Adverse Media Screening: Catching the Risk Sanctions Lists Miss
Sanctions and PEP lists only show known, designated risk. Adverse media screening surfaces the rest — how negative-news screening works, how to filter for relevance and recency, and where it fits in onboarding, EDD and periodic review.
A sanctions list tells you who a regulator has already decided is dangerous. A PEP list tells you who holds, or recently held, a position that warrants closer attention. Both are essential, and both share the same blind spot: they only show risk that someone, somewhere, has already formally designated. The customer who has been arrested but not charged, the company under investigation for procurement fraud, the director named in a leaked-documents exposé, the trader convicted in another jurisdiction whose name never reached a sanctions register — none of them are on a list. They are in the news.
Adverse media screening, also called negative-news screening, is the practice of searching news and other open sources for derogatory information about a customer or counterparty that lists do not capture. It is how a compliance team catches risk while it is still emerging — before a designation, before a regulator acts, sometimes before a charge is laid. For MLROs and compliance officers in East Africa, where a single regional scandal can touch dozens of institutions at once, it is one of the most practical defences against onboarding a problem you could have seen coming.
This article explains what adverse media screening is, why list-based screening alone leaves a gap, how relevance and recency filtering keep the workload sane, and where negative-news checks belong in onboarding, enhanced due diligence and periodic review. For the wider picture of how screening sits alongside risk assessment, monitoring and case management, see the complete AML platform guide.
Why lists alone miss the risk
List-based screening is built around designation. A name appears on a sanctions list because a government or international body has gone through a process and decided to restrict that person or entity. A name appears on a PEP list because a data provider has classified the role as politically exposed. In both cases, the risk has already been recognised and recorded by a third party. That is precisely what makes lists reliable — and precisely what limits them.
Real-world risk does not wait for a designation. Consider the gap between an event and its appearance on a list:
- A businessman is named in court filings for a multi-million-shilling fraud. He will not appear on any sanctions list, and unless he holds office he is not a PEP. But the case is reported widely.
- A company is raided by an anti-corruption agency over a tender. No list reflects this on the day it happens, yet the reputational and regulatory risk is immediate.
- A customer was convicted of money laundering in a neighbouring jurisdiction years ago. The conviction may never have produced a sanctions entry, but it is a matter of public record.
In each case, list screening returns a clean result while open sources tell a very different story. Adverse media is the layer that closes that gap. It does not replace sanctions and PEP screening — it complements it. For a full treatment of the list-based side of the picture, see how sanctions and PEP screening works and what it is designed to catch. And for why the lists themselves must be kept current and complete, see what watchlists do and do not cover. Adverse media exists precisely because even perfectly maintained lists only ever describe designated risk.
Where adverse media comes from
Negative-news screening draws on open sources rather than curated sanctions or PEP registers. In practice these include:
- News media — national, regional and international outlets reporting on arrests, charges, convictions, investigations, regulatory actions and corporate scandals.
- Commercial risk databases — providers that aggregate and structure adverse-media coverage, often the same vendors that supply sanctions and PEP data, so the negative-news feed arrives alongside the lists.
- Official and regulatory sources — court records, regulator enforcement notices and anti-corruption agency announcements, where these are public.
The raw material is messier than a sanctions list. A sanctions entry is structured: a name, identifiers, a programme. An adverse-media result is an article — unstructured, written for a general audience, sometimes ambiguous about whether the person named is actually your customer. That difference shapes everything about how the screening has to be run.
The false-positive challenge
The hardest problem in adverse media screening is not finding negative news. It is finding the right negative news about the right person. Two challenges dominate.
The first is name ambiguity. Common names produce enormous numbers of matches, and an article mentioning someone who shares your customer's name is not the same as an article about your customer. AML screening false-positive rates commonly exceed ninety per cent across the industry, and unfiltered adverse media is one of the worst offenders — a single common name can return hundreds of unrelated stories.
The second is relevance. Not all negative news is relevant to financial-crime risk. Your customer being quoted in an article about a fraud — as the victim, the investigating lawyer, or an unrelated commentator — is not the same as your customer being the subject of the fraud. A story about a company with a similar name in a different sector is noise. Treating every hit as a hit buries the analyst and trains the team to click through warnings without reading them, which is worse than not screening at all.
The answer is not to screen less. It is to screen with discipline — to filter aggressively for relevance and recency, and to give analysts the context to dispose of each result quickly and defensibly.
Filtering for relevance
Relevance filtering narrows the flood to the matches that matter. Good filtering considers whether the named individual is actually the subject of the derogatory information rather than incidentally mentioned, whether the article concerns a financial-crime or reputational category your policy cares about — fraud, corruption, money laundering, terrorism, trafficking — and how strongly the match ties to your customer's known identifiers. The goal is a queue an analyst can work through in minutes, not days, where each item carries a clear reason it surfaced.
Filtering for recency
Recency matters because risk has a shelf life and a context. A decades-old story that has already been investigated and resolved is rarely the same concern as a charge laid last week. Recency filtering lets a team prioritise current and emerging coverage, schedule re-screening sensibly, and avoid re-litigating the same historical article every review cycle. It also keeps periodic review focused on what has changed since the last look, rather than re-surfacing everything already assessed.
