Refinitiv World-Check API
Refinitiv World-Check is a risk intelligence database used by banks, fintechs, and regulated companies to screen customers and counterparties for AML/KYC risk. An unofficial API lets you programmatically submit people or companies for screening, retrieve match candidates and risk cate
What is Refinitiv World-Check?
Refinitiv World-Check is a global risk intelligence solution from LSEG used to identify, assess, and monitor financial crime risk. It aggregates and curates data on politically exposed persons (PEPs), sanctions lists, regulatory and law enforcement actions, state-owned enterprises, and structured adverse media to support AML/KYC, sanctions compliance, and third-party risk programs. The browser-based product (often accessed via World-Check One) supports one-off, batch, and ongoing screening with case management and audit features.
Core product areas include:
- AML/KYC Screening (individuals and organizations)
- PEP and Sanctions Screening (global lists and programs)
- Adverse Media and Enforcement Actions (structured categories)
- Ongoing Monitoring (alerts when profiles or lists change)
- Case Management & Dispositioning (review, notes, attachments)
- Screening Profiles & Risk Policies (thresholds, categories, locales)
Common data entities:
- Subjects (Individuals, Organizations) with identifiers and demographics
- Screenings (input parameters, results, timestamps)
- Matches (candidate profiles with scores, categories, and sources)
- Alerts (monitoring events: new matches, profile changes, list updates)
- Decisions/Adjudications (disposition, risk rating, reasons, audit)
- Screening Profiles/Policies (match thresholds, categories, localization)
- Custom Lists/Overrides (internal watchlist entries, exclusions)
The Refinitiv World-Check Integration Challenge
Compliance teams rely on World-Check daily, but turning portal-based workflows into API-driven automation is non-trivial:
- Fuzzy matching and multilingual names: transliteration, aliases, and partial data
- Complex profiles and thresholds: jurisdictional nuances and category scopes
- High-stakes data handling: PII security, audit trails, and entitlements
- Ongoing monitoring: alert ingestion, deduplication, and SLA-driven triage
- Adverse media normalization: structured topics, severity, and sources
- Authentication complexity: SSO/MFA and session lifecycles for headless use
- Rate limits and batching: large-scale onboarding and periodic rescreening
How Supergood Creates Refinitiv World-Check APIs
Supergood reverse-engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your World-Check tenant.
- Handles username/password, SSO/OAuth, and MFA (SMS, email, TOTP) securely
- Maintains session continuity with automated refresh and change detection
- Normalizes matches and categories (PEP, sanctions, enforcement, adverse media) with consistent schemas
- Respects entitlements, access scopes, and approval workflows for compliant access
- Provides audit-friendly logging and redaction for PII
Getting Started
- Schedule Integration Assessment
Book a 30-minute session to confirm your modules, licensing, and authentication model.
- Supergood Builds and Validates Your API
We deliver a hardened World-Check adapter tailored to your workflows and entitlements.
- Deploy with Monitoring
Go live with continuous monitoring and automatic adjustments as World-Check evolves.
Use Cases
Onboarding Screening
- Screen applicants and counterparties in real time during signup or KYC refresh - Standardize subject payloads across business units and geographies - Return normalized match candidates with risk categories and source references
Ongoing Monitoring & Alert Triage
- Subscribe customers to monitoring and ingest alerts when lists or profiles update - Route alerts by severity or category and track acknowledgments - Sync alert states into your case management system
Case Adjudication & Evidence Sync
- Record decisions (positive match, false positive) with reasons and attachments - Keep dispositions and risk ratings in sync across internal tools - Generate audit-ready logs and exportable reports
Portfolio Rescreening & Analytics
- Run periodic rescreens across books of business with batching and throttling - Normalize categories and scores for risk dashboards - Enrich 360° customer views with PEP/sanctions/adverse media badges
Technical Specifications
Authentication
Username/password with MFA (SMS, email, TOTP) and SSO/OAuth where enabled; supports service accounts or customer-managed credentials
Response format
JSON with consistent resource schemas and pagination across modules
Rate limits
Tuned for enterprise onboarding/monitoring throughput while honoring entitlements and usage controls
Session management
Automatic reauth and cookie/session rotation with health checks
Data freshness
Near real-time retrieval of screenings, matches, and alerts
Security
Encrypted transport, scoped tokens, field-level redaction, and audit logging; respects role-based permissions and data residency requirements
Webhooks
Optional asynchronous delivery for long-running workflows and monitoring alerts
Latency
Sub-second responses for list/detail queries under normal load
Throughput
Designed for high-volume batch screening and alert ingestion
Reliability
Retry logic, backoff, and idempotency keys minimize duplicate actions
Adaptation
Continuous monitoring for UI/API changes with rapid adapter updates
Frequently asked questions
Supergood supports workflows such as AML/KYC screening (individuals, organizations), PEP/sanctions/adverse media matches, ongoing monitoring alerts, and case adjudication—subject to your licensing and entitlements. We scope exact coverage during integration assessment.
We support username/password + MFA (SMS, email, TOTP) and can operate behind SSO/OAuth when enabled. Sessions are refreshed automatically with secure challenge handling and audit logging.
Yes. We normalize dispositions, risk ratings, and reason codes, and can deliver state changes via webhooks or polling. We commonly sync with internal case tools, CRMs, and GRC systems.
We minimize data in transit, encrypt at rest and in motion, support field-level redaction, and maintain audit trails. We align with customer data residency and retention policies.
Yes. We can enable monitoring subscriptions, ingest alerts with severity/category filters, and orchestrate periodic rescreens with batching and throttling.