Flagged forever: how a fake sanctions-list name traps a real Sean Byrne
Sean Joseph Byrne keeps getting blocked by restricted-party screening because his common Irish name matches a single entry on the U.S. Commerce Department’s Entity List. The catch is that the listed “Sean Byrne” was never a real person — it was an alias invented by Mac Aviation, a father-and-son operation in County Sligo that padded its paperwork with fake employees while illegally exporting U.S. aircraft parts to Iran. U.S. prosecutors initially believed Byrne existed and tried to indict him; the 2010 superseding indictment later described the name more than fifteen times as an alias used by co-conspirators. Yet the Entity List entry survived, sixteen years on, with no date of birth, passport number, or middle name — just a name, an address that belonged to a co-defendant, and a country.
That missing detail is the whole problem. Nasdaq and shippers like DHL/SpaceX all generated the same false positive but resolved it once he supplied documents. Apple did not: after receiving his passport, driver’s license, and a detailed explanation of why the match was wrong, App Store Connect still told him he “fully” matched a restricted party and stopped responding. Because the underlying record contains no distinguishing identifiers, even a screening system working perfectly will flag him on the only two facts available — a common name and a country. The usual legal remedy, established in cases like Cortez v. TransUnion and Ramirez, is to compare dates of birth and middle names; here there is nothing to compare against.
The piece is a concrete illustration of how brittle name-only matching against sanctions and export-control lists really is, echoing the 60 Minutes segment on twelve innocent Robert Johnsons flagged against a terrorist’s bare alias. The failure isn’t in any one company’s compliance desk but in the source data itself: a phantom entry that can never be corrected by better matching, leaving the burden permanently on the real person to prove a negative, one vendor at a time.
Read the full article
Continue reading at Hacker News →This is an AI-generated summary. Read the original for the full story.