Sanctions Stance: Your 2026 Client Vetting Tool

By 2026, your studio’s position on public sanctions isn’t some side issue for a compliance department you don’t have, it’s a basic tool for vetting new clients. People now expect the businesses they support to have a clear ethical position, particularly when it comes to international policy and human rights abuses. If you ignore this, you’re going to lose clients and your reputation will take a hit. So how do you show that your studio is serious about ethical business and international rules?

1. Develop a Complete Public Sanctions Policy

Your first move is to write down a clear, no-nonsense public sanctions policy. This isn’t just an internal memo for a binder that gathers dust. It’s a public declaration of what your studio stands for. A good policy will spell out your commitment to following international sanctions, like the ones from the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) and the European Union. The policy needs to say, in no uncertain terms, that your studio will not do business with or provide services to people, companies, or entire regions under sanction.

I tell everyone to put this policy somewhere obvious on their website, maybe in the “About Us” section or alongside your “Terms of Service.” It should be written in plain English, cutting out the legal jargon so that a regular person can understand it, while still showing you’re serious. For example, a simple line works best: “Our studio strictly adheres to all applicable international sanctions laws and regulations, including those administered by OFAC and the EU. We do not provide services to, or conduct business with, any sanctioned individuals, entities, or countries.” Something that direct leaves zero room for anyone to get the wrong idea.

Pro Tip: You have to put a “last revised” date on the policy document itself. This shows clients (and any regulators who come knocking) that you’re actively managing your compliance and not just posting something you wrote once and forgot about. A policy from 2022 raises more red flags than it solves in 2026.

2. Integrate Sanctions Screening into Your Client Intake Process

Once you’ve published your policy, you need a way to actually enforce it. That means building sanctions screening right into your process for taking on new clients. Every new client, and your existing ones from time to time, has to be checked. This isn’t a “nice to have.” It’s the baseline for running a responsible business now. Trying to do this by hand is a recipe for mistakes and takes forever, so you need to automate it.

You have a few solid tools for this job. If you’re a smaller studio, the free government databases are a fine place to start. The OFAC Sanctions List Search lets you type in names and check them against the Specially Designated Nationals (SDN) List. For a more thorough check, especially if your client list is growing, you should look at a paid compliance platform. Solutions like Refinitiv World-Check or Dow Jones Risk & Compliance automate the screening against thousands of global watchlists, politically exposed persons (PEPs) lists, and bad press. They often have API integrations, which means you can connect them straight to your CRM or booking system.

Screenshot Description: Imagine a screenshot of the OFAC Sanctions List Search interface. In the “Name” field, “John Doe” is typed. Below, a “Search” button is highlighted. On the right, a small results panel shows “No match found for ‘John Doe'”. This illustrates a clean search result, which is the desired outcome for a new client.

When you’re using these tools, make sure you get the client’s full name, date of birth if you can get it, and country of residence to get an accurate result. Just matching a name isn’t good enough, because lots of people have the same name. The more details you can plug in, the less likely you are to get a false positive. You need to log every single search, whether it’s a clean result or a potential match, making a note of the date and time. That audit trail is your proof if anyone ever questions your process.

3. Train Your Staff on Sanctions Red Flags

Software is a great help, but your people on the front lines are irreplaceable. Your client-facing staff are your first line of defense and they have to know what a “red flag” for sanctions risk actually looks like. It’s more than just a name on a list. You should be running annual training sessions, maybe with a compliance lawyer, to get your team educated.

The main red flags are:

• Unusual Payment Methods: A client who wants to pay for expensive services in cash, uses weird third-party payment apps from high-risk countries, or asks for complex payment arrangements that make no sense for the service.
• Vague or Inconsistent Information: Clients who won’t give you complete details, use different spellings of their own name, or give you conflicting stories about where they live or what they do.
• Geographic Indicators: A client who says they live in the U.S. but has deep business connections or a lot of recent travel to a sanctioned country should make you look closer, even if their ID checks out.
• Unusual Requests: Someone asking for services way outside your normal menu, or trying to pay for someone else’s services without any clear authorization or ID for that other person.

Common Mistake: Thinking a “name match” in a database is the end of the story. Sanctioned people are smart. They use aliases, different name spellings, and shell companies to get around the rules. Your staff needs to be trained to spot behavior and context clues that suggest a deeper problem, which would then trigger a more detailed check.

In your training, use real-world scenarios. Ask your team, “What would you do if a new client wants to pay for a full year of services up front with a wire transfer from a bank in a country known for shaky financial oversight?” Talking through these situations builds practical skill much better than making them memorize rules. This kind of training needs to be mandatory for new hires and a yearly refresher for everyone else. And you better document who attended.

4. Establish a Clear Escalation Protocol

So what happens when your screening tool gets a hit or a staff member spots a red flag? Your team needs a simple, step-by-step plan for what to do next. A clear protocol stops panic and makes sure these sensitive situations are handled the same way every time. The protocol has to name a specific person or team (like the studio manager or a designated compliance officer) who is the go-to for any sanctions questions.

Your protocol should look something like this:

1. Initial Identification: A front-desk employee sees a red flag or the screening software flags a potential match on a new client.
2. Immediate Notification: The employee quietly tells the designated compliance officer what’s going on, providing all the details they have. They should never confront the client directly about it.
3. Verification and Further Due Diligence: The compliance officer takes over and starts digging deeper. This could mean running the name through more databases, asking the client for more documentation (like a government ID or proof of address), or even calling your lawyer. For instance, if a potential client named “Maria Rodriguez” gets flagged, the officer’s job is to check if the date of birth or nationality matches the sanctioned person, since “Maria Rodriguez” is an extremely common name.
4. Decision and Action: After the investigation, a call is made. If it’s a confirmed match or the risk is just too high, the studio must refuse service. That decision needs to be documented with a clear explanation of why. If it turns out to be a false alarm, the client can be booked, but the initial flag and the steps taken to clear it are still recorded.

Having a process like this means the final call is made by people who know what they’re doing which reduces the chance of turning away a good client by mistake or, worse, letting a sanctioned person through your doors.

5. Regularly Review and Update Your Sanctions Compliance Program

The world of international sanctions is always changing. New sanctions get announced, old ones get tweaked, and names are added or removed from lists all the time. Your compliance program can’t be a static document. It needs to be reviewed and updated constantly. I suggest a formal review of your policies and procedures at least twice a year, and definitely right after any big geopolitical event that triggers new sanctions.

During these reviews, you should be asking:

• Are the screening tools we pay for actually updated with the latest lists from around the world? Most good ones are, but you have to check.
• Has our client base changed in a way that brings new risks? Are we seeing more international clients from certain parts of the world?
• Is our staff training still working? Are we seeing the same mistakes or questions pop up that we need to address in the next training?
• Is our documentation good enough? If an auditor showed up tomorrow, could they easily follow our compliance efforts on paper?

Taking this proactive approach shows you’re a responsible business. It’s also your best defense if your compliance practices ever get questioned. Staying on top of this isn’t just about avoiding fines. It’s about keeping the trust of your clients and operating with integrity in a very complicated world.

By setting up and talking about your public sanctions stance, your studio not only dodges serious compliance headaches but also strengthens its brand as an ethical business, a factor that more and more clients are using to make their decisions.