What AML screening solves
KYC answers "who is this person". AML screening asks the next question: is doing business with this person lawful and safe?
When the two are not answered in the same flow, you can end up accepting a customer whose identity checks out but who sits on a sanctions list. Identity verification alone does not close that risk.
Three layers
Sanctions and watch lists. The record is compared against national and international sanctions lists and public watch lists. Entering a business relationship with a prohibited party is the most direct trigger of regulatory action there is.
PEP screening. Politically exposed persons are flagged in a layer of their own. Being a PEP is not an indicator of wrongdoing; it is grounds for enhanced due diligence. You are expected to record your decision together with its reasoning.
Ongoing monitoring. Approved customers are re-screened as the lists are updated, and an alert is raised when a status changes. A clean result at acceptance is not a commitment that holds six months later.
The false-match problem
The operational cost of AML screening usually comes from false matches rather than real ones. A common name fills the queue with records that go nowhere and burns your compliance team's time.
The answer is not to loosen the threshold — that lets risk in. The right approach is to weigh the identity as a whole: adding date of birth, nationality and spelling variants alongside name similarity shortens the queue without letting a genuine match slip.
Reporting every match with its reason serves the same end: the reviewer knows why the record is in front of them.
Being audit-ready
An AML obligation asks for more than the right decision — it asks for the record of it. When the match, its reason, your decision and a timestamp are stored together, you present the history from a single source at audit.
The monitoring history is part of that record. "It was clean when we accepted them" only means something if you can show the monitoring was running.
