1What is a politically exposed person?

An individual who holds, or has held, a prominent public function — such as a head of state, senior politician, senior government, judicial or military official, senior executive of a state-owned enterprise, or important political party official. The status reflects the corruption risk attached to the position.

2Why are PEPs treated as higher risk?

Because their positions give them influence over public funds, contracts and decisions, creating greater opportunity for bribery, embezzlement and laundering the proceeds of corruption. The risk attaches to the role, not to any allegation about the person.

3Is being a PEP an accusation of wrongdoing?

No, and this is important to state clearly. Most PEPs are entirely legitimate customers. PEP status simply means the relationship carries higher inherent risk and therefore requires enhanced scrutiny and closer oversight.

4Can a bank refuse to onboard someone because they are a PEP?

Refusing solely on PEP status is discouraged. Regulators have criticised blanket de-risking because it excludes legitimate customers and pushes activity into less regulated channels. A firm may decline for genuine risk-appetite reasons, but that decision must be reasoned and documented, not automatic.

5What is PEP screening?

The process of checking customers, beneficial owners and related parties against PEP data sources to identify political exposure. It happens at onboarding and on an ongoing basis, because a customer can become a PEP after the relationship begins.

6What is the difference between PEP screening and sanctions screening?

A sanctions match is a legal prohibition — you must block. A PEP match is a risk indicator triggering enhanced due diligence and senior approval, not a prohibition. Confusing the two is a common and revealing error.

7Where does the PEP concept come from?

The FATF Recommendations, which require enhanced measures for foreign PEPs and a risk-based approach for domestic and international organisation PEPs. National regimes implement it in their own AML rules, with some variation in scope.

8What enhanced measures apply to a PEP relationship?

Senior management approval to establish or continue the relationship, reasonable measures to establish source of wealth and source of funds, and enhanced ongoing monitoring of the relationship and its transactions.

9Why is senior management approval required?

Because the decision carries reputational and regulatory consequences that should not rest with a front-line analyst. Requiring sign-off ensures someone accountable has consciously accepted the risk, and creates an audit trail.

10Does PEP status ever expire?

Approaches differ. Some regimes allow a risk-based reassessment after a period out of office — commonly around twelve months as a minimum — while others expect ongoing treatment where residual influence persists. It is a risk judgement, not an automatic clock.

11What factors affect whether a former PEP remains higher risk?

The seniority of the role held, how long they held it, whether they retain influence or informal networks, the corruption risk of the jurisdiction, and whether there is adverse media. A former head of state carries residual risk indefinitely; a junior official may not.

12What is the relationship between PEP risk and corruption risk?

PEP controls exist to detect the proceeds of corruption entering the financial system. That is why source of wealth matters so much — the question is whether the person's assets can be explained by their lawful income and known interests.

13What is a foreign PEP?

Someone entrusted with a prominent public function by a foreign country. Under FATF standards, foreign PEPs always require enhanced due diligence regardless of individual risk assessment.

14What is a domestic PEP?

Someone holding a prominent public function in the firm's own country. FATF applies a risk-based approach, so enhanced measures are required where the relationship is assessed as higher risk rather than automatically.

15What is an international organisation PEP?

A person holding a senior management position in an international organisation — directors, deputy directors, board members and equivalent. Treated on a risk-based basis in most regimes.

16Why do domestic and foreign PEPs receive different treatment?

Because foreign PEPs typically involve cross-border flows and jurisdictions where the firm has less visibility and less recourse. Domestic exposure is generally better understood, which supports a proportionate risk-based approach.

17What are relatives and close associates?

Family members and individuals closely connected to a PEP — typically spouses or partners, children and their spouses, parents, and known close business associates or those holding assets jointly with the PEP.

18Why do RCAs matter?

Because illicit funds are frequently moved through family members or trusted associates rather than the PEP directly. Screening that stops at the individual misses the most common structure.

19How would you identify a close associate?

Through shared beneficial ownership or directorships, joint asset holdings, adverse media linking the parties, corporate registry connections, and information disclosed during onboarding. Close associates are harder to detect than family because the connection is often commercial.

20Do RCAs receive the same treatment as the PEP?

Generally they attract enhanced measures too, because the risk derives from the connection. The intensity should be proportionate to how close the relationship is and how much control the PEP could exercise over their assets.

21Does PEP status extend to entities?

An entity is not itself a PEP, but it becomes relevant where a PEP or RCA is a beneficial owner, director or controller. That is why beneficial ownership must be screened, not just the corporate name.

