In adverse media screening, terminology is consequential. The difference between an allegation and a conviction, between echo and déjà vu, between a controversy and a scandal: these are not academic distinctions. They are the categories on which alerts are calibrated, the lines along which audit trails are drawn, and the basis on which a supervisor will judge whether an institution applied informed, proportionate judgement to the risk presented by a customer.
This guide brings together the working definitions a compliance team needs to handle adverse media screening defensibly in 2026. Each term and risk category is defined as it is used in practice, following the framing of FATF, the Wolfsberg Group, the FCA, FinCEN, MAS, HKMA, FINMA and the EU’s AMLA-aligned supervisory framework, with the practical interpretation that matters when a customer file is reviewed.
Whether the reader is establishing a new adverse media programme, training a screening team, or aligning vocabulary across a multi-jurisdictional compliance function, this is the working reference.
Adverse media is risk-relevant information about a customer, counterparty, supplier or beneficial owner identified in open-source media, used to support anti-money laundering (AML) compliance, enhanced due diligence and ongoing risk monitoring.
Why a Working Definition Matters
The terms in this glossary are not interchangeable and using them loosely is one of the most common causes of supervisory criticism. A speeding offence is negative information about a customer. A pattern of investigations into business dealings in a sanctioned jurisdiction is adverse media in the AML sense. Treating both the same way produces alert fatigue at one extreme and missed risk at the other.
The Wolfsberg Group’s 2022 Guidance on Negative News Screening is explicit on this point. Institutions are expected to filter on materiality and relevance to financial crime, not to treat every negative mention as an alert. Supervisors in the UK, EU, Singapore and Hong Kong have echoed this in thematic reviews and enforcement actions. The right vocabulary is the foundation of a defensible programme. The wrong vocabulary, or worse, no consistent vocabulary at all, produces files that cannot withstand examination.
This glossary is organised in two sections. First, the core terms a compliance team needs to define and apply consistently. Second, the categories of adverse media risk that those terms describe.
Section 1: Key Terms
The terms below are the core vocabulary of adverse media screening as it is practised in 2026. Each definition follows the working interpretation that supervisors and frameworks apply, with practical notes on how the term operates in a compliance file.
Adverse Media. Adverse media is risk-relevant information about a customer, counterparty, supplier or beneficial owner identified from open-source media, including news outlets, regulatory notices, court filings, investigative reports and online publications. It supports AML compliance, enhanced due diligence and ongoing monitoring throughout the customer lifecycle. See the full adverse media screening guide for the complete regulatory framework and lifecycle.
Negative News Screening (NNS). Negative news screening is the term used in the Wolfsberg Group’s 2022 industry framework, and in many North American supervisory contexts, for the same discipline as adverse media screening. The terms are largely interchangeable. What matters is that an institution defines its preferred term consistently and applies it across screening configurations, training and audit documentation.
Customer Due Diligence (CDD). Customer due diligence is the baseline AML obligation to identify customers, verify their identity, understand the nature and purpose of their activity, and screen them against sanctions, PEP lists and adverse media. CDD is required at onboarding and throughout the customer relationship under FATF Recommendations and national implementations including the UK MLR 2017, the US Bank Secrecy Act, and AMLD6/AMLR in the EU.
Enhanced Due Diligence (EDD). Enhanced due diligence applies to higher-risk customers, including PEPs, HNWIs, customers from higher-risk jurisdictions and customers in higher-risk sectors. EDD goes beyond standard CDD by requiring deeper investigation, source-of-wealth assessment and more comprehensive adverse media review, typically with senior management approval for onboarding.
Politically Exposed Person (PEP). A politically exposed person is an individual who holds, or has held, a prominent public position. Under FATF Recommendation 12, the definition extends to family members and known close associates. PEPs require enhanced due diligence including dedicated adverse media coverage at onboarding and throughout the relationship.
High-Net-Worth Individual (HNWI). A high-net-worth individual is a customer whose wealth, by scale or complexity, requires enhanced due diligence. The compliance challenge for HNWIs is rarely outright suspicion but comprehensiveness — covering the primary jurisdictions of their activity, the languages of their business operations, and the network of entities through which their wealth is held.
Beneficial Owner / UBO. A beneficial owner, or ultimate beneficial owner, is the natural person who ultimately owns or controls a customer entity or a transaction. Identifying UBOs and screening them against adverse media and sanctions is a core CDD requirement under all major AML frameworks, and a frequent area of supervisory finding when poorly documented.
Source of Wealth (SoW). Source of wealth is the customer’s account of how their wealth has been accumulated. Adverse media is one of the most valuable corroboration sources for source of wealth verification, confirming or challenging the narrative against public-domain reporting on the customer and their business history. For PEPs and HNWIs, the two disciplines are run together.
Materiality. Materiality is the test of whether an adverse media finding is relevant to financial crime risk and significant enough to warrant escalation. The Wolfsberg guidance explicitly requires institutions to filter on materiality rather than treating every negative mention as an alert. Materiality is judged in context by source authority, the nature of the conduct, and the customer’s risk profile, not by keyword.
