Sanctions Screening: OFAC, Canadian Autonomous

Sanctions screening is the process of checking customers, transactions, and business partners against government-issued lists of designated persons, entities, and jurisdictions subject to economic restrictions. For Canadian regulated entities, FINTRAC (Financial Transactions and Reports Analysis Centre of Canada) and Global Affairs Canada require robust screening programmes as a core component of AML/CTF compliance. The Special Economic Measures Act (SEMA) and the Justice for Victims of Corrupt Foreign Officials Act (Sergei Magnitsky Law) form the backbone of Canada's autonomous sanctions regime.

This guide explains how sanctions screening works, which lists to cover, regulatory obligations under Canadian and international law, and the operational best practices that leading compliance teams apply in 2026.

What is sanctions screening?

Sanctions screening is the systematic verification of counterparties — clients, suppliers, payment beneficiaries — against official lists of individuals, entities, or countries subject to asset freezes, trade restrictions, or other prohibitive measures. It forms part of a broader AML/CTF programme alongside Know Your Customer (KYC) checks, transaction monitoring, and Suspicious Transaction Reports (STRs).

Sanctions screening differs from PEP (Politically Exposed Person) screening: PEP checks flag individuals with prominent public roles who may pose higher corruption risks, whereas sanctions screening identifies parties subject to binding legal prohibitions. Both are required simultaneously at onboarding for reporting entities.

Key sanctions lists for Canadian businesses

The Canadian Consolidated Autonomous Sanctions List, maintained by Global Affairs Canada, covers designations under SEMA, the Magnitsky Law, the United Nations Act, and the Freezing Assets of Corrupt Foreign Officials Act. Canada has imposed autonomous sanctions on Russia, Myanmar, Iran, North Korea, Venezuela, and other jurisdictions.

Why is sanctions screening legally required in Canada?

For Canadian regulated entities, sanctions screening obligations derive from several legislative sources.

The Special Economic Measures Act (SEMA) authorises the Governor in Council to impose sanctions — including asset freezes, dealings prohibitions, and export/import restrictions — in response to international crises, gross human rights violations, or significant corruption.

The Justice for Victims of Corrupt Foreign Officials Act (Sergei Magnitsky Law) provides for targeted sanctions against foreign nationals responsible for gross human rights violations or significant corruption.

The United Nations Act implements UN Security Council sanctions resolutions into Canadian law.

The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) requires reporting entities to conduct ongoing monitoring, which includes checking clients against sanctions lists as part of customer due diligence.

It is a criminal offence under SEMA and the regulations thereunder for any person in Canada or any Canadian abroad to deal in property of a designated person, provide financial services to them, or make goods or technology available to them. Penalties include up to five years' imprisonment and fines.

Regulated sectors in Canada subject to sanctions screening obligations include banks, credit unions, trust companies, life insurance companies, securities dealers, money services businesses, real estate agents, accountants, and dealers in precious metals and stones.

OFAC SDN List: extraterritorial reach and Canadian implications

The OFAC Specially Designated Nationals (SDN) List contains over 15,000 designations as of March 2026. OFAC's jurisdiction extends to:

• All U.S. persons worldwide
• All transactions conducted in U.S. dollars
• Any entity with U.S. nexus (U.S.-incorporated subsidiaries, correspondent banking relationships)

The OFAC 50% Rule states that any entity owned 50% or more by a sanctioned person is itself considered sanctioned, even if not explicitly listed on the SDN List.

For Canadian firms using U.S. dollar correspondent accounts — which includes virtually all major Canadian banks through their New York branches — OFAC sanctions apply de facto to all USD-denominated payments. The close economic integration between Canada and the United States under CUSMA (the Canada-United States-Mexico Agreement) makes OFAC compliance a practical necessity for most Canadian businesses engaged in cross-border trade.

Canadian Autonomous Sanctions: the domestic framework

Canada's autonomous sanctions regime has expanded significantly since 2014. Under SEMA, Canada has imposed comprehensive sanctions on Russia (14 rounds since February 2022, adding over 2,800 individuals and entities), as well as targeted sanctions on Iran, Myanmar, Venezuela, Nicaragua, Belarus, and other jurisdictions.

The Canadian sanctions list is accessible through Global Affairs Canada and is available in downloadable format for automated integration.

