What Is AML Screening?
Anti-money laundering (AML) screening is the process of checking customers against sanctions lists, PEP data and adverse media before and during a business relationship. It tells a regulated business whether a customer is legally prohibited, politically exposed or linked to financial crime.
The quality of that check depends almost entirely on the data behind it. A screening tool with a strong matching engine but stale lists will still miss a newly sanctioned customer. This is why compliance teams increasingly ask vendors one question first: where does your data come from?
This guide answers that question in full. It covers each data source, who publishes it, how often it changes, and what institutions in Nigeria must screen against.
Snippet-ready answer: AML screening data comes from three main sources. Sanctions lists are published by official bodies such as the UN Security Council, the US Treasury and national sanctions committees. PEP data and adverse media are compiled from government records, official gazettes, asset declarations and news sources, then structured into searchable databases.
What Does an AML Check Include?
An AML check usually covers four layers. The first is sanctions screening, which confirms a customer is not on a government or international sanctions list. The second is PEP screening, which identifies people who hold or held prominent public roles.
The third layer is adverse media screening, which looks for negative news linking a customer to fraud, corruption or other crimes. The fourth is watchlist screening against internal or industry lists, such as a business's own blocklist.
Each layer uses a different data source and answers a different risk question. Our guide on PEP and sanction checks explains how the first two differ in practice.
Source 1: Sanctions Lists
Sanctions lists are the most authoritative AML screening data source. Governments and international bodies publish them officially, and dealing with a listed person can be a criminal offence.
1. Global Sanctions Lists
The United Nations Security Council Consolidated List covers individuals and entities subject to UN sanctions. Every UN member state, Nigeria included, must implement it. The Financial Action Task Force (FATF) makes this a core standard under its Recommendations 6 and 7 on targeted financial sanctions.
The Office of Foreign Assets Control (OFAC) Specially Designated Nationals (SDN) List is maintained by the US Treasury. It matters to African institutions because most cross-border payments touch US dollar correspondent banking. A bank that processes a transaction for an SDN-listed party risks losing its correspondent relationships.
The European Union and the United Kingdom publish their own consolidated sanctions lists. Institutions with European customers, counterparties or correspondent banks usually screen against both.
2. Nigeria's Sanctions List
Nigeria maintains its own domestic list. The Nigeria Sanctions Committee manages it under section 49 of the Terrorism (Prevention and Prohibition) Act 2022. The current list is published at nigsac.gov.ng.
The obligations attached to this list are strict. A November 2022 circular from the Securities and Exchange Commission (SEC) Nigeria, issued after ten individuals and three entities were designated, set out what regulated firms must do. Firms must "immediately, identify and freeze, without prior notice, all funds, assets, and any other economic resources" of designated persons.
The same circular requires firms to report frozen assets to the Committee's secretariat. They must also file a suspicious transaction report (STR) with the Nigerian Financial Intelligence Unit (NFIU). Name-matching cases found in transactions must be reported the same way.
This is why a screening programme for Nigeria cannot rely on global lists alone. A person designated locally may never appear on the OFAC or EU lists.
3. How Sanctions Data Is Sourced
Sanctions data is sourced directly from the publishing authority. A reliable screening provider connects to each official source, rather than relying on a manually downloaded copy.
The update method matters more than the number of lists covered. Sanctions designations take effect immediately. A provider that refreshes its lists weekly leaves a gap of up to seven days in which a newly listed customer could still transact.
Snippet-ready answer: Sanctions screening data is sourced directly from the authorities that publish each list, such as the UN Security Council, OFAC and the Nigeria Sanctions Committee. The strongest screening systems integrate with these sources, so new designations appear automatically rather than waiting for a scheduled manual update.
Source 2: Politically Exposed Person (PEP) Data
PEP data is harder to source than sanctions data. No single global authority publishes an official list of politically exposed persons.
FATF Recommendation 12 requires enhanced due diligence on foreign PEPs and risk-based measures for domestic PEPs. FATF's guidance on PEPs notes that "commercial and other databases" exist to help institutions identify them. It also warns that "these databases are not sufficient to comply with the PEPs requirements, nor does FATF require the use of such databases."
In practice, PEP databases are built from government websites, official gazettes, election results, parliamentary records and public appointment announcements. Asset declarations and published official salaries also help confirm a PEP's profile.
The hardest part of PEP data is coverage of family members and close associates. These relationships are rarely recorded in one official place. Providers usually piece them together from public records and media reports.
