Over the past few years, financial crime compliance in Europe has been moving in one clear direction: integration.  

What used to sit in separate silos, sanctions screening, AML monitoring, and fraud detection are now being reshaped into a single, interconnected risk framework. 

At the center of this shift are the evolving expectations of the European Banking Authority (EBA), particularly its recent guidelines on sanctions implementation, AML/CFT risk factors, and governance. But 2026 marks a turning point: the gradual shift in supervisory momentum toward the new EU-level authority, the Anti-Money Laundering Authority (AMLA). 

This article explores how watchlist screening is being redefined – not just as a compliance control, but as a central pillar of financial crime risk management and prevention, and what institutions should expect as the AMLA era begins. 

 

From fragmentation to convergence 

Traditionally, financial institutions approached financial crime risk through separate systems: 

  • Sanctions screening flagged names against official lists 
  • AML transaction monitoring focused on behavioral anomalies 
  • PEP checks were part of onboarding and periodic reviews 

Each process had its own tools, teams, and escalation paths. 

That model is now outdated. 

The EBA has been explicit: financial crime risks are interconnected and must be managed holistically. Sanctions exposure, corruption risk (via PEPs), and suspicious transaction patterns often overlap in real-world cases, especially in areas like sanctions evasion, trade-based money laundering, or complex ownership structures. 

What this means in practice is simple but profound: 

A sanctions alert is no longer just a sanctions issue; it is an AML signal. 

 

Integrating sanctions alerts into AML monitoring 

One of the most important shifts under the EBA guidelines is the expectation that sanctions alerts feed directly into AML monitoring frameworks. 

Instead of operating as parallel systems, institutions are expected to connect: 

  • Name screening results 
  • Transaction monitoring alerts 
  • Customer risk profiles 

What does integration actually look like? 

At onboarding, screening results are no longer a simple “pass/fail” gate. A potential match, whether confirmed or not, can influence: 

  • The customer’s initial risk rating 
  • The level of due diligence applied 
  • Approval workflows 

During the customer lifecycle, things become even more dynamic: 

  • A new sanctions match may trigger a full AML review 
  • A PEP identification may increase monitoring intensity and risk level as well 
  • Adverse media hits may change the customer’s risk classification 

At the transaction level, integration allows for better detection of complex risks. For example: 

  • A transaction involving a jurisdiction linked to sanctions evasion 
  • Combined with a weak name match 
  • And unusual transaction behavior 

…may not trigger action in siloed systems, but becomes highly relevant when viewed together. 

This is where convergence delivers real value: context. 

 

Governance: More than just oversight 

Integration is not just a systems issue – it is fundamentally a governance challenge. 

The EBA places strong emphasis on clear accountability, especially at the senior management and board level. Financial crime risk is no longer something that can sit quietly within compliance departments. 

Who is responsible? 

  • The Board must approve frameworks and understand exposure 
  • Senior Management must ensure implementation and effectiveness 
  • The AML Compliance Function must oversee both AML and sanctions controls 

This is a notable shift. In many institutions, sanctions compliance used to sit separately from AML. Under the new expectations, that separation is increasingly difficult to justify. 

The AML function is now expected to: 

  • Ensure integration of sanctions into AML frameworks 
  • Oversee screening and monitoring systems and their calibration 
  • Monitor the effectiveness, not just the existence, of controls 

And importantly, it must be able to prove it. 

 

PEPs, sanctions lists, and the expanding screening universe 

Watchlist screening today is far broader than just checking names against sanctions lists. 

Institutions are expected to screen against: 

  • EU, UN, and national sanctions lists 
  • Politically Exposed Persons (PEPs) 
  • Relatives and Close Associates (RCAs) 
  • Adverse media databases 

Each of these introduces a different type of risk. 

PEPs: Risk, not prohibition 

Unlike sanctions, where a confirmed match usually leads to immediate restriction, PEPs operate under a risk-based approach. 

Not all PEPs are high risk. Their risk level depends on factors such as: 

  • Country of influence 
  • Role and seniority 
  • Access to public funds 
  • Exposure to corruption 

The challenge is that PEP and sanctions risk increasingly overlap. A politically exposed individual today may become subject to sanctions tomorrow, especially in volatile geopolitical environments. 

This is one of the key drivers behind convergence: 

The same data point (a name/entity) can carry multiple types of financial crime risk. 

 

The false positives problem and why it won’t go away 

Anyone working in financial crime compliance knows the reality: watchlist screening generates a lot of noise. 

False positives are driven by: 

  • Common names 
  • Incomplete or inconsistent data 
  • Aggressive matching thresholds 

The result? 

  • High operational workload 
  • Slower onboarding 
  • Frustration for both analysts and customers 

So why not just reduce the sensitivity? 

Because regulators, especially under EBA expectations, care less about efficiency and more about defensibility. 

 

Defensibility over efficiency 

This is one of the most important mindset shifts. 

It is not enough to say: 

“Our system works.” 

Institutions must be able to demonstrate: 

  • Why thresholds are set at a certain level 
  • How systems are tested and calibrated 
  • How decisions to dismiss alerts are justified 
  • That true matches are not being missed 

In other words, every key decision must be explainable. 

