Exploring how recent events have changed the rules for national and international screenings — what is considered safe, how checks worked before, and the role of OFAC and federal watchlists today.
When most people think of a background check, they picture a criminal history search or an employment verification. Very few think about terrorism watchlists, sanctions databases, or government no-fly rosters. Yet for tens of thousands of employers, financial institutions, and government contractors, screening against these databases is not optional — it is a legal requirement, and in some industries, failure to comply can result in criminal prosecution, seven-figure fines, and the immediate termination of federal contracts.
The relationship between terrorism and background checks has evolved dramatically since the early 2000s. What was once a voluntary, loosely organized patchwork of checks has become a highly regulated, multi-layered system that touches everything from hiring a new employee to onboarding a foreign national business partner. This guide walks through that evolution — where we started, what changed, and what the rules look like today.
📊 Key Statistic: The percentage of U.S. employers conducting background checks jumped from roughly 51% in 2000 to over 94% by 2024, driven largely by post-9/11 security mandates and federal contracting requirements. Sources: SHRM, National Association of Professional Background Screeners (NAPBS)
Prior to September 11, 2001, background screening in the United States was largely an employment-driven practice focused on verifying credentials and checking criminal records at the county and state level. The concept of screening a job applicant against a terrorism watchlist was essentially nonexistent for the private sector — and limited even within many government agencies.
For most employers in the 1990s, a background check consisted of three to five components: a criminal record search (usually at the county level), verification of prior employment, education confirmation, reference checks, and sometimes a Social Security Number trace. These checks were backward-looking and primarily concerned with dishonesty, violence, or theft — not national security.
Airport security was a particularly glaring gap. Prior to 9/11, airport security screenings were conducted by private contractors hired by individual airlines — not by the federal government. The focus was on detecting weapons at checkpoints, not on vetting the background of workers with airfield access. Investigations after 9/11 revealed that several of the hijackers had obtained airside access credentials in the months leading up to the attacks, exploiting the absence of comprehensive background vetting.
Yes — but they were narrow and largely confined to regulated industries. The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) had been maintaining sanctions lists since the 1940s, originally focused on blocking Nazi assets during World War II. By the 1990s, OFAC had expanded to include sanctions against Cuba, Iran, Libya, and narcotics traffickers — but compliance was primarily a concern for financial institutions, export businesses, and defense contractors. Most private-sector employers had never heard of it.
The FBI maintained the National Crime Information Center (NCIC), which had a limited terrorism-related component, but access was restricted to law enforcement agencies. Private-sector employers had no direct access to federal terrorism records. International watchlists were even more siloed — INTERPOL notices existed, but coordination with domestic employment screening was virtually nonexistent.
| Screening Component | Pre-9/11 (Before 2001) | Post-9/11 (2001–Present) |
|---|---|---|
| Terrorism watchlists | Not available to private employers | FBI TSDB, OFAC SDN, No-Fly List screening available/required |
| Employer participation | ~51% of employers did any background check | ~94% of employers conduct background checks (2024) |
| Airport worker screening | Private contractor-managed, inconsistent | Federalized via TSA; SIDA badge requires FBI fingerprint check |
| Financial institution screening | Limited OFAC compliance, no unified standard | Mandatory OFAC, FinCEN, BSA/AML screening programs required |
| Federal contractor screening | Basic criminal checks, limited scope | NACI/NACLC/BI clearances; continuous evaluation programs |
| International screening | Very limited; few cross-border databases | INTERPOL, global sanctions, foreign adverse media screening |
The September 11 attacks produced the most significant legislative and regulatory overhaul of background screening in U.S. history. Within weeks of the attacks, Congress began drafting legislation that would fundamentally change what "due diligence" meant for employers, financial institutions, and government agencies. The impact was swift, sweeping, and permanent.
Signed into law just 45 days after the attacks, the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT) Act was the first major piece of post-9/11 security legislation. Among its many provisions, it dramatically expanded the Bank Secrecy Act's anti-money laundering requirements and mandated that financial institutions implement Customer Due Diligence (CDD) programs — which required screening customers against government watchlists, including OFAC's SDN list.
