Watchlist-screening results

Returns PEP (Politically Exposed Person) and Sanctions screening results for a verification session

When to use this endpoint

• Use this endpoint to retrieve comprehensive PEP and Sanctions screening result, including match details, confidence scores and source database information after a verification session has been completed.

• Common use cases include:

  • Accessing screening results for compliance and AML (Anti-Money Laundering) purposes
  • Investigating potential PEP or sanctions matches flagged during verification
  • Obtaining provider-specific match data including match confidence and source information
  • Conducting enhanced due diligence based on screening results
  • Retrieving ongoing monitoring status for the session

Response data

• The response includes screening results such as match status, search parameters used, and detailed hit information when matches are found.

• Key data returned:

  • matchStatus: indicates if matches were found (possible_match or no_match)
  • monitorStatus: shows if ongoing monitoring is enabled or disabled for this session
  • searchTerm: shows the exact search parameters used (name, year, lists checked, match threshold)
  • totalHits: number of records matched in PEP and Sanctions databases
  • hits: array of detailed match data including matched names, countries, dates, match types, and related listings

• If no matches are found in PEP or Sanctions databases, the hits array will be empty and matchStatus will be no_match.

• For matchTypes, see the data provider's documentation for more detailed info.

About matchStatus field

• The matchStatus field is the primary outcome indicator of the AML/PEP screening itself. It directly answers the compliance question "Is this person flagged on any watchlist?"

• The field has two possible values:

  • possible_match: the person was found in one or more listings/databases. The data.hits array is populated with data about the person.
  • no_match: the person was not found. The data.hits array is empty.

• This is independent from the session decision (approved/declined), which is driven by IDV checks.

• The confidence in the matchStatus is higher when combined with IDV, because the screening data was extracted from a verified document. In standalone mode, the accuracy of the screening depends on the quality of the data you input.

• If you require more data, you can use the relevant sessionId and query the GET sessions/sessionId/person endpoint to find more detailed info about the match. Look for data in the person.pepSanctionMatches array.

Possible session outcomes

• Session approved + matchStatus: no_match

  • This is the ideal outcome. The end-user's identity was verified successfully and they were not found on any PEP/Sanctions/Adverse Media lists. You can proceed with onboarding, no further AML action needed.

• Session approved + matchStatus: possible_match

  • The end-user's identity is verified (the document and selfie are genuine), but they were found on one or more watchlists. Veriff only flags potential matches, you retain decisioning responsibility. Therefore, you need to perform manual review:
    • Review the hits array to examine the matched listings (source names, URLs, match types, etc.).
    • Determine whether the hit is a true match or a false positive (e.g., common name coincidence).
    • Apply your own risk-based decision depending on your regulation and requirements (decline the end-user, apply enhanced due diligence, or escalate).

Screening availability

• Screening timing: Results are typically available within seconds to minutes after session completion, depending on:

  • Session submission and processing time
  • Provider database response times
  • Complexity of search parameters

• Response status codes:

  • 200 = Screening results ready (either matches found or no matches)
  • 202 = Screening still in progress, results not yet available
  • 402 = PEP & Sanctions screening is not enabled for your integration
  • If you receive a 202 response, wait a few seconds and retry the request.

Implementation notes

• This endpoint requires session-level HMAC signature authentication
• PEP & Sanctions screening must be enabled for your integration to receive results
• The checkType field indicates if this is the initial_result or an updated_result from ongoing monitoring
• Handle both possible_match and no_match scenarios in your implementation
• Always ensure that you use the correct API URL to send requests. See the API URL section for more info
• The order of parameters in the real API response can differ from the order you see in this documentation. This is expected and part of the Backwards compatible changes requirements