1. Policy Statement
Al-Waris Foundation is committed to ensuring that its funds, assets, projects, grants and other resources are not knowingly made available to prohibited persons or organisations or used for terrorist purposes.
The charity will take proportionate steps to:
- comply with applicable UK financial sanctions requirements;
- identify and assess sanctions and terrorist-financing risk;
- conduct due diligence appropriate to the circumstances;
- verify relevant recipients, partners and contractors;
- investigate credible concerns;
- stop or delay transactions where necessary;
- obtain professional advice where required;
- make reports to competent authorities where legally required.
The charity recognises that humanitarian and charitable work may take place in higher-risk environments.
Risk must therefore be managed carefully without imposing unnecessary barriers that prevent legitimate charitable assistance.
2. Purpose
This policy establishes the framework used by Al-Waris Foundation to manage risks relating to:
- UK financial sanctions;
- designated persons and organisations;
- terrorist financing;
- proscribed organisations;
- diversion of charitable resources;
- overseas payments;
- grants;
- contractors;
- delivery partners;
- humanitarian operations;
- financial intermediaries.
3. Scope
This policy applies to:
- trustees;
- staff where applicable;
- volunteers;
- contractors;
- consultants;
- fundraisers;
- grant recipients;
- delivery partners;
- overseas partners;
- project workers;
- persons involved in financial administration;
- anyone authorised to act on behalf of Al-Waris Foundation.
It applies to activity undertaken:
- in the United Kingdom;
- overseas;
- through banks and payment processors;
- through grants;
- through contractors;
- through project partners;
- through other financial intermediaries.
4. Trustee Responsibility
The Board of Trustees retains ultimate responsibility for ensuring that appropriate financial crime and sanctions controls exist.
Trustees should ensure that:
- relevant risks are recognised;
- proportionate due diligence is undertaken;
- significant concerns are escalated;
- questionable transactions are not ignored;
- serious matters are considered for regulatory reporting.
Operational screening and checks may be delegated.
5. Proportionate Approach
Al-Waris Foundation will apply controls proportionately.
The level of due diligence should reflect factors including:
- value of funds;
- country;
- conflict environment;
- recipient;
- payment method;
- project type;
- banking arrangements;
- known risk factors;
- nature of the relationship;
- whether the recipient has previously been verified.
Not every low-risk UK purchase requires formal sanctions screening.
Higher-risk international transfers may require enhanced checks.
6. Financial Sanctions
Financial sanctions may prohibit or restrict:
- making funds available to certain persons or organisations;
- making economic resources available;
- dealing with frozen assets;
- particular financial services;
- transactions involving specified countries or sectors.
Al-Waris Foundation will comply with applicable UK sanctions law.
7. Designated Persons
A designated person may be:
- an individual;
- organisation;
- entity;
subject to applicable sanctions restrictions.
Where the charity identifies a credible potential match involving a relevant transaction, funds must not simply be transferred while the concern remains unresolved.
8. UK Sanctions List
Where screening is appropriate, Al-Waris Foundation should use current official UK sanctions information or an appropriate screening service based on official data.
Searches should consider relevant identifying information such as:
- full name;
- aliases;
- date of birth where available;
- nationality;
- location;
- organisation details.
A name match alone does not necessarily establish that a person is designated.
Potential matches require appropriate verification.
9. False Positives
Screening may identify people who share a name with a designated person.
The charity should distinguish between:
- a genuine sanctions match;
- a possible match requiring further checks;
- a clear false positive.
Relevant evidence should be documented for significant decisions.
10. Terrorist Financing
Terrorist financing involves providing, collecting, moving or making resources available for terrorist purposes or prohibited organisations.
Al-Waris Foundation must not knowingly allow charitable funds or assets to be:
- diverted to terrorist activity;
- controlled by a prohibited organisation;
- knowingly provided to a prohibited recipient;
- used to facilitate terrorist activity.
