UK Sanctions Screening: An Operational Guide for Regulated Businesses

UK sanctions screening is not simply a search of a government list. A regulated or UK-exposed business needs to connect its legal perimeter, the relevant sanctions regime, the parties and events in its products, reliable identifying data, ownership and control, escalation, reporting and evidence.

This guide provides that UK operating layer for MLROs, sanctions and compliance teams, operations leaders and product owners. It assumes the reader already understands the general sanctions-screening process. It is not legal advice. The correct action in a live case depends on the applicable regulations, the firm's UK nexus, the facts, and any relevant exception or licence.

UK nexus and regime → population and trigger → current UK source → identity and ownership review → legal escalation → reporting or licensing boundary → evidence → re-screening

Start with the UK nexus, not the screening tool

UK financial sanctions apply within UK territory and to UK persons wherever they are. UK persons include British nationals and legal entities established under UK law, including their branches.² That is the starting point, not a complete answer for every cross-border relationship.

Before configuring a list or matching threshold, record:

• which group entity, branch, employee or agent is involved;
• where the activity, customer, counterparty, funds, goods or services are located;
• which UK sanctions regime and restriction may apply;
• whether the issue concerns financial sanctions, trade sanctions or another measure; and
• who owns the legal interpretation, operational containment and final decision.

The Sanctions and Anti-Money Laundering Act 2018 provides the framework under which UK sanctions regulations are made.³ The applicable regulation supplies the actual prohibition, exception and reporting context. Do not turn the existence of that framework into a universal instruction to screen every party or payment in the same way.

OFSI is responsible for financial-sanctions implementation and enforcement. Trade-sanctions questions can engage OTSI, HMRC or another authority depending on the measure. A firm's routing procedure should therefore identify the relevant restriction rather than treating every alert as an OFSI case.⁴

Define who enters the UK screening control

The screening population should follow the firm's products, exposure and approved policy. Depending on the activity, it may include:

This is a population-design exercise, not a claim that every firm must screen every category at every event. FCA guidance for firms in its scope discusses customers, counterparties and payments and expects systems appropriate to the nature, size and risk of the business.⁵ SRA guidance applies a different sector lens to SRA-regulated firms.⁶

For detailed supplier-policy design, use the third-party sanctions-screening policy guide. Payment institutions can use the separate event-based payment screening workflow.

Use current UK designation data

The UK Sanctions List, published by the Foreign, Commonwealth & Development Office, is the only source for UK sanctions designations. The OFSI Consolidated List closed on 28 January 2026.¹ A process, vendor configuration or policy that still relies on the old list name should be checked and corrected.

That change does not mean the UK Sanctions List answers every sanctions question. Teams still need to consult the applicable regime regulations and guidance to understand the restriction. The UK government also maintains separate material for some restrictions, including certain entities subject to financial and investment restrictions under the Russia regime.¹

Assign an owner to monitor official changes and connect them to affected records. Useful triggers can include:

• onboarding or approval of a new relationship;
• a new owner, controller, payee, beneficiary or counterparty;
• a material change to reliable identifying data;
• an official designation, variation or revocation;
• a relevant payment, transaction, service or delivery event; and
• a scheduled reassessment required by the firm's policy.

Those are control-design options. The correct combination and timing depend on the firm's legal perimeter, activity and supervisory context.

Resolve the identity before deciding the outcome

A screening alert is not proof that the person or entity being screened is a designated person. OFSI guidance tells users to compare the available information, which can include aliases, dates of birth, nationalities, passport or national-identification details and addresses.²

Use a controlled review sequence:

1. Preserve the exact input, source result and time of the check.
2. Confirm the party's role in the customer relationship or activity.
3. Compare reliable identifiers, not only the name.
4. Record discrepancies and missing data.
5. Escalate a likely or unresolved target match to the authorised compliance or legal owner.

The detailed evidence model belongs in the sanctions alert-investigation guide. Matching calibration and repeat false positives belong in the false-positive reduction guide.

Assess UK ownership and control separately

An entity can be subject to financial sanctions even when its name does not appear on the UK Sanctions List. OFSI guidance explains that this can occur when a designated person owns or controls the entity directly or indirectly.²

The UK analysis includes more than a name or ordinary AML beneficial-ownership check. It can involve:

• more than 50% of shares or voting rights;
• the right to appoint or remove a majority of the board; or
• circumstances in which it is reasonable to expect that a person can ensure the entity's affairs are conducted in accordance with their wishes.

