Iris 7

Expertise

Solutions

Resources

Events

Company

March 3, 2026

From Lists to Behaviour: Reframing Sanctions Risk in Singapore and Hong Kong

From Lists to Behaviour: Reframing Sanctions Risk in Singapore and Hong Kong

Sanctions compliance in 2026 is no longer defined solely by the accuracy of name screening. It is shaped by the ability of institutions to understand structure, intent, and movement across complex trade and financial networks. 

Nowhere is this shift more relevant than in Singapore and Hong Kong. As globally connected financial and logistics hubs, both jurisdictions sit at the intersection of capital flows, commodity movements, and correspondent banking corridors that are increasingly exposed to sanctions evasion risk.

Regulators in both centres have consistently emphasised robust systems and controls, sound governance, and effective risk management. While formal guidance may still reference screening obligations and list management, supervisory dialogue has evolved. 

The question increasingly posed is not whether a bank can match a name against a list, but whether it can demonstrate an understanding of how sanctions exposure manifests across its business model. In a world where geopolitical developments outpace formal designations, behavioural detection is becoming central to credible sanctions control frameworks.

The Structural Nature of Modern Sanctions Risk

Recent sanctions regimes are more structural than historical programmes. Sectoral restrictions, export controls, price caps, dual use goods constraints, and activity based prohibitions mean that exposure often arises from participation in a transaction chain, rather than from direct interaction with a designated person. Indirect procurement networks, nominee shareholding structures, and layered logistics arrangements are now common features of evasion typologies.

Singapore and Hong Kong, given their roles in maritime trade, commodities finance, wealth management, and correspondent banking, are naturally exposed to these dynamics. 

Transshipment, rerouting through third countries, and the use of intermediary trading entities are not inherently suspicious. They are features of global commerce. The supervisory challenge is distinguishing legitimate structuring from deliberate evasion.

In this context, list-centric screening is necessary but insufficient. A transaction may involve no designated name yet still contribute to a prohibited outcome. The control question becomes whether institutions can detect the pattern, not merely the party.

As James Booth, Global Head of AML, CTF, and Sanctions at Silent Eight, observes:

“Sanctions exposure today is structural. If institutions focus only on who appears on a list, they risk missing how risk actually moves through their systems.”

Detecting Behaviour That Never Touches a List

Modern evasion strategies rely on indirection. Proxy buyers may procure restricted goods through seemingly unrelated trading firms, front companies may be incorporated in low risk jurisdictions while beneficial control remains opaque, shipping routes may be altered mid voyage, and payment flows may be fragmented across correspondent chains to dilute visibility.

Behaviour-based sanctions detection seeks to identify these patterns through signal aggregation rather than isolated red flags. Relevant indicators in trade centric jurisdictions include:

  • Repeated involvement of newly incorporated trading entities in high risk commodity flows

  • Inconsistent alignment between a customer’s stated business profile and the goods financed

  • Routing patterns that systematically divert through jurisdictions known for transshipment risk

  • Corporate ownership structures that demonstrate circular or unusually layered arrangements

  • Payment corridors that show concentration in sensitive trade routes without clear commercial rationale

None of these signals independently prove evasion. Collectively, however, they may indicate elevated exposure. The analytical task is to design systems that can correlate weak signals across trade, payment, and corporate data sets without overwhelming operational teams.

Data Architecture for Behaviour-Based Surveillance

To detect structural evasion, banks must look beyond names and addresses. The most material data enhancements in Singapore and Hong Kong tend to include:

  • Shipping and logistics intelligence: Vessel tracking data, port call histories, and bill of lading information can illuminate inconsistencies between declared trade flows and actual routing patterns.

  • Corporate network analysis: Graph-based modelling of beneficial ownership and director relationships can surface hidden connections between trading entities and higher risk networks.

  • Geospatial analysis: Mapping transaction flows against known sanctions-sensitive regions can highlight corridor anomalies.

  • Device and IP intelligence: In digital banking channels, device fingerprinting and IP analysis may reveal coordinated account access patterns inconsistent with stated geographic profiles.

  • Payment corridor metrics: Monitoring concentration of flows through specific correspondent banks or clearing paths can identify emerging sanctions sensitive corridors.

The challenge in both jurisdictions is not the availability of data, but its integration. 

Large banking groups often operate across multiple booking centres and legacy platforms. Behaviour-based detection requires a consolidated view of trade, payments, and customer information. Without architectural alignment, signal fragmentation undermines analytical value.

Risk Scoring Cross Border Corridors

Supervisors increasingly expect corridor risk to be dynamic rather than static. Updated annually, traditional country risk ratings are insufficient in an environment where geopolitical developments can rapidly alter exposure.

