A PEP is someone entrusted with a prominent public function, along with their relatives and close associates, who carries raised corruption and bribery risk. PEP status usually triggers enhanced due diligence, including source-of-wealth checks, because their access and influence create opportunities to move illicit money.
What is a PEP, in plain English?
A politically exposed person is someone who holds, or recently held, a prominent public function: a head of state, senior politician, senior government or military official, senior judge, or executive of a state-owned enterprise. The category also extends to their relatives and close associates, because illicit funds are often routed through the people around a PEP rather than the PEP directly.
PEPs are not treated as risky because of anything they have done. They are treated as higher risk because their position creates opportunity: access to public funds, influence over contracts and decisions, and the ability to demand or receive bribes. That elevated corruption and bribery risk is why most frameworks require enhanced due diligence for PEPs, including a serious look at source of wealth and source of funds.
The crucial nuance is that PEP status is a risk indicator, not an accusation. The vast majority of PEPs are legitimate customers. So the expected response is risk-based scrutiny, not blanket refusal, and the harder work is often mapping the connected parties who may be used to keep the money at arm's length from the official.
How PEP handling works
Once a customer is identified as a PEP, a distinct handling path applies:
- Identify — Screen for PEP status. Match the customer and connected parties against PEP data at onboarding and on an ongoing basis.
- Classify — Assess the level of exposure. Judge how senior the role is, the jurisdiction, and whether exposure is direct or through a relative or associate.
- Diligence — Apply enhanced due diligence. Establish source of wealth and funds, obtain senior sign-off, and set closer ongoing monitoring.
- Maintain — Keep status current. Refresh the classification as roles change, and avoid leaving stale PEP flags in place after someone leaves office.
Who counts as a PEP?
Who | Why they are in scope |
The official | Holds or recently held a prominent public function with access to funds and influence over decisions. |
Relatives | Family members who can hold or receive assets on the official's behalf, inheriting related risk. |
Close associates | Business partners and confidants used to distance illicit proceeds from the official. |
Domestic versus foreign | Both are in scope; foreign PEPs are often treated as higher risk, but domestic PEPs still warrant scrutiny. |
What it looks like in practice
In practice
A private bank onboards a customer who screens clean, but during diligence an analyst notices the customer is the business partner and frequent co-signer of a senior foreign official. The customer is not a PEP by title, but the close-associate link puts them squarely in scope, and large inbound transfers with vague commercial explanations start to look different in that light.
The bank applies enhanced due diligence, presses for documented source of wealth, and obtains senior sign-off before proceeding. When the source-of-wealth story does not hold up against the transfers, the relationship is escalated. Screening the named official alone would have missed this entirely; the risk was sitting one step to the side, in the associate.
Why PEP status matters to operators
PEP handling is where two mistakes are easy and both are costly. The first is over-reacting: refusing or exiting every PEP on sight, which is discouraged because status alone is not evidence of wrongdoing and blanket de-risking has its own harms. The point is to scrutinize, not to shun.
The second is under-reacting, and it takes two common forms. Stale PEP status left in place after someone leaves office distorts the risk picture, while hidden PEP exposure routed through relatives and close associates lets the real risk slip past a name-only check. The discipline is to keep looking past the named person to the network around them, and to keep the classification current as roles change.
What to watch for
- Exposure through associates. Funds routed via relatives or close associates to put distance between the money and the official.
- Weak source of wealth. A prominent public role with wealth that the documented history cannot plausibly explain.
- Stale PEP flags. Status left unchanged after someone leaves office, either overstating or understating current risk.
- Name-only screening. Checking the official but not mapping the connected parties who may actually hold the assets.
- Blanket de-risking. Refusing all PEPs on sight rather than applying proportionate, risk-based handling.
Quick questions
Does being a PEP mean someone is a criminal?
No. PEP status is a risk indicator tied to position and opportunity, not proof of wrongdoing. Most PEPs are legitimate customers, which is why the expected response is enhanced scrutiny rather than automatic refusal.
Do relatives and associates really count?
Yes. Relatives and close associates fall within scope because illicit proceeds are often routed through them precisely to distance the money from the official. Screening the named person alone leaves a common gap.
What is the difference between a domestic and a foreign PEP?
A foreign PEP holds a public function in another country and is often treated as higher risk. A domestic PEP holds a function in the firm's own country. Both are in scope, though handling may differ by risk-based assessment.
What does enhanced due diligence for a PEP involve?
Typically establishing source of wealth and source of funds, obtaining senior management approval to onboard or continue, and applying closer ongoing monitoring than a standard customer would receive.
When does someone stop being a PEP?
Not automatically when they leave office. Many frameworks apply a period of continued scrutiny afterward, judged on residual risk. Leaving a stale PEP flag in place indefinitely, or removing it too quickly, are both errors.
Should a firm refuse all PEPs?
No. Blanket refusal or exit is discouraged in favor of risk-based handling. The aim is to scrutinize PEPs appropriately, not to shun an entire category of legitimate customers.
Go deeper
- FFIEC BSA/AML Examination Manual ↗ — The manual US examiners use to assess BSA and AML programs.
- FATF ↗ — The global standard-setter for AML, counter-terrorist-financing, and counter-proliferation. Recommendations, guidance, and jurisdiction lists.