Section 326 of the PATRIOT Act created the Customer Identification Program (CIP) requirement, compelling all U.S. banks, credit unions, broker-dealers, and similar entities to verify the identity of every new customer and screen them against government lists of known terrorists and sanctions targets. This was the first time mass screening against terrorism databases became a legal requirement — not just for the government, but for the private sector.
The Aviation and Transportation Security Act of November 2001 created the TSA and federalized airport security screening nationwide. All airport security screeners became federal employees, subject to FBI criminal history checks. The TSA also established the Security Identification Display Area (SIDA) credentialing program, which requires any individual with unescorted access to secure airport areas to pass an FBI fingerprint-based criminal history records check.
In September 2003, President Bush signed Homeland Security Presidential Directive 6 (HSPD-6), directing the creation of the Terrorist Screening Center (TSC), managed by the FBI. The TSC consolidated more than a dozen separate government watchlists into a single, unified Terrorist Screening Database (TSDB) — commonly known as the "terrorist watchlist." The TSDB became the master record against which all government vetting, and increasingly private-sector screening, would be compared.
By 2006, the TSDB contained approximately 288,000 records. As of 2024, the database includes over 2 million records — a reflection of both expanded intelligence collection and the post-9/11 era's dramatically broader definition of "terrorist threat." The database is not public, but subsets of it — like the No-Fly List and the Selectee List — feed into systems that private parties interact with regularly.
Modern terrorism-related background screening draws from a complex ecosystem of federal, international, and proprietary databases. Understanding which databases exist, who can access them, and what they contain is essential for any compliance officer, HR professional, or screening provider.
Managed by the FBI's Terrorist Screening Center, the TSDB is the U.S. government's consolidated watchlist. It contains records of known or suspected terrorists (KSTs) and is the source database for the No-Fly List, Selectee List, and other derivative watchlists. Private employers cannot directly search the TSDB. It is accessed by over 18,000 screening entities including TSA, CBP, and the State Department.
These are subsets of the TSDB. The No-Fly List contains individuals barred from boarding commercial aircraft. The Selectee List contains individuals who must undergo additional screening before boarding. Airlines are required to check every passenger name against the Secure Flight database (managed by TSA) prior to issuing boarding passes. As of 2024, approximately 1,600 individuals are on the U.S. No-Fly List.
Maintained by the U.S. Department of the Treasury, the SDN List identifies individuals and entities whose assets are blocked and with whom U.S. persons are generally prohibited from doing business. The list includes terrorists, narcotics traffickers, arms dealers, and sanctioned governments. It is publicly accessible and must be checked by all U.S. persons and entities. Penalties for violations reach $1 million per transaction and up to 20 years imprisonment.
The NCIC is the FBI's centralized information system containing criminal justice records including wanted persons, stolen property, and identity files. Its Violent Gang and Terrorist Organization File (VGTOF) contains records of members of violent gangs and domestic and international terrorist organizations. Access is restricted to authorized law enforcement and criminal justice agencies — not available for private employment screening.
INTERPOL maintains a series of color-coded notices and databases used by its 196 member countries. Red Notices are requests to law enforcement worldwide to locate and provisionally arrest a person pending extradition. INTERPOL's databases include the Foreign Terrorist Fighter (FTF) database and the Stolen and Lost Travel Documents (SLTD) database. These are used in international travel screening and cross-border employment vetting, particularly for multinational organizations.
Managed by the TSA and U.S. Coast Guard, the TWIC program requires all maritime workers who need unescorted access to secure areas of U.S. ports, vessels, and outer continental shelf facilities to undergo a security threat assessment. This includes a check against the TSDB, NCIC, and immigration databases. As of 2024, over 3 million TWIC cards have been issued. It is one of the most comprehensive terrorism-related checks available to private-sector workers.
Maintained by the U.S. Department of Commerce's International Trade Administration, the CSL combines 13 export screening lists from the Commerce, State, and Treasury Departments into one searchable list. It is primarily used by exporters and importers to screen business partners, customers, and end-users of U.S.-origin goods and technology. It includes the OFAC SDN list, Entity List, Denied Persons List, and Debarred Parties List, among others.
The UN Security Council maintains a consolidated list of individuals and entities subject to UN sanctions — primarily related to Al-Qaeda, the Taliban, and ISIL (Da'esh). Member states are obligated to implement asset freezes, travel bans, and arms embargoes against listed parties. For international organizations and businesses operating across borders, this list is a critical component of global sanctions compliance screening.