Allegation vs Conviction. An allegation is an unproven claim of wrongdoing; a conviction is a formal finding by a court. Both warrant attention in adverse media screening, but the supervisory expectation is that the institution documents the distinction and calibrates its response accordingly. Conflating the two, by treating allegation as conviction or dismissing both as mere claims, is a common audit-trail weakness.
Echo / Informational Similarity. Echo describes the same underlying story reported by multiple outlets, often in multiple languages, at roughly the same time. Without deduplication by underlying fact (not by article URL), the same risk event surfaces repeatedly as separate alerts. The Wolfsberg guidance treats deduplication of informationally similar reporting as a baseline capability requirement, not a nice-to-have. Effective continuous monitoring recognises and suppresses it. Without temporal awareness, monitoring produces repeated alerts on already-known facts.
Déjà Vu. Déjà vu is the temporal counterpart to echo: a previously known piece of adverse media resurfacing months or years later in anniversary pieces, retrospective coverage, archival callbacks prompted by a new event, or when an old story reappears under a slightly different headline.
Sentiment. Sentiment is the algorithmic assessment of whether a piece of media is positive, negative or neutral about a subject. In AML adverse media screening, sentiment alone is insufficient — the relevant question is materiality to financial crime, not negativity. A neutral-toned investigative report can be more material than an emotionally negative opinion piece.
Sanctions Screening. Sanctions screening matches customers against official, formally designated sanctions lists maintained by authorities including OFAC, the EU, the UK Treasury and the UN. It is binary and deterministic, distinct from but complementary to adverse media screening, which often surfaces risk months or years before formal designation. See smartKYC’s watchlist screening and entity resolution for the structured-data side of the screening lifecycle.
→ Related Reading | Adverse Media Screening: The Definitive Guide
Section 2: Categories of Adverse Media
Adverse media is not a single signal but a spectrum of risk types. The categories below represent the most common groupings used by compliance teams when designing screening configurations, calibrating alert thresholds and prioritising response across the customer lifecycle. Each category carries its own detection logic, regulatory grounding and operational implications — and a well-constructed adverse media programme needs to account for all of them.
Legal Issues
The category at the centre of every adverse media programme. Legal Issues encompasses the full range of financial crime and enforcement reporting: money laundering, fraud, tax evasion, insider trading, market abuse, terrorist financing and sanctions evasion, alongside the predicate offences that generate illicit proceeds — corruption, drug trafficking, organised crime, cybercrime and modern slavery. Regulatory enforcement actions, civil litigation, criminal indictments and court rulings sit here too, with entity-level analysis required to distinguish allegation from conviction so that analysts can calibrate materiality accordingly.
The regulatory enforcement dimension warrants particular attention. Action by authorities such as the FCA, SEC, MAS, HKMA, FINMA, BaFin and FinCEN routinely appears in press reporting before reaching official enforcement registers, making adverse media a leading indicator of regulatory exposure rather than a lagging confirmation of it. The same is true of court reporting across most jurisdictions. AMLD6 materially expanded predicate offence coverage across the EU, and the forthcoming AMLR consolidates this into a directly applicable regulation — widening both the scope of what constitutes a Legal Issues signal and the obligation to detect it.
Controversies
Conduct that does not necessarily constitute a crime but carries material consequences for the institution maintaining the relationship. This category covers workplace misconduct, harassment allegations, ethical failures, professional misconduct findings and conduct controversies that fall outside formal legal proceedings, but which nonetheless affect the risk profile of the individual or entity.
Controversies are broader than the AML-specific definition of adverse media but is increasingly tracked alongside it in mature screening programmes, particularly in private banking and wealth management where reputational exposure is acutely visible at senior management level and where a customer-facing misconduct narrative can crystallise franchise risk independently of any regulatory finding. The temporal dimension matters here: Controversies-type reporting tends to emerge, recede and re-emerge across a customer lifecycle, which makes periodic or perpetual monitoring — rather than point-in-time onboarding screening — the appropriate operational response.
Risky Exposures
A category best understood across four sub-dimensions: Political, Country, Industry and Network. Together they capture the contextual risk profile that surrounds an entity beyond direct adverse conduct reporting.
Political exposure covers PEP status and PEP-related corruption, bribery, embezzlement and abuse of public office — the central use case for FATF Recommendation 12, which makes adverse media screening of PEPs effectively mandatory under enhanced due diligence. Reporting on PEP-related corruption frequently surfaces in foreign-language investigative press long before any formal designation or enforcement, creating a clear operational requirement for multilingual coverage extending across non-Latin scripts.
Country exposure identifies risk arising from the jurisdictions associated with an entity — operating territory, registration, counterparty geography — where that association is itself a risk signal independent of any specific allegation.
Industry exposure captures sector-level risk: operating in a DNFBP-categorised industry, sector-wide enforcement activity, or an industry profile that is inconsistent with a declared business purpose.
