Adverse Media
Adverse media is published information linking a person or company to crime or serious misconduct, screened as part of customer due diligence.
Definition
Adverse media is information in the public domain that links a customer, a beneficial owner or a counterparty to financial crime or to conduct that raises the same kind of risk. In a compliance programme the term refers to a control as much as to the information itself: the process of searching for that information, judging whether it is relevant, and recording what was decided.
The categories most firms screen for are fairly stable: money laundering, fraud, bribery and corruption, tax evasion, sanctions breaches, terrorism and its financing, organised crime, human trafficking and modern slavery, drug trafficking, cybercrime, and serious regulatory enforcement. Some firms add environmental crime or market abuse, depending on their business.
Why a regulated firm cares
Sanctions lists and PEP data only tell you about people who have been formally designated or who hold public functions. Most people involved in financial crime are neither. Adverse media is often the first and only indication that a customer has been charged, investigated, convicted or credibly accused of something relevant to the relationship.
It also feeds the risk assessment. A credible report of a fraud conviction does not automatically mean a firm must exit a customer, but it should change the customer's risk rating, the level of due diligence applied and the intensity of monitoring. A firm that onboarded a customer whose conviction was widely reported, and did nothing with that information, will find it hard to explain its decision later.
How it is detected and evidenced
A workable adverse media control has four stages.
Search. Names are run against news sources, court and enforcement publications and curated risk databases, usually with category terms attached. Coverage matters more than volume: a small number of reliable sources in the right languages and jurisdictions is worth more than a large number of low-quality ones.
Relevance. Each result has to be about the right person. That means comparing identifiers such as date of birth, nationality, location, occupation and associated companies. A common name will return many articles about other people.
Materiality. An article that is about the right person may still not matter. Analysts weigh the seriousness of the allegation, its status (allegation, charge, conviction, acquittal), how old it is, whether the source is credible, and whether it relates to the product or service the firm is providing.
Disposition and record. The analyst records a decision: not relevant, relevant but not material, or relevant and material with a stated consequence such as enhanced due diligence, senior approval, a restriction or exit. The record should name the sources reviewed, the date, the reasoning and the reviewer, so that someone else can follow the decision without redoing the search.
Source quality deserves explicit rules. Reputable news outlets, court records and regulator publications carry more weight than anonymous blogs, forums or content from outlets with a known agenda. Where a single weak source is the only evidence, that fact should appear in the record.
Regulatory basis
No major framework uses a single mandatory definition of adverse media, but the obligation follows from the core due diligence rules.
- FATF Recommendation 10 requires customer due diligence, including understanding the nature of the business relationship and conducting ongoing due diligence. Recommendation 1 sets out the risk-based approach that determines how deep that work goes.
- Directive (EU) 2015/849, the fourth EU Anti-Money Laundering Directive, as amended, requires risk-based customer due diligence and enhanced measures in higher-risk situations.
- The UK Money Laundering Regulations 2017 require customer due diligence, ongoing monitoring and enhanced due diligence where the risk is higher.
- The US Bank Secrecy Act and its implementing rules require banks and other covered institutions to maintain risk-based AML programmes, including customer due diligence.
Adverse media is also personal data, and reports of offences can fall within the special rules on criminal offence data under the GDPR and UK GDPR. Firms should confirm how these requirements apply in their own jurisdiction and document the lawful basis for processing.
Worked example (hypothetical)
A payments firm is onboarding a small import business. The director, a fictional "Petra Valcourt", clears sanctions and PEP screening. The adverse media search returns eleven results.
Nine concern a namesake who is a professional athlete, excluded on occupation and age. One is a local news article from several years ago reporting that a "P. Valcourt" was charged with invoice fraud; the article names the same town and the same company. A second article, from the same outlet, reports that the charge was dropped.
The analyst records both articles as relevant, notes that the allegation did not proceed, assesses the matter as not material to a decision to decline, and raises the customer's risk rating by one level with a note to review at the next periodic review. The file lists the two sources, the dates accessed, the reasoning and the reviewer.
Related terms
Related Articles
Account Takeover (ATO)
A form of identity theft where a fraudster gains access to a user's bank accounts, email, or other services.
Alert Rules
Configured parameters within AML software that automatically trigger an alert when suspicious activities match defined criteria.
Algorithmic Fraud
Automated and programmatic approaches to attempting financial fraud at scale utilizing bots and specialized software.
Alternate Payment Methods (APM)
Payment methods other than cards and cash, such as e-wallets and account-to-account transfers, each with its own fraud and money laundering risks.