PEP Screening Explained
Foreign, Domestic, RCA & How Not to Miss One
Most major AML fines since 2012 involve a PEP that was not properly identified or not properly EDD’d. This guide shows you exactly how PEP screening works in practice — covering the three PEP tiers, RCAs, declassification, and real workflows from HSBC Private, Emirates NBD, JPMorgan, and Barclays.
The most career-ending KYC mistake at a tier-1 bank is not the failed file — it is the missed PEP. When the 1MDB case hit Goldman Sachs, when HSBC’s Mexico scandal broke, when Standard Chartered and Commerzbank paid billions in sanctions settlements, a missed or mis-scoped PEP was somewhere in the root cause. Every named MLRO and Head of Compliance at a major bank thinks about PEP screening differently than any other control, because PEP failures create personal regulatory liability under SMCR in the UK, DFSA’s senior-executive regime in the UAE, and Singapore’s IAC framework.
This guide is the working PEP-screening reference for KYC analysts, senior reviewers, and anyone targeting EDD or private-banking roles. It covers (1) who actually counts as a PEP under FATF, (2) the three PEP tiers and why each matters, (3) Relatives and Close Associates (RCAs) — the category most commonly missed, (4) the eight screening workflows that produce a clean PEP file, (5) declassification and when it’s appropriate, and (6) real scenarios from HSBC Private London, Emirates NBD DIFC, JPMorgan New York, Barclays GCC Mumbai, BNY, State Street, and KPO teams at eClerx and Genpact.
Who Is a PEP Under FATF?
FATF Recommendation 12 defines a Politically Exposed Person as “an individual who is or has been entrusted with a prominent public function” — and then extends the definition to family members and close associates (RCAs). The list of “prominent public functions” is deliberately broad and global.
FATF-defined “prominent public functions”
- Heads of state and heads of government (current and former)
- Senior politicians — cabinet ministers, senior parliamentarians, political-party leaders
- Senior government executives — permanent secretaries, senior civil servants, senior diplomats, ambassadors
- Senior judiciary — supreme court justices, constitutional court judges, senior-court judges
- Senior military officers — general-officer rank, flag-officer rank, senior intelligence officials
- Senior executives of state-owned enterprises (SOEs) — chairs, CEOs, CFOs of major state-owned banks, oil companies, utilities, airlines
- Senior officials of major political parties
- Senior executives of international organisations (UN, IMF, World Bank, WTO, regional development banks)
Middle-ranking civil servants, local-government officials below senior tier, junior military officers, and employees of state-owned enterprises below the senior-executive level. However, bank policy frequently adds discretionary PEP treatment for customers who fall outside the strict FATF definition but carry similar integrity risks — for example, senior judges below supreme-court level in high-corruption jurisdictions, or senior regional-government officials in emerging markets.
The 3 PEP Tiers — And What Each Drives
Foreign PEPs
Definition: A PEP in a jurisdiction other than the bank’s home jurisdiction.
Regulatory treatment: Always classified as high-risk. FATF R12 is explicit, and every major national regulation operationalises this uniformly — FinCEN, UK MLR 2017 Regulation 35, EU 6AMLD Article 18a, DFSA AML Module, MAS Notice 626, RBI Master Direction.
EDD depth expected: Full SoW reconstruction across the entire public-sector tenure plus pre-tenure and post-tenure career. Multi-language adverse media. Senior approval from named Head of Compliance or MLRO. Annual or more frequent review. Enhanced monitoring with lower alert thresholds. Many tier-1 banks apply quarterly review for the highest-risk Foreign PEPs.
Domestic PEPs
Definition: A PEP in the bank’s own jurisdiction.
Regulatory treatment: Risk-based approach. Most jurisdictions (UK, EU, UAE, Singapore, Canada) require banks to apply EDD to Domestic PEPs where risk factors are present but do not mandate automatic high-risk classification. The US FinCEN CDD Rule does not carve out Domestic PEPs — they fall under general EDD where warranted.
