Politically Exposed Persons: Identification and Risk

1. Why This Topic Matters

Politically Exposed Persons (PEPs) are one of the most heavily tested subjects in the CAMS examination, and for good reason. PEPs sit at the intersection of corruption, bribery, embezzlement and money laundering. When a senior public official steals from the state or accepts bribes, the proceeds almost always need to pass through the financial system, and the institutions that unknowingly or carelessly facilitate this exposure face enormous regulatory, legal and reputational damage.

Historic cases such as Sani Abacha (Nigeria), Ferdinand Marcos (Philippines), Teodoro Obiang (Equatorial Guinea), Riggs Bank (which handled accounts for Augusto Pinochet and Equatorial Guinea officials) and the 1MDB scandal (Malaysia) all demonstrate how the failure to identify and appropriately manage PEP relationships can result in bank closures, multimillion-dollar penalties and criminal prosecutions. For the CAMS candidate, PEP knowledge touches on nearly every domain of the exam: international standards (FATF), compliance program design (risk assessment, EDD, monitoring), and investigations (source of wealth, suspicious activity reporting).

2. What Is a Politically Exposed Person?

The Financial Action Task Force (FATF) defines a PEP as an individual who is or has been entrusted with a prominent public function. The underlying rationale is that such a position creates the opportunity to abuse public trust for private gain through corruption, bribery or embezzlement.

FATF distinguishes three categories:

Foreign PEPs – individuals entrusted with prominent public functions by a foreign country. Examples: heads of state or government, senior politicians, senior government, judicial or military officials, senior executives of state-owned corporations, and important political party officials.

Domestic PEPs – individuals entrusted with prominent public functions domestically (in the institution's own country). The same types of positions apply.

International Organization PEPs – persons entrusted with a prominent function by an international organization (for example, members of senior management, directors, deputy directors and board members of bodies such as the United Nations, IMF, World Bank or NATO).

Critically, the PEP definition is not intended to cover middle-ranking or junior officials. The emphasis is on seniority and the capacity to influence decisions, control public funds or award contracts.

Family Members and Close Associates (RCAs)

The PEP definition extends beyond the official to their family members (spouse or partner, children and their spouses, parents, and in many jurisdictions siblings) and close associates (business partners, individuals with joint beneficial ownership of legal entities or arrangements with the PEP, and persons who have sole beneficial ownership of an entity set up for the benefit of the PEP). The logic is simple: corrupt officials rarely hold stolen assets in their own names. They use relatives, trusted friends, lawyers and shell companies as proxies or nominees.

Key Regulatory Sources to Know

• FATF Recommendation 12 – requires enhanced measures for foreign PEPs and a risk-based approach for domestic and international organization PEPs.
• FATF Recommendation 22 – extends PEP requirements to Designated Non-Financial Businesses and Professions (DNFBPs).
• UN Convention Against Corruption (UNCAC) – Article 52 requires enhanced scrutiny of accounts held by prominent public officials.
• USA PATRIOT Act Section 312 – requires enhanced due diligence for private banking accounts held by or on behalf of senior foreign political figures.
• EU Anti-Money Laundering Directives (4AMLD onward) – brought domestic PEPs into mandatory EDD and require member states to publish lists of prominent public functions.
• Wolfsberg Group Guidance on PEPs – industry best practice on identification, risk ranking and declassification.

3. Why Are PEPs Considered Higher Risk?

It is essential to understand – and to be able to articulate in the exam – that being a PEP is not a crime and does not imply wrongdoing. The vast majority of PEPs are legitimate. However, the position creates elevated inherent risk because:

• PEPs may have control over or access to public funds, state contracts, licensing, procurement and natural resources.
• They may be targets for bribery by those seeking influence.
• They often have the ability to conceal illicit wealth through state power, immunity or control of enforcement bodies.
• The proceeds of grand corruption are frequently moved cross-border into stable jurisdictions, real estate, luxury assets and private banking.
• Reputational damage to an institution linked to a corrupt official is severe and lasting.

Risk is also influenced by the jurisdiction (corruption perception indices such as Transparency International's CPI, weak rule of law, political instability), the sector (extractive industries, defence procurement, infrastructure), the nature of the position (control over budgets versus a ceremonial role) and the products used (private banking, correspondent banking, trusts and offshore vehicles are particularly vulnerable).

