The address you credited last month is now designated
Nothing was wrong with the original decision. The address was not on any list when you looked. The exposure lies in what happens next: whether anybody notices, and how long it takes.
Everyone builds screening at the moment of deposit. Noticing a change afterwards is the part that gets skipped, and it is the part a supervisor asks about, because without it the control is a checkbox.
What happens
- Lists are re-fetched and every snapshot kept
Sources are synchronised several times a day. Each snapshot is content-hashed and retained, which is what makes a past comparison reproducible and a new designation detectable.
- Known addresses are re-screened
A scheduled job re-checks wallets already seen. A designation added today reopens yesterday's question rather than waiting for the customer to transact again.
- A new case opens and the original receipt stays
The first decision keeps its own signed record. The reopening is a second decision with its own, so the file shows both what was known then and what changed.
- A webhook tells your systems
A webhook fires on the new case, HMAC-signed over the raw body with the delivery id as the idempotency key, so your back office can act without anybody watching a queue.
What this does not do
Re-screening is only as good as the sources. Official lists are incomplete by their publishers' own admission, and a designation that is never published is never matched.
There is a window between a designation being published and the next successful sync. The list ages are published live, so the size of that window is a fact you can check rather than a promise.
Next
Questions
Re-screening runs against wallets already on your tenant and is counted in your plan's allowance. The pricing page states what each plan includes.
The case still opens and the record still exists. What you can do about the money is a different question from what you are able to show about having noticed.
One e-mail link gives you an isolated tenant and an API key. The screen that shows the key also shows a first call with a real listed address already in it. The sandbox includes fifty screenings a month on real data and is deleted after seven days.