EDD depth expected: Proportional to political seniority plus other risk factors. A senior Cabinet minister at Tier 2 still gets full EDD in practice because the risk profile is materially similar to a Foreign PEP. A mid-level parliamentarian in a low-corruption jurisdiction may receive a lighter but still enhanced approach with documented rationale.
International Organisation PEPs
Definition: Senior individuals at international organisations — UN, IMF, World Bank, WTO, regional development banks (ADB, AfDB, EBRD), and equivalent bodies.
Regulatory treatment: Treated similarly to Foreign PEPs in most jurisdictions — always EDD, senior approval required.
EDD depth expected: Given the diplomatic-immunity context and cross-border earnings patterns of international-organisation roles, independent corroboration of SoW is particularly important. Employment letters alone are insufficient.
RCAs — The Category Most Commonly Missed
Relatives and Close Associates of PEPs carry the same regulatory treatment as the PEP themselves. This is the category where tier-1 banks most frequently fail — a customer is onboarded through standard CDD because the analyst checked only the customer name against PEP screening, not the family tree or close business network.
Relatives — the scope FATF expects you to cover
- Spouse or equivalent long-term partner
- Children (including adult children, wherever resident)
- Parents of the customer
- Siblings of the customer
- In-laws (spouse’s parents, spouse’s siblings)
- Children’s spouses
Scope varies by jurisdiction — some regulators extend to grandparents and grandchildren. Bank policy often goes further than the strict regulatory minimum.
Close Associates — professional and business connections
- Business partners in joint beneficial ownership of legal entities
- Persons known to be sole beneficial owners of entities established for the PEP’s benefit
- Long-standing professional relationships — personal lawyer, personal accountant, personal family office
- Persons with close personal or business ties that give them influence over or from the PEP
A customer applies at Barclays GCC Mumbai and is risk-rated Medium under standard CDD — clean occupation, clean geography, no direct PEP status. Six months after onboarding, a news article reveals the customer’s brother has just been appointed as Deputy Minister in a Gulf country. The customer was always an RCA — the brother’s appointment did not change that in the technical sense, though it activated PEP status as of the moment of appointment. The correct classification from day one, if the family tree had been fully captured, would have been “potential PEP via family” with documented monitoring. This is the control gap every tier-1 bank’s PEP programme is trying to close.
The 8 PEP Screening Workflows That Produce a Clean File
Onboarding Screening
At account opening, run the customer and all UBOs, directors, and authorised signatories through commercial PEP databases — Dow Jones Risk & Compliance, LexisNexis Bridger, Refinitiv World-Check, or equivalent tier-1 providers. Most tier-1 banks use two vendors in parallel for redundancy. Coverage must include Foreign, Domestic, and International Organisation categories plus RCA data.
Ongoing Automated Re-Screening
PEP status is dynamic. A customer who was not a PEP at onboarding becomes one the moment they or a family member is appointed to a prominent public function. Tier-1 banks run automated re-screening on a scheduled cycle — daily or weekly for the highest-risk books, weekly or monthly for lower-risk. Alerts fire on new PEP classifications or changes in existing PEP status.
Family-Tree and Beneficial-Ownership Deep Trace
For RCA detection, name-only screening is insufficient. Analysts building EDD files on high-risk customers capture the family tree (spouse, children, parents, siblings, in-laws) and run each name separately against PEP databases. For corporate customers, the beneficial-ownership chain is traced to natural persons and each UBO is screened independently.
Match Disposition — True, False, and Partial
Screening produces alerts, not decisions. Each alert is dispositioned by an analyst — true match (confirmed PEP), false positive (different person sharing name), or partial match (insufficient data to resolve). Use secondary identifiers: date of birth, nationality, place of birth, address, photograph if available, family members. Partial matches are held, escalated, and cleared only with documented rationale.
