Table of Contents
Denied party screening for consulting firms is the check that stops you from advising, serving, or getting paid by a person or company the government has blocked. Consultants often think screening is a job for exporters and manufacturers. It is not. If you sell advice, analysis, or professional services across borders, you carry the same legal duty to screen.
The risk is real and specific. A single engagement with a sanctioned client can trigger fines, loss of export privileges, and reputational harm. This guide explains why consulting firms are exposed, which lists to check, when to screen, and how to build screening into your intake and billing. If you are new to the topic, start with our denied party screening 101 primer, then come back here.
Why consulting firms are on the hook
Providing a service can be a regulated transaction. You do not need to ship a product to break the law. When you give advice, sign an engagement letter, or send an invoice to a blocked party, you may be dealing with that party. That is what the rules prohibit.
There is a clear precedent. In May 2022, the U.S. Treasury banned the export of management consulting, accounting, and trust and corporate formation services to anyone in Russia. That single action put consulting squarely inside the sanctions regime. The lesson is broad. Regulators treat professional services as something that can be denied to the wrong person.
Your obligation does not depend on your size or your sector. Strategy firms, IT advisers, engineering consultants, marketing agencies, law and accounting practices, and freelance experts all fall in scope. See who needs to do denied party screening for the full picture.
What counts as a service to a denied party
The trap for consultants is that the “party” can be hidden. You screen the client on the contract, but the real owner sits behind it. You must look through the name to the people and entities you actually serve.
Ownership matters, not just the signature
Sanctions can reach a company that is 50% or more owned by blocked persons, even if that company is not named on any list. This is the 50 Percent Rule. A clean client name does not mean a clean client. Read our guide to the 50 percent rule in sanctions screening before you sign.
Sharing technical know-how can be an export
If your work involves controlled technology or technical data, handing it to a foreign national can be an export. This can happen inside your own office. It is called a deemed export. Engineering, defense, and technology consultants should learn how deemed exports work before staffing a foreign specialist on a sensitive project.
Which lists to screen against
You screen names against official government watch lists. The fastest starting point for U.S. firms is the Consolidated Screening List, which combines the main U.S. lists into one search. If you serve clients in Europe or the UK, add those regimes too.
| List | Who runs it | What it flags |
|---|---|---|
| SDN List | OFAC (Treasury) | Blocked persons and companies you cannot deal with |
| Entity List | BIS (Commerce) | Parties needing a license for controlled items |
| Denied Persons List | BIS (Commerce) | Parties with revoked export privileges |
| Debarred List | State Department | Parties barred under defense trade rules |
| EU and UK lists | EU and OFSI | Persons sanctioned under those regimes |
The SDN List is the one most consulting firms hit first. To understand how it drives your decisions, see denied party screening and the OFAC SDN list.
When to screen in a consulting engagement
Screening is not a one-time step. Lists change often, and a client can be added mid-project. You need checkpoints across the life of an engagement.
At intake
Screen every new client before you sign. Screen the entity, its owners, and the individuals you will work with. Fold this into your onboarding, as covered in sanctions screening in customer onboarding.
During the engagement
Rescreen active clients on a set schedule. Rescreen again when the scope changes or new parties join. A monthly or weekly rescreen catches names added after intake.
Before payment
Screen before you invoice and before you accept funds. Taking money from a blocked party is its own violation. This checkpoint protects your finance team as much as your delivery team.
How to build screening into your workflow
A repeatable process beats a one-off check. Small firms can start manually. Growing firms should automate. The steps below work either way.
- Collect full legal names, addresses, and ownership details at intake.
- Run each name against the relevant lists.
- Review any potential match before you clear it.
- Record the result, the date, and who ran it.
- Set a rescreen schedule for active clients.
- Freeze the engagement if you get a confirmed hit.
For a full walkthrough of the mechanics, see how to process denied party screenings. To decide between spreadsheets and software, compare automated vs manual denied party screening. Manual checks work at low volume. They fail fast as your client list grows.
Handling a hit or a false positive
Most alerts are not real matches. Common names produce noise. Do not clear an alert on a guess, and do not panic on the first flag. Work through it.
- Compare the full name, address, date of birth, and country against the list entry.
- Check for a partial ownership link, not just a direct name match.
- Document why you cleared or escalated the alert.
- Stop work and seek counsel on any confirmed match.
A weak match on one field is usually a false positive. Our guide on how to resolve a false positive shows how to clear these safely without stalling the client.
Keep records you can show later
If a regulator asks, your defense is your paper trail. You want to prove you screened, when you screened, and what you found. A gap in records looks like a gap in compliance.
Save the search terms, the list versions, the results, and the reviewer for every check. Keep them for at least five years. See record keeping for denied party screening for what to store and how long.
Common mistakes consulting firms make
- Screening only the client on the contract, not the owners behind it.
- Checking once at intake and never rescreening.
- Assuming advice and analysis fall outside the rules.
- Ignoring subcontractors, partners, and referral sources.
- Skipping the check before releasing a final deliverable or invoice.
- Clearing alerts without writing down the reason.
Fix these with a written policy and clear ownership. Our denied party best practices guide turns these fixes into a routine your whole firm can follow. The denied party screening hub links every step in one place.
Frequently Asked Questions
Does a consulting firm really need to screen if it never ships goods?
Yes. The duty applies to dealings, not just shipments. Providing advice, signing a contract, or taking payment can each count as dealing with a party. If that party is blocked, you have a problem.
Which clients should we screen?
Screen every client, plus their owners and the people you work with. Add subcontractors, partners, and anyone who pays you. Domestic clients count too, since blocked parties can operate inside your own country.
How often should we rescreen?
Rescreen active clients on a fixed schedule, such as weekly or monthly. Screen again at any scope change and before every payment. Lists update often, so a single check goes stale fast.
What happens if we work with a denied party by mistake?
Penalties can include heavy fines and loss of export privileges. Regulators weigh whether you had a screening program and honest records. A documented process reduces your exposure even when a mistake slips through.
Key Takeaways
Consulting firms sell services, and services can be denied to the wrong party. Screen every client, look through to the owners, and rescreen on a schedule. Check before you sign and before you get paid. Keep records you can show a regulator years later. Build it into intake and billing so no engagement slips past the check. When you want help designing a program that fits your firm, contact us.