4. How PEP Identification Works

Identification is the first and most critical control. An institution cannot apply enhanced due diligence to a risk it has not detected. Identification should occur at onboarding and on an ongoing basis, because customers may become PEPs after the relationship begins (for example, an existing customer wins an election).

Methods of identification include:

• Customer self-declaration – asking customers directly whether they, a family member or close associate hold or have held a prominent public function. Useful but never sufficient on its own, as customers may misunderstand the question or deliberately conceal status.
• Screening against commercial PEP databases – third-party lists (for example, World-Check, Dow Jones, LexisNexis) screened at onboarding and periodically thereafter. Candidates should know these databases are not exhaustive, may contain false positives and require careful name-matching logic (transliteration, aliases, dates of birth).
• Adverse media / negative news searches – open-source research to identify public roles, corruption allegations or links to investigations.
• Beneficial ownership analysis – looking through corporate structures, trusts and foundations to establish whether a PEP is a beneficial owner or controller. Shell companies and nominee shareholders are common concealment tools.
• Internal knowledge – relationship managers often possess information about a client's background that should be captured in the KYC file.
• Government-published lists – some jurisdictions publish lists of prominent public functions (required under EU 5AMLD).

Institutions should maintain a documented, risk-based PEP policy defining who is treated as a PEP, how family members and associates are captured, and how long a person remains classified.

5. How PEP Risk Management Works: Enhanced Due Diligence

Once identified, FATF requires that institutions apply the following measures to foreign PEPs (and to domestic/international organization PEPs assessed as higher risk):

(a) Senior management approval – obtaining approval from senior management before establishing (or continuing, for existing customers who become PEPs) the business relationship. Note the exam frequently tests that this is senior management, not simply the compliance officer or relationship manager.

(b) Establishing source of wealth and source of funds – these are different concepts and the exam tests the distinction. Source of wealth refers to how the individual accumulated their total net worth over time (inheritance, business ownership, salary history, investments). Source of funds refers to the origin of the specific money used in a particular transaction or deposit. For PEPs, the institution must take reasonable measures to establish both, and documentary corroboration is expected where risk is high.

(c) Enhanced ongoing monitoring – more frequent transaction monitoring, lower alert thresholds, more frequent periodic reviews (often annually or more), and scrutiny of transactions inconsistent with the declared profile.

Additional measures institutions commonly apply include: more frequent re-screening, restricting certain products, requiring face-to-face meetings, and escalating any adverse media to compliance for assessment.

Risk-Based Approach for Domestic PEPs

FATF applies a risk-based rather than mandatory approach to domestic and international organization PEPs: institutions must take reasonable measures to determine whether a customer or beneficial owner is a domestic PEP, and if the relationship is assessed as higher risk, apply the same EDD measures as for foreign PEPs. Some jurisdictions (notably the EU) go further and require EDD for all PEPs regardless of origin. In the exam, when a question references FATF standards, remember the foreign/domestic distinction; when it references EU requirements, treat all PEPs as subject to EDD.

Declassification: Once a PEP, Always a PEP?

FATF does not prescribe a fixed time limit after which a former PEP ceases to be a PEP. Instead, institutions should take a risk-based approach, considering the level of influence the person retains, the seniority of the former role, whether the previous and current roles are linked, and the risk of the jurisdiction. Many regulations (including the EU) set a minimum of 12 months after leaving office before PEP status may be reviewed, but even then the institution should consider continuing risk. Exam questions often test that the correct answer involves a risk-based assessment rather than automatic removal after a set period.

6. Red Flags Associated with PEPs

• Use of shell companies, trusts or foundations in secrecy jurisdictions to hold assets with no clear commercial rationale.
• Funds originating from government accounts, state-owned enterprises or state contractors flowing into personal or family accounts.
• Wealth or lifestyle inconsistent with official salary.
• Reluctance or refusal to provide source of wealth information, or vague and uncorroborated explanations.
• Use of nominees, intermediaries, lawyers or family members to open accounts or conduct transactions.
• Transactions involving sectors prone to corruption: arms, mining, oil and gas, construction, public procurement.
• Large transfers around election periods, changes of government or the award of government contracts.
• Requests for secrecy, unusual confidentiality or to bypass standard procedures.
• Purchases of high-value real estate, art, yachts or luxury goods, often through corporate vehicles.
• Multiple accounts in different jurisdictions with structured transfers between them.