22How do you handle a PEP who is a beneficial owner of a corporate customer?

The relationship is treated as PEP-related. That means enhanced due diligence on the structure, understanding the PEP's role and level of control, establishing source of wealth for their stake, and obtaining senior approval.

23Are state-owned enterprise executives PEPs?

Senior executives typically are, because they control public assets and contracts. The assessment depends on seniority and the degree of state control — a board member of a major SOE clearly qualifies; a mid-level manager generally does not.

24Are local or municipal officials PEPs?

It depends on prominence and the firm's risk assessment. A mayor of a major city with budget authority may well be; a parish councillor generally is not. Firms should define scope in policy rather than leaving it to individual judgement.

25Are senior military officers PEPs?

Yes, high-ranking officers are generally included, given their influence over procurement and public resources. Where the threshold of rank sits should be set in policy.

26How should a firm define PEP scope?

In written policy, aligned to local regulation and its own risk assessment, specifying which roles and seniority levels qualify, how RCAs are treated, and how long former PEP status persists. Without that, treatment becomes inconsistent and indefensible.

27Where does PEP data come from?

Commercial databases compiled from public sources — government registers, official appointment records, corporate registries, media reporting and asset disclosures. Unlike sanctions lists, there is no single official PEP list, which is why coverage varies between providers.

28Why is there no official PEP list?

Because PEP status is a risk classification rather than a legal designation. Regulators define the categories; they do not publish the names. Firms therefore rely on commercial data and their own assessment.

29What are the limitations of commercial PEP databases?

Coverage gaps in less-reported jurisdictions, delays in reflecting appointments and departures, inconsistent RCA mapping, transliteration inconsistencies, and differing definitions between vendors. A database is a tool, not a definitive answer.

30When should screening take place?

At onboarding, on an ongoing periodic basis, when the database is updated, at trigger events such as a change in ownership or adverse media, and at scheduled reviews. A customer can become a PEP at any time after onboarding.

31Who should be screened?

The customer, beneficial owners, directors and controllers, authorised signatories, and in higher-risk cases relevant related parties. Screening only the account holder leaves the most common exposure route open.

32Why does PEP screening produce so many false positives?

Because matching relies heavily on names, and PEP records often lack the identifiers that would allow precise discrimination. Common names, transliteration variants and shared family names across a jurisdiction all generate noise.

33How does transliteration affect PEP screening?

Names originating in non-Latin scripts can be rendered many different ways, so a single individual may appear under multiple spellings. Fuzzy matching is essential, which in turn raises the false-positive rate.

34How would you tune PEP screening?

By segmenting by risk — tighter matching where exposure is higher — improving the quality of customer identifiers so matches can be discriminated, and reviewing outcome data to see which settings produce genuine hits. Simply loosening thresholds to cut volume trades away detection.

35Should PEP matching be as conservative as sanctions matching?

Not usually. A missed sanctions match is a strict-liability breach; a missed PEP match is a due diligence failure. Both matter, but the asymmetry justifies tighter tuning for sanctions and a more balanced setting for PEP.

36What customer data improves PEP match accuracy?

Full legal name, date of birth, nationality, country of residence, occupation and employer. Occupation is particularly valuable because it often resolves a match immediately in either direction.

37What is the risk of relying on a single data provider?

Coverage gaps. Providers differ in which jurisdictions and role types they capture, and in how they map RCAs. Higher-risk firms often use more than one source or supplement with their own research.

38How would you test whether PEP screening is effective?

Inject known PEP names, including variants and RCAs, and confirm they generate matches. Also sample customers in high-risk jurisdictions to check for exposure that was never flagged — coverage gaps are the failure you cannot see from alert volumes.

39Walk me through resolving a PEP hit.

I confirm what matched and review the database entry — role, jurisdiction, dates, source. Then I compare identifiers against my customer: full name, date of birth, nationality, occupation, employer. If they clearly relate to different people, I document a discount. If they match or the data is inconclusive, I confirm the exposure, classify the PEP type, and route it for enhanced due diligence and senior approval.

40What identifiers best discriminate a PEP match?

Date of birth and nationality first, then occupation and employer. Occupation is often decisive — a customer working in an unrelated field in a different country is straightforwardly not the minister of the same name.

41What if the customer denies being a PEP but the data suggests otherwise?

Self-declaration is one input, not the answer. I would verify against independent sources — official registers, corporate records, credible media — and document what I found. Customers sometimes genuinely do not consider themselves PEPs, so the denial is not necessarily evasive.

