PEP Screening: Politically Exposed Persons

Screening for politically exposed persons, or PEPs, is a standard part of any AML programme, and one that is frequently misunderstood. Being a PEP is not an accusation of wrongdoing; it is a risk category that triggers extra scrutiny. This post explains who qualifies, why, and what firms are actually required to do.

What a PEP is

A politically exposed person is someone entrusted with a prominent public function, whose position could be abused for money laundering, bribery or corruption. The concept comes from FATF Recommendation 12. Typical examples include heads of state and government, senior politicians, senior government, judicial or military officials, senior executives of state-owned enterprises, and important political party officials.

Screening frameworks generally distinguish:

• Foreign PEPs: those holding prominent functions in another country, treated as inherently higher risk.
• Domestic PEPs: those holding functions in the firm's own country, assessed on a risk-sensitive basis.
• International organisation PEPs: senior figures in bodies such as international institutions.

Family members and close associates

PEP risk does not stop at the individual. Regulations extend it to relatives and close associates (RCAs): spouses or partners, children and their spouses, parents, and people known to have close business or beneficial-ownership connections to the PEP. This matters because a corrupt official rarely holds illicit assets in their own name; funds are often routed through family members or associates. Effective screening must therefore consider the PEP's network, not just the named customer.

The point of PEP screening is not to exclude the powerful. It is to make sure that where the risk of corruption is elevated, the firm looks harder and can prove it did.

What screening requires

Once a customer is identified as a PEP (or an RCA), the firm must apply enhanced due diligence. The standard measures include:

• Senior management approval to establish or continue the business relationship, rather than leaving the decision to front-line staff.
• Establishing source of wealth and source of funds, so the firm understands how the person legitimately accumulated the assets involved.
• Enhanced ongoing monitoring of the relationship, with closer scrutiny of transactions.

These measures are proportionate to the assessed risk. A domestic PEP in a low-corruption context and a foreign PEP from a high-risk jurisdiction do not warrant identical treatment, and a good programme calibrates accordingly.

The de-risking trap

A common failure is to treat PEP status as a reason to refuse or terminate business outright, sometimes called de-risking. Regulators have repeatedly warned against blanket exclusion: PEPs are entitled to financial services, and reflexively offloading them can push legitimate activity into less transparent channels and even amount to unfair discrimination. The correct response is calibrated enhanced due diligence, not automatic exit.

Practical screening challenges

PEP screening is operationally messy. Names transliterate differently across scripts, common names generate large numbers of potential matches, and PEP status changes over time, someone becomes a PEP on taking office and, in many frameworks, remains higher risk for a period after leaving. Firms rely on fuzzy matching against PEP data sources, then human review to resolve whether a hit is a true match. Managing false positives without missing true PEPs is the central operational difficulty, closely related to sanctions-screening tuning.

Data sources and declassification

Unlike sanctions lists, there is no single authoritative global register of PEPs. Firms subscribe to commercial data providers that compile PEP status from public records, official gazettes, election results and news, and the quality and freshness of that data directly shapes screening accuracy. A related judgement is declassification: how long someone remains treated as a PEP after leaving office. Many frameworks require firms to keep applying enhanced measures for a period, often at least twelve months, and thereafter to make a risk-based decision about whether the person still poses elevated risk, rather than automatically dropping them the day they leave office.

Documenting the decision

Whatever a firm concludes, examiners expect to see the reasoning. That means recording why a match was confirmed or dismissed, which senior manager approved the relationship, what evidence established source of wealth, and how the ongoing monitoring is calibrated. A defensible PEP programme is judged less on whether it ever onboarded a PEP, which is permitted, and more on whether each decision was risk-assessed, approved at the right level, and clearly documented.

Key takeaways

• A PEP is someone entrusted with a prominent public function, a risk category under FATF Recommendation 12, not an accusation.
• Screening covers foreign, domestic and international-organisation PEPs, plus relatives and close associates (RCAs).
• PEP status triggers enhanced due diligence: senior-management approval, source-of-wealth checks, and enhanced monitoring.
• Blanket de-risking of PEPs is discouraged by regulators; calibrated scrutiny is the correct response.
• Fuzzy matching plus human review manages the false positives caused by transliteration and common names.