11. Proscribed Organisations
The charity must not knowingly provide support to organisations proscribed under applicable UK law.
A delivery partner or recipient should not be assumed legitimate merely because it describes itself as:
- charitable;
- humanitarian;
- community based;
- religious;
- non-profit.
Appropriate due diligence should be undertaken according to risk.
12. Humanitarian Work
Al-Waris Foundation recognises that humanitarian work may be required in areas affected by:
- conflict;
- political instability;
- weak infrastructure;
- limited banking;
- high levels of displacement.
The existence of these risks does not automatically prohibit lawful humanitarian activity.
The charity should instead:
- assess risk;
- document decisions;
- apply proportionate safeguards;
- seek professional or regulatory guidance where necessary.
13. High-Risk Locations
A location may warrant enhanced scrutiny where there are factors such as:
- active conflict;
- significant sanctions exposure;
- terrorist-group activity;
- weak banking systems;
- corruption;
- limited regulatory oversight;
- high reliance on cash.
Country risk should not be used as a substitute for evaluating the actual recipient and transaction.
14. Pakistan and Palestine Operations
Where Al-Waris Foundation supports charitable activity in Pakistan, Palestine or any other location within its charitable purposes, due diligence should reflect the actual risk environment at the relevant time.
The charity should consider:
- recipient identity;
- local banking arrangements;
- delivery chain;
- contractors;
- project location;
- sanctions exposure;
- evidence of end use;
- security conditions.
The charity must not assume that all activity within a country or territory carries the same level of risk.
15. Recipient Due Diligence
Before transferring material funds, the charity should establish proportionate information about the intended recipient.
This may include:
- identity;
- legal status;
- registration;
- address;
- responsible persons;
- bank-account ownership;
- purpose;
- previous relationship;
- reputation;
- ability to provide evidence of end use.
16. Organisational Recipients
For organisations, due diligence may include reviewing:
- registration documents;
- governing documents;
- regulator records;
- website or public information;
- named officers;
- financial information;
- safeguarding arrangements;
- references;
- previous project history.
Higher-risk grants may require stronger checks.
17. Individual Beneficiaries
Individual beneficiaries should not routinely be subject to excessive sanctions screening where the activity and risk do not reasonably require it.
However, where:
- the payment is material;
- the circumstances create an identifiable sanctions risk;
- the recipient is acting as an intermediary rather than merely receiving aid;
additional checks may be appropriate.
Beneficiary dignity and data protection must be respected.
18. Contractors
Material contractors may require sanctions and integrity checks where:
- payments are significant;
- work is undertaken in higher-risk locations;
- they control project funds;
- they appoint subcontractors;
- the project presents elevated financial-crime risk.
Contractor due diligence should be coordinated with the Overseas Operations and Partner Due Diligence Policy.
19. Bank Account Verification
Before significant payments, the charity should verify that bank details reasonably correspond to the intended recipient.
Unexpected requests to:
- change bank accounts;
- pay another person;
- split payments unusually;
- use unrelated personal accounts;
should be investigated.
20. Payment to Personal Accounts
Payments to a personal account on behalf of an organisation should normally be avoided.
Where such an arrangement is genuinely necessary, the charity should document:
- why the organisation cannot receive funds directly;
- identity of the individual;
- relationship to the organisation;
- risk assessment;
- approval;
- evidence of end use.
21. Banks and Payment Providers
Where reasonably available, the charity should use reputable regulated financial institutions or payment providers.
The charity should not assume that a bank's compliance controls remove its own responsibilities.
22. Informal Value Transfer Systems
In some overseas environments, conventional banking may not be reasonably available.
Where an informal or alternative transfer system is considered, the charity should assess:
- legality;
- provider identity;
- registration or licensing where applicable;
- transaction traceability;
- sanctions risk;
- terrorist-financing risk;
- documentation.
The charity should maintain an audit trail sufficient to demonstrate the intended recipient and end use.
23. Cash
Cash carries increased diversion and traceability risks.