Of all the terrorism-related databases used in background screening, the Office of Foreign Assets Control (OFAC) Specially Designated Nationals and Blocked Persons (SDN) List is the one most frequently encountered in private-sector compliance. It is publicly searchable, legally binding on all U.S. persons and organizations, and carries some of the harshest civil and criminal penalties in the regulatory landscape.
OFAC traces its origins to the Treasury Department's Office of Foreign Funds Control, established in 1940 to block Nazi Germany's access to U.S.-held European assets. After the war, the function evolved to manage sanctions programs against Korea, China, Cuba, and eventually Vietnam, Iran, Libya, and numerous other countries and non-state actors.
The modern OFAC in its current form was established in 1950. The SDN List as a named, published instrument emerged in the early 1990s when OFAC began publicly identifying specific individuals and entities under its various sanctions programs. Following 9/11, Executive Order 13224 dramatically expanded OFAC's counterterrorism mandate, directing the blocking of assets of persons who commit, threaten, or support acts of terrorism — and critically, authorizing OFAC to designate any entity whose assets should be blocked without prior notice.
As of early 2026, the SDN list contains over 15,000 names across more than 30 active sanctions programs. Listed entities include:
⚠️ Legal Note: The OFAC regulations apply to all U.S. persons — which means every U.S. citizen, permanent resident alien, and any person or entity within the United States, regardless of industry or size. There is no "small business exemption" and no minimum transaction threshold.
In practice, OFAC compliance programs are most rigorously required in:
| Violation Type | Civil Penalty | Criminal Penalty |
|---|---|---|
| Per-transaction sanctions violation | Up to $1,000,000 or 2x transaction value | Up to $1,000,000 fine + 20 years imprisonment |
| Willful violation | Higher multipliers; may include debarment | Up to 20–30 years imprisonment |
| Egregious cases (public enforcement) | OFAC publicly names the violating entity | DOJ referral; corporate prosecution possible |
Source: OFAC Civil Penalties and Enforcement Guidelines, 31 C.F.R. Parts 500–599
One of the most frequently overlooked aspects of OFAC compliance is the 50 Percent Rule: any entity that is 50% or more owned — directly or indirectly — by a Specially Designated National is itself treated as a blocked entity, even if it does not appear on the SDN list by name. This means that a company must screen not just against the published list, but must also conduct beneficial ownership analysis to determine whether any of their counterparties are majority-owned by SDN-listed individuals. For financial institutions, this requirement is central to their Anti-Money Laundering (AML) and Know Your Customer (KYC) programs.
"Cleared" and "safe" are not synonymous in modern background screening — particularly when terrorism-related databases are involved. Understanding what a clean result actually means, what a "hit" triggers, and how false positives are managed is critical for any HR professional or compliance officer navigating this landscape.
When a background screening report returns a "clear" result on terrorism-related checks, it means that the individual's name, date of birth, and other identifiers were compared against the applicable databases and no matching records were found. This does not mean:
A clean result does, however, mean that the organization has met its due diligence obligation at that point in time — a critical legal distinction.
Terrorism watchlist screening has a significant false positive problem. Because databases like the TSDB and OFAC SDN list contain names with multiple possible transliterations (particularly Arabic, Persian, and other non-Latin script names), common names can generate hundreds of potential matches. The TSA's Secure Flight program historically flagged tens of thousands of innocent travelers — most notably the case of Senator Ted Kennedy, who was stopped five times at airports because his name matched a suspected alias.
Professional screening providers address this through fuzzy-logic name matching algorithms that score matches by probability rather than binary yes/no, combined with secondary identifier verification (date of birth, country of birth, passport number, SSN) to distinguish a true match from a false positive. Reputable screening firms will always conduct a human review before flagging a potential terrorism watchlist match to an employer.
The Department of Homeland Security operates the Traveler Redress Inquiry Program (DHS TRIP) for individuals who believe they have been incorrectly identified as a match on a government watchlist. For OFAC matches, a separate administrative process exists through which individuals can petition for removal from the SDN list or seek a specific license to engage in otherwise-prohibited transactions. These processes, while important, can take months to years — underscoring the importance of getting initial screening right.
