AML screening false positives: why they happen and how to reduce them
An AML screening false positive is an alert generated by a sanctions, PEP, or adverse-media match that, on review, turns out not to be the customer at all. With traditional name-only screening, the vast majority of alerts are false positives, and for a Canadian reporting entity that noise is not a minor inconvenience, it is the single biggest driver of alert fatigue, missed real risk, and reviewer cost. This guide explains why false positives happen, what they cost a compliance program, and the concrete ways to bring the rate down without loosening controls.
A false positive in AML screening is an alert that names your customer but is not actually about them. It happens when a sanctions, PEP, or adverse-media match surfaces on the strength of a shared name, a similar spelling, or a coincidental data overlap, rather than a genuine identity match. For a Canadian reporting entity running sanctions and PEP screening as a mandatory control, the false-positive rate determines whether that control is sustainable at scale or whether it quietly buries a small number of real risks inside thousands of alerts nobody has time to review properly.
Why does AML screening produce so many false positives?
Four causes account for most of the noise a screening program generates.
- Homonyms. Common names appear on sanctions and PEP lists just as they appear in the general population, so a name-only match can flag hundreds of unrelated people who happen to share it.
- Transliteration and spelling variants. Names transliterated from non-Latin scripts routinely produce several accepted English spellings of the same listed person, and fuzzy matching tuned to catch all of them catches unrelated names too.
- Thin identifying data. A customer or list record with no date of birth, no address, and no secondary identifier forces the match to run on name alone, which is the least reliable signal available.
- Static, one-size thresholds. A single match sensitivity applied across an entire customer book ignores that some segments genuinely need tighter scrutiny and others are being flagged for no added protection.
What do unresolved false positives cost?
A high false-positive rate is not just a workload problem. Reviewers facing thousands of low-value alerts develop alert fatigue, and fatigue is what causes a genuine match to get cleared on autopilot along with the noise around it. It also distorts examiner confidence: a compliance program that cannot explain why 99% of its alerts were false is harder to defend as risk-based and effective, which is the standard Bill C-12 set for every FINTRAC-regulated program. The team's real capacity, meanwhile, gets spent clearing duplicates instead of investigating the genuine edge cases that actually carry risk.
How does entity resolution cut false positives without missing true matches?
The fix is not to loosen matching, which trades false positives for missed true hits. It is to resolve identity more precisely before an alert ever reaches a reviewer. Agentic entity resolution scores identity coherence across candidate matches, collapsing near-duplicate hits caused by spelling variants, transliterations, and homonyms into a single scored identity, and is designed to cut false positives by up to 80% as a result. This works because it distinguishes a genuine, if imperfectly spelled, match from a coincidental homonym, rather than simply widening or narrowing a match-sensitivity dial. Every hit that survives resolution still carries a plain-language rationale, so the reduction in volume does not come at the cost of losing the explainability an examiner would expect.
What steps can a compliance team take today?
- Enrich the data behind the match, not just the matching logic. A record with relationships, roles, and context gives resolution something real to work with; a bare name does not.
- Move from batch to continuous screening. Batch re-screening produces alert spikes every run; continuous monitoring spreads the same volume into a steady, prioritized queue.
- Apply risk-based thresholds, not one global setting. Tune sensitivity to the risk rating of the segment being screened, in line with the risk-based approach your risk assessment already sets out.
- Keep the rationale attached to every disposition. A cleared alert with no recorded reasoning is indistinguishable from one nobody actually reviewed.
How does BriteBase approach false positives?
Our platform runs sanctions, PEP, and adverse-media screening through one entity-resolution engine rather than three disconnected tools, so the same resolution logic that clears a sanctions duplicate also clears the equivalent noise in PEP and adverse-media matches. The detail on how each list type is handled is on the screening software page, and the product itself sits on the AML screening solution page.
FAQ
What causes most AML screening false positives?
Four causes account for most of the noise. Homonyms are the largest: common names appear on sanctions and PEP lists just as they do in the general population, so a name-only match can flag hundreds of unrelated people who happen to share a name. Transliteration and spelling variants compound it, because names carried over from non-Latin scripts produce several accepted English spellings of the same listed person, and fuzzy matching tuned to catch all of them catches unrelated names too. Thin identifying data makes both worse: a customer or list record with no date of birth, no address and no secondary identifier forces the engine to match on name alone, the least reliable signal available. Finally, a single static match threshold applied across an entire customer book over-flags low-risk segments while under-scrutinising the ones that genuinely warrant tighter matching.
How high is the industry false-positive rate?
With traditional name-only screening, the vast majority of alerts turn out to be false positives, meaning most of what a manual review queue processes each day is noise rather than genuine risk. The figure sounds abstract until you trace what it costs. Reviewers facing thousands of low-value alerts develop alert fatigue, and fatigue is exactly what causes a genuine match to be cleared on autopilot alongside the noise around it. It also erodes examiner confidence, because a program that cannot explain why almost all of its alerts were false is harder to defend as risk-based and effective, the standard Bill C-12 now applies to every FINTRAC-regulated program. The rate itself is not the problem to solve; the problem is that clearing it consumes the capacity a team should be spending on the small number of alerts that actually carry real risk and warrant investigation.
Does reducing false positives mean loosening controls?
No, and the distinction matters. Loosening match thresholds does reduce false positives, but it does so by trading them for missed true matches, which is the opposite of what a compliance program needs. Agentic entity resolution works differently: instead of widening or narrowing a single sensitivity dial, it scores identity coherence across candidate matches, so it can distinguish a genuine but imperfectly spelled match from a coincidental homonym and collapse near-duplicate hits into one scored identity. The reduction comes from precision, not permissiveness. Every hit that survives resolution still carries a plain-language rationale explaining why it was escalated, so clearing noise never comes at the cost of the audit record an examiner expects to see. In practice the controls are not weakened, they are applied more precisely, with the heaviest scrutiny reserved for the matches that actually warrant a reviewer's time.
How much can false positives realistically be reduced?
BriteBase is designed to reduce false positives by up to 80% through agentic entity resolution, without dropping true risk and while keeping a plain-language rationale attached to every hit that survives. The word designed is deliberate: the reduction depends on the data behind the match being rich enough for resolution to work with, so it is framed as what the engine is built to achieve rather than a guaranteed outcome for every book. The mechanism is consolidation rather than suppression. Spelling variants, transliterations and homonyms routinely turn one real party into several separate alerts, and resolution scores those candidates against each other to recognise when they represent the same underlying identity, collapsing them into a single assessment a reviewer can act on once. What reaches the queue after that is far closer to genuine risk than to noise, which is where the reviewer-time saving actually comes from.
Does batch or continuous screening produce more false positives?
Batch re-screening tends to produce a worse false-positive experience, even at the same underlying match rate, because of how the volume arrives. When an entire customer book is matched against updated lists all at once, every list change that touches a common name creates a spike of alerts that floods reviewers on run day and then goes quiet until the next cycle. Continuous monitoring instead applies matching and entity resolution to each relevant change as it happens, so the same volume is spread into a steady, prioritised queue rather than periodic floods. It also closes the exposure window that batch cycles leave open: a customer who becomes a sanctions match the day after a run would otherwise go undetected until the next scheduled cycle, which could be weeks away. Continuous screening surfaces that change close to when it occurs, which is when it is most actionable.
Sources
Cut screening noise without losing coverage.
Book a demo and we will show you agentic entity resolution clearing false positives in real time, with a plain-language rationale on every hit that remains.
Book a demo
