A diversion front company is a business that buys goods under one story and sends them somewhere the supplier is not allowed to ship. On paper it looks like a distributor, a trading house, or an equipment reseller. Screening checks its name against the lists, and the name comes back clean.
For most programs, that name check is the whole test of who the business partner is. Changing a name clears the screen, but it does not change the company.
A registered name can be changed with a single filing. The premises behind it, the domain history, the registry file and the people usually stay where they are. Finding that mismatch is investigation work rather than matching work, and resolution is where most screening programs are thin.
What Is a Front Company?
A front company sits between a restricted destination and a supplier who would not sell there directly.
That matters because nothing about it is restricted. The goods are controlled, the end use is controlled, or the listed parties are sanctioned. The company sitting between them is none of those things, and that is the point of it.
Take a machine tool distributor registered outside the EU in 2023, in a country that borders a restricted market. It orders equipment, pays on time, and supplies an end user certificate. The distributor then moves the equipment on to a market the exporter is prohibited from supplying.
The European Commission's guidance on due diligence of 19 February 2024 sets out the indicators that should alert an EU operator entering a new commercial relationship. They include indirect transactions using intermediaries or shell companies that make little economic sense. They also include a business partner recently established, or merged with a sanctioned entity, or sharing an address with several companies.
Does the Order Fit the Customer?
The first check is whether the order makes sense for the business partner placing it.
Practitioners describe the same two patterns. A new business partner places a large first order for goods the destination market has little use for. Or a business partner who has bought steadily for years suddenly triples its usual volume, with nothing in its own business to explain the jump.
The Commission's guidance asks the same thing in plainer language. It tells operators to ask whether there is a proven business record, and whether the shipment is in line with expectations for that customer from a business perspective.
Both questions need a baseline.
Take a distributor that has ordered four units a quarter for three years and now orders sixty. With last year's figures in front of the analyst, that is a finding. Without them, sixty units is a good quarter.
Some programs use order value to decide how hard to look. One figure sends the order to screening. A higher one sends it to enhanced diligence. Those numbers are not set by law, and they vary a lot between companies.
Does the Company Match Its Own Description?
The second check is whether the company's public record agrees with itself.
A front company has to build a presence quickly, and the pieces get assembled by different people at different times. So they tend not to line up. The website claims a workforce of several thousand while the professional network page shows three employees. The site describes industrial machinery and the registry entry lists general trading. The registered address turns out to be a flat.
None of those observations is conclusive on its own. A small firm can have a thin online presence and a real business behind it.
The signal is not in any single source. It is in the disagreement between them.
That is also why this work is slow. One business partner means a registry, a domain record, a map view and two search engines. This is the open-source research behind every alert, and it does not fit into the minutes an analyst has per case.
Why the Address Outlives the Name
A registered name is the cheapest part of a company to change. The address is one of the most expensive.
A designated entity can file a name change and clear a list match within days. Moving the premises, replacing the signage, updating the map listing and clearing years of directory entries costs real money, and it is usually not done.
A compliance officer at an industrial manufacturer described this case in one of our interviews. He screened a business partner and the name came back clean against every list. Before clearing it, he opened the registered address on Google Maps. The location shows a business trading under a different name, and that name is designated.
The screen was correct. It answered the question it was asked, and the question did not cover renames.
The Commission's guidance points at the same physical anchor from a different direction. It flags a business partner that shares an address with several different companies as a likely shell company. It also flags repeated share transfers from sanctioned to non-sanctioned entities, involving corporations incorporated by the same people at one registered office.
The Route Has to Make Commercial Sense
The third check covers the route the goods take and the papers that describe it.
The Commission's guidance sets out the questions directly. What is the country of transit and of destination? Does that country neighbour the restricted market or have easy access to it? Are complex or unusual transportation routes being used?
It adds one that is easy to skip. Are there elements in the documentation that do not match, for example between the financial documents and the contract?
A mismatch between two documents in the same file is not a matching problem. It is a reading problem, and only a person working through the file will find it.
The goods matter as much as the route. The Commission publishes a Common High Priority items list to help exporters run due diligence. A high priority item on its own is not a problem. A transit country known for re-export is not a problem either. Together they are.
Some restrictions now attach to goods and destination rather than to a listed party, which takes the name out of the question entirely. No single element on this list is the flag. The combination is.
Some Red Flags Only Appear at Shipment
Not every diversion signal exists at the moment the business partner is screened.
A delivery address gets changed at the last minute. A shipment is split across several consignments with no commercial reason. A buyer declines installation, training or a maintenance contract on machinery they say they intend to operate.
These appear at execution, after the screening event has closed. So they need an owner outside the compliance queue, in logistics or order management, with a route back into compliance when one of them fires.
What Do You Do After You Find One?
The Commission's guidance is clear on the trigger. Where an operator finds evidence of one of the indicators, it should launch a deeper screening. The guidance does not say what that deeper screening should produce, or what should stay on file once it is finished.
The stakes are set out plainly. A restricted item can be exported to a third country and re-exported onward from there. The guidance notes that competent authorities may then consider the exporter's failure to conduct adequate due diligence a violation of EU sanctions law. It also states that suspicious trade activity should be reported to the relevant national authority, in line with legal requirements.
Read those two points together. Once the flag has been seen, doing nothing is a decision, and an undocumented one.
A cleared red flag needs the same four parts as any resolved alert: the evidence considered, the sources checked, the reasoning applied, and the decision with its owner. What a defensible alert decision contains applies here without change. Where the check turns up a real restriction rather than a false lead, freezing and reporting follow their own rules and deadlines.
The harder part is that none of this work starts with an alert. There is no case number, no match score and no timestamp to prove the question was ever asked.
What to Measure After You Build These Checks
Every check in this article has two halves. The first is whether the program can see the signal at all. The second is whether it can turn what it sees into a decision it can produce later.
Screening covers neither half. The signals sit in order history, registries, maps and shipping documents, and the decision sits in a file the screening tool never opens.
So the number to measure is not how many red flags the program raised. It is how many high-risk orders shipped with a written record of the check.
Changing a name clears the screen, but it does not change the company. What did not change is where you have to look, and no list will point you there.
The list tells you what the business partner is called. The record tells you whether you checked what it is.