Network exposure within this dimension captures relationship graph risk that does not resolve cleanly into Toxic Associations — indirect beneficial interests, opaque structures, shell company linkages and affiliation patterns that generate elevated scrutiny even absent a specific adverse finding.
ESG Risks
Environmental violations, labour rights abuses, supply-chain controversies, human rights concerns and governance failures. ESG adverse media has moved from discretionary to expected in private banking, corporate banking and asset management — particularly where institutions have made public sustainability commitments or operate under EU sustainability regulation including CSRD and SFDR.
ESG signals are drawn from the same open-source intelligence corpus as financial crime reporting, and require the same multilingual coverage and entity-matching discipline to be detected reliably. The scope of what constitutes ESG adverse media has broadened materially over the last three years: modern slavery in supply chains, environmental enforcement in emerging markets and governance failures at investee companies now feature routinely in the adverse media review process in institutions where they were absent five years ago. The trend is regulatory-driven and continues to accelerate.
Security Risks
A category that has grown significantly in operational prominence. Security Risks covers , cybercrime involvement, product issues and physical security threat indicators — spanning both direct involvement and proximity, where individuals or entities are placed in documented association with security threats regardless of formal designation status.
Security risk reporting is disproportionately concentrated in non-English media and in regional sources that fall outside the coverage of conventional data vendors. Meaningful detection in this category therefore requires genuine multilingual capability across non-Latin scripts — Arabic, Farsi, Russian, Chinese and others — rather than translated summaries or English-language proxies. The gap between what is detectable in the original-language source and what survives translation and aggregation is significant and routinely underestimated in programme design.
Inconsistency Signals
A cross-cutting indicator rather than a category in its own right. Inconsistency signals arise where adverse media findings are materially at odds with the customer’s declared activity, income, source of wealth or business profile on file. The signal does not depend on the finding being attributable to any specific risk category, it depends on the gap between what the customer has declared and what the public record shows.
Inconsistency has become an explicit supervisory expectation in a number of leading jurisdictions. MAS and the HKMA both frame customer profile plausibility as a compliance obligation, and the FCA’s Financial Crime Guide treats unexplained inconsistency as a red flag in its own right. In practice, Inconsistency Signals surface findings that category-specific filtering misses: the customer with no adverse media findings under any individual dimension, but whose disclosed profile does not hold up against the accumulated weight of open-source intelligence. Detecting this type of signal requires reading across the full substance of findings rather than relying on headline classification alone.
Frequently Asked Questions
The terms are largely interchangeable. ‘Negative news’ is the term used in the Wolfsberg Group’s 2022 industry framework and in many North American supervisory contexts. ‘Adverse media’ is more common in UK and European AML regulation. Both refer to the same discipline: identifying risk-relevant information about customers and counterparties from open-source media. What matters is consistent usage within an institution’s policies, training and audit documentation.
While the term ‘adverse media’ rarely appears verbatim in legislation, the obligation to screen open-source information is consistently interpreted by supervisors as integral to customer due diligence under all major AML frameworks — FATF Recommendations, AMLD6/AMLR in the EU, the UK Money Laundering Regulations 2017, the US Bank Secrecy Act, MAS Notice 626 in Singapore, and HKMA AML guidelines. In practice, for higher-risk customers, adverse media screening is effectively mandatory.
Materiality is the test of whether a finding is relevant to financial crime risk and significant enough to warrant escalation. The assessment considers source authority, the nature of the conduct described, the customer’s risk profile and the recency of the reporting. The Wolfsberg guidance requires institutions to filter on materiality rather than treating every negative mention as an alert. Materiality is judged in context, not by keyword, and supervisors increasingly review materiality decisions when assessing the proportionality of a programme.
Sanctions screening matches customers against official, formally designated sanctions lists; it is a deterministic, binary match. Adverse media screening identifies risk-relevant open-source information that may indicate exposure to financial crime, corruption or regulatory action, often months or years before any formal sanctions designation. They are complementary disciplines, and a complete programme runs both, ideally within a single harmonised entity profile.
Previously known adverse media regularly resurfaces in continuous monitoring through anniversary coverage, retrospective reporting, or archival callbacks prompted by a new event. Without temporal awareness, monitoring produces repeated alerts on the same underlying facts, cluttering audit trails and obscuring genuinely new developments. An effective monitoring platform recognises déjà vu and treats it as a duplicate, not a new finding.
From Definitions to Defensible Practice
The vocabulary set out above is the foundation. Putting it into practice, from designing the screening lifecycle and calibrating risk tiers to managing false positives, applying continuous monitoring and demonstrating defensible judgement to a supervisor, is the subject of the full adverse media screening guide.
See Adverse Media Screening Done Right
smartKYC and smartEYE deliver multilingual, identity-level adverse media screening and continuous monitoring across the full customer lifecycle: historic screen, periodic refresh and real-time monitoring within one harmonised entity profile.
Book a Demo