Politically Exposed Person (PEP)

The jurisdictional origin of a prominent public function is the primary axis of risk differentiation. Foreign PEPs are individuals entrusted with prominent public functions by a foreign country, including heads of state, senior politicians, and judicial or military officials. Domestic PEPs hold similar positions within the financial institution's own country. While both require Enhanced Due Diligence (EDD), the Financial Action Task Force (FATF) mandates that foreign PEPs automatically trigger heightened scrutiny, whereas domestic PEPs may be subject to a risk-based approach where EDD is applied only when the business relationship presents a higher risk. This distinction exists because cross-border financial flows involving foreign officials inherently present greater opacity and obstacles to source-of-wealth verification.

• Foreign PEP: A foreign head of state, cabinet minister, or ambassador opening an account in a different country.
• Domestic PEP: A sitting national legislator or supreme court judge banking within their own country.
• Key Distinction: Foreign PEP status is an automatic trigger for EDD; domestic PEP status is evaluated on a risk-sensitive basis.

This category covers individuals who hold or have held a prominent function within an international organization, such as the United Nations, International Monetary Fund, World Bank, or World Trade Organization. These are typically senior management figures—directors, deputy directors, and board members—not junior administrative staff. The risk arises from their potential control over large-scale development funds, procurement contracts, and policy decisions that can be exploited for bribery or embezzlement. FATF Recommendation 12 explicitly includes this category alongside foreign and domestic PEPs, requiring financial institutions to have risk management systems to determine if a customer is such a person.

• Example: A Director-General of a UN agency or a Deputy Managing Director of the IMF.
• Scope: Applies to senior leadership, not all employees of international bodies.
• Risk Vector: Access to substantial, often less transparently audited, international funding streams.

PEP classification extends beyond the individual to their immediate family members and close associates. This prevents the circumvention of controls by laundering proceeds through spouses, children, parents, siblings, or business partners acting as proxies. Family members are typically defined as direct relatives by blood or marriage. Close associates are individuals widely known to maintain a close business or personal relationship with the PEP, including beneficial co-owners of legal entities, prominent business partners, or personal advisors. The FATF requires that the definition of close associates be based on publicly known information or information that the financial institution reasonably should know.

• Family: Spouse, children, parents, and siblings who may hold assets on behalf of the PEP.
• Close Associate: A business partner jointly owning a shell company with the PEP or a known personal fixer.
• Due Diligence: Identification relies on adverse media screening, beneficial ownership analysis, and network analysis.

The risk associated with a PEP does not vanish immediately upon leaving office. The temporal dimension distinguishes between an Active PEP currently holding a prominent function and a Former PEP who has relinquished it. FATF standards require that EDD measures continue to apply to former PEPs for a period determined by the financial institution's risk-based assessment, typically for at least 12 months after leaving office, though many institutions extend this to 5 years or indefinitely for high-risk jurisdictions. The assessment considers the level of influence the individual may still retain, the nature of their former role, and whether the position was hereditary or elected.

• Active PEP: Currently in office; maximum risk level.
• Former PEP: Risk decays over time but requires a documented declassification process.
• Declassification Factors: Residual influence, corruption levels in the country, and nature of the former function (e.g., a former head of state retains influence longer than a former municipal official).

Not all PEPs present an equal risk. Financial institutions implement a tiered risk model to calibrate the intensity of due diligence. Tier 1 (High Risk) includes heads of state, government ministers, and senior military leaders from high-corruption jurisdictions. Tier 2 (Medium Risk) covers national legislators, senior judges, and ambassadors. Tier 3 (Lower Risk) may include mayors of small municipalities or low-level international organization officials. This stratification ensures that investigative resources are allocated proportionally, with Tier 1 PEPs requiring the most intrusive source of wealth and source of funds verification, including independent corroboration of assets.

• Tier 1: Heads of state, central bank governors, and senior military from high-risk countries.
• Tier 2: National legislators, supreme court judges, and state-owned enterprise CEOs.
• Tier 3: Local government officials and junior diplomatic corps members.

PEP status is not a static attribute but a dynamic lifecycle requiring continuous monitoring. The process begins with onboarding screening against commercial PEP databases and sanctions lists. Upon a positive match, EDD is triggered to establish the source of wealth and expected account activity. Crucially, ongoing monitoring must detect changes in status—such as a customer being newly appointed to a prominent function or a family member becoming a PEP. Finally, a declassification protocol must be documented when a former PEP no longer meets the risk threshold, with a clear audit trail justifying the removal of enhanced controls.

• Onboarding: Initial screening against World-Check, Dow Jones, or similar databases.
• Ongoing: Daily or weekly re-screening of the entire customer base against updated PEP lists.
• Declassification: A formal, audited decision to downgrade a former PEP to standard risk, based on predefined criteria.

The mandatory, risk-based investigation applied specifically to high-risk customers like PEPs. EDD goes beyond standard CDD by requiring source of wealth and source of funds verification, senior management approval for onboarding, and ongoing transaction monitoring. Key components include:

• Identification of close associates and family members (RCAs)
• Adverse media screening for corruption allegations
• Periodic reviews triggered by changes in public function or risk profile

An automated, continuous process of scanning unstructured news sources, legal databases, and public records to identify negative information linking a PEP to financial crime. Unlike static watchlist checks, adverse media screening captures:

• Allegations of bribery, embezzlement, or abuse of office
• Criminal investigations and indictments
• Civil litigation related to corruption or sanctions evasion
• Reputational risk signals from credible investigative journalism

NLP models classify articles by severity and relevance to reduce false positives in alert queues.

A critical distinction in PEP due diligence. Source of Wealth (SoW) describes the origin of the individual's total net worth—how they accumulated their assets over a lifetime (e.g., inheritance, business ownership, government salary). Source of Funds (SoF) refers to the specific origin of the money involved in a particular transaction or relationship (e.g., proceeds from a property sale, a specific contract payment).

Investigators must corroborate both to ensure:

• The stated wealth is consistent with known legitimate income
• Individual transactions are not conduits for bribery proceeds

The phenomenon where financial institutions terminate or refuse business relationships with entire categories of PEPs to avoid compliance costs and regulatory risk, rather than applying a risk-based approach. Consequences include:

• Financial exclusion of legitimate public servants and their families
• Reduced transparency as funds move to less regulated channels
• Regulatory scrutiny for institutions that de-risk indiscriminately

Regulators increasingly expect institutions to manage PEP risk through calibrated controls rather than blanket refusal of service.