A single sanctions entry carries dozens of aliases, recorded from intelligence in whatever script it arrived in. Your customer types exactly one of them.
Every new customer is screened against OFAC SDN, UN, EU, and UK lists at account opening. Then the lists change, and the entire book is re-screened against the delta. Both checks come down to the same primitive: is this name that name.
$ curl https://onoma.kineticpartners.org/api/v1/match \
-H "Authorization: Bearer sk_live_..." \
-d '{ "pairs": [
{ "a": "Mohammed al-Husseini", "b": "Мухаммад Хусейни" },
{ "a": "Mohammed al-Husseini", "b": "محمد الحسيني" },
{ "a": "Mohammed al-Husseini", "b": "Muhammad Hussaini" }
]}'
{ "results": [
{ "score": 0.92, "verdict": "match", ... },
{ "score": 0.90, "verdict": "match", ... },
{ "score": 0.95, "verdict": "match", ... } ] }