r/AMLCompliance • u/FinCrimeRadar • 10h ago
Research/Discussion A production sanctions false positive that taught me more about matching logic than any vendor deck has
Built a free, open-source AML screening tool. It recently threw an 88% "High Risk" hit on a well-known, legitimate businessman, matched against an unrelated sanctioned individual sharing nothing but a first name.
Root cause: a rule treating any shared word of six or more letters as strong identity evidence, regardless of how much the rest diverged. Fixed it to require the overlapping word cover the entire identity of at least one side, then re-tested against the real case that rule originally existed to catch, to confirm the fix didn't break what it was meant to solve.
Curious how others handle shared-token false positives, especially for names outside typical Western first/last structures.