Watchlists and sanctions: what they are and how to check
Watchlists and sanctions are legal instruments that governments and international bodies use to restrict relationships with designated people and entities, for reasons of security, foreign policy or the prevention of financial crime. Checking them (what is called screening) is a basic control that institutions apply when onboarding customers and when processing operations.
What financial sanctions are and why they exist
Financial sanctions are measures (such as asset freezing or the prohibition of operations) imposed on specific people, organizations or countries by decision of the authorities. They serve foreign policy, defense and security objectives and the maintenance of peace: curbing terrorist financing, responding to human rights violations and combating corruption. They usually have two natures: targeted ones, which reach individually listed targets, and sectoral ones, which restrict entire economic sectors or governments.
Main international lists (OFAC, UN, European Union, United Kingdom, Canada, Australia)
- OFAC (United States): the Office of Foreign Assets Control administers the U.S. Treasury's sanctions programs; its best-known database is the SDN (Specially Designated Nationals and Blocked Persons List).
- UN: Security Council resolutions establish global designations, normally incorporated into each country's rules.
- European Union: maintains a consolidated list of restrictive measures, mandatory across the bloc.
- United Kingdom: maintains the UK Sanctions List of targets subject to asset freezing.
- Canada: Global Affairs Canada maintains the country's consolidated list of autonomous sanctions, binding within Canadian territory.
- Australia: the DFAT (Department of Foreign Affairs and Trade) maintains the consolidated list of Australian autonomous sanctions.
- Panama (UAF): the country does not maintain its own sanctions list; the Financial Analysis Unit adopts the UN Consolidated Sanctions List, which we integrate directly from the source.
United States export control (BIS and DDTC)
Part of the U.S. restrictions do not come from financial sanctions, but from export control: rules that limit to whom the U.S. allows the export of sensitive goods, technology and services. Two agencies publish lists of restricted parties:
- BIS (Bureau of Industry and Security), of the Department of Commerce, maintains three lists: the Denied Persons List (people barred from taking part in exports), the Entity List (entities subject to specific licenses and restrictions) and the Unverified List (parties whose bona fides could not be verified).
- DDTC (Directorate of Defense Trade Controls), of the Department of State, publishes the administratively debarred parties, barred from taking part in exports of defense items under the ITAR regulation.
INTERPOL: Red Notice and Yellow Notice, the difference matters
INTERPOL publishes notices for police cooperation, and telling the types apart matters. The Red Notice is an international request to locate and provisionally detain a person wanted by justice, it is a cooperation request, not a conviction. The Yellow Notice helps locate missing people or identify those who cannot identify themselves, often victims. Treating both the same way would penalize vulnerable people; that is why the distinction is part of the control.
National restrictions and penalties (CGU, TCU, CNJ)
In Brazil, in addition to international sanctions, there are public registers of people and companies penalized by the public administration. Monitoring cross-checks registers maintained by the Office of the Comptroller General (CGU), the Federal Court of Accounts (TCU) and the National Council of Justice (CNJ):
- CEIS: Register of Disreputable and Suspended Companies (CGU)
- CNEP: National Register of Punished Companies (CGU)
- CEAF: Register of Expulsions from the Federal Administration (CGU)
- CEPIM: Register of Non-Profit Private Entities Barred (CGU)
- Leniency agreements (CGU): companies that entered into a leniency agreement under the Anti-Corruption Law
- Disreputable bidders (TCU): parties declared unfit to bid with the Federal Public Administration
- Disqualified officials (TCU): agents disqualified from holding public office
- Accounts ruled irregular (TCU): parties whose accounts were ruled irregular by the Court
- Accounts irregular for electoral purposes (TCU): list sent to the Electoral Justice, used in assessing ineligibility
- National Register of Those Convicted of Administrative Misconduct, from the CNJ
The legal basis includes the Anti-Corruption Law (Law 12,846/2013) and the rules on public procurement and administrative contracts.