A sanctions sensitive corridor in 2025 may be defined by a combination of factors:

  • Volume of trade in controlled or dual use commodities

  • Presence of intermediary jurisdictions associated with rerouting

  • Concentration of flows through particular correspondent institutions

  • Links to sectors subject to price caps or sectoral restrictions

  • Historical enforcement cases involving similar routes

Recalibration frequency should reflect risk volatility. For high exposure corridors, quarterly reassessment may be appropriate, supplemented by event-driven reviews following major geopolitical developments. The objective is not constant volatility in scoring, but credible responsiveness to structural change.

Transitioning Without Disrupting Production

Key sources of central tension for institutions in Singapore and Hong Kong come from trying to introduce behavioural analytics without destabilising established screening operations. Production resilience remains a supervisory priority, and abrupt shifts in control frameworks that generate alert surges or model opacity can create supervisory concern.

A hybrid model is therefore often the most prudent path. Traditional list screening remains the primary control for direct exposure. Behaviour-based engines operate in parallel, initially as intelligence layers that prioritise enhanced due diligence or targeted reviews. Over time, as calibration improves and governance strengthens, behavioural outputs can inform risk scoring and escalation pathways more directly.

Critical safeguards include:

  • Clear documentation of model logic and assumptions

  • Defined thresholds for escalation that balance sensitivity and operational capacity

  • Independent validation and periodic performance testing

  • Transparent communication with supervisory authorities where material changes occur

This incremental approach allows institutions to innovate without compromising stability.

Explainability and Supervisory Confidence

Both the Monetary Authority of Singapore (MAS) and Hong Kong Money Authority (HKMA) place significant emphasis on model governance and technology risk management. 

Behaviour-based sanctions models, particularly those incorporating advanced analytics, must therefore be explainable in practical terms. It is insufficient to demonstrate predictive accuracy, institutions must articulate why specific patterns indicate elevated sanctions exposure and how decisions are subject to human oversight.

Documentation should address:

  • Data provenance and quality controls

  • Feature selection rationale

  • Testing methodologies and limitations

  • Escalation and override mechanisms

  • Ongoing monitoring and recalibration processes

As James Booth notes:

“Innovation in sanctions surveillance is only sustainable if it is explainable. Supervisors are not resistant to advanced analytics, but they require clarity on how conclusions are reached and controlled.”

Explainability is not merely a technical requirement. It is central to maintaining supervisory trust in jurisdictions where prudential stability and conduct integrity are paramount.

Measuring Exposure for Boards and Senior Management

One of the most persistent gaps in sanctions governance is the reliance on alert volumes as a proxy for risk. Alert counts reflect system activity, not necessarily exposure. Behaviour-based frameworks enable more meaningful metrics.

Potential indicators include:

  • Percentage of trade flows passing through high risk corridors

  • Concentration of indirect exposure to sensitive commodities

  • Frequency of network anomalies linked to newly incorporated intermediaries

  • Time elapsed between emergence of new evasion typologies and internal detection

  • Ratio of behavioural escalations resulting in enhanced due diligence outcomes

These measures provide boards with insight into structural vulnerability rather than operational throughput. They also align more closely with expectations of senior management accountability in both Singapore and Hong Kong.

James Booth reflects:

“Boards increasingly ask not how many alerts were processed, but whether the institution can evidence control over evolving sanctions risk. Behavioural metrics offer a more honest view of exposure.”

Organisational Considerations

Where behavioural sanctions capability should reside remains a debate. In trade-centric institutions, trade finance teams often hold the most granular understanding of commodity flows. AML functions may possess advanced analytics capabilities, while sanctions teams retain policy ownership and regulatory accountability.

An effective model typically involves clear sanctions policy leadership supported by a dedicated analytics capability that operates across AML, trade, and payments. Fragmentation of behavioural insight into separate silos risks diluting its effectiveness. Conversely, over-centralisation without subject matter expertise can reduce contextual accuracy.

The operating model should reflect institutional complexity, but governance clarity is essential. Ownership of behavioural sanctions risk cannot be ambiguous.

A Regional Imperative

Singapore and Hong Kong occupy pivotal roles in global commerce. With that position comes exposure to evolving sanctions evasion techniques. Behaviour-based surveillance is not a rejection of list screening. It is a necessary extension of it. As sanctions regimes become increasingly structural and activity driven, control frameworks must evolve accordingly.

Institutions that integrate behavioural detection thoughtfully, with robust governance and clear supervisory engagement, will be better positioned to demonstrate resilience. Those that rely solely on static list screening may find that geopolitical velocity outpaces their controls.

The evolution towards behaviour-based sanctions surveillance is therefore less about technological ambition and more about aligning control frameworks with the realities of modern risk. 

In trade intensive financial centres, that alignment is becoming central to credible compliance.

Contributor

James Booth

Head Anti-Money Laundering, Counter Terrorism and Sanctions

Share article

Latest news

Discover how AI is Revolutionising Compliance and Risk Adjudication

Download our latest collateral to stay ahead.