A trading firm onboards an applicant with a clean passport, a clean address document and a clean sanctions result. Six months later a journalist points out that the same person is the spouse of a deputy minister. Nothing about the account was illegal. What the firm cannot show is that it knew, that someone senior approved the relationship anyway, and that the funds had a documented origin. That gap is what a regulator writes up.
PEP screening is one of the three checks that run at onboarding alongside identity verification and sanctions screening, and it is the one most often treated as a checkbox.
Who counts as politically exposed
The category covers individuals entrusted with prominent public functions. In the European framework that means heads of state and government, ministers and deputy ministers, members of parliament, members of supreme courts and constitutional courts, members of courts of auditors and central bank boards, ambassadors and senior officers in the armed forces, members of the administrative or supervisory bodies of state owned enterprises, and directors and board members of international organisations. Middle ranking and junior officials are outside the definition.
The part that catches firms out is the extension. Family members are in scope: spouses or partners, children and their spouses or partners, and parents. So are known close associates, meaning people with joint beneficial ownership of a legal entity with the PEP, or a close business relationship, or sole beneficial ownership of an entity set up for the PEP's benefit. A firm screening only the applicant's own name is screening perhaps a third of the actual exposure.
Domestic, foreign and the twelve month tail
Older rules treated foreign PEPs as high risk and domestic PEPs as ordinary. Current European practice treats both as requiring enhanced measures, with risk sensitivity applied to how much. A domestic PEP in a country with strong institutions and a published asset declaration regime is a different proposition to a foreign PEP from a jurisdiction on the FATF grey list, and the file should show that the firm thought about the difference rather than applying one template.
Status does not end the day someone leaves office. The standard approach keeps enhanced measures in place for at least twelve months