For Nigerian institutions, the Central Bank of Nigeria (CBN) issued guidance on PEPs in 2023 that sets out how banks should identify and manage them. Our article on PEP screening for African banks covers those obligations in detail.
Source 3: Adverse Media
Adverse media screening checks news and public sources for negative information about a customer. It catches risks that have not yet reached a sanctions list or court judgment.
Adverse media data is sourced from news outlets, regulatory enforcement notices, court records and law enforcement announcements. In Nigeria, relevant sources include public notices from the Economic and Financial Crimes Commission (EFCC) and other enforcement agencies.
The challenge with adverse media is volume and relevance. A name search can return thousands of unrelated articles. Strong adverse media screening filters results by crime category, such as fraud, bribery, terrorism financing or money laundering.
Local-language and regional coverage is also critical. A screening tool that indexes only major international outlets will miss most Nigerian and wider African news.
Source 4: Internal and Industry Lists
Beyond public data, many businesses screen against their own lists. These include customers previously offboarded for fraud, merchants terminated for chargeback abuse, and industry termination lists from card networks.
These lists are often the most predictive data a business holds. They capture risk the business has already experienced directly. A good screening platform lets teams upload and screen against them in the same workflow as public lists.
How Often Is AML Screening Data Updated?
Sanctions lists change without a fixed schedule. A designation can be published on any day, and it takes legal effect immediately.
This is why screening must continue after onboarding. FATF Recommendation 10 requires ongoing due diligence throughout a business relationship. A customer who cleared screening on day one may be designated a year later.
Ongoing screening works by rechecking existing customers whenever the underlying data changes. When a new name is added to a sanctions list, every existing customer is compared against it automatically. Our guide on how to perform effective sanction list checks explains the rescreening process step by step.
Snippet-ready answer: Sanctions lists have no fixed update schedule. Designations can be published on any day and take effect immediately. Screening data should therefore update as soon as the publishing authority releases a change, with existing customers rescreened automatically against each new designation.
What Data Sources Should Nigerian Institutions Screen Against?
A screening programme for a Nigerian bank, fintech or payment service provider should cover five sources at minimum. These are the UN Consolidated List, the Nigeria Sanctions List, the OFAC SDN List, PEP data with Nigerian coverage and adverse media with Nigerian coverage.
Institutions with European exposure should add the EU and UK lists. Businesses in payments and card acquiring should also screen against card network termination lists.
Nigeria's removal from the FATF list of jurisdictions under increased monitoring on 24 October 2025 does not reduce screening duties. Institutions are still expected to show the reforms are sustained. Our article on Nigeria's removal from the FATF grey list explains what that means for compliance teams.
A Real-World Compliance Scenario
Consider a Lagos-based fintech that onboards a small business owner in March. The customer clears sanctions, PEP and adverse media checks.
In September, the Nigeria Sanctions Committee designates the same individual. The designation appears on the Nigeria Sanctions List but not on the OFAC or EU lists.
A fintech screening only against global lists never sees the match. The account stays open, and every later transaction breaches the freezing duty. A fintech screening against the Nigeria Sanctions List, with automatic updates, flags the customer the day the list changes.
The difference is not the quality of the onboarding check. It is whether the screening data included the local list and updated in time.
Questions to Ask Your AML Screening Provider
Compliance teams should ask four questions before choosing a provider.
First, which sanctions lists are covered, and are local lists such as Nigeria's included?
Second, how is the data sourced, and how quickly do new designations appear?
Third, how are PEP relatives and close associates covered?
Fourth, can the business add its own internal lists to the same screening workflow?
A provider that cannot answer these clearly leaves a gap the compliance team will eventually have to explain to an examiner. Our buyer's guide to sanctions screening software for banks covers the full evaluation process.
How Youverify Sources AML Screening Data
Youverify's AML screening is integrated directly with the authorities that publish sanctions lists. When a new sanction is published, it updates on Youverify's end automatically, without waiting for a manual refresh. Screening covers sanctions and watchlists, PEP data and adverse media in one workflow.
Conclusion
AML screening is only as reliable as the data behind it. Sanctions lists, PEP data, adverse media and internal lists each answer a different risk question, and each is sourced differently.
For institutions in Nigeria, the most important gaps are local coverage and update speed. A programme that screens only against global lists, or updates on a fixed schedule, can miss a designated customer for days.
See How Youverify Keeps Screening Data Current
If your team needs AML screening that updates as soon as new sanctions are published, book a free demo today.
About the Author
Victoria Okere is a compliance content writer at Youverify, specializing in AML compliance, financial crime risk, regulatory technology, and emerging trends in financial services.