Sectoral regulators (Central Bank, ANEEL, ANP, ANS, BCU/SSF, SSN, Federal Reserve, OCC)
Beyond the general public-administration registers, regulators of specific sectors publish their own penalties and restrictions. They are relevant references when assessing counterparties operating in regulated sectors, such as financial services, electricity, oil and gas, and private healthcare:
- Central Bank disqualified list (QGI): professionals and administrators disqualified by BACEN from roles at regulated institutions
- Barred from auditing (QGP): independent auditors and technical officers barred by BACEN from providing audit services to regulated institutions
- ANEEL infraction notices: penalties applied by the National Electricity Agency to players in the power sector
- ANP fines: penalties from the National Agency of Petroleum, Natural Gas and Biofuels against regulated players
- ANS penalties and special regimes: penalties applied to health-plan operators and special regimes decreed by the National Supplementary Health Agency
- BCU / SSF (Uruguay) – Financial institutions: sanctions against banks, finance companies and exchange houses applied by the Superintendency of Financial Services of the Central Bank of Uruguay.
- BCU / SSF (Uruguay) – Insurance: sanctions against insurers and reinsurers applied by the Superintendency of Financial Services.
- BCU / SSF (Uruguay) – Pension funds: sanctions against pension-fund administrators (AFAP) applied by the Superintendency of Financial Services.
- SSN (Argentina): insurers under liquidation proceedings at the national insurance superintendency.
- Federal Reserve (United States): enforcement actions applied to banks, financial holding companies and their officers by the Federal Reserve Board.
- OCC (United States) – Individual penalties and prohibitions: fines, censures and prohibition orders applied by the Office of the Comptroller of the Currency against national banks, their officers and technical staff.
- OCC (United States) – Institutional restrictions: suspension or termination of FDIC insurance, capital directives and other restrictions reaching the institution itself, applied by the Office of the Comptroller of the Currency.
Capital-markets regulators (CVM and international regulators)
Securities regulators apply penalties to intermediaries, administrators and issuers, and issue alerts about unauthorized operators. They are relevant risk signals when assessing counterparties linked to the financial and capital markets:
- CVM (Brazil): administrative sanctioning proceedings, temporary bans, orders suspending intermediation and settlement agreements of the Securities and Exchange Commission.
- SEC (United States) – Administrative proceedings: sanctioning administrative proceedings of the U.S. Securities and Exchange Commission.
- SEC (United States) – Litigation releases: civil actions filed by the U.S. Securities and Exchange Commission.
- CFTC (United States): enforcement actions of the Commodity Futures Trading Commission, regulator of the derivatives and commodities market.
- ASIC (Australia): people and organizations banned or disqualified by the Australian Securities and Investments Commission.
- CMF (Chile): sanctions of the Financial Market Commission.
- SMV (Peru): sanctions of the Superintendency of the Securities Market.
- BCU / SSF (Uruguay): securities-market sanctions of the Superintendency of Financial Services of the Central Bank of Uruguay.
- SMV (Panama): sanctions of the Superintendency of the Securities Market of Panama.
- CNV (Argentina): concluded disciplinary rulings from the national securities commission.
- Superfinanciera (Colombia): securities-market sanctions published in SIMEV.
- IOSCO: investor alerts (ISCAN) from the international network of regulators about entities offering investment services without authorization.
Official South American sources (Argentina, Chile, Colombia, Paraguay, Peru and Uruguay)
Beyond the global lists, Orvyan incorporates public sources from neighboring countries, useful when the counterparty has operations, partners or suppliers in the region. They fall into two distinct natures, weighted differently in risk analysis.
Lists of a restrictive or sanctioning nature:
- SENACLAFT (Uruguay): roster of politically exposed persons (PEP) published by the national secretariat for combating money laundering and terrorist financing.
- BCU / SSF (Uruguay) – Financial institutions: sanctions against banks, finance companies, exchange houses and other financial-system institutions, applied by the Superintendency of Financial Services.
- BCU / SSF (Uruguay) – Insurance: sanctions against insurers and reinsurers applied by the Superintendency of Financial Services.
