A politically exposed person (PEP) is someone who holds, or has held, a prominent public position or public function — a status that FATF and national regulators treat as carrying a higher inherent risk of corruption, bribery, or money laundering, requiring enhanced scrutiny rather than standard due diligence.
What are the categories of PEP?
FATF defines four groups under Recommendation 12 of its 40 Recommendations, and AUSTRAC's PEP guidance applies the same structure in Australia. Domestic PEPs hold prominent roles within your own country — heads of state, government ministers, judges and magistrates, ambassadors, senior military officers, and senior executives of state-owned enterprises. Foreign PEPs are the equivalent roles in other countries, and FATF expects enhanced due diligence on foreign PEPs as standard, regardless of a country's own corruption perception. International organisation PEPs hold senior positions in multinational bodies — the leadership of international sporting federations, UN agencies, or supranational institutions like the IMF or World Bank. Family members and close associates extend the same scrutiny to spouses, children, siblings, parents, and known business partners connected to a PEP.
Why do PEPs carry extra AML risk?
A prominent public position brings access to public funds, influence over procurement and licensing decisions, and — in some cases — genuine exposure to corruption or bribery. That combination is exactly what money laundering typically exploits: a bribe disguised as a consulting fee, public contracts steered to a company secretly owned by a relative, or state assets diverted through shell companies. That's why PEP and sanctions screening treats a PEP match as a trigger for deeper review rather than an automatic block — the large majority of PEPs never engage in any wrongdoing, and refusing to bank anyone with a public role would be both disproportionate and impractical.
What does enhanced due diligence on a PEP actually involve?
Beyond standard KYC, a PEP relationship typically requires: senior management approval before the relationship starts (or continues, if PEP status is discovered later); establishing the customer's source of wealth and source of funds, not just their identity; more frequent ongoing monitoring than a standard customer; and closer scrutiny of the business rationale for unusual transactions. Several jurisdictions — the EU's anti-money laundering directives are a widely-used example — set a minimum period, often around 12 months, during which a former office-holder must still be treated as a PEP after leaving their role, as a floor under the risk-based judgement call of when reduced scrutiny becomes appropriate.
What does PEP screening actually check for?
Screening checks three things: whether the individual appears on a sanctions list, whether they're flagged as being of special interest to authorities, and whether there's a known association with money laundering or terrorist financing. FATF also highlights specific red flags — using legal entities or arrangements to obscure ownership, giving inconsistent or incomplete information about the source of funds, and operating in high-risk countries or industries. A hit against a common name is not automatically a genuine match — this is exactly where fuzzy matching and a documented due diligence decision matter, so a false positive doesn't get treated as if it were confirmed risk.
Does PEP status ever expire?
Not in a fixed, time-based sense. "Once a PEP, always a PEP" reflects FATF's guidance that risk should be assessed on an ongoing, risk-based basis rather than assumed to lapse after a set period out of office. This is why ongoing monitoring, not just a one-off check at onboarding, is the standard expected of a mature PEP screening programme — see also what PEP, SIP, and RCA mean for how PEP status interacts with related risk categories.



