Author: Kristin Stafford • Founder & CEO • Vital4A client clears screening at onboarding. Six months later they appear on a financial intelligence unit list. Eighteen months later they're the subject of an adverse media report that's been running in a regional publication for weeks. None of it surfaces. The monitoring wasn't designed to catch what changed — only to check what was known.
This is the screening gap that most AML programmes live with and most compliance teams don't see until an incident forces the question.
01What screening actually needs to do
Sanctions and PEP screening at onboarding is the entry requirement. It is not a complete screening programme.
A functioning screening capability does three things: it checks entities at onboarding against the full range of relevant lists — sanctions, PEP, adverse media, regulatory enforcement; it monitors those entities on an ongoing basis as list data changes; and it surfaces new adverse information as it emerges, not after the media cycle has already run.
Data quality matters enormously. Most commercial screening tools aggregate third-party data. When the underlying data is aggregated rather than sourced directly, updates lag, coverage has gaps, and the audit trail stops before it reaches the original source. In a regulatory environment where AUSTRAC expects organisations to demonstrate the provenance of their screening data, "we used a third-party provider" is a thinner answer than it used to be.
Vital4 sources its data directly from tens of thousands of primary sources — sanctions lists, regulatory registers, PEP databases, court records, adverse media. Every hit links back to its original document. The audit trail is complete because the data is direct-sourced, not aggregated through a chain of providers.
02The false positive problem
The second issue that undermines screening programmes is operational: false positives. When an analyst opens a Monday morning queue of, say, 800 alerts and none of them are relevant — a known failure mode of legacy screening systems after a data update — the programme stops functioning in practice even if it continues to function on paper. Analysts learn to clear queues, not investigate alerts.
Vital4's patented Contextualized Entity Extraction addresses this at the source. Rather than keyword matching — which flags every article that mentions a name regardless of context — the system reads sentiment tied directly to each entity within an article. The result is up to 99% reduction in false positives at the sentiment analysis stage alone, with entity extraction refining the output further. Some enterprise customers have repositioned more than half their media-review teams as a result.
03Screening for every regulated entity
The 2026 reforms raise the bar for every regulated entity, not just those entering the regime for the first time. For established financial institutions, strengthened ongoing due diligence requirements mean screening programmes built around onboarding are no longer sufficient — continuous monitoring across the full customer book is now the expectation.
For Tranche 2 entities – lawyers, accountants, real estate agents and trust and company service providers – building from scratch, Vital4's self-serve offering provides a direct path to compliant screening without an enterprise procurement cycle or IT integration project. Available via UI or API, the same screening infrastructure that serves major financial institutions scales to the size of a legal practice or accounting firm. Good screening data also has a commercial dimension: organisations that can verify customers faster, with fewer false positives and a complete audit trail, move through onboarding more quickly — a competitive advantage as well as a compliance one.
"Screening is where the journey starts. When a hit fires, the compliance journey begins — it doesn't end."
The next question is what the entity is doing across their full relationship with your organisation. That's the detection layer — and it's where FraudNet picks up.
Vital4 is designed to feed directly into FraudNet's entity screening workflow — the screening hit becomes part of the entity's risk picture in FraudNet from the moment it fires. The complete investigation and compliance response, when it's needed, is Veresure's layer. The three layers were built to connect.
04Frequently asked questions
My organisation screens customers at onboarding. Is that enough under the 2026 reforms?
Not anymore. The 2026 reforms strengthened ongoing due diligence obligations — onboarding is the starting point, not the programme. The question regulators are now asking isn't whether you checked an entity at intake, but whether you would know if their risk profile changed six months later. A customer who cleared screening when they were onboarded may have appeared on a sanctions list, been named in adverse media, or had their political exposure change since. Continuous monitoring is what closes that gap — and it's now the expectation, not a differentiator.
What's the difference between screening against direct-sourced data and using an aggregated feed?
Aggregated data passes through at least one intermediary between the original source and your screening result. That introduces lag, inconsistency, and a traceability gap — if a regulator asks where a result came from, the audit trail stops at the aggregator, not the original authority. Data collected directly from primary government, regulatory, and news sources is more current, every result traces back to its source, and there's no third-party distortion between what a regulator published and what your compliance team sees.
We generate a large number of false positives from our current screening tool. What's driving that?
Most false positives come from keyword or name-string matching — where a tool flags every entity whose name resembles the target, without understanding context. "John Smith, Sydney accountant" and "John Smith, sanctioned arms dealer" look similar to a keyword engine. Vital4's patented Contextualized Entity Extraction evaluates the full entity profile — location, role, associated organizations, media context — before generating an alert. That's what delivers fewer false positives on adverse media screening compared to legacy tools. Fewer false positives means less analyst time spent clearing noise and more time on the alerts that actually matter.
How often should existing customers be rescreened?
That depends on your risk-based approach, but the principle is that rescreening should be triggered by change, not only by the calendar. Sanctions lists, PEP status and adverse media all change after onboarding, so periodic batch re-screens leave windows in which a customer's risk profile has changed and nobody has been alerted. Event-driven monitoring, which alerts only on new or meaningfully changed records, closes those windows and keeps analyst workload manageable.
How does Vital4 fit with FraudNet and Veresure?
Vital4 provides the screening layer: sanctions, PEP and adverse media data collected directly from primary sources in 240+ countries. A screening hit can feed into FraudNet's entity screening workflow, where it becomes part of the entity's risk picture from the moment it fires, and Veresure provides the investigation and compliance response when it is needed. The three layers were built to connect.