- BCU / SSF (Uruguay) – Pension funds: sanctions against pension-fund administrators (AFAP) applied by the Superintendency of Financial Services.
- BCU / SSF (Uruguay) – Regulatory restrictions: disqualifications, authorization revocations and other restrictions imposed by the Superintendency of Financial Services.
- BCU / SSF (Uruguay) – Unauthorized operators: entities identified operating in the financial market without due authorization from the Superintendency of Financial Services.
- DNCP (Paraguay): suppliers debarred or sanctioned by the national public procurement authority.
- RePET (Argentina): public register of persons and entities linked to terrorism and its financing, maintained by the Ministry of Justice.
- CNV (Argentina): concluded disciplinary rulings from the national securities commission.
- SSN (Argentina): insurers under liquidation proceedings at the national insurance superintendency.
- Labor Directorate (Chile): employers convicted of anti-union or unfair labor practices, in a twice-yearly roster.
- Superir (Chile): insolvency and reorganization proceedings published in the Boletín Concursal by the insolvency superintendency.
- SIGEP (Colombia): politically exposed persons (PEP) registered by state entities in the public employment information system, under Decree 830 of 2021.
- Procuraduría General (Colombia): disciplinary records held in the SIRI system.
- Contraloría General (Colombia): parties held fiscally liable for damage to public assets.
- SIC (Colombia): parties sanctioned for bid rigging by the industry and commerce superintendency.
- SECOP (Colombia): suppliers sanctioned in public procurement, across the SECOP I and II platforms.
- Superfinanciera (Colombia): capital-markets sanctions published in the SIMEV system.
- Supersociedades (Colombia): companies under insolvency proceedings.
Official registries, used to confirm identity, standing and licensing, not as evidence of conduct:
- DNIT (Paraguay): taxpayer register (RUC), with each taxpayer's registration status.
- DINAVISA (Paraguay): sanitary registrations of food products and licensed establishments.
- SENASA (Argentina): meat, dairy and apiary establishments licensed by the national agrifood health and quality service.
- SSN (Argentina): registered insurers and reinsurers, insurance broker advisers and broker companies.
- IGJ (Argentina): entities and corporate ownership links registered with the corporate registry authority.
- SUNAT (Peru): taxpayer register roster.
- SMV (Peru): economic groups and corporate ownership links declared to the securities market regulator.
- RUES, Supersociedades and Superfinanciera (Colombia): business registry, supervised companies and entities overseen by the financial regulator.
The distinction matters: appearing in an official registry is expected of anyone operating normally and is not a risk signal in itself. Presence in the first group, by contrast, is a signal that calls for analysis.
Slave-like labor
Part of the lists deals with violations of fundamental rights, not financial crime. In Brazil, the “Dirty List” of Slave Labor, maintained by the Ministry of Labour and Employment, brings together employers caught subjecting workers to conditions analogous to slavery. It is a relevant reference of reputational and labor-compliance risk when assessing partners, suppliers and counterparties. Alongside it is the Conduct Adjustment Registry (CEAC), which lists employers that signed a conduct adjustment agreement to remedy violations related to these conditions.
Human rights, ethical exclusions and forced labor (NBIM, UFLPA)
Internationally, Norway's sovereign wealth fund, managed by NBIM (Norges Bank Investment Management), publishes ethical exclusions: companies the fund decides not to invest in due to involvement with serious human rights violations, severe environmental damage or other conduct contrary to its guidelines. It is not a legal sanction, but a public, carefully reasoned signal of environmental, social and reputational risk, useful in counterparty due diligence.
Also in the human-rights field, the United States maintains, under the UFLPA (Uyghur Forced Labor Prevention Act), a list of entities associated with forced labor in supply chains. Being on this list brings concrete restrictions on goods entering the country and is a forced-labor risk signal when assessing suppliers and counterparties.