EDD File Build on Confirmed PEPs
Once a customer is confirmed PEP, the workflow hands off to the EDD team. Full Source of Wealth reconstruction, enhanced adverse media screening in local languages, senior approval memo signed by Head of Compliance or MLRO, shorter review cycles, and enhanced monitoring sensitivity. See the EDD Guide for the complete playbook.
PEP Appointment Mid-Relationship
When an existing customer (or family member) is newly appointed to a PEP role, the workflow is: automatic reclassification to high-risk on the alert, CDD refresh with EDD escalation, senior approval to continue the relationship (not automatic), SoW reconstruction, enhanced ongoing monitoring, and shorter review cadence. Documentation of the moment of classification shift is important for audit trail.
Periodic PEP Refresh
Every EDD review cycle refreshes PEP status on the customer, all known RCAs, all UBOs, and all senior relationships. Any new hit triggers investigation. Any change in existing PEP status (new role, role change, retirement) is documented and may trigger re-approval.
Declassification Review
Where PEP status has ended — the customer has left the public role — some jurisdictions permit declassification after a defined cooling-off period. Declassification is never automatic. It requires a documented risk assessment showing residual influence has dissipated, no ongoing business with government counterparties, no unresolved adverse media, and no family members still in PEP positions. Most high-corruption-jurisdiction PEPs are never declassified.
Declassification — How Long Does Someone Stay a PEP?
FATF does not prescribe a fixed duration. Most jurisdictions apply a 12-month declassification threshold after the PEP leaves public office, but with the explicit rule that risk assessment is required — PEP status should not be removed mechanically.
| Jurisdiction | Declassification approach |
|---|---|
| UK MLR 2017 | 12 months after leaving office is the earliest point declassification can be considered; risk assessment required |
| EU (4AMLD/6AMLD) | Minimum 12 months; member-state implementations may be longer; banks often retain PEP status longer for high-risk jurisdictions |
| UAE DFSA AML Module | Risk-based; declassification discretionary with documented assessment |
| Singapore MAS Notice 626 | Risk-based; no fixed duration |
| US (FinCEN) | No statutory declassification period; bank policy drives treatment |
| India RBI Master Direction | Risk-based; continuation of enhanced monitoring recommended for high-profile PEPs |
Most tier-1 banks apply 12–24 month declassification minimums for Foreign PEPs and only then with a senior-approved risk assessment. For Domestic PEPs in low-corruption jurisdictions, declassification is sometimes approved at 12 months. For high-corruption jurisdictions, many banks retain PEP status indefinitely regardless of time elapsed. The declassification memo is itself an auditable exhibit.
Real-World PEP Scenarios
Scenario 1 — Textbook Foreign PEP onboarding
A former finance minister from a Sub-Saharan African country applies to open a $10M private banking relationship at a bank’s Dubai DIFC branch. Foreign PEP status identified at screening.
Workflow: EDD from day one. SoW reconstruction covering 25 years, family wealth mapping, property across three continents, board memberships. Multi-language adverse media screening (English, Arabic, two local languages). Written approval from Head of Compliance and MLRO. Quarterly review cycle, enhanced monitoring thresholds. Process time: approximately three weeks.
Scenario 2 — Missed RCA discovered via periodic re-screening
A customer onboarded at Barclays GCC Mumbai as Medium-risk is flagged two years later in routine PEP re-screening. The customer’s brother has just been appointed as Deputy Minister. The customer is now an RCA.
Workflow: Immediate reclassification to high-risk. EDD triggered: SoW reconstruction, enhanced adverse media screening, senior approval memo for continued relationship. Annual review cycle replaces triennial. The customer did not change; the world changed. This is exactly what periodic re-screening exists to catch.
Scenario 3 — Partial match requires human judgement
During onboarding at HSBC London, a customer screening produces an 80% name match against a Foreign PEP — same nationality, but different middle name, different date of birth, different profession, no shared address history.
Workflow: Analyst investigates secondary identifiers. DOB delta of 15 years, profession completely unrelated, no photograph evidence of overlap. Senior analyst disposition: false positive with documented rationale. File proceeds with standard CDD. Rationale memo retained in audit trail.
