A second nationality can complicate sanctions screening when identity histories are fragmented across borders
WASHINGTON, DC
The Financial Action Task Force’s warning about citizenship-by-investment highlights a risk that compliance teams treat as operational rather than theoretical. Sanctions controls are only as strong as the identity-matching process. When a person obtains a new nationality and new travel documents, identity history can become fragmented across systems. That fragmentation can be exploited to create distance from previous risk indicators, especially when transliterations, name variations, and inconsistent civil records complicate automated screening.
A new passport does not erase a sanctions designation. But bad actors do not need erasure to gain advantage. They need uncertainty, delays, and friction that allow transactions to proceed before red flags are resolved, or that push review into jurisdictions and institutions with weaker verification.
How identity resolution can fail
Many screening systems rely on matching names and dates of birth against sanctions lists and adverse information. Some institutions add biometric checks, document authentication, device intelligence, and network analytics. Across global finance, however, control strength is uneven. The result is a predictable weak link problem. A customer who cannot pass at one institution may still succeed elsewhere, particularly through intermediaries, nested relationships, or corporate layers.
If a customer presents a second nationality with a different name format, a different transliteration, or updated documents, matching can produce false negatives or require manual review. Manual review is where time becomes an asset. Transactions can be structured to exploit review windows, for example, by initiating payments that settle quickly, routing payments through multiple entities, or using jurisdictions with limited reference data and more difficult verification.
The problem grows when beneficial ownership is layered. Even if an individual’s name is flagged, companies, trusts, foundations, and nominee arrangements can reduce visibility in practice. Screening may catch the company name but miss the controller, or catch the controller but not connect them to the entity being onboarded. The closer a network moves to professionalized layering, the less useful a single list hit becomes without deeper story verification.
Why the FATF warning matters to banks and service providers
When global standard setters issue warnings, the market reacts even before laws change. Compliance teams update risk scoring, correspondent banks adjust tolerances, and service providers reassess exposure to jurisdictions associated with elevated risk. Much of the response is private and operational rather than public. It shows up as delayed transfers, increased requests for documentation, higher rates of onboarding refusal, and more frequent account exits when a customer profile becomes too costly to monitor.
For legitimate individuals, the friction can feel arbitrary. In reality, it is often a rational response to uncertainty. If a bank cannot reliably reconcile identity across systems, it must assume higher risk. If it cannot obtain confidence about beneficial ownership and control, it must treat the relationship as potentially exposed to sanctions evasion, even if no wrongdoing is present.
For criminals and sanctioned actors, the warning becomes a prompt to probe for gaps. They test controls, identify institutions with inconsistent screening practices, and exploit mismatches in standards. They also exploit the human side of compliance, including relationship managers under revenue pressure and intermediaries who package files to minimize questions. In sanctions work, evasion rarely depends on one clever trick. It depends on repeated attempts across multiple touchpoints until one fails open.
How documentary distance is created
Documentary distance is not the same as anonymity. It is the creation of sufficient separation between a sanctioned history and a current onboarding profile that makes the connection slower to confirm, easier to contest, or more likely to be missed. Several common methods recur.
Name and transliteration drift
Different scripts and transliteration conventions can generate multiple valid spellings for the same person. A second passport may include an alternative official spelling, a different name order, or a different presentation of patronymics and surnames. Systems that rely on exact or near-exact matching can miss connections, especially when date-of-birth formats or place-of-birth fields are inconsistent.
Civil record inconsistency and document updates
New documents can reflect updated addresses, different issuing authorities, and different civil record references. In some cases, minor inconsistencies are legitimate. In risk cases, inconsistencies are curated. The goal is not to present false information, but to present information that is hard to reconcile quickly.
Network separation through entities and nominees
Sanctions evasion often works through control rather than ownership. A sanctioned individual may avoid appearing in formal ownership records while maintaining practical control through proxies, family members, trusted executives, or layered entities. If onboarding focuses on shareholder percentages and not on control, influence, and economic benefit, networks can remain operational even when a principal is designated.
Timing and routing tactics
When identity resolution triggers manual review, timing becomes a lever. Networks may split transfers, route through multiple counterparties, or concentrate activity in corridors where compliance resources are thinner. They may also use trade-based structures, invoicing narratives, and professional service intermediaries to make flows appear routine.
What a compliance-forward response looks like
Institutions that manage the risk focus on identity continuity rather than document collection. They treat a second nationality as a prompt to reconcile the full narrative rather than as a standalone credential. The strongest responses are practical and repeatable.
Build an identity map, not a single profile
A sanctions resilient approach captures all known names, aliases, transliterations, and historical addresses, along with linked identifiers such as prior passports, tax numbers where appropriate, and corporate roles. The objective is to reduce reliance on any one spelling or document set.
Verify the story across timelines and jurisdictions
Banks increasingly verify stories, testing whether the customer’s narrative aligns with public records, corporate filings, litigation history, and the practical mechanics of how wealth was generated. If a second nationality is recent, reviewers often ask why it was obtained, what changed, and how the individual’s ties align with the claimed reasons.
Increase beneficial ownership depth, then test control
Enhanced due diligence does not stop at ownership percentages. It tests control, meaning who directs payments, who benefits economically, who has signing authority, who can replace directors, and who can direct trustees or protectors in trust structures. In sanctions work, control is often the real exposure.
Apply heightened scrutiny to intermediated onboarding
When an agent, lawyer, introducer, or corporate service provider controls the file, banks are increasingly cautious. They require direct engagement, independent sourcing of documents, and confirmation that the applicant’s identity narrative is not filtered through a commercial gatekeeper.
Escalate monitoring where risk corridors are present
Institutions apply stricter monitoring when geography, counterparties, and transaction types align with known evasion corridors. This includes faster anomaly escalation, stronger transaction pattern analysis, and quicker exit decisions when information cannot be validated.
Pressure on programs and the credibility question
Governments running citizenship-by-investment programs face a parallel issue. Program credibility is increasingly judged by how well the state can demonstrate consistent vetting, supervision of intermediaries, and the capacity to revisit approvals when credible risk emerges. If a jurisdiction cannot demonstrate these controls, it can face reputational costs that become operational costs, including increased banking scrutiny and reduced tolerance from partner states.
A credible program model tends to emphasize state control of due diligence decisions, auditable standards, and defined processes for refusal and revocation under specific circumstances. It also tends to reduce reliance on applicant-paid gatekeepers to interpret and package risk information.
About Amicus International Consulting
Amicus International Consulting provides professional services related to lawful cross-border relocation planning, identity documentation consistency reviews, and compliance-forward structuring support for individuals and families navigating multi-jurisdictional mobility.
Amicus International Consulting
Media Relations
Email: info@amicusint.ca
Phone: 1+ (604) 200-5402
Website: www.amicusint.ca
Location: Vancouver, BC, Canada