Name + DOB verified against full SDN list including aliases and the 50% ownership rule
UN Security Council list, EU consolidated list, and applicable country-specific sanctions programs
OIG exclusion list, GSA debarment, and System for Award Management (SAM.gov) check
No credible negative news coverage associating individual with terrorism, extremism, or sanctions
SSN trace or passport verification confirms identity matches screening subject — not an alias
Full audit trail maintained; proper consent obtained; adverse action procedure ready if needed
Every major terrorism event in the past two decades has prompted a regulatory or operational response that tightened background screening requirements. Here are the pivotal post-9/11 incidents and their lasting impact on the screening landscape.
The Boston Marathon bombing carried out by the Tsarnaev brothers exposed critical gaps in domestic radicalization monitoring. Tamerlan Tsarnaev had traveled to Russia in 2012 and met with known extremists — information that was in Russian intelligence files shared with the FBI, but which was not flagged upon his return due to database matching errors.
Screening Impact: Led to enhanced information-sharing protocols between the FBI and foreign intelligence partners. Prompted DHS to review watchlist nomination standards and accelerate the integration of foreign travel intelligence into domestic screening workflows. Several states also enacted enhanced background check requirements for gun purchases following the event.
Omar Mateen had been investigated twice by the FBI — in 2013 and 2014 — for suspected ties to Islamic extremism, but both investigations were closed without action. He was subsequently removed from the watch list. Mateen was also employed as a private security guard, having passed a standard background check.
Screening Impact: Triggered congressional scrutiny of watchlist removal processes. Highlighted the gap between FBI investigative records (restricted) and private employment background checks (limited). Led to increased advocacy for employer access to records of individuals who had been previously investigated for terrorism, even if no charges resulted.
A U.S. Army veteran drove a truck into a crowd on Bourbon Street, killing 14 people and injuring dozens more. The attacker had been inspired by ISIS and had posted videos declaring allegiance to the group in the hours before the attack — though the FBI found no evidence of direct coordination with ISIS, classifying it as domestic terrorism carried out by a lone actor. He had no prior criminal record and would have passed a standard background check — illustrating the challenge of "clean record radicalization."
Screening Impact: Renewed focus on social media and open-source intelligence (OSINT) as supplementary screening tools. Accelerated discussions within the screening industry about integrating AI-powered adverse media monitoring to identify radicalization indicators not captured by traditional database checks. DHS updated its public-facing Homeland Threat Assessment to elevate domestic violent extremism as the nation's primary terrorism concern.
Following Russia's invasion of Ukraine in February 2022, OFAC imposed an unprecedented wave of sanctions against Russian individuals, entities, and the Russian financial system. In the first six months alone, OFAC added over 1,000 new names to the SDN list — including major Russian banks, oligarchs, and government officials.
Screening Impact: Dramatically increased the compliance burden for any organization with Russian business relationships. Highlighted the need for real-time or near-real-time SDN list monitoring rather than one-time point-in-time checks. Many companies discovered they had existing relationships with newly-sanctioned parties, prompting emergency terminations of contracts and account closures.
International background screening for terrorism-related risks is fundamentally more complex than domestic screening. Database access varies dramatically by country, data privacy laws often restrict what can be disclosed, and the quality of criminal records infrastructure differs widely across jurisdictions.
Beyond OFAC, international organizations and major economies maintain their own sanctions regimes:
The General Data Protection Regulation (GDPR), effective May 2018, has significantly complicated international background checks for European employees. Under GDPR, collecting and processing criminal conviction data requires explicit legal basis — typically either consent or a specific legal obligation. This means:
Many high-risk jurisdictions — including parts of sub-Saharan Africa, Central Asia, and conflict zones — have limited or nonexistent criminal records infrastructure. Background checks sourced from these regions often cannot be fully verified through official channels. In these cases, professional screeners rely on:
The terrorism threat environment has shifted dramatically since 9/11 — and so have the corresponding implications for background screening. Understanding the current threat landscape helps organizations calibrate their screening programs appropriately.