These questions are fact-sensitive. Do not automatically apply an AML beneficial-ownership threshold, import a test from another jurisdiction or infer control from a relationship alone. Use the sanctions ownership-and-control guide for the deeper comparison and obtain legal advice where the facts are uncertain.

Separate screening from the legal and reporting decisions

For FCA-supervised firms, FCA guidance makes a useful distinction: screening is not itself the underlying legal requirement, but an effective and current screening control can help a firm avoid breaching UK sanctions.⁵ Do not extend that supervisory statement beyond its scope without analysis.

An internal workflow should keep these decisions separate:

1. Screening result: is this a weak candidate, likely target match or resolved identity?
2. Operational response: should the affected workflow be paused or escalated under policy while the facts are reviewed?
3. Legal analysis: which prohibition, exception, licence or other rule applies to the party, property or activity?
4. Sanctions reporting: does a duty arise, for whom, and to which authority?
5. AML or regulatory reporting: is a separate SAR or regulator notification relevant?

OFSI guidance states that reporting a matter to a regulator or submitting a suspicious activity report does not satisfy a separate financial-sanctions reporting obligation.² It also explains that reporting duties apply to defined relevant firms in specified circumstances—not to every alert received by every business.

A licence permits activity only within its legal ground and stated terms. It should not be described as a general approval of the relationship or transaction. Complex questions about prohibitions, freezing, services, exceptions, licensing and reporting require the applicable regulations and, where appropriate, legal advice.

Preserve evidence and make re-screening reproducible

A defensible UK screening record should allow another reviewer to reconstruct:

• the party and role screened;
• the exact data supplied;
• the official or commercial source and relevant result;
• the identifiers compared and information still missing;
• any ownership or control evidence;
• the analyst's rationale and classification;
• the escalation, decision and approval;
• the operational outcome; and
• the date, time and later re-screening history.

FCA material for supervised firms identifies weak calibration, backlogs, poor customer or ownership information, and inadequate oversight of third-party tools as control problems.⁷ A firm using a vendor should therefore understand source updates, configuration, data mapping, alert handling, queue ownership, testing and failure recovery. Outsourcing a technical step does not outsource the firm's legal responsibility.

Put the approved workflow into operation

Once the legal perimeter, populations, triggers and escalation rules are defined, technology can execute the approved control through different routes. A portal may support individual reviews, a CSV batch may cover a defined population, an API may connect screening to an onboarding or payment event, and configured monitoring may return approved records for review after relevant supported changes.

Those routes do not decide who must be screened or what legal action is required. They should feed a consistent case and evidence process.

Checklynx supports sanctions-screening workflows through the screening portal, CSV batch, API, case review, audit evidence and configured ongoing monitoring. Explore Checklynx sanctions screening once your UK population and control requirements are clear.

UK sanctions-screening checklist

Frequently asked questions

Is the UK Sanctions List the same as the former OFSI Consolidated List?

No. The OFSI Consolidated List closed on 28 January 2026. The FCDO's UK Sanctions List is now the only source for UK sanctions designations.¹

Does every UK business have to screen every customer and payment?

Do not apply that as a universal rule. The organisation must first determine which UK sanctions rules apply to its people and activities, then design appropriate controls for its business, sector and exposure. FCA screening guidance applies within the FCA's scope; other sectors have their own guidance and facts.

Does a sanctions-screening alert mean the party must be frozen?

No. An alert identifies a candidate for investigation. The correct legal and operational response depends on whether the identity is resolved, the applicable regime and restriction, ownership or control, the activity, and any relevant exception or licence.

Can an unlisted company still be subject to UK financial sanctions?

Yes. OFSI guidance explains that financial sanctions can apply to an unlisted entity owned or controlled directly or indirectly by a designated person.²

Is an OFSI report the same as a suspicious activity report?

No. OFSI states that submitting a SAR or reporting to a regulator does not satisfy a separate financial-sanctions reporting obligation. Whether either duty arises depends on the applicable rules and facts.²

Is PEP screening part of UK sanctions screening?

PEP and sanctions screening can use related identity data, but they answer different questions. PEP status does not make a person sanctioned and is not evidence of wrongdoing. See the watchlist, sanctions and PEP comparison.