Sanctions Screening for Loan and Credit Applicants

Screening loan applicants against sanctions lists is a legal duty for any lender in the United States. Before you extend credit, you have to check that the borrower is not a sanctioned person or entity. Miss that step, and your institution can face heavy fines even if you had no idea the applicant was flagged.

This guide explains how the check works, when to run it, and what to do with the results. It covers the lists you must search, how to handle name matches, what records to keep, and the common mistakes that get lenders in trouble. It is written for banks, credit unions, mortgage lenders, auto finance shops, and any firm that lends money or issues credit.

Why lenders have to screen applicants

The Office of Foreign Assets Control, known as OFAC, runs U.S. sanctions programs. Its rules apply to all U.S. persons, and that includes lenders. You cannot make a loan, open a credit line, or process a payment for someone on a sanctions list. Doing so is a prohibited transaction.

The key point is strict liability. OFAC can penalize you even if you did not know the applicant was sanctioned. Good faith is not a defense. That is why screening is not optional and why lenders build it into the application process. This is a core part of denied party screening, the practice of checking every party you deal with against government watch lists.

Screening also protects the loan itself. A loan to a blocked person can be frozen. You may not be able to collect. So the check guards both your compliance record and your money.

Which lists you need to check

Most lenders start with the OFAC Specially Designated Nationals and Blocked Persons list, called the SDN list. It names people, companies, and vessels that U.S. persons are barred from dealing with. You can search it directly on the OFAC Sanctions List Search tool. That tool is a good manual backstop, but most lenders use software for daily volume.

The SDN list is the minimum. Depending on your business, you may also need to check other lists. Here are the main ones.

List	Who maintains it	Why it matters to lenders
SDN list	OFAC (Treasury)	Core blocked persons. All lending is prohibited.
Consolidated Sanctions List	OFAC (Treasury)	Non-SDN sanctions programs with their own limits.
Consolidated Screening List	Multiple agencies	One search across many federal lists.
UN, EU, UK lists	UN, EU, OFSI	Needed if you operate or lend across borders.

If you deal with international borrowers, check the foreign lists too. A U.S. lender with global reach cannot ignore UN, EU, or UK targets. For the full picture of federal lists, see the guide on the Consolidated Screening List and the primer on the OFAC SDN list.

When to screen in the loan process

Timing matters. Screen too late, and you may already have committed to a blocked party. The safest rule is to screen at application, before or at the same time as the credit pull. That way you catch a match before any credit decision.

Run the check at these points:

• At application, before you extend or approve credit.
• Before funding or closing, in case the list changed since intake.
• On a regular schedule for open accounts and long-term loans.
• After any OFAC list update that could affect current borrowers.

Sanctions lists change often. A borrower who was clear at closing can be added later. For a term loan or a revolving credit line, periodic re-screening is the only way to stay current. Decide how often based on your risk, and write that schedule into your policy. The article on how often to screen walks through setting a cadence.

Who to screen on each application

Do not stop at the named borrower. A single application can involve several parties, and each one can carry sanctions risk. Screen everyone with a real stake in the loan.

• The primary applicant and any co-applicant.
• Guarantors and co-signers.
• Beneficial owners of a business borrower.
• Authorized signers on a business account.
• Any third party who receives the loan proceeds.

For business loans, beneficial ownership is the tricky part. OFAC applies the 50 Percent Rule. If sanctioned parties own 50 percent or more of a company, that company is treated as blocked too, even if it is not named on any list. So you have to look through the entity to the people behind it. The detailed explainer on the 50 Percent Rule shows how this works in practice.

How to handle a possible match

Screening software uses fuzzy name matching on purpose. It flags near matches so real hits do not slip through. The trade-off is a lot of false positives. A common name like “Ali Hassan” or “John Smith” can trip an alert with no real risk. Your job is to sort the true hits from the noise.

Steps to clear or confirm a hit

1. Compare the applicant details to the list entry. Check date of birth, address, nationality, and any ID numbers.
2. Decide if the differences rule the applicant out. A different birth year or country is often enough.
3. If it is clearly not a match, document why and clear the alert.
4. If details line up or you cannot tell, escalate to your compliance officer.
5. For a confirmed match, block the transaction, do not fund, and follow OFAC reporting rules.

Never just delete an alert. Every hit needs a written reason for the decision. That record is what protects you if a regulator asks later. The guide on resolving a false positive gives a full workflow. If you find a real match, do not tip off the applicant, and get legal advice before you act.

Records you must keep

Good records are the heart of a defensible program. If you cannot show what you screened and when, examiners treat it as if you never screened at all. Keep a clear trail for every application.

• Who you screened, including all related parties.
• The date and time of each screening.
• Which lists you checked and the list version or date.
• The full results, including any alerts.
• How each alert was reviewed and cleared, and by whom.

Retain these records so they are ready for an audit. A screenshot with a date, or a system log, both work as long as they are complete. The primer on record keeping for screening and the piece on what an audit trail is cover this in more depth.

Automated versus manual screening

A small lender with a handful of loans a month can search the OFAC tool by hand. Once volume grows, manual checks break down. They are slow, easy to skip under pressure, and hard to prove later.

Automated screening runs each applicant against current lists in seconds. It logs every check, so your records build themselves. It can also re-screen your whole book when a list updates. The trade-off is cost and the tuning work to control false positives. Most lenders past a small size choose software and keep manual search as a backup. The comparison of automated versus manual screening lays out the choice.

Common mistakes to avoid

Most lender penalties trace back to a few repeat errors. Watch for these.

• Screening only the named borrower and skipping guarantors and owners.
• Checking at intake but never re-screening open accounts.
• Using stale lists that were not updated.
• Clearing alerts with no written reason.
• Having no written policy for who reviews hits and how.

Each one is easy to fix with a clear procedure. Knowing the warning signs helps too. The overview of red flags of sanctions evasion shows patterns that should make you look harder at an applicant. For a wider view of who has to do this work, see who needs to do denied party screening.

Frequently Asked Questions

Do I have to screen every loan applicant?

Yes. OFAC rules apply to all U.S. persons and all transactions. There is no dollar threshold and no exemption for small loans. Screen every applicant and every related party before you extend credit.

What happens if I lend to a sanctioned person by mistake?

OFAC operates on strict liability, so you can be penalized even without intent. The transaction may also be blocked or frozen. A strong screening record and a clear policy can reduce your exposure. Report a confirmed match to OFAC as required.

How do I tell a false positive from a real match?

Compare the applicant details to the list entry. Look at date of birth, address, nationality, and ID numbers. Clear differences usually mean a false positive. If the details match or you are unsure, escalate to compliance before you fund.

How often should I re-screen existing borrowers?

Re-screen open accounts and long-term loans on a set schedule, and again whenever OFAC updates a list. Higher-risk portfolios need more frequent checks. Write your cadence into your compliance policy and follow it.

Key Takeaways

Screening loan applicants is a legal must, not a nice-to-have. Check every applicant and related party against the SDN list at minimum, and add the broader lists when your business calls for it. Screen at application, before funding, and on a schedule after that. Handle every alert with care, document your decisions, and keep records that hold up in an audit. Do these things and you protect both your institution and the loan. If you want help building or reviewing your screening program, contact us.