Scenario 4 — Declassification assessment for a long-retired PEP
A customer at a private-banking team was a Foreign PEP (Cabinet minister) in a mid-sized European economy. Left office 12 years ago. No family members currently in public office. No ongoing business with government counterparties. Clean adverse media. Wealth fully documented and reconciled.
Outcome: Senior compliance committee reviews declassification request. Documented risk assessment concludes residual influence has dissipated, corruption indicators absent, and standard controls are sufficient going forward. Declassification approved with signed memo retained in file. The customer moves to standard high-net-worth CDD controls.
Common PEP Screening Failures
Analyst clears an 85% partial match mechanically because the DOB or nationality “wasn’t in the file.” Fix: partial matches must be held pending full secondary-identifier investigation.
Customer is screened individually but spouses, parents, children, and in-laws are not captured or screened. RCA status goes undetected. Fix: EDD files include family tree and independent screening on each named relative.
Reliance on a single vendor database with incomplete local coverage. Fix: use two parallel providers, supplement with local-language sources for high-exposure jurisdictions.
Customer is declassified the moment the regulatory minimum is hit, with no documented risk assessment. Regulators view this as an RBA failure. Fix: every declassification has a risk-assessment memo and senior approval.
Interview Question: Walk Me Through PEP Screening
“A customer onboards and the initial screening returns clean. How do you avoid missing a PEP?”
“Clean initial screening does not mean no PEP exposure. First, I capture the full family tree and key professional associates, and screen each independently against tier-1 PEP databases — many missed PEPs surface via RCAs, not the customer directly. Second, I ensure coverage runs across Foreign, Domestic, and International Organisation categories, because some vendors under-cover Domestic and IO tiers. Third, I run enhanced local-language adverse media for customers with material non-English exposure. Fourth, after onboarding I rely on scheduled automated re-screening — typically daily or weekly for the book I’m on — so a subsequent PEP appointment triggers an alert within days. And finally, for high-risk jurisdictions I never declassify mechanically on a 12-month clock — every declassification has a documented risk assessment and senior approval.”
How PEP Expertise Accelerates Your Career
PEP screening is one of the fastest accelerators into senior KYC roles because it combines technical depth, judgement under ambiguity, and direct regulatory exposure. Analysts who develop PEP capability early — through hands-on EDD cases, RCA tracing, and declassification review — are the candidates most often promoted into Senior Analyst, Team Lead, and Manager roles at tier-1 banks.
Role-based credentials help candidates signal the specific work they do on PEP files. GO-AKS (Globally Certified KYC Specialist) and IKYCA (Internationally Certified KYC Specialist) map to the analyst-level PEP execution and documentation work. IR-KAM (Internationally Certified KYC Manager) maps to the approval, governance, and declassification review work that Team Leads and Managers own. For PEP-adjacent work in crypto and VASP contexts, C2KO (Certified Crypto KYC Officer) and C3O (Certified Crypto Compliance Officer) are the focused credentials.
Related Reading
- Sanctions Screening Explained: OFAC, UN, EU, UK OFSI & the 2026 Landscape
- Enhanced Due Diligence (EDD) Guide
- Source of Funds vs Source of Wealth
- CDD vs EDD: When Due Diligence Becomes Enhanced
- The Risk-Based Approach (RBA) in KYC
- Top 100 KYC Interview Questions & Model Answers
Build PEP Judgement That Wins Senior Roles
PEP screening is the most career-sensitive control in KYC — get it right and you accelerate, miss one and it’s the file that gets mentioned in your audit review. Practise the scenario interviews out loud on AGZIT’s voice-based AI Mock Interview — with a 10-dimension Scorecard after every mock.
ATS Resume Builder
Voice-based
10-dimension
Coaching
Elevator pitch
DPR-based
30-day roadmap
Silver/Gold/Platinum
Trusted by KYC candidates targeting roles in Mumbai · Dubai · London · New York · Toronto · Singapore