How Creodata handles adverse-media screening
In the Creodata AML Platform, adverse media is not a bolt-on. It runs through the same Screening service as sanctions and PEP checks, so a customer is assessed against lists and against negative news in one pass, and every result lands in the same structured workflow.
Three design choices make the difference between a usable adverse-media capability and a noise generator:
- Locale-aware, multi-script name matching. East African names appear across scripts and transliterations, and a customer named in an Arabic-language outlet should still match an English-language record. Creodata's screening uses fuzzy, multi-script and locale-aware matching so the same individual is recognised across the variations in how their name is written.
- Explainable match scoring. The match-scoring engine surfaces the top three reasons a result was returned, so an analyst sees why a story matched — not just that it did. That turns a wall of articles into a ranked, reasoned queue, and it gives the analyst the basis for a defensible decision.
- A structured false-positive workflow. When an analyst determines that a hit is not relevant — wrong person, incidental mention, out-of-scope category — that disposition is recorded, not just dismissed. The decision, its reason and the evidence behind it live with the case. The next time the same article surfaces, the team is not starting from zero.
Where a model contributes to scoring or prioritisation, the platform follows its standard discipline: every AI surface carries a model-and-version label, the SHAP top-three explanation, a confidence percentage, and a human Accept, Modify or Reject control, with the decision logged against the model version and inputs. Adverse media is a judgement-heavy area, and the platform is built so the human always makes the call on a result they can see the reasoning for.
Where adverse media fits in the AML programme
Adverse media screening is not a one-time gate. It belongs at three distinct points in the customer lifecycle, and the value at each is different.
| Stage | What adverse media adds |
|---|---|
| Onboarding | Catches negative news before the relationship begins, when declining is cheapest and cleanest. |
| Enhanced due diligence | Deepens the picture for higher-risk customers where a list check is not enough. |
| Periodic review | Surfaces risk that emerged after onboarding, on a cadence set by risk band. |
At onboarding
The first screen happens before you take the customer on. A clean sanctions and PEP result is necessary but not sufficient; an adverse-media check at onboarding catches the prospective customer who has no designation but plenty of derogatory coverage. This is the cheapest moment to act, because declining or escalating before the relationship starts avoids the harder problem of exiting a customer later.
In enhanced due diligence
For higher-risk customers, a basic screen is not enough. Adverse media is a core input to enhanced due diligence — the deeper investigation reserved for customers whose risk band, structure or behaviour warrants it. Here the team is not asking "does anything match" but "what is the full open-source picture of this customer and the people behind it." Negative-news findings feed directly into the EDD narrative and the decision to proceed, decline or impose conditions. For how that deeper process is structured, see how adverse media feeds enhanced due diligence.
In periodic review
Risk is not static, and neither is the news. A customer who was clean at onboarding may be charged, investigated or exposed years into the relationship. Creodata schedules periodic review by risk band, so higher-risk customers are re-screened more frequently, and recency filtering keeps each review focused on what has emerged since the last one. This is where adverse media earns its keep over the life of a relationship: it is the mechanism that turns a point-in-time check into ongoing vigilance.
What good looks like
A well-run adverse-media capability is not the one that returns the most hits. It is the one that returns the right hits, with the context to dispose of each quickly, at the points in the lifecycle where the finding can actually change a decision. It complements list-based screening rather than duplicating it, filters hard for relevance and recency so analysts are not buried, records every disposition so the team builds on its own work, and feeds findings into onboarding, EDD and periodic review where they belong.
Done this way, negative-news screening stops being a box-ticking exercise that floods the queue and becomes what it should be: the layer that catches the risk a list, by definition, never will.
Frequently asked questions
How is adverse media screening different from sanctions and PEP screening?
Sanctions and PEP screening check a name against curated lists of already-designated individuals and entities. Adverse media screening searches open sources — chiefly news — for derogatory information that has not been formally designated. Lists catch known, recorded risk; adverse media catches emerging or un-designated risk. They are complementary layers, and a complete programme runs both in the same screening pass.
Why does adverse media produce so many false positives?
Because its raw material is unstructured news rather than structured list entries. Common names match unrelated stories, and people are mentioned in articles for reasons that have nothing to do with financial-crime risk. The fix is disciplined relevance and recency filtering, explainable match scoring so analysts see why each result surfaced, and a structured false-positive workflow that records every disposition so the same noise is not re-worked each cycle.
How often should adverse media screening be repeated?
At minimum at onboarding, as part of enhanced due diligence for higher-risk customers, and on a periodic-review cadence set by risk band. In the Creodata AML Platform, periodic review is scheduled by risk band so higher-risk customers are re-screened more frequently, and recency filtering keeps each review focused on what has changed since the last one.
Does adverse media screening require manual review of every hit?
Consequential decisions stay with a human, but the platform is built to make that human's job manageable. Match scoring ranks results and surfaces the top three reasons each one surfaced, relevance and recency filtering cut the volume, and a structured workflow lets analysts dispose of irrelevant hits with a recorded reason. The aim is a short, reasoned queue rather than a wall of articles, so review effort lands where it matters.
Adverse media screening is one capability within a complete AML programme that also spans risk assessment, monitoring, case management and reporting — supported, where institutions need it, by financial-crime compliance advisory and a dedicated goAML Reporting Platform. To see how Creodata runs sanctions, PEP and adverse-media screening together in one explainable workflow, book a demo.