Cash transfers should be limited where safer alternatives are reasonably available.
Where cash is necessary, enhanced controls may include:
- documented approval;
- identity checks;
- signed receipts;
- transaction logs;
- two-person verification where appropriate;
- reconciliation;
- end-use evidence.
24. Grant Making
Grant-making must comply with this policy where relevant.
Higher-risk grants may require:
- sanctions screening;
- enhanced recipient due diligence;
- staged payments;
- stronger monitoring;
- more frequent reporting;
- independent verification.
See the Grant Making Policy.
25. Procurement
Procurement involving higher-risk locations or suppliers may require sanctions checks.
A supplier must not be selected merely because:
- they are known personally;
- another contractor recommends them;
- they offer the lowest price.
Procurement decisions must also consider due diligence and integrity.
26. Partner Organisations
Before a material partnership begins, Al-Waris Foundation should consider:
- legal status;
- management;
- reputation;
- financial controls;
- safeguarding;
- banking;
- sanctions exposure;
- operating environment.
Partners should be required to notify Al-Waris Foundation of significant changes affecting the risk profile.
27. Subcontractors
Where a partner or contractor proposes to subcontract significant work, Al-Waris Foundation should consider whether:
- approval is required;
- additional due diligence is necessary;
- the subcontractor creates new sanctions or financial-crime risk.
Material delivery chains should not become opaque.
28. End-Use Monitoring
The charity should maintain proportionate evidence that resources reached their intended charitable purpose.
Monitoring may include:
- invoices;
- receipts;
- bank records;
- photographs;
- video;
- project reports;
- site visits;
- location information;
- beneficiary confirmation;
- completion evidence.
Monitoring should be stronger where risk is higher.
29. Water Project Monitoring
For physical water projects, records may include:
- project number;
- location;
- contractor;
- specification;
- depth where applicable;
- invoice;
- payment evidence;
- completion date;
- photographic/video evidence;
- maintenance information.
This assists in demonstrating end use of charitable funds.
30. Aid Distribution Monitoring
Where funds support aid distributions, records may include:
- quantity procured;
- supplier;
- unit cost;
- delivery location;
- distribution date;
- appropriate evidence of distribution.
Beneficiary personal data should not be collected unnecessarily simply to prove end use.
31. Restricted Funds
Restricted funds remain subject to sanctions and terrorist-financing controls.
A donor restriction does not require the charity to make a payment that would be unlawful.
Where lawful delivery becomes impossible, the trustees should obtain appropriate advice regarding alternative use or handling of the restricted funds.
32. Donor Due Diligence
Al-Waris Foundation does not need to investigate every ordinary donor.
Enhanced donor due diligence may be appropriate where:
- a donation is unusually large;
- the source is unclear;
- the donation includes unusual conditions;
- the payment pattern is suspicious;
- the donor requests unusual onward transfers;
- there are sanctions or financial-crime concerns.
33. Anonymous Donations
Anonymous donations are not automatically prohibited.
However, unusually large anonymous or unexplained donations may warrant additional scrutiny.
The charity should consider:
- amount;
- method;
- source information available;
- restrictions;
- associated risks.
34. Suspicious Donation Conditions
The charity should not accept conditions requiring it to:
- make unlawful payments;
- route funds to an inappropriate third party;
- conceal the true beneficiary;
- bypass financial controls.
Where necessary, a donation may be declined or returned subject to appropriate legal and financial advice.
35. Sanctions Screening Frequency
Screening should be proportionate.
It may occur:
- before a new higher-risk relationship;
- before a material payment;
- when relevant details change;
- periodically for ongoing high-risk relationships;
- when sanctions information materially changes.
There is no requirement to repeatedly screen every low-risk individual without justification.
36. Screening Records
Where formal screening is undertaken, the charity should maintain proportionate records of:
- person or organisation screened;
- date;
- source or screening method;
- result;
- follow-up;
- decision.
Sensitive information should be protected.
