What is a politically exposed person (PEP)?

What is a politically exposed person?

A politically exposed person (PEP) is a natural person who is or has been entrusted with a prominent public function. Typical examples include heads of state and government, senior politicians, senior government, judicial, or military officials, senior executives of state-owned corporations, and important political party officials.

The definition comes from the Financial Action Task Force (FATF), the intergovernmental body that sets the global anti-money-laundering standards. Regulators single these roles out because holding public office gives access to public funds and to influence, and that access can be abused for bribery, corruption, or money laundering. So a firm that identifies a PEP has to look harder at the relationship than it would for an ordinary customer.

One point most pages miss: the categories are defined by the seniority of the function, not the individual. Middle-ranking and junior officials are not PEPs. And PEP status extends beyond the office-holder to their close family and business circle, which we cover below.

PEP status is a risk marker, not an accusation

This is the single most important thing to understand, and the biggest source of real-world harm when firms get it wrong. Being a PEP does not mean a person has done anything wrong.

The three types of PEP

FATF splits PEPs into three categories, each defined by who conferred the prominent public function.

Foreign PEPs

Individuals entrusted with a prominent public function by a foreign country, for example a head of state, a senior politician, a senior judicial or military official, or the chief executive of a state-owned corporation abroad. Under FATF, foreign PEPs are treated as higher risk by default.

Domestic PEPs

The same categories of role, but conferred by the person's own country. FATF requires firms to assess the risk first and then apply enhanced measures where the relationship is higher risk. The UK now goes further and presumes domestic PEPs are lower risk than foreign PEPs unless other factors are present.

International organisation PEPs

Individuals entrusted with a prominent function by an international organisation, meaning senior management such as directors, deputy directors, and board members at bodies like the IMF, the World Bank, the UN, or a development bank. As with domestic PEPs, treatment is risk-sensitive rather than automatically higher risk.

Family members and close associates (RCAs)

PEP controls do not stop at the office-holder. A corrupt official rarely holds tainted assets in their own name, so the requirements extend to the people around them, together known as relatives and close associates (RCAs).

• Family members typically include the spouse or civil partner, children and their spouses or partners, and parents. Some frameworks add siblings, and the forthcoming EU rules explicitly add siblings for the most senior functions.
• Close associates include individuals with a close business relationship or joint beneficial ownership of a legal entity with a PEP, and anyone who is the sole beneficial owner of an entity set up for the benefit of a PEP.
• In UK guidance the combined family and close-associate population is referred to as the RCA group.

Why are PEPs treated as higher risk?

The logic is simple: public office gives access to public money and to influence, and abuse of that access is one of the largest financial crimes in the world. The World Economic Forum, citing a UN estimate, puts the annual cost of corruption at roughly 3.6 trillion US dollars in bribes and stolen funds. Treat this as an order-of-magnitude figure rather than a current-year statistic.

The 1MDB scandal is the worked example PEP controls exist to catch. Malaysia's sovereign wealth fund was looted, with more than 700 million US dollars in 1MDB-linked funds reaching the personal accounts of a sitting prime minister. The failures reverberated through the financial system and contributed to the closure of the 140-year-old Swiss bank BSI. That is precisely the scenario enhanced due diligence on a PEP is designed to surface early.

What enhanced due diligence for a PEP involves

Identifying a PEP triggers enhanced due diligence (EDD) on top of standard customer due diligence. FATF Recommendation 12 sets four required measures for foreign PEPs, and the same measures apply to domestic and international organisation PEPs where the relationship is assessed as higher risk.

1. Screening and identification. Put risk-management systems in place to determine whether a customer or beneficial owner is a PEP, in practice structured onboarding questions plus screening against a PEP database, with ongoing re-screening.
2. Senior management approval. Obtain senior sign-off before establishing, or continuing, the business relationship.
3. Source of wealth and source of funds. Take reasonable measures to establish both. Source of wealth explains how the person accumulated their total assets. Source of funds explains where the specific money in a transaction came from. These are different questions and both are required.
4. Enhanced ongoing monitoring. Monitor the relationship on a heightened basis, proportionate to the risk, so that changes in behaviour or new adverse media are caught.

Source of wealth versus source of funds

These two terms are often used interchangeably, but they answer different questions and a PEP file needs both.

How PEP rules differ by jurisdiction

Everyone starts from the same FATF baseline, but the three major blocs have diverged. Firms operating cross-border now have to run jurisdiction-specific PEP policies. The table sets out the key differences.

Where the rules stand in 2025 to 2026

The defining feature of the current moment is regulatory divergence on top of the common FATF baseline, alongside an active correction against over-classification.

United Kingdom. After the 2023 debanking controversy, the FCA concluded that firms were treating domestic politicians, public servants, and their families too harshly. Its review noted that UK firms closed roughly 343,000 accounts in the relevant period, about half because the firm could not satisfy itself the customer was not involved in financial crime, against just 1,083 money-laundering convictions in that window. From 10 January 2024 an amendment to the Money Laundering Regulations introduced a statutory presumption that domestic PEPs are lower risk. On 7 July 2025, revised 15 July 2025, the FCA published finalised guidance FG25/3, confirming that presumption, clarifying that non-executive board members of UK civil service departments are not PEPs, and requiring prompt removal of PEP status once a person no longer meets the definition.

