Who Is a PEP?
Politically Exposed Person (PEP) screening requirements appear in FATF Recommendation 12, the EU's AML Directives (most recently 6AMLD and the AML Package now transitioning to AMLA oversight), FinCEN's CDD Rule, and nearly every national AML regulatory framework. Despite this universality, PEP classification remains one of the most contentious areas of financial crime compliance — both because the regulatory definitions leave significant interpretive space and because over-classification drives enormous and unproductive operational burden.
The FATF definition covers:
- Foreign PEPs: Individuals entrusted with prominent public functions in a foreign country — heads of state, senior politicians, senior government officials, judicial or military officials, senior executives of state-owned enterprises, and senior officials of international organisations
- Domestic PEPs: The same categories applied to individuals in the institution's home country. The EU's 4AMLD and subsequent directives include domestic PEPs as a mandatory category (previously optional); the US framework has generally not explicitly required domestic PEP classification but supervisory expectations have evolved
- International organisation PEPs: Senior officials of international organisations (UN, IMF, FATF, NATO, etc.)
- Family members and close associates: Immediate family (spouse, children, parents, siblings) and known close associates of PEPs are included in the definition and subject to equivalent enhanced scrutiny
---
The Over-Classification Problem
The most common practical failure in PEP programmes is over-classification: treating mid-level government employees, minor local officials, or individuals in nominally public roles as PEPs requiring full enhanced due diligence. This generates large investigation queues without improving the quality of the risk assessment.
FATF guidance is clear that PEP classification should be reserved for individuals entrusted with prominent public functions — the risk rationale being that these individuals have the access and opportunity to engage in bribery, corruption, and the misappropriation of public funds. A local municipal clerk does not carry the same risk profile as a cabinet minister.
De-risking considerations:
- Seniority: Focus PEP controls on individuals at director-general level and above in government functions, and C-suite or equivalent in state-owned enterprises. Sub-threshold officials may warrant a note in the risk assessment without triggering the full EDD process.
- Function: The risk is specifically corruption-related. A scientist who heads a government research institute carries different risk than a finance minister. Classification should consider whether the function involves control over public funds or government contracts.
- Exit from office: FATF guidance indicates that PEP status does not automatically end when a person leaves office. A risk-based approach should apply EDD for an appropriate period after leaving — typically 12-24 months for low-profile officials, potentially longer for senior or high-risk individuals — before reclassifying as a standard customer.
---
Source of Wealth and Source of Funds Verification
Enhanced due diligence for PEPs requires, at a minimum, establishing the source of wealth and source of funds. These are distinct concepts that are frequently conflated:
Source of Funds: The specific origin of the funds being deposited or transferred in the current transaction. For a PEP making a USD 500,000 deposit, source of funds addresses where specifically that USD 500,000 came from.
Source of Wealth: The accumulated wealth of the individual — how did they come to have the assets and financial resources they have? For a PEP with a USD 10 million investment portfolio, source of wealth addresses how they legitimately accumulated USD 10 million.
Both must be verified, not merely declared. Verification means obtaining documentary evidence that independently corroborates the stated source — not accepting a customer's narrative at face value.
Source of Wealth Verification Approaches
Salary and pension records: For a PEP whose wealth is explained by a career in public service, public salary scales for their declared role(s) across their career should be checked against declared wealth. Many jurisdictions publish civil service salary grades. If the stated career would produce a maximum of USD 3 million in savings, a USD 20 million estate requires additional explanation.
Business income documentation: If the PEP (or their family) owns businesses, audited financial statements or tax returns that corroborate declared dividend or profit distributions should be obtained.
Inheritance: Documented estate records from the relevant jurisdiction. Inheritance from family members who themselves warrant PEP consideration requires a source of wealth analysis of the original estate.
Investment returns: Portfolio statements from third-party custodians, cross-referenced against declared initial investment to assess whether returns are plausible given market conditions and declared investment period.
Red flags in source of wealth verification:
- Wealth that significantly exceeds what could plausibly have been accumulated through declared income and investments given the customer's career and geography
- Wealth concentrated in opaque structures (offshore trusts, BVI holding companies) without clear beneficial ownership documentation
- Dramatic increases in declared wealth coinciding with periods in political office
- Source of wealth narrative that references business activities in sectors known for corruption exposure in the relevant jurisdiction (natural resources, construction, defence contracting in certain geographies)
---
EDD Programme Design
A PEP enhanced due diligence programme should be structured to answer three questions comprehensively:
1. What is the risk this person poses?
Risk assessment should consider:
- Jurisdiction risk: A minister in a jurisdiction with a low Corruption Perceptions Index (CPI) score carries different risk than the equivalent in a high-CPI country
- Function risk: Finance ministers, procurement officials, tax authority heads, and regulators controlling private sector licensing carry higher inherent corruption risk than education or health officials
- Relationship network risk: Family members and close associates who are themselves in commercial roles that could benefit from the PEP's position
- Adverse media: Documented allegations, investigations, or negative news coverage relating to corruption, bribery, or asset misappropriation
2. Is their wealth legitimate and consistent with their profile?
Addressed through source of wealth verification (above). The standard is not to prove absence of corruption — that is often impossible — but to assess whether the declared source of wealth is plausible and verifiable.
3. Is their ongoing transaction activity consistent with the declared profile?
Ongoing monitoring for PEPs should be genuinely enhanced — meaning more frequent review cycles, lower alert thresholds, and analyst attention to transactions that would not raise concerns for a standard customer but are anomalous given the PEP's declared financial profile.
---
Automated PEP Screening and Data Quality
Most institutions rely on commercial PEP databases (LexisNexis, Refinitiv World-Check, Dow Jones Risk & Compliance, ACAMS Risk Assessment, and others) to identify PEPs at onboarding and through ongoing screening. Key quality considerations:
Coverage depth: How far does the database's definition of PEP extend? Does it include sub-national officials (regional governors, mayors)? Does it cover emerging markets consistently? Coverage gaps in specific geographies should be compensated through enhanced manual screening or local correspondent intelligence.
Timeliness: PEP status changes — individuals enter and exit office. Database update frequency matters. For high-velocity onboarding environments, daily database updates may be necessary to avoid screening against a stale PEP list.
False positive management: Common names in screening geographies generate significant PEP false positive volumes. The same mitigation approaches used in sanctions screening (DOB, nationality, entity type, identifier matching) apply here.
Adverse media integration: Best-practice PEP screening integrates automated adverse media screening alongside the PEP database. A PEP without adverse media carries different risk than an identically profiled PEP who appears in a corruption investigation.
---
RiskLex supports PEP and EDD programmes with structured financial crime intelligence covering corruption typologies, high-risk geographies, and regulatory expectations across jurisdictions. See how RiskLex can support your team.