Debarment by multilateral organizations
Development banks maintain lists of companies and people barred from taking part in the projects they finance, generally for fraud, corruption or collusive practices established in their own proceedings. The World Bank publishes the list of debarred firms and individuals, and the IDB (Inter-American Development Bank) maintains equivalent sanctions. Unlike the ethical exclusions above, debarment originates in established conduct (fraud/corruption); each plays a distinct role in risk assessment.
US federal debarment (LEIE and SAM.gov)
The U.S. government maintains its own equivalent to Brazil's CEIS: registers of people and companies barred from taking part in federal programs and contracts.
- LEIE (HHS-OIG): the List of Excluded Individuals/Entities, maintained by the Office of Inspector General of the Department of Health and Human Services, lists those excluded from federal healthcare programs such as Medicare and Medicaid.
- SAM.gov: the System for Award Management holds the exclusions (debarments and suspensions) of suppliers and providers barred from contracting with the U.S. federal government, maintained across agencies.
How to check and the challenge of keeping everything up to date
In practice, the query is direct: you provide the person's or company's data (name or tax ID) and the system compares it against the designation lists, returning the matches found. The difficulty is in the details: the same name may appear with different spellings, abbreviations, translations or nicknames, so the matching uses approximate comparison (not just identical text) to avoid missing a real match, without raising too many alerts over a mere name coincidence. Added to this is the ongoing work of keeping the lists up to date: incorporating new designations and removing revoked ones, without lag.
How Orvyan supports
Orvyan cross-checks more than 200 lists and sanction programs, with coverage across more than 30 jurisdictions, in a single query (by name or tax ID) and returns the result classified by risk: HIGH, MEDIUM, LOW or CLEAR, with the detail of each match. Its role is supporting: it recommends and flags the risk, but the decision is always the institution's.
Sources
- OFAC, U.S. Department of the Treasury: ofac.treasury.gov
- UN Security Council sanctions: un.org/securitycouncil
- European Union consolidated sanctions list: sanctionsmap.eu
- United Kingdom, UK Sanctions List: gov.uk / UK Sanctions List
- Canada, sanctions (Global Affairs Canada): international.gc.ca
- Australia, Consolidated List (DFAT): dfat.gov.au
- Panama, Financial Analysis Unit (UAF): uaf.gob.pa
- US export control, BIS (Denied/Entity/Unverified): bis.doc.gov
- US export control, DDTC (debarred): pmddtc.state.gov
- INTERPOL, notices: interpol.int/Notices
- CEIS, CNEP, CEAF, CEPIM and leniency agreements (Brazil's Transparency Portal / CGU): portaldatransparencia.gov.br
- Central Bank, disqualified and barred-from-auditing lists (QGI/QGP): bcb.gov.br
- TCU, disreputable bidders, disqualified officials and irregular accounts: portal.tcu.gov.br
- ANEEL, infraction notices (power sector): gov.br/aneel
- ANP, fines (oil, gas and biofuels): gov.br/anp
- ANS, penalties and special regimes (private healthcare): gov.br/ans
- CVM, sanctions and bans (capital markets): gov.br/cvm
- ASIC (Australia), banned and disqualified persons: asic.gov.au
- CMF (Chile), sanctions: cmfchile.cl
- SMV (Peru), sanctions: smv.gob.pe
- BCU/SSF (Uruguay), securities-market sanctions: bcu.gub.uy
- BCU/SSF (Uruguay), sanctions against financial institutions: bcu.gub.uy
- BCU/SSF (Uruguay), sanctions against insurers: bcu.gub.uy
- BCU/SSF (Uruguay), sanctions against pension funds (AFAP): bcu.gub.uy
- BCU/SSF (Uruguay), regulatory restrictions: bcu.gub.uy
- BCU/SSF (Uruguay), unauthorized operators: bcu.gub.uy
- SMV (Panama), sanctions: supervalores.gob.pa
- IOSCO, investor alerts (ISCAN): iosco.org
- SENACLAFT (Uruguay), politically exposed persons: gub.uy/senaclaft
- DNCP (Paraguay), sanctioned suppliers: contrataciones.gov.py