European Union. The EU has passed its AML package: the Anti-Money Laundering Regulation (EU) 2024/1624 (AMLR), the sixth AML Directive, and a new supervisor, the Anti-Money Laundering Authority (AMLA). From 10 July 2027 the AMLR applies directly and identically across all 27 member states. It broadens the PEP definition, explicitly adds siblings as family members for the most senior functions, requires at least 12 months of continued EDD after a person leaves office, and tasks AMLA with issuing guidelines on identifying close associates.

United States. US anti-money-laundering rules do not define "PEP" at all. The 21 August 2020 FinCEN interagency Joint Statement confirmed there is no requirement to apply an automatic higher-risk designation, that the term is generally understood to mean senior foreign officials and their families and close associates rather than US officials, and that due diligence must be commensurate with the specific customer's risk.

How long does someone stay a PEP?

You will often hear "once a PEP, always a PEP". As a statement of the standard, that is wrong.

The false-positive problem, and how AI helps

PEP screening generates more false positives than almost any other part of customer due diligence. Screening tools match on partial and phonetic name equivalents, so a firm running fuzzy matching against a large PEP database will surface matches for anyone whose name loosely resembles a listed PEP, and common surnames produce match storms. Commercial lists are huge: LexisNexis maintains a global list of more than 3 million PEPs and foreign officials, and open-data project OpenSanctions publishes country files running into six figures. That scale is exactly why the false-positive load is so heavy.

This is where AI genuinely earns its place, by adding precision rather than replacing the underlying data or the human decision.

How the same technology is abused

PEP controls sit inside the wider identity-verification funnel, and enhanced due diligence on a PEP is only as reliable as the certainty that the person onboarding is who they claim to be. Generative AI has made that certainty harder to obtain.

What the future looks like

2027 is the pivot. On 10 July 2027 the EU AMLR applies directly across all 27 member states, AMLA becomes fully operational, and AMLA issues binding guidelines on close associates and PEP risk levels. Expect the harmonised EU definition, siblings included and a 12-month floor, to become the reference point non-EU firms benchmark against.

Divergence continues. The UK will keep refining its proportionate, domestic-PEP-lighter model after FG25/3, and the US will keep its risk-based, definition-free stance, so cross-border firms will run jurisdiction-specific PEP policies indefinitely.

Monitoring becomes perpetual. Because PEP status is dynamic, an ordinary customer becomes a PEP the day they take office, periodic re-screening is giving way to event-driven, continuous monitoring, driven by both regulation and AI capability. This is the perpetual KYC pattern applied to PEP status changes. Analyst market forecasts, from MarketsandMarkets and Juniper Research, project the wider AML software market growing strongly to 2030, and expect continued tension between expensive commercial PEP lists and open-data alternatives.

How PEP screening fits a modern compliance stack

Zenoo is a KYC, KYB, and AML orchestration platform. It is honest to be clear about what it does and does not do here. Zenoo does not publish or sell a PEP list, and it does not replace your screening provider such as LexisNexis, Dow Jones, ComplyAdvantage, Moody's, or an open source like OpenSanctions. If your underlying PEP data is thin, Zenoo will not fix that. What it does is coordinate the vendors you already use and apply AI to the workflow around the alert.

• One integration, many screening vendors. Zenoo routes PEP and sanctions checks to whichever provider or providers you pick, with automatic failover if one is down, so you are not locked to a single list.
• AI on the alert, not on the data. Across the platform, Zenoo's 10 specialised AI agents pre-classify up to 80 percent of screening alerts, moving per-alert disposition from 20 to 45 minutes down to 2 to 3 minutes, and draft the audited resolution note in about 10 seconds rather than 5 to 10 minutes of manual writing.
• Source of wealth and funds research. The KYC Researcher agent compiles the picture PEP EDD requires, taking individual due diligence research from 1 to 3 hours to under 45 seconds.
• Proportionate, policy-driven treatment. Policy Parser and Risk Assessor agents turn your written PEP policy into a live risk model, so foreign, domestic, and international organisation PEPs get consistent, differentiated treatment.
• One audit trail. Every PEP decision and its rationale is captured as an immutable audit event, 32 event types across 8 categories, so you can show a regulator why a PEP was cleared, escalated, or declassified.
• Platform outcomes. Teams see roughly a 95 percent reduction in false positives and per-alert investigation time falling from an industry benchmark of 22 hours to 12 minutes. These are platform-wide figures, not PEP-specific claims.

Key terms

A quick reference for the acronyms used on this page.

• PEP: politically exposed person, someone in a prominent public function.
• RCA: relatives and close associates, the family and business circle around a PEP.
• CDD: customer due diligence, the baseline checks applied to every customer.
• EDD: enhanced due diligence, the heightened checks applied to higher-risk relationships including PEPs.
• Source of wealth: how a person accumulated their total assets.
• Source of funds: where the specific money in a given transaction came from.