Sanctions Screening Philippines: ATC, UN, and AMLC Rules
Sanctions screening checks customers and counterparties against lists of designated persons and entities. In the Philippines, covered persons must screen against the Anti-Terrorism Council (ATC) List and United Nations Security Council resolutions, under the AMLC 2021 Sanctions Guidelines. The rule most often stated wrongly: on a confirmed sanctions match, the obligation is not to file a Suspicious Transaction Report. It is to freeze the property or funds without delay and file a return with the AMLC within 24 hours.
What Is Sanctions Screening?
Sanctions screening compares the names of your customers, beneficial owners, and counterparties against official lists of designated individuals and entities. A match means you are prohibited from dealing with that party’s property or funds, and obliged to freeze what you hold.
Two features separate it from other AML controls. Sanctions obligations are absolute rather than risk-based: there is no threshold, no materiality test, and no discretion to conclude that a small exposure to a designated person is acceptable. And the required response is immediate action on the assets themselves, not a report about them.
That second point is where most compliance teams get the process wrong, and the cost of getting it wrong is high.
Which Lists Philippine Covered Persons Must Screen Against
The AMLC 2021 Sanctions Guidelines, covering Targeted Financial Sanctions related to Terrorism, Terrorism Financing, and Proliferation Financing, set the current requirements.
According to the AMLC’s guidance on sanctions screening, all covered persons must screen all relevant parties against the Anti-Terrorism Council (ATC) List and United Nations Security Council resolutions. At minimum, the sanctions database should include the UNSC Consolidated List covering Resolutions 1267 and 1989 for Al Qaeda, 1988 for the Taliban, and 2253 for ISIL, together with their successor resolutions.
Worth separating clearly: what Philippine law requires and what commercial reality requires are not the same list.
| List | Status in the Philippines | Why it matters |
|---|---|---|
| ATC List (Anti-Terrorism Council designations) | Legally required | Domestic designations under RA 11479; triggers AMLC freeze orders |
| UNSC Consolidated List | Legally required | Binding international obligation; 1267/1989, 1988, 2253 regimes |
| UNSC proliferation financing regimes | Legally required | TFS extended to PF by RA 11521 |
| OFAC (US Treasury) | Not a Philippine legal mandate | Commercially critical for USD clearing and correspondent relationships |
| EU, UK, and other national regimes | Not a Philippine legal mandate | Relevant where you have exposure in those jurisdictions |
Screening OFAC is not optional in practice for any institution touching USD. But it is a commercial and correspondent-banking requirement rather than an AMLC one, and conflating the two produces confused internal policies that cannot explain why a given list is being screened.
How a Designation Reaches Your Screening System
Philippine designations follow a chain, and knowing it tells you where your list updates should come from.
The Anti-Terrorism Council designates a person or group by resolution under RA 11479. The AMLC then issues a corresponding resolution, numbered in the TF series, embodying a Sanctions Freeze Order and directing the freezing without delay of property or funds owned or controlled by the designated party, including related accounts. Sector regulators disseminate that resolution onward: BSP through Circular Letters to supervised financial institutions, the Insurance Commission through advisories to its own sector.
A recent illustration of the cadence: BSP Circular Letter CL-2026-006 disseminated AMLC Resolution No. TF-113, Series of 2026, embodying a Sanctions Freeze Order against a designated group and individual pursuant to ATC Resolution No. 81 (2025), consistent with UNSC Resolution 1373.
The operational lesson from that chain: designations do not arrive on a schedule. They arrive when the ATC and AMLC issue them. A screening programme that refreshes its list monthly can hold a designated party’s funds unfrozen for weeks, and “our update cycle had not run yet” is not a defence.
What to Do on a Match: Freeze, Not STR
This is the section worth circulating internally, because plenty of compliance manuals get it wrong.
The AMLC 2021 Sanctions Guidelines are explicit. On a target match, the obligation is not to file a Suspicious Transaction Report. It is to freeze the account or assets, and to file a return with the AMLC within 24 hours.
Compare the two duties directly, because they run on different logic entirely.
| Sanctions match | Suspicious transaction | |
|---|---|---|
| Primary duty | Freeze the property or funds without delay | File an STR |
| Report | Return to the AMLC within 24 hours | STR by the next working day from establishment of suspicion |
| Judgment involved | None. The designation decides | Analytical determination by the compliance function |
| Threshold | None. Absolute prohibition | None, but suspicion must be established |
| Continue the relationship? | No. Dealing is prohibited | Often yes, since tipping off is prohibited |
The distinction has teeth. Treating a sanctions match as an STR event means you file a report and leave the funds accessible, which is precisely the outcome targeted financial sanctions exist to prevent. You will have documented your own failure to freeze.
The reverse error is less severe but still costly: freezing on an unconfirmed name match. Screening produces false positives constantly, particularly with common Filipino surnames and transliteration variance. Freezing a legitimate customer’s account on a partial match causes real harm. What the process needs is rapid escalation to confirm or dismiss a match, not an automatic freeze on every alert.