Key obligations under Canadian sanctions law:

• Dealings prohibition: no person in Canada and no Canadian abroad may deal in property owned or controlled by a designated person
• Financial services prohibition: no person shall provide financial or related services to or for the benefit of a designated person
• Disclosure obligation: financial institutions must disclose the existence of property in their possession that is owned or controlled by a designated person to the RCMP or CSIS without delay
• Reporting to FINTRAC: reporting entities must file STRs when they have reasonable grounds to suspect sanctions evasion

Types of sanctions screening: a practical overview

Entity screening checks legal persons — companies, trusts, foundations — against consolidated sanctions lists, including analysis of beneficial ownership structures under the 50% rule.

Transaction screening applies to payment flows in real time, flagging payments involving sanctioned countries, currencies, or routing codes. This is essential for Canadian payment service providers and banks.

Automated periodic rescreening triggers alerts when sanctions lists are updated, without waiting for the next client review cycle. Compliance teams consistently identify this as the most critical control improvement.

Best practices for sanctions screening in 2026

1. Calibrate fuzzy matching thresholds by risk tier

Name-matching algorithms must handle transliterations (Arabic, Cyrillic, Chinese scripts), spelling variants, and aliases. High-risk clients should trigger alerts at lower similarity thresholds (75–80%), while standard-risk clients may use higher thresholds (88–92%). Document the calibration rationale in your risk assessment.

2. Apply the beneficial ownership analysis systematically

The OFAC 50% Rule and equivalent Canadian control criteria require screening not only the immediate counterparty, but its owners up the corporate structure. CheckFile's KYC platform automates beneficial ownership extraction from corporate documents.

3. Implement real-time screening for payment flows

FINTRAC and OSFI expect financial institutions to screen transactions before execution, not after. Real-time API integration with sanctions databases is the standard for 2026.

4. Document every alert decision with a full audit trail

Every alert generated by the screening system — including false positives cleared after review — must be documented. FINTRAC expects to review alert management records during compliance examinations. Retention period: minimum five years under the PCMLTFA.

5. Conduct independent validation annually

Annual independent validation — conducted by a function separate from the first line of defence — is considered a supervisory expectation by both OSFI and FINTRAC.

CheckFile's document verification platform integrates sanctions screening into document-based onboarding workflows. See our compliance risk assessment guide for a framework to evaluate your current screening programme.

Penalties for sanctions screening failures

Beyond financial penalties, sanctions violations trigger reputational damage, correspondent banking relationship terminations, and criminal prosecution under Canadian law.

For a broader view of how sanctions screening fits into your AML programme, see our Anti-Money Laundering compliance guide.

For a comprehensive overview, see our document compliance complete guide. Our platform processes over 180,000 compliance documents per month with a 94.8% fraud detection rate and 99.97% availability.

Frequently asked questions

What is the difference between sanctions screening and AML screening?

AML screening is a broader category encompassing customer due diligence, transaction monitoring, suspicious transaction reporting, and sanctions screening. Sanctions screening is a specific subset focused exclusively on checking parties against government-issued prohibition lists. All reporting entities must conduct both, but the processes use different data sources and generate different types of alerts.

Do small businesses need to conduct sanctions screening in Canada?

Any reporting entity under the PCMLTFA — including real estate agents, accountants, money services businesses, and dealers in precious metals — must screen clients against sanctions lists as part of their customer due diligence. Beyond reporting entities, all persons in Canada are prohibited from dealing with designated persons under SEMA. CheckFile's pricing page provides options scaled to different transaction volumes.

How often should existing clients be rescreened?

FINTRAC and OSFI guidance suggests rescreening at a frequency proportionate to risk. For financial institutions, continuous automated rescreening when sanctions lists are updated is the standard. For other reporting entities, rescreening at least annually for standard-risk clients and more frequently for high-risk relationships is expected.

What should a firm do when a sanctions match is identified?

A confirmed sanctions match requires: (1) immediate freezing of any assets or property connected to the designated person; (2) disclosure to the RCMP and/or CSIS without delay; (3) refusing any further dealings or financial services; (4) filing a Suspicious Transaction Report with FINTRAC if additional suspicious indicators are present. Do not tip off the subject.

Is OFAC screening required for Canadian-only businesses?

Canadian-only businesses that never transact in USD and have no U.S. nexus are generally not within OFAC's primary jurisdiction. However, most Canadian financial institutions maintain U.S. dollar correspondent accounts through New York, creating indirect OFAC exposure. Additionally, screening against OFAC is considered a global best practice and is routinely included in comprehensive sanctions screening programmes.

---

This article is for informational purposes only and does not constitute legal, financial, or regulatory advice. It covers the regulatory framework applicable to Canada and, where relevant, the United States. Readers should seek specialist legal advice for their specific circumstances.

---

Go further

To dive deeper into this topic, explore our complete guide on document verification.