- RePET (Argentina), terrorism and financing: repet.jus.gob.ar
- CNV (Argentina), disciplinary rulings: cnv.gov.ar
- SSN (Argentina), insurers and insurance brokers: argentina.gob.ar/ssn
- Labor Directorate (Chile), anti-union practices: dt.gob.cl
- Superir (Chile), Boletín Concursal: boletinconcursal.cl
- IGJ (Argentina), entities and corporate ownership links: argentina.gob.ar/justicia/igj
- SUNAT (Peru), taxpayer register: sunat.gob.pe
- Colombia, open data (PEP/SIGEP, RUES, SECOP, companies and supervised entities): datos.gov.co
- Procuraduría General (Colombia), disciplinary records: procuraduria.gov.co
- Contraloría General (Colombia), fiscal liability: contraloria.gov.co
- SIC (Colombia), bid rigging: sic.gov.co
- Superfinanciera (Colombia), capital-markets sanctions (SIMEV): superfinanciera.gov.co
- Supersociedades (Colombia), corporate insolvency: supersociedades.gov.co
- DNIT (Paraguay), taxpayer register: dnit.gov.py
- DINAVISA (Paraguay), food sanitary registrations: dinavisa.gov.py
- SENASA (Argentina), licensed establishments: argentina.gob.ar/senasa
- Anti-Corruption Law (Law 12,846/2013): planalto.gov.br
- “Dirty List” of Slave Labor and Conduct Adjustment Registry (CEAC), Brazil's Ministry of Labour and Employment: gov.br/trabalho-e-emprego
- Ethical exclusions of Norway's sovereign wealth fund (NBIM): nbim.no
- UFLPA (US), entity list linked to forced labor: dhs.gov/uflpa
- World Bank, debarred firms and individuals: worldbank.org
- IDB, Inter-American Development Bank (Sanctions System): iadb.org
- Federal Reserve (US), enforcement actions: federalreserve.gov
- OCC (US), penalties and institutional restrictions: apps.occ.gov/EASearch
- SEC (US), administrative proceedings: sec.gov
- SEC (US), litigation releases: sec.gov
- CFTC (US), enforcement actions: cftc.gov
- LEIE (HHS-OIG, US), excluded from federal healthcare programs: oig.hhs.gov
- SAM.gov (US), federal contracting exclusions: sam.gov
Frequently asked questions
Do I need to check the national and international lists separately?
No. Orvyan cross-checks more than 200 lists and sanction programs, with coverage across more than 30 jurisdictions, in a single query, by name or tax ID.
What is a false positive and why does it happen?
It is when the system flags a similarity between the person queried and a list record, but the analysis concludes it is not the same person or entity. It can happen due to common names, abbreviations, spelling variations and namesakes.
Does a high-risk result mean rejecting the customer?
No. Orvyan classifies the risk and details each match; the decision to approve, review or reject is always the institution's, according to its policy.
Does Orvyan check lists from other South American countries?
Yes. Beyond the global lists, Orvyan checks official sources from Argentina, Chile, Colombia, Paraguay, Peru and Uruguay, including politically exposed persons (PEP) lists from Colombia and Uruguay, and capital-markets regulators from Peru and Panama. It matters when the counterparty has operations, partners or suppliers in the region.
Is appearing in an official registry, such as Paraguay's taxpayer register, a risk signal?
No. Some of the sources are registries: they serve to confirm identity, standing and licensing. Appearing in them is expected of anyone operating normally. The risk signal comes from the restrictive lists, and the query result keeps the two apart.
What is a leniency agreement and why does it show up in screening?
It is an agreement in which a company admits to having taken part in wrongdoing, such as corruption or bid rigging, and cooperates with the investigation in exchange for reduced penalties. It is the corporate version of a plea bargain. In Brazil, these agreements are signed under the Anti-Corruption Law, with the CGU. Being on this list is not a ban on contracting, the agreement generally avoids that, but it indicates a history of established misconduct, a relevant reputational and compliance risk signal when assessing partners and counterparties. Orvyan flags the match; the decision is always the institution's.
