Sanctions screening for Saudi businesses
A Saudi business screens customers and counterparties against three layers of lists: United Nations Security Council sanctions, Saudi and regional designations, and the foreign lists that matter because of dollar payments, card schemes, and international partners. Missing any one layer leaves a gap that a bank partner or an examiner will find.
Updated 5 October 2026
Layer one: United Nations sanctions
The UN Security Council keeps a consolidated list of individuals and entities under its sanctions regimes, including the ISIL (Da'esh) and Al-Qaida regime, the Taliban regime, and the regime covering North Korea. Member states, Saudi Arabia among them, apply these designations domestically. The consolidated list is the baseline every screening program in the Kingdom starts from.
Layer two: Saudi and regional designations
Saudi Arabia also issues its own designations of individuals and entities, and works with partner governments on joint designations. One example is the Terrorist Financing Targeting Center, which Saudi Arabia co-chairs with the United States alongside the other GCC states, and which publishes joint designations of terrorist financiers.
These names do not always appear on foreign lists, and foreign vendors often treat them as an afterthought. A program built only on OFAC and EU data will miss them.
Layer three: foreign lists that still apply to you
A Saudi fintech that never deals with an American customer still has exposure to US, EU, and UK sanctions through the plumbing it depends on.
| List | Maintained by | Why a Saudi business screens it |
|---|---|---|
| SDN and other OFAC lists | US Treasury, Office of Foreign Assets Control | Dollar transactions clear through US correspondent banks. Card schemes and many banking partners require it. |
| EU consolidated list | European Union | European partners, payment providers, and investors expect it. |
| UK sanctions list | UK government | Required by UK-linked banks and payment partners. |
| Other national lists | Other governments | Relevant when you serve customers or pay counterparties in those countries. |
PEPs are not sanctions, but you screen them in the same call
A politically exposed person is someone with a prominent public role, such as a minister, senior official, judge, or head of a state-owned company, plus their relatives and close associates. A PEP match does not block anyone. It means you apply enhanced due diligence: understand the source of funds, get senior sign-off on the relationship, and monitor activity more closely.
In practice teams run sanctions, PEP, and watchlist checks in a single request and treat the results differently.
When to screen
The last point is the one teams skip. Designations are added throughout the year, and a customer who was clean at signup can appear on a list later.
- At onboarding, before the account can move money.
- Before paying a new beneficiary or counterparty for the first time.
- When a customer changes name, nationality, or ownership details.
- Every time the lists change, against your whole existing customer base.
Handling a possible match
Most hits on common Arabic names are namesakes. The job is to separate those quickly without missing the real ones.
- Compare identifiers: date of birth, nationality, place of birth, and document numbers against the list entry.
- Check the alias list on the entry. Listed parties often have several recorded spellings.
- If the identifiers rule it out, clear the match and record why.
- If they agree or cannot be ruled out, keep the account on hold and escalate to your compliance officer.
- Keep the screening ID, the evidence, and the decision together. Someone will ask for it later.
Why list freshness matters
The time between a designation being published and your system screening against it is your exposure window. If a vendor updates lists weekly, a newly designated person can open an account or receive a payment in the gap. Ask how fast new designations reach the screening engine, and whether existing customers are re-checked automatically when they do.
Frequently asked questions
Answers about screening, risk signals, and Naiza integration.
Which sanctions lists should a Saudi company screen?
At minimum the UN Security Council consolidated list and Saudi domestic designations. Most fintechs also screen OFAC, EU, and UK lists, because dollar payments, card schemes, and banking partners require it.
Does a Saudi business need to screen against OFAC?
If it touches US dollars, international card schemes, or US-linked banking partners, yes in practice. Correspondent banks and partners expect OFAC screening even when the customer base is entirely Saudi.
What is the difference between sanctions screening and PEP screening?
Sanctions screening finds parties you cannot deal with. PEP screening finds people with public influence who need enhanced due diligence and closer monitoring, but who can still be customers.
How often should customers be re-screened?
Every time the lists change. Automatic re-screening on list updates closes the gap that fixed monthly or quarterly batches leave open.
Does Naiza cover Saudi domestic designations?
Yes. Naiza screens international sanctions together with regional and Saudi domestic designations, PEPs, and watchlists in a single API request.