← Blog · Compliance

PEP Screening: Classifying Politically Exposed Persons

PrivateKYCBot Team · September 10, 2026 · 3 min read

PEP Screening: Classifying Politically Exposed Persons

A politically exposed person (PEP) is not a criminal by definition. The category flags people whose public function creates a higher risk of bribery, corruption, or misuse of position. Screening for them is a standard control, but it is noisier and more subjective than sanctions matching. There is no single authoritative PEP list the way there is for sanctions, and the population shifts constantly as officials take and leave office.

Who Actually Counts as a PEP

The Financial Action Task Force (FATF) splits the category into three tiers, and most frameworks follow the same structure:

  • Domestic and foreign PEPs: heads of state, senior politicians, senior government or judicial officials, high-ranking military officers, senior executives of state-owned enterprises, and important political party officials.
  • International organisation PEPs: directors, deputy directors, and board members of bodies like the UN, IMF, or a development bank.
  • Relatives and close associates (RCAs): spouses, children, parents, business partners, and people who share beneficial ownership of a legal entity with a PEP.

The RCA layer is where most of the effort goes, because a family member rarely announces the connection. Building it requires linking individuals to a known PEP through ownership records, public reporting, or declared relationships collected during onboarding.

Risk-Based, Not Blanket Treatment

Being a PEP triggers enhanced due diligence, not refusal. Under most regimes that means senior management approval to open or continue the relationship, establishing source of wealth and source of funds, and closer ongoing monitoring. The intensity should scale with the role and jurisdiction. A cabinet minister in a country with a high perceived-corruption score warrants deeper review than a local councillor in a low-risk one.

Many jurisdictions also apply a tapering rule: once a person leaves a prominent public function, you assess residual risk on a declining basis rather than dropping the flag instantly. A common practice is a minimum 12-month look-back, extended where the individual retains influence. Encode that logic explicitly so a former official does not stay in enhanced review forever without justification.

Managing the False-Positive Load

PEP data comes from commercial databases that aggregate government gazettes, election records, corporate filings, and media. Coverage and freshness vary by provider and by country. Two problems dominate day to day:

  • Name collisions: common names produce candidate matches against unrelated officials. Disambiguation needs secondary identifiers such as date of birth, nationality, or country of residence to survive review.
  • Stale records: a person listed as an official may have left office years ago, or a new appointee may not appear yet. Re-screening against updated data catches both.

The way to keep the queue workable is to collect enough structured data at onboarding to score matches precisely. A chat-based flow can request date of birth, nationality, and occupation in a defined sequence, then pass those attributes to the matching engine so a hit on a 61-year-old official does not stop a 24-year-old applicant. Under data minimisation principles, gather only the fields that improve match precision and set retention on the resulting screening evidence rather than holding raw match noise indefinitely.

Documenting the Decision

Whatever the outcome, the file should show the screening ran, what the match was, how it was resolved, and who approved continuing the relationship if the person is a confirmed PEP. Record the source database and the date, because coverage on a given day is part of the defensibility of the check. Store the source-of-wealth evidence alongside the classification, and schedule re-screening on a cadence that matches the customer's risk tier.

PEP screening rewards precision over volume. Tight identity data at the front door, a clear tiering model, and disposal of the noise you do not need leave you with a smaller, better-evidenced population to actually review. For general background see the FATF recommendations; treat the specifics as jurisdiction-dependent rather than legal advice.

General information, not legal advice. Talk to your compliance counsel for guidance on your specific obligations.