This creates a balancing act: 

  • Too many false positives → operational strain 
  • Too few alerts → regulatory risk 

The EBA’s position is clear: if you have to choose, choose defensibility. 

That said, smarter approaches are emerging: 

  • Risk-based segmentation (stricter screening for high-risk customers) 
  • Better use of contextual data 
  • Advanced analytics for alert prioritization 

 

Screening (against watchlists) as part of customer risk assessment 

Perhaps the most transformative change is how screening results are used. 

They are no longer just compliance checks; they are inputs to customer risk-scoring models. 

From binary to dynamic 

Instead of: 

  • Match → reject 
  • No match → proceed 

Institutions are expected to adopt a more nuanced approach: 

  • Weak match → increased risk score 
  • PEP identification → enhanced due diligence 
  • Adverse media → trigger review 

This feeds into a dynamic customer risk profile, which evolves over time. 

 

Why does this matter? 

Because financial crime risk is not static. 

A low-risk customer today can become high-risk tomorrow due to: 

  • Political exposure 
  • New sanctions designations 
  • Negative media 

By integrating screening into risk assessment, institutions can respond in real time, rather than waiting for periodic reviews. 

 

Financial crime convergence in practice 

So what does convergence actually mean on the ground? 

It means that, instead of separate workflows, institutions must build connected ecosystems, with EFM platforms at their core. 

  • Screening systems feed into case management tools 
  • Case management tools link to transaction monitoring 
  • All outputs feed into customer risk models 

This creates a single view of risk in which different signals reinforce one another. 

The benefits are clear: 

  • Better detection of complex schemes 
  • Fewer blind spots between functions 
  • More consistent decision-making 

But it also raises the bar significantly in terms of: 

  • Data quality 
  • System integration 
  • Governance maturity 

 

2026 and the shift toward AMLA 

As of early 2026, another major development is reshaping the landscape: the transition from EBA-driven coordination to the Anti-Money Laundering Authority’s operational role. 

The EBA has effectively laid the groundwork: 

  • Common guidelines 
  • Harmonized expectations 
  • Strong focus on governance and integration 

Now, AMLA is expected to take this further by: 

  • Directly supervising selected high-risk institutions 
  • Ensuring consistent application of rules across the EU 
  • Driving convergence not just in theory, but in practice

What should institutions expect? 

A short but realistic outlook: 

  • More intrusive supervision at the EU level 
  • Greater scrutiny of effectiveness, not just frameworks 
  • Stronger focus on data, systems, and integration 
  • Reduced tolerance for national divergence 

In simple terms, AMLA is likely to raise expectations from “comply” to “prove and demonstrate.” 

 

Key challenges ahead 

Even with clear regulatory direction, implementation is not straightforward. 

Technology 

  • Replacing or integrating legacy systems 
  • Ensuring real-time data processing 
  • Maintaining data quality 

Operations 

  • Managing alert volumes  
  • Automations and Artificial Intelligence Agenting  
  • Retaining skilled analysts 
  • Training staff on new expectations 

Governance 

  • Aligning responsibilities across functions 
  • Avoiding duplication or gaps 
  • Ensuring clear accountability 

 

Where this leaves financial institutions 

The direction is clear: 

  • Siloed approaches are no longer viable 
  • Screening is no longer a stand-alone control 
  • Governance and defensibility are central 

Institutions that succeed will be those that: 

  • Treat watchlist screening as part of risk intelligence, not just compliance 
  • Invest in integration across systems and processes 
  • Build strong documentation and audit trails 
  • Align their frameworks with the coming AMLA expectations 

 

Final thoughts 

The evolution of watchlist screening under EBA guidance reflects a broader truth about financial crime compliance: 

It is no longer about checking boxes; it is about understanding risk, making real-time decisions, and preventing crime. Instant payments are now part of the daily activity of every payment service provider, introducing new challenges in which decisions rely on users rather than transaction details, and in which precision, automated decision-making, and dynamic risk scoring define how well banks do what they do. 

As Europe transitions into the AMLA era, the focus will only intensify on how well institutions connect the dots between sanctions, AML, PEPs, fraud, and customer behavior. 

Those who can turn data into insight and insight into defensible decisions will not just meet regulatory expectations – they will be better equipped to manage the increasingly complex world of financial crime.

The landscape of financial crime compliance is gravitating toward a single, integrated future. As the AMLA era unfolds, institutions must pivot from static box-ticking toward real-time risk intelligence and total defensibility. The time has come to connect the dots across previously isolated frameworks.

NOTO facilitates this convergence by unifying watchlist screening, sanctions, and AML monitoring into one comprehensive, enterprise-grade ecosystem. It enables a holistic view of risk, transforming raw data into explainable and defensible decisions

Are you prepared to future-proof your compliance framework? Get in touch to discover how NOTO optimizes your operations, ensuring both rigorous prevention and seamless business growth.

This article was developed in collaboration with Simeon Petkov, CFE, CAMS, ALCO, IFSCO, CALE, Managing Owner at ALSAS LTD – AML Services — a consultancy providing trainings and business solutions in AML and financial crime prevention. https://alsas.net/

Keep Reading