The short answer
Sanctions and politically exposed persons (PEP) screening are two separate checks in an anti-money-laundering programme:
- Sanctions screening looks for people, entities, and countries that a government or international body has designated. Being on a sanctions list is usually itself a reason to refuse a transaction or file a report, because dealing with a designated party is a legal offence.
- PEP screening looks for people who hold, or recently held, a prominent public function. Being a PEP is not illegal, but it signals a higher money-laundering risk, so the institution applies enhanced due diligence and may seek senior-approval for the relationship.
A Saudi financial institution runs both, on every customer and counterparty, and they work in the same screening engine but answer different questions.
What sanctions screening does
Sanctions screening checks names against lists issued by governments and international bodies. The lists that matter for a Saudi institution include:
- United Nations Security Council resolutions and designations.
- Saudi (MOI) designations and the ministry's warning-list entities.
- OFAC (US) lists, which matter because of the reach of the US system and dollar clearing.
- EU and UK lists, relevant for institutions with European links.
When a match is found, the institution does not treat it as one more risk-scoring input. A confirmed sanctions match is a trigger for refusal, freeze, or a suspicious-transaction report, depending on the list and the circumstances. There is no "enhanced due diligence and move on" for a genuine designation.
What PEP screening does
PEP screening checks names against a set of public-functions: heads of state and government, ministers, senior judges and military officers, central bank governors, and members of boards of state-owned enterprises. For Saudi and Gulf institutions, the relevant population also includes senior officials of the Saudi state, royalty, and the leadership of significant state-connected entities.
PEP status is not a prohibition. It is a risk flag that the institution responds to with enhanced due diligence — establishing the source of funds, understanding the purpose of the relationship, and getting a senior approval before onboarding or continuing the account. The relationship can proceed, but it is handled more carefully and reviewed more often.
Why the distinction matters in practice
The two checks get conflated because they run in the same engine and often in the same search result. But the consequences are different, and treating them the same way breaks a compliance programme:
| Sanctions screening | PEP screening | |
|---|---|---|
| What it flags | Designated people, entities, countries | People holding public functions |
| Is it illegal to deal with them? | Usually yes | No |
| The response | Refuse, freeze, or report | Enhanced due diligence + senior approval |
| Where the list comes from | Governments and international bodies | Public-functions definitions (e.g. FATF) |
| False positives | Harmless for most, serious if confirmed | Common, need resolution, not automatic refusal |
Mixing the two produces the two classic failures: treating a PEP match as a hard refusal (which is wrong, and loses good customers), or treating a sanctions match as a "risk flag" you can clear with more diligence (which is dangerous, because a confirmed designation is transactional).
The screening loop
A working programme screens at onboarding and then on an ongoing basis:
- Screen at onboarding. The customer and parties behind it (directors, beneficial owners, signatories).
- Resolve matches. A match is not an instant decision; an analyst confirms whether it is a true hit, a near-name, or a false positive.
- Ongoing screening. The lists change and new public-functions appointments happen. A name that was clear in January may be designated in July, so the institution re-screens continuously.
- Act on confirmed matches. Freeze for sanctions, or apply enhanced due diligence and senior approval for PEP.
How Saudi institutions handle the acronym problem
Arabic names, shared family names, and different transliterations make exact matching unreliable. A screening tool for the Saudi market needs fuzzy and Arabic-aware matching — normalising Arabic script and handling name variants — otherwise it buries real hits under false positives or misses a true one entirely. This is where the quality of the matching engine changes the outcome of the whole programme.
Getting the programme right
- Use the genuine list set, not a reduced one, and update it on a schedule.
- Decide the response rule before a match happens: what is a refusal, what is enhanced due diligence, who approves.
- Keep an audit trail showing how every match was resolved.
- Re-screen continuously, not once at onboarding.
- Use Arabic-aware matching so the check actually works on Saudi names.
Limaz builds and operates fraud and AML screening for Saudi financial institutions, using Naiza for sanctions and PEP screening. See the fraud & AML technology service, or read Saudi AML law for fintechs for the full programme.