Transaction Monitoring and Adverse Media Screening Explained

Anti-money laundering is not a one-off check at onboarding — it is a continuing duty. Two controls do most of the ongoing work: transaction monitoring, which watches what a client actually does over time, and adverse media screening, which watches what the outside world says about them. Together they turn AML from a snapshot into a living process.

What is ongoing monitoring?

UK Money Laundering Regulations require firms to conduct ongoing monitoring of business relationships. This has two limbs: scrutinising transactions throughout the relationship to ensure they are consistent with the firm's knowledge of the client, their business and risk profile; and keeping customer due diligence information up to date. In other words, you must keep asking whether what the client is doing still makes sense given what you know about them.

How transaction monitoring works

Transaction monitoring compares activity against expected behaviour and flags anomalies — unusually large payments, rapid movement of funds, transactions with high-risk jurisdictions, structuring (breaking large sums into smaller ones to avoid thresholds), or patterns that do not fit the client's stated business. Larger firms typically use automated systems that generate alerts against rules or models; smaller firms may monitor manually. Either way, the output is only as good as the firm's understanding of what "normal" looks like for each client.

Managing alerts and false positives

A perennial challenge is false positives — alerts that look suspicious but turn out to be benign. Too many, and analysts drown; too few, and genuine risk slips through. Good practice is to tune rules to the firm's actual risk, triage alerts proportionately, document the rationale for closing or escalating each one, and feed lessons back into the rules. An alert that cannot be explained away should move towards an internal report and, potentially, a Suspicious Activity Report.

Adverse media screening

Adverse media (or negative news) screening checks clients and their beneficial owners against news and other public sources for indications of financial crime, corruption, sanctions exposure or other reputational risk. It is a valuable early-warning tool: a client may pass identity checks yet appear in credible reporting linked to fraud or bribery. Adverse media findings are a classic trigger for enhanced due diligence, prompting a closer look at source of funds and the wider relationship.

Quality of sources matters

Not all "negative news" is equal. Firms should weigh the credibility of the source, the seriousness and relevance of the allegation, and whether matters were resolved or remain live. A single unverified blog post is not the same as sustained reporting by reputable outlets or a regulatory finding. Screening should also manage the risk of false matches caused by common names, which is why corroborating identifiers matter.

Bringing it together

Transaction monitoring and adverse media screening are most powerful when they feed each other and the firm's risk assessment: a monitoring alert plus adverse media is a stronger signal than either alone. Building the judgement to run these controls well — and to escalate proportionately — is exactly what structured AML and compliance CPD is designed to develop.

Frequently asked questions

Is transaction monitoring only for banks?

No. All firms in the regulated sector must carry out ongoing monitoring proportionate to their risk. The sophistication of the tools differs, but the obligation applies broadly, including to accountancy and finance practices.

How often should adverse media screening be done?

Screening is typically performed at onboarding and then periodically or on a trigger-driven basis, with frequency scaled to the client's risk — higher-risk clients warranting more frequent checks.

What should I do when an alert cannot be explained?

Escalate it internally to the MLRO, document your analysis, and consider whether the threshold for a Suspicious Activity Report has been met. Never simply close an unexplained alert without a recorded rationale.

Treat monitoring and screening as the eyes and ears of your AML programme: they are what let a firm notice when a relationship that once looked fine has started to look anything but.