How to Conduct and Document an Adverse Media Check for AML Due Diligence

A news report names someone who may be your customer. Before it changes an onboarding decision or customer risk assessment, your team needs to establish who the story concerns, what the evidence actually says and why it matters to the relationship.

An adverse media check is a search and assessment of negative public information about a person or organisation. In AML due diligence, its value comes from the analyst's conclusion and supporting evidence—not the number of articles found. This article sets out a practical review and documentation method for customers, beneficial owners and counterparties. For the wider relationship lifecycle, see the KYC, KYB and customer due diligence guide.

Where adverse media fits in due diligence

Adverse media screening, also called negative news screening, can inform onboarding, enhanced due diligence (EDD), customer-risk reviews and investigations under a risk-based policy.

For institutions covered by the US CDD Rule, FinCEN FAQ F.4 does not impose a categorical media-search requirement, though higher risk can justify gathering more information. The Wolfsberg Group's Negative News Screening FAQs provide practical industry guidance on source assessment and alert handling, not binding law.

Keep the result separate from PEP and sanctions determinations. A media result is a lead to assess, not proof of wrongdoing or an automatic rejection. If reporting raises a sanctions question, use the applicable official records and a sanctions-specific investigation.

A practical adverse media check workflow

1. Define the subject and search question

Start with the customer or case reference and the reason for the check: onboarding, an EDD review, a change in ownership, a new report or an investigation. Identify each person or company in scope and its connection to the relationship.

Record the known name, aliases or former names and relevant identifiers already available from due diligence. For a person, these might include date of birth, nationality, location and employer. For an organisation, they might include its registration details, jurisdiction, business activity and former trading names. An associated company or family member is not interchangeable with the subject.

Choose search terms, sources, languages, locations and dates that answer the review question. For example, combine a company name with its jurisdiction or an individual's name with a relevant employer; test useful name variants rather than relying on one exact spelling. Use risk categories defined by policy, such as fraud or corruption, rather than treating every unfavourable mention as financial-crime evidence.

Document the searches used and any limitations, such as language gaps, inaccessible articles or limited source coverage. A clear result means no relevant information was found within that recorded scope—not that adverse information cannot exist.

2. Decide whether the reporting concerns your subject

Compare the article's identifiers with the due-diligence record. Record both supporting facts and contradictions. A matching name with no further identifiers may remain unresolved; it should not become a confirmed match because the story is serious.

Check the subject's role in the event. Being named as a victim, witness, adviser or former employee is different from being accused of the reported conduct. Where the article concerns a related party, explain the connection instead of transferring the allegation to the customer.

Keep the identity conclusion separate from the risk conclusion. “Different person” and “same person, but not material to this relationship” are different reasons for closing a result and need different evidence.

3. Assess the original source and current factual status

Read beyond the headline or search snippet. Identify the publisher, author where available, original source, publication date, event date and date accessed. Ask what supports the report: named evidence, attributed statements, an official notice, court documents or an unsupported assertion. Assess independence and possible conflicts or political context; a familiar publication name is not sufficient on its own.

Where several outlets repeat the same report, trace the common origin and group them as coverage of one event. Five copies of a wire story do not provide five independent confirmations. Where possible, consult the underlying public record and note any differences between it and the news summary.

Wolfsberg's FAQs, particularly questions 5, 7 and 14, distinguish stages of reported conduct and address unreliable or false information. Apply that distinction in the case note:

• Describe an allegation as an allegation, with attribution to its source.
• Identify an investigation, charge or indictment without presenting it as a conviction.
• Record what a court judgment or regulatory decision actually determined, including any relevant appeal or limitation.
• Describe civil proceedings and settlements on their own terms; do not infer an admission or criminal conviction from a settlement.
• Look for a later dismissal, acquittal, correction or other development that changes the earlier account.

The meaning of procedural terms varies by jurisdiction. If you cannot establish the current position, record that uncertainty rather than selecting a definitive status. A recent publication date may describe an old event; an old article may omit a later outcome.

4. Explain why the information matters to the relationship

Once identity and evidence have been assessed, connect the finding to the actual customer relationship. What conduct is reported? How serious and recent is it? What was the subject's involvement? Does it affect an explanation of business activity, ownership, source of funds or expected transactions?

Record contrary information and why it changes—or does not change—the assessment. Avoid treating unrelated disputes, negative sentiment or repeated publicity as a substitute for a financial-crime rationale. Equally, the absence of a conviction does not by itself resolve a credible concern that needs further review.

The result may inform an AML customer risk assessment, EDD or investigation. Those processes determine the response under the applicable framework; the media check should provide the evidence, not invent a separate automatic risk score or rejection threshold.

What to record in an adverse media check

Someone who did not perform the search should be able to understand the outcome without reconstructing the investigation. The following is a suggested evidence record, not a mandatory form or retention schedule.

Keep relevant evidence with enough context to support the conclusion, subject to applicable privacy, access, licensing and retention requirements. A screenshot or “reviewed—no concern” label alone does not explain the decision.

The UK's FCA CDD review published on 8 April 2026 identified weak documentation of EDD measures and unclear approval requirements among firms reviewed. These are supervisory findings about CDD and EDD, not a prescribed adverse-media form.

Close, escalate or keep the question open

Use your procedure's outcome labels, but state the actual decision. A closed name mismatch is not approval of the relationship; an escalation is not a finding of guilt.

For an unresolved result, record the missing fact, the owner, the interim treatment and the next review point. Route urgent concerns through the applicable escalation procedure.

For example, an article might describe a fraud charge against someone with the customer's name and occupation, but provide no date of birth. The note should preserve those similarities, explain what identity evidence is missing, assign the next check and record the authorised interim treatment. It should not state that the customer was convicted.

Reporting decisions belong to the relevant jurisdiction-specific process. The US FFIEC BSA/AML Manual describes media searches as a possible investigation tool and calls for documented SAR decisions after analysis. It does not make every media result a filing trigger. Do not wait for a criminal conviction where the applicable reporting threshold is otherwise met.

Revisit material developments

A later correction, judgment, newly resolved identity or change in the customer's role can alter the earlier assessment. Link the new evidence to the existing event, explain what changed and retain the previous rationale alongside the updated decision. Repeated publication of the same facts should be recognisable as repetition, not automatically treated as a new event.

Set review triggers and any periodic checks through applicable requirements and your risk-based policy. FinCEN FAQ F.6 illustrates a risk-based update approach for covered US institutions; it does not prescribe a universal review schedule.

Spend less time documenting adverse media reviews

Checklynx adverse media screening helps reduce the work of documenting a review by keeping source details, matching context and analyst decisions together. Teams can build a traceable case record with less repeated copying between searches, notes and reports. Analysts remain responsible for assessing source credibility and making the final decision under the institution's policy.