42Is a self-declaration form sufficient?

No. It is useful for gathering information and for accountability, but it cannot be the only control. Screening and independent verification are required because a person concealing exposure will simply tick "no".

43What is source of wealth and how does it differ from source of funds?

Source of wealth explains how the person accumulated their overall assets — career, business ownership, inheritance, investments. Source of funds explains the origin of the specific money in a transaction or account. PEP due diligence requires both, and source of wealth is the harder and more revealing of the two.

44How would you verify a PEP's source of wealth?

Corroborate the narrative with evidence — public salary and asset disclosures, company records and shareholdings, audited accounts, property or transaction records, credible media. The question is whether the accumulated wealth is plausibly explained by lawful income and known interests.

45What if a PEP's wealth is inconsistent with their known income?

That is a significant red flag and one of the clearest corruption indicators. I would seek an explanation and supporting evidence, and if the gap cannot be credibly explained, escalate — potentially toward a suspicious activity report.

46What documentation should support a PEP file?

The screening result and hit rationale, PEP classification and category, source of wealth and source of funds evidence, the risk assessment, senior management approval, and the monitoring plan. A regulator should be able to follow why the relationship was accepted.

47Who approves a PEP relationship?

Senior management, as defined in the firm's policy — often a designated committee or senior compliance officer for higher-risk cases. The approval must be documented, and reaffirmed at periodic review.

48How often should a PEP relationship be reviewed?

More frequently than standard customers — commonly annually, and sooner on trigger events such as adverse media, a change in role, or unusual activity. The interval should be set by risk and stated in policy.

49What happens if an existing customer becomes a PEP?

The relationship is reclassified, enhanced due diligence is completed including source of wealth, senior approval is obtained to continue, and monitoring is stepped up. Ongoing screening exists precisely to catch this.

50Can you tell a customer they have been identified as a PEP?

Generally yes — unlike a suspicious activity report, PEP status is not confidential, and firms routinely ask customers to confirm it and provide source of wealth information. What must not be disclosed is any suspicion or report arising from the review.

51How does monitoring differ for a PEP relationship?

Tighter thresholds, more scenarios, shorter review cycles and closer attention to counterparties. The focus shifts from transaction size alone to who the money is moving between — state entities, contractors, intermediaries and unexplained third parties.

52What transaction patterns concern you most in a PEP account?

Payments from government bodies or state-owned enterprises outside a salary pattern, receipts from companies bidding for public contracts, large round-sum transfers from unexplained third parties, and movements to jurisdictions with no connection to the customer's known life or business.

53What is a trigger event for a PEP relationship?

Appointment to or departure from office, adverse media, a change in beneficial ownership, a sanctions or law enforcement development, or a material shift in transaction behaviour. Each should prompt review outside the normal cycle.

54How would you handle a PEP whose role becomes more senior?

Reassess the risk rating, refresh source of wealth, and obtain renewed senior approval. Greater seniority usually means greater influence over public resources, so the inherent risk rises even if behaviour has not changed.

55What if a PEP leaves office?

Reassess rather than automatically declassify. Consider seniority held, time elapsed, residual influence and jurisdiction risk. Some regimes permit stepping down treatment after a defined minimum period; others expect continued treatment where influence persists.

56How do you manage a PEP relationship without excessive friction?

By front-loading the work — establishing source of wealth thoroughly at onboarding so subsequent activity can be assessed against a documented baseline. Poor initial diligence causes repeated queries later, which is what frustrates legitimate customers.

57What is periodic review for a PEP?

A scheduled refresh of the customer file — confirming role and status, updating source of wealth, re-screening for adverse media, reviewing transaction behaviour against expectations, and reconfirming senior approval.

58Who owns the ongoing risk of a PEP relationship?

The business owns the relationship, compliance provides oversight and challenge, and senior management carries accountability through the approval requirement. Analysts execute the review but do not own the acceptance decision.

59What would cause you to recommend exiting a PEP relationship?

Unexplained wealth inconsistent with known income, refusal to provide source of wealth evidence, credible corruption allegations, or activity that repeatedly cannot be explained. The trigger is unmanageable risk or non-cooperation, never PEP status itself.

60How should an exit be handled?

Carefully and lawfully — following policy, considering whether a suspicious activity report is required first, avoiding tipping off, and documenting the rationale. An abrupt exit can prejudice an investigation and creates its own regulatory exposure.

61What is the risk of over-applying PEP controls?