Penalties for Getting This Wrong
The Terrorism Financing Prevention and Suppression Act (RA 10168) attaches penalties on both sides of the obligation.
Dealing with the property or funds of designated persons is punishable by imprisonment and a fine of up to PHP 1 million, and the property is subject to civil forfeiture. Failure of a responsible officer or other person to comply with a freeze order carries imprisonment and a fine of up to PHP 500,000, without prejudice to the administrative sanctions the AMLC may impose on the covered institution.
Note the phrasing on that second one. The exposure attaches to the responsible officer personally, not only to the institution.
Why the Bar Rose After the Grey List Exit
Sanctions screening was one of the specific weaknesses that kept the Philippines under FATF monitoring, and the remediation is why expectations are now higher.
According to ComplyAdvantage’s analysis (updated March 2026), the AMLC carried out a thematic review of sanctions compliance in 2022 and 2023 aimed at supporting grey list removal, and that review found an overall underperformance on sanctions screening among Philippine financial institutions. Detailed new guidance followed, an on-site evaluation confirmed effective implementation, and the Philippines came off the list in February 2025.
Read that sequence from a supervisor’s point of view. Sanctions screening was examined, found wanting, remediated, and used as evidence of reform to an international body. It is now one of the areas an examiner has the strongest reason to look at closely, and the weakest reason to be lenient about.
Screening Is Only as Good as the Identity Underneath It
A screening engine matches names against lists. What it cannot do is tell you whether the name it received is real.
If a customer onboards with a synthetic or stolen identity, your screening runs cleanly against a name that was never theirs. The alert never fires, the file looks compliant, and the underlying exposure is entirely undetected. Sanctions screening inherits the reliability of the identity data feeding it.
The same dependency applies to PEP screening, and to every downstream control the AMLC expects covered persons to operate. Verihubs eKYC API establishes that identity layer at onboarding, with government ID verification across 15+ Philippine document types, biometric liveness, and deepfake detection, so the name entering your screening engine is one that has actually been verified.
Frequently Asked Questions About Sanctions Screening in the Philippines
Which sanctions lists must Philippine covered persons screen against?
- The Anti-Terrorism Council (ATC) List and United Nations Security Council resolutions, per the AMLC 2021 Sanctions Guidelines. At minimum the database should cover the UNSC Consolidated List including Resolutions 1267 and 1989 for Al Qaeda, 1988 for the Taliban, and 2253 for ISIL, plus successor resolutions and the proliferation financing regimes added by RA 11521.
Do Philippine institutions have to screen against OFAC?
- OFAC screening is not a Philippine legal mandate. The AMLC requires screening against the ATC List and UNSC resolutions. OFAC matters commercially rather than legally, because correspondent banks and USD clearing relationships generally require it, so most institutions with dollar exposure screen it regardless.
Should I file an STR when I get a sanctions match?
- No, that is the wrong instrument. Per the AMLC 2021 Sanctions Guidelines, on a target match the obligation is to freeze the account or assets and file a return with the AMLC within 24 hours, not to file a Suspicious Transaction Report. Filing an STR while leaving the funds accessible defeats the purpose of targeted financial sanctions.
How quickly must a covered person act on a sanctions match?
- Freezing must occur without delay, and the return goes to the AMLC within 24 hours. There is no threshold or materiality test, and no discretion to treat a small exposure as acceptable.
What happens if we fail to comply with a freeze order?
- Under the Terrorism Financing Prevention and Suppression Act (RA 10168), failure of a responsible officer or other person to comply with a freeze order is punishable by imprisonment and a fine of up to PHP 500,000, without prejudice to administrative sanctions the AMLC may impose on the institution. Dealing with designated persons’ funds carries imprisonment and a fine of up to PHP 1 million, plus civil forfeiture.
How do designations reach financial institutions?
- The Anti-Terrorism Council designates by resolution, the AMLC issues a corresponding TF-series resolution embodying a Sanctions Freeze Order, and sector regulators disseminate it: BSP through Circular Letters, the Insurance Commission through advisories. Designations are issued as they occur rather than on a fixed schedule, so screening lists need to update on the same basis.
Absolute Obligations Do Not Tolerate Batch Processing
Most AML controls are risk-based, which means proportionality is built into them. Sanctions screening is not. There is no threshold below which a designated party is acceptable, and no update cycle that excuses holding their funds unfrozen because the list refresh had not run.
That asymmetry is worth designing around. Screening should run against current lists at onboarding and continuously afterwards, alerts need an escalation path that can confirm or dismiss a match in hours rather than days, and the response on confirmation is to freeze and file a return within 24 hours.
All of which rests on one assumption: that the identity being screened is genuine. Verihubs eKYC API verifies that identity at the point of account creation, so the names flowing into your screening engine are ones you have actually confirmed.
Talk to the Verihubs team about the identity layer beneath your sanctions screening programme.
