Council Regulation (EU) No 833/2014, binding programme-specific EU sanctions legislation including restrictions on specified services and applicable exceptions and authorisations, accessed 10 September 2026. ↩