Financial exclusion of legitimate customers, reputational and regulatory criticism for de-risking, and diluted focus — if everything is treated as high risk, genuine risk receives no special attention.

62How do you balance customer experience with enhanced due diligence?

By explaining clearly what is required and why, requesting documents once rather than piecemeal, and being proportionate about what is genuinely needed. Most legitimate PEPs expect scrutiny; what they object to is disorganised, repeated requests.

63How does adverse media screening support PEP due diligence?

It surfaces allegations, investigations and enforcement actions that no database flag would show. PEP status tells you the role; adverse media tells you whether there are concerns attached to the person.

64How would you assess whether adverse media is credible?

Check the source's reliability and independence, how recent it is, whether it is corroborated elsewhere, and whether it genuinely concerns your customer rather than a namesake. Distinguish allegation, charge, conviction and acquittal — they carry very different weight.

65What if adverse media appears in a jurisdiction with a controlled press?

Treat it cautiously in both directions. Reporting may be politically motivated, but absence of reporting may reflect suppression rather than clean conduct. I would weigh source independence and look for international corroboration.

66What if allegations were later dismissed?

Record the full picture, including the outcome. A dismissed or withdrawn allegation carries far less weight than an active investigation, and treating it as equivalent is both unfair and analytically wrong.

67What is grand corruption?

Corruption at senior levels of government involving large-scale misappropriation of public funds — typically procurement fraud, embezzlement of state assets, or bribery around major contracts and licences.

68How are the proceeds of corruption typically laundered?

Through shell companies and nominee structures, real estate in stable jurisdictions, luxury assets, professional intermediaries, and accounts held by relatives or associates rather than the PEP directly.

69What is a nominee arrangement and why does it matter?

Where someone holds an asset or position on behalf of another, concealing the true owner. It matters because it is the standard method for keeping a PEP's name off documentation while retaining control.

70What red flags suggest procurement-related corruption?

Payments to a PEP or their associates from companies holding public contracts, consultancy fees with no evidence of services, payments timed around contract awards, and intermediaries taking substantial fees for unclear roles.

71What is a facilitation payment?

A small payment to secure routine official action. It is illegal under several anti-bribery regimes including the UK Bribery Act, though treated differently elsewhere — so the applicable law matters.

72How does anti-bribery legislation interact with PEP controls?

They address the same underlying risk from opposite directions. Anti-bribery law targets the payment of bribes; PEP due diligence targets the proceeds entering the financial system. Firms need both controls.

73Why is real estate attractive for laundering corruption proceeds?

It absorbs large sums in a single transaction, holds value, can be held through corporate structures that obscure ownership, and historically involved intermediaries with weaker AML obligations than banks.

74What role do professional intermediaries play?

Lawyers, accountants and company formation agents can create structures that legitimately serve clients but also obscure beneficial ownership. Where a PEP's affairs run through multiple intermediaries with no clear purpose, that is itself a red flag.

75What jurisdictional factors raise PEP risk?

Weak rule of law, high perceived corruption, limited press freedom, poor asset disclosure regimes, and FATF grey or black listing. Country context substantially changes how much weight a PEP relationship carries.

76What tools help assess country corruption risk?

Corruption perception indices, FATF mutual evaluation reports and listings, World Bank governance indicators, and sanctions or enforcement history. They inform the risk rating rather than determine it.

77What should a PEP policy contain?

Definitions and scope including RCAs, screening requirements and frequency, hit-resolution standards, source of wealth expectations, approval authorities, review cycles, and the approach to former PEPs. Without documented scope, treatment becomes inconsistent.

78How does PEP risk feed the enterprise risk assessment?

Through exposure analysis — how many PEP relationships, in which jurisdictions and categories, holding what value. That shapes screening coverage, resourcing and board reporting.

79What management information would you report on PEPs?

Number of PEP relationships by category and jurisdiction, new onboardings and exits, overdue reviews, outstanding source of wealth evidence, screening hit volumes and discount rates, and escalations arising.

80What would audit test in a PEP programme?

Whether screening coverage matches policy, whether hits were resolved and documented properly, whether source of wealth evidence actually supports the conclusions, whether approvals were obtained at the right level, and whether reviews are current.

81What are common PEP programme failures?

Screening only the account holder and not beneficial owners, accepting self-declaration alone, source of wealth files containing assertion rather than evidence, overdue reviews, missing approvals, and inconsistent treatment of RCAs.

82Why do regulators criticise source of wealth documentation so often?