7. Typical Scenarios in Investigations

When an alert or adverse media event occurs, investigators should: confirm the PEP match (eliminating false positives), review the full relationship including related accounts and connected parties, compare activity against documented source of wealth, assess whether the pattern matches known corruption typologies, escalate to senior management, and consider filing a suspicious activity/transaction report. The decision to exit a relationship should be taken with care – de-risking entire categories of PEPs without individual assessment is discouraged by FATF.

8. Exam Tips: Answering Questions on Politically Exposed Persons: Identification and Risk

Tip 1 – Know the definitions cold. Expect questions that test whether a described individual qualifies as a PEP. Remember the test is prominent public function, not simply any government job. A junior clerk at a ministry is not a PEP; a minister, ambassador, central bank governor, supreme court judge, general or CEO of a state-owned oil company is. Family members and close associates are included.

Tip 2 – Distinguish foreign, domestic and international organization PEPs. Under FATF, foreign PEPs automatically trigger EDD; domestic and international organization PEPs trigger EDD when assessed as higher risk. If the question frames the issue in EU terms, all PEPs attract EDD.

Tip 3 – Remember the three core FATF EDD requirements: senior management approval, reasonable measures to establish source of wealth and source of funds, and enhanced ongoing monitoring. If an answer option omits one of these or substitutes something weaker (for example, 'notify the relationship manager'), it is unlikely to be correct.

Tip 4 – Source of wealth versus source of funds. This distinction is a favourite. Source of wealth = how the entire net worth was built. Source of funds = origin of the specific money in the transaction. Read carefully which one the question is asking about.

Tip 5 – PEP status is not evidence of crime. Questions may offer an option such as 'immediately close the account' or 'file a SAR because the customer is a PEP'. Being a PEP alone is not grounds for suspicion. The correct response typically involves applying EDD, escalating for senior management approval and monitoring – unless the scenario includes genuine red flags, in which case reporting becomes appropriate.

Tip 6 – Watch for 'becomes a PEP' scenarios. If an existing customer is elected or appointed to office, the correct action is to apply the same measures as at onboarding: obtain senior management approval to continue the relationship, update source of wealth and increase monitoring.

Tip 7 – Declassification is risk-based. Avoid answers that remove PEP status automatically after a fixed number of years without assessment. The best answer references evaluating ongoing influence and risk.

Tip 8 – Self-declaration alone is never enough. If a question asks about the most effective identification method, prefer answers combining customer declarations with database screening, adverse media review and beneficial ownership analysis.

Tip 9 – Look through corporate structures. A company owned by a PEP's spouse or a trust whose beneficiary is a minister's child is a PEP relationship. The exam rewards candidates who recognise indirect exposure through beneficial ownership.

Tip 10 – Choose the 'most appropriate' answer. CAMS questions frequently offer several plausible actions. Eliminate options that are too weak (ignoring the risk), too extreme (automatic account closure or reporting without analysis), or that assign responsibility to the wrong role (senior management approval cannot be delegated to the front line). The remaining answer that reflects a proportionate, documented, risk-based response is usually correct.

Tip 11 – Connect PEPs to corruption typologies. If a scenario mentions a government procurement contract, a state-owned enterprise, a mining concession or an official's relative receiving large inbound wires, recognise the grand corruption pattern and apply the appropriate escalation and reporting logic.

Tip 12 – Remember the DNFBP angle. Lawyers, accountants, real estate agents, trust and company service providers and dealers in high-value goods are also required to identify PEPs under FATF Recommendation 22. Questions may be set in a law firm or real estate context rather than a bank.

9. Quick Revision Summary

• PEP = person entrusted with a prominent public function; includes family members and close associates.
• Categories: foreign, domestic, international organization.
• Risk driver: opportunity to abuse position for corruption, bribery, embezzlement.
• Identification: self-declaration + database screening + adverse media + beneficial ownership analysis, at onboarding and ongoing.
• EDD: senior management approval, source of wealth and source of funds, enhanced ongoing monitoring.
• FATF R.12 (financial institutions) and R.22 (DNFBPs); UNCAC Art. 52; PATRIOT Act s.312; EU AMLDs.
• Being a PEP is not a crime; reporting depends on red flags.
• Declassification is risk-based, not automatic.

Master these principles, practise applying them to scenario-based questions, and PEP questions on the CAMS exam will become some of the most reliable points you can earn.