The DHS Homeland Threat Assessment 2025 marked a significant milestone: for the first time since 9/11, domestic violent extremism (DVE) was formally assessed as presenting a higher threat level to the U.S. homeland than international terrorism. According to the DHS 2025 Homeland Threat Assessment, domestic extremists — spanning racially motivated violent extremism (RMVE), anti-government movements, and single-issue extremism — remain among the leading terrorism concerns for U.S. law enforcement, alongside persistent foreign terrorist threats.
This has profound implications for screening: most domestic extremists are U.S. citizens or legal residents who will not appear on international sanctions lists or the OFAC SDN list. They may have no prior criminal record. Their radicalization often occurs online and in relatively short time frames — making point-in-time background checks an imperfect tool for detection.
A growing share of terrorism incidents in the United States and Europe are carried out by individuals who are "inspired" by designated terrorist organizations (ISIS, Al-Qaeda) but have no direct operational connection to those groups. These individuals:
This reality has prompted many large employers, government contractors, and high-security facilities to incorporate continuous monitoring programs that go beyond one-time pre-employment checks — including periodic re-screening, social media monitoring (where legally permitted), and behavioral threat assessment programs.
The OFAC SDN list has been updated in recent years to include state-sponsored cyber actors — including units within Russian, North Korean, Iranian, and Chinese government agencies. The Lazarus Group (North Korea), Sandworm (Russia), and various Iranian APT groups are now OFAC-designated, meaning that any U.S. company that pays a ransomware demand to one of these groups — even unknowingly — may be in violation of OFAC sanctions.
The U.S. Treasury and CISA have both issued guidance warning organizations to conduct OFAC checks before making any ransomware payment and to screen technology vendors and cloud service providers for potential sanctions exposure.
Source: DHS Homeland Threat Assessment 2025; CSIS Global Terrorism Threat Assessment 2025
Given the complexity of the current threat landscape and the evolving regulatory environment, the following best practices represent the current gold standard for organizations building comprehensive background screening programs.
Use a reputable background screening provider that offers automated, real-time comparison against the OFAC SDN list, UN consolidated list, EU sanctions list, and other applicable databases. Point-in-time checks are insufficient — particularly for high-volume hiring or ongoing business relationships. Automated continuous monitoring ensures that if a customer, vendor, or employee is added to a watchlist after their initial screening, your organization is alerted in real time.
Not every position or business relationship carries the same terrorism risk. A risk-based approach calibrates screening depth to the risk profile of the role. A nuclear facility worker, federal contractor, or financial institution employee requires significantly more comprehensive terrorism screening than a retail associate. Document your risk assessment methodology so it can be demonstrated to regulators.
In an enforcement action, your ability to demonstrate that you screened a party and found no match — at a specific date and time — is your primary defense. Maintain immutable records of every screening conducted, the database versions used, the match results, and any human review notes. For OFAC compliance, many organizations maintain a Screening Log as part of their formal sanctions compliance program.
Screening technology is only as effective as the people operating it. HR and compliance staff must understand how to interpret screening results, what constitutes a "potential match" vs. a "confirmed match," how the FCRA's adverse action procedures apply even for terrorism-related flags, and when to escalate to legal counsel. OFAC enforcement cases have consistently cited inadequate staff training as an aggravating factor.
The regulatory landscape around terrorism screening changes frequently. OFAC issues new sanctions designations almost daily. State laws on criminal records usage are evolving rapidly through "ban-the-box" and fair chance hiring legislation. An annual policy review ensures your screening program remains compliant, legally defensible, and aligned with current best practices and threat intelligence.
Databases only capture what has been formally reported and designated. Adverse media screening — systematic monitoring of news sources, court filings, regulatory actions, and social media for negative information — can surface terrorism or extremism links before they result in a formal designation. AI-powered adverse media tools now monitor hundreds of thousands of sources across dozens of languages in near real time.
This article is provided for educational and informational purposes only and does not constitute legal advice. Terrorism-related background screening and sanctions compliance are highly regulated areas. Organizations should consult qualified legal counsel before designing or modifying their screening programs. OFAC regulations are enforced on a strict liability basis in many circumstances — meaning that even inadvertent violations can result in civil penalties.
Background-Check.com provides fast, accurate public records searches trusted by individuals, businesses, and organizations across the United States.
Start a Background Check