37. Potential Match Procedure
Where a potential sanctions match is identified:
- do not assume that the match is genuine;
- pause the relevant transaction where necessary;
- compare available identifying information;
- obtain additional information where appropriate;
- escalate the concern;
- seek specialist advice where required;
- document the final decision.
38. Confirmed or Credible Match
Where the charity reasonably believes a relevant person or entity is subject to applicable sanctions restrictions, it must not knowingly proceed with a prohibited transaction.
The charity should obtain appropriate advice and follow applicable reporting requirements.
39. Frozen Assets
Where the charity holds funds or economic resources that may be subject to an asset freeze, the matter must be escalated immediately.
No person should:
- move;
- dispose of;
- make available;
- otherwise deal with;
such assets contrary to applicable law.
Professional or regulatory guidance should be sought promptly.
40. Reporting to OFSI
Where applicable, financial sanctions matters may require reporting to the Office of Financial Sanctions Implementation or another competent UK authority.
The charity should use current official reporting procedures rather than relying on outdated contact details embedded in this policy.
41. Terrorism-Related Reporting
Where the charity identifies credible information concerning terrorist financing or related criminal conduct, appropriate reporting obligations should be considered promptly.
Professional legal advice should be obtained where necessary.
42. Police and Other Authorities
Where relevant, Al-Waris Foundation may need to notify:
- police;
- counter-terrorism authorities;
- Charity Commission;
- financial institutions;
- another competent authority.
One report does not necessarily remove another reporting obligation.
43. Charity Commission
Significant concerns involving:
- terrorist financing;
- sanctions breaches;
- serious diversion of charity funds;
- serious partner failures;
may require serious incident reporting.
See the Serious Incident Reporting Policy.
44. Suspicious Activity
Warning signs may include:
- recipient refusing reasonable identity checks;
- repeated changes to payment instructions;
- request to obscure the ultimate recipient;
- unexplained intermediaries;
- inconsistent project information;
- unusual cash demands;
- pressure to bypass due diligence;
- recipient details resembling a sanctions entry;
- unexplained links to prohibited organisations.
A warning sign is not proof of wrongdoing.
It should trigger proportionate review.
45. No Tipping Off or Improper Disclosure
Where a matter has been referred to a competent authority or professional adviser, people involved should avoid inappropriate disclosure that could:
- prejudice an investigation;
- alert suspected offenders improperly;
- compromise evidence.
Legal advice should be followed where applicable.
46. Conflicts of Interest
A conflict of interest may increase sanctions or diversion risk.
Relevant relationships involving:
- contractors;
- partners;
- grant recipients;
- intermediaries;
must be declared.
See the Conflict of Interest Policy.
47. Fraud and Corruption
Sanctions and terrorist-financing concerns may overlap with:
- fraud;
- bribery;
- corruption;
- false invoicing;
- diversion.
See the Anti-Fraud, Bribery and Corruption Policy.
48. Data Protection
Due diligence and screening data must be handled in accordance with:
- UK GDPR;
- Data Protection Act 2018;
- Data Protection and UK GDPR Policy.
The charity should collect only information reasonably necessary for legitimate due diligence.
49. Confidentiality
Sanctions enquiries may involve sensitive information.
Access should be limited to people who genuinely require it.
Potential matches should not be publicly described as confirmed sanctions subjects unless that has been established.
50. Partner Agreements
Material partner agreements may require obligations concerning:
- sanctions compliance;
- prohibited organisations;
- use of funds;
- subcontractors;
- reporting changes;
- record keeping;
- monitoring;
- notification of significant concerns.
51. Grant Agreements
Where relevant, grant agreements may provide that recipients must:
- use funds solely for agreed charitable purposes;
- comply with applicable law;
- notify the charity of sanctions concerns;
- provide end-use evidence;
- permit suspension where significant compliance concerns arise.
52. Contractor Agreements
Higher-risk contractor agreements may require:
- identification of subcontractors;
- accurate invoicing;
- no improper onward payments;
- cooperation with due diligence;
- compliance with applicable sanctions requirements.