Because files frequently record what the customer said without corroboration. "Family business" is a narrative, not evidence. Regulators expect independent verification proportionate to the risk.

83How should PEP training be structured?

Role-specific. Relationship managers need to understand why enhanced measures apply and how to gather evidence; analysts need hit resolution and verification technique; senior approvers need to understand what they are accepting.

84What is the second line's role in PEP oversight?

Setting policy, challenging risk assessments and approvals, monitoring MI for overdue reviews and weak files, and testing quality. It should be able to override a business decision to accept a relationship.

85How do data protection rules affect PEP screening?

Screening processes personal data, generally under a legal obligation basis. It requires proportionate handling, access restriction, and accuracy — including correcting records where someone is wrongly identified as a PEP.

86What if a customer disputes being classified as a PEP?

Review the evidence properly rather than defending the classification reflexively. If the match was wrong, correct it and document the correction. If it was right, explain what the classification means and what is required.

87How long should PEP records be retained?

Per the applicable AML retention rules, commonly five years from the end of the relationship, longer where an investigation is open. Follow the firm's documented policy rather than assuming a period.

88How does PEP screening interact with sanctions screening operationally?

They usually run through the same platform against different data sets, but the outcomes diverge sharply — a sanctions match blocks, a PEP match triggers due diligence. Procedures must keep the two response paths clearly separate.

89A customer matches a foreign minister's name but the date of birth differs by ten years. What do you do?

Check whether the database entry's date of birth is reliable — PEP records often carry incomplete or approximate data. If date of birth, nationality and occupation all point to a different person, I would document a discount with reasoning. If the only discriminator is a date of birth from an unverified source, I would not discount on that alone.

90A PEP's adult child applies for an account and declares themselves a private businessperson. How do you approach it?

Treat them as an RCA. The relationship attracts enhanced measures, and the central question is whether their wealth is genuinely their own or derived from the PEP. I would verify the business is real and trading, examine funding sources, and establish source of wealth independently of the parent.

91A PEP receives a large payment from a company that recently won a government contract in their ministry. Your assessment?

This is a serious corruption indicator — payment from a contract beneficiary to an official with influence over the award. I would seek an explanation and evidence for the payment's purpose, and absent a credible documented rationale, escalate toward a suspicious activity report.

92A relationship manager says a PEP client is important and asks you to accept "family wealth" as source of wealth. What do you do?

Assertion is not evidence. I would explain that documented corroboration is required — company records, disclosures, inheritance documentation — and that accepting an unsupported narrative is precisely the failure regulators cite. If pressure continued, I would escalate.

93Screening flags a customer as a PEP but they hold a junior role at a state-owned enterprise. Is that right?

Possibly not. PEP status depends on prominence and seniority, and databases sometimes over-capture. I would assess against our policy definition, and if the role does not meet the threshold, record a reasoned declassification rather than applying enhanced measures by default.

94Adverse media alleges corruption against a PEP customer, but the source is a single anonymous blog. How do you weigh it?

Cautiously. A single uncorroborated anonymous source is weak evidence, but it is not nothing. I would search for corroboration from credible outlets or official sources, document what was found, and factor it into the risk rating rather than either dismissing or acting on it outright.

95A long-standing customer is appointed to a senior government position. What happens next?

The relationship is reclassified as PEP. I would complete enhanced due diligence including source of wealth, obtain senior management approval to continue, adjust monitoring, and set a shorter review cycle. Ongoing screening should surface this automatically.

96Why does PEP work interest you?

Give a genuine answer. Strong responses reference the investigative element of source of wealth work, the international dimension, and the balance between managing risk and treating legitimate customers fairly.

97How do you stay objective when reviewing a high-profile individual?

By working from evidence and the firm's documented criteria rather than reputation or press coverage. Prominence is not proof of wrongdoing, and neither is a good public image proof of legitimacy.

98Tell me about a time you had to challenge an assumption.

Use a real, structured example — what was assumed, what you found, how you raised it, what changed. If your experience is training-based, say so; fabricated examples fail under follow-up.

99How do you keep current on PEP and corruption risk?

FATF guidance and mutual evaluation reports, regulator enforcement notices, investigative journalism consortium reporting, and corruption indices. Enforcement cases are especially useful because they show which specific failures are being penalised.

100What questions do you have for us?

Ask which PEP data provider the team uses and whether more than one, how RCAs are identified in practice, what the approval process looks like, how source of wealth standards are set, and how the team avoids de-risking. These show you understand the operational tensions.