Watchlist Monitoring Setup
Learn how to configure Watchlist Monitoring to receive ongoing, asynchronous alerts when approved users are added to, removed from, or updated on watchlists.
Set up Watchlist Monitoring
There are several ways to set up Watchlist Monitoring.
Note:
Watchlist monitoring alerts are sent asynchronously via webhooks. In all cases, you will need to configure and integrate monitoring webhook events so that you can receive notifications whenever one of your users is added, removed, or has updated data on a watchlist.
Understanding screening vs. monitoring
| Screening | Monitoring | |
|---|---|---|
| When used | At onboarding or during a one-off rescreen | After a customer is accepted, for ongoing risk detection |
| Goal | Catch risk before entry | Catch changes over time |
| Trigger | You or an automated workflow submit an evaluation request | Lists are updated (new matches, changes, removals) and you are notified if a match is found via webhook or email |
| Example | A customer applies today. Screening catches if they are already sanctioned. | A customer was clear at onboarding but was sanctioned two months later |
Enable monitoring in a workflow
You can add a Monitoring enrichment step to your workflow to automatically enable monitoring for an entity that is approved in an evaluation.
- In RiskOS™, create Approve and Decline tags to route approved cases through the Watchlist Monitoring enrichment step before applying a final Approve decision.
- This ensures you only monitor entities that you approve.
Enable monitoring via API
Use the Evaluation Monitoring API to enable or disable monitoring for a user using your own logic (ie. users who deposit in their accounts, users who transact over $X, etc).
In order to enable monitoring for an entity, you need to use the original evaluationId that the entity was screened against. Within that evaluation's response you will find an enrichmentID under the Watchlist enrichment fields. Send a POSTrequest to the Evaluation Monitoring API using thatenrichmentID.
Auto-monitoring
Auto-monitoring automatically enables monitoring for all entities that go through an evaluation flow.
- Typically enabled for a short period while you import existing entities you know are already active into Socure’s platform.
- To enable Auto-monitoring, go to Settings → Watchlists and toggle the Auto-monitoring switch on.
Enable and disable monitoring with a batch file
You can enable or disable monitoring for a list of transactions by uploading a list of transaction IDs in batch.
If you are using Auto-monitoring as the primary method, you may also need to disable monitoring for entities that were not approved. Batch file upload is an easy way to do this.
Steps to use a batch file:
- In the RiskOS™ Dashboard, click Batch Jobs in the side navigation.
- At the top right, select the ‘+’ icon and choose Monitor Transactions.
- A modal will appear with a link to download a template CSV.
- Prepare a CSV file matching the template columns:
- transactionid → enter the
referenceIdfrom the Watchlist Evaluation response. - action → specify either
enableordisable.
- transactionid → enter the
- Upload the completed batch file into the modal.
Enable and disable monitoring manually
For cases that go to review before being accepted, enroll them in monitoring as soon as they move to Approve. Follow the steps to disposition and close a case, and in each case click the toggle to enable monitoring.

Updated about 1 month ago
