A politically exposed persons (PEP) check ranks among the most consequential elements of any AML compliance programme. Institutions that get it right identify elevated risk before it materialises into a problem.
According to RelyComply, those that get it wrong, or treat it as a one-off box-ticking exercise, face regulatory censure, reputational harm and the genuine possibility of enabling corruption or money laundering.
RelyComply recently discussed PEP screening best practices and a guide for compliance teams.
While the stakes are widely recognised, many institutions struggle to pinpoint where their existing approach is falling short.
A PEP, or politically exposed person, is someone who holds or has previously held a prominent public role granting them influence over public resources or policy. Typical examples include heads of state, senior government ministers, members of parliament, high-ranking military officials, executives of state-owned enterprises, senior judges and senior central bank officials.
Importantly, the definition also captures immediate family members and known close associates, individuals who carry heightened risk through proximity alone. Many institutions overlook this distinction.
Within AML and KYC frameworks, PEP screening is a mandatory risk management process. Individuals with access to public funds or policy influence present a higher risk of bribery, corruption and money laundering.
Under FATF recommendations, the EU’s 4AMLD and 5AMLD directives and national regimes, financial institutions must identify PEP customers and apply Enhanced Due Diligence (EDD). This triggers obligations spanning source of wealth verification to senior management sign-off, applied across the full customer lifecycle rather than just onboarding.
Effective screening rests on three pillars. First, data quality: screening is only as reliable as the lists behind it, so a reputable, regularly updated global PEP database with associate coverage and transliteration support is essential.
Second, risk-based categorisation: a former local councillor and a serving foreign head of state demand very different scrutiny, so PEPs should be tiered by risk with proportionate controls. Third, ongoing monitoring: a customer who is not a PEP today may become one tomorrow, and FATF guidance recommends a minimum 12-month cool-down after leaving office. Screening must be continuous, driven by status changes, adverse media alerts and scheduled re-reviews.
Common failure points include siloed data across KYC, transaction and media systems; inconsistent thresholds between analysts; manual processes that cannot handle false positives at scale; and failure to screen close associates hidden behind shell companies and nominee structures. A robust KYB process mapping ownership and control is vital to closing that gap.
Once a match is confirmed, EDD should encompass independently corroborated source of wealth checks, structured adverse media screening, risk-calibrated transaction monitoring, documented senior management approval and regular re-review cycles. Regulators want to see the reasoning, not just the outcome.
At scale, automation is unavoidable. Leading platforms aggregate multiple PEP data sources, apply risk-weighted scoring, surface adverse media in context, generate audit-ready trails and cut false positive volumes to combat alert fatigue. Configurability matters too, as rigid systems either paralyse operations through over-flagging or create exposure by under-flagging.
PEP checks are no formality. They remain one of the most direct tools institutions have for keeping corrupt funds out of the financial system. If your screening process was built around onboarding and has not evolved since, it is time to revisit it.
Read the full RelyComply post here.
Copyright © 2026 RegTech Analyst
Copyright © 2018 RegTech Analyst
