The different resources in BankID AML returns data to be used in the customer due diligence process.
The sanction_pep resource
The sanction_pep resource contains information retrieved from PEP lists and sanction lists.
If a match is made, a match indicator is also returned, showing how certain the data provider is that it is an actual match, and not a false positive. If the match indicator is high (max: 500), the Merchant can trust the match, but if it is low, further investigation would be necessary.
Please note that not all properties will be filled with values for all matches, and there might be null values. This reflects the information that is available about the matched person.
A list of known addresses is sometimes included in the match (retrieved from Trapets). The address list is included in the service, because alternative addresses could be of value to evaluate risk associated with the person, for example by giving a reason for further investigation. Note that the address provided in the Address resource (retrieved from the National Registry), will usually be of better quality.
The list of urls will include links to web pages of relevance to the match.
Nnin
The national identity number is returned as part of the person resource. If needed, this can be used for registration of new customers.
Please note that the nnin_altsub attribute returned by the ID Token on the OIDC platform, should not be used for this purpose, only for identifying existing customers.
PEP matches
The information provided in a PEP match can reveal the role and function the person has, that makes him a PEP, or why the person is regarded a "Relative or Close Associate" (RCA). A list of known aliases is also provided, if the person is known by several names. Norwegians in the list can usually be matched on birth date and name, and the list has close to 100% coverage.
Sanction lists matches
The source property states which sanction list the match comes from. BankID currently provides results from two sanction lists: EU_CONSOLIDATED (owned by the EU Commission) and UN_GLOBAL (owned by the UN security council).
Please note that these sources often do not have the SSN or birth date on the persons sanctioned. If matched by name only, a person should not be excluded from entering into a customer relationship without further investigation.
Empty results
If an empty list is returned, this means that a successful search has been conducted and no matches where made.
This does not necessarily mean that there is no risk associated with this customer, and the Merchant is advised to evaluate if further examinations are needed.
The address resource
The address resource will return information from the national registry.
Please note that some matches might contain special values in the personStatus and adressStatus fields. Examples of this could be that the person has a hidden address, or as moved abroad. This could be valuable information for the Merchant, to understand why no address is not returned.