53. Suspension of Payments
Al-Waris Foundation may suspend a payment where there is a credible unresolved concern relating to:
- sanctions;
- terrorist financing;
- recipient identity;
- diversion;
- unlawful onward use.
Suspension is a risk-control measure and does not necessarily establish wrongdoing.
54. Termination of Relationships
A relationship may be terminated where:
- a partner becomes legally prohibited;
- serious due diligence failures occur;
- funds are knowingly diverted;
- credible risks cannot be adequately managed;
- the recipient refuses reasonable compliance requirements.
The charity should consider safeguarding and beneficiary consequences when planning termination.
55. Recovery of Funds
Where funds have been misused or diverted, reasonable recovery action should be considered.
The charity should consider:
- evidence;
- amount;
- legal position;
- likelihood of recovery;
- cost;
- security;
- charity's best interests.
56. Emergency Humanitarian Situations
In a genuine humanitarian emergency, the charity may need to act quickly.
Urgency may justify streamlined procedures but does not justify knowingly unlawful payments.
The charity should complete deferred checks as soon as reasonably practicable and maintain an appropriate decision record.
57. Risk Assessments
Higher-risk activity should be supported by a proportionate documented assessment.
The assessment may consider:
- country;
- recipient;
- funds;
- delivery chain;
- banking;
- sanctions;
- terrorist-financing risk;
- safeguarding;
- fraud;
- monitoring.
58. Risk Register
Significant sanctions or terrorist-financing risks should be reflected in the charity's Risk Register where appropriate.
The Board should receive proportionate information about material unresolved risks.
59. Training and Awareness
Relevant trustees and operational personnel should receive proportionate guidance concerning:
- sanctions;
- terrorist financing;
- due diligence;
- warning signs;
- payment escalation;
- reporting.
People handling higher-risk overseas transactions should receive more detailed guidance than people with no such responsibility.
60. Record Keeping
Relevant records may include:
- due diligence;
- screening;
- transaction records;
- risk assessments;
- grant documentation;
- monitoring evidence;
- decisions;
- external reports.
Records should be retained in accordance with the Records Retention and Disposal Policy.
61. No Concealment
No trustee, volunteer or representative may deliberately conceal a credible significant sanctions or terrorist-financing concern merely to:
- preserve a project;
- avoid embarrassment;
- maintain a contractor relationship;
- avoid regulatory attention.
62. Advice
Where there is uncertainty regarding:
- sanctions restrictions;
- licensing;
- prohibited payments;
- terrorist-financing obligations;
- reporting duties;
appropriate professional or official guidance should be obtained before proceeding.
63. Policy Breaches
A breach may result in:
- additional training;
- restriction of duties;
- suspension of payment authority;
- removal of access;
- termination of volunteering or contractual relationships;
- governance action;
- regulatory reporting;
- law-enforcement reporting.
Action should be proportionate to the circumstances.
64. Related Al-Waris Foundation Policies
This policy should be read alongside:
- Constitution;
- Risk Management Policy;
- Financial Controls and Reserves Policy;
- Grant Making Policy;
- Overseas Operations and Partner Due Diligence Policy;
- Anti-Fraud, Bribery and Corruption Policy;
- Procurement and Purchasing Policy;
- Serious Incident Reporting Policy;
- Whistleblowing Policy;
- Conflict of Interest Policy;
- Data Protection and UK GDPR Policy;
- Records Retention and Disposal Policy.
65. Review
This policy will be reviewed:
- at least annually;
- following a significant sanctions concern;
- following suspected terrorist-financing activity;
- following material expansion of overseas operations;
- following significant changes to payment arrangements;
- following relevant changes to UK sanctions or terrorism-financing requirements.
66. Approval
Version: 2.0 Status: Approved Approved by: Board of Trustees Approval date: 25/08/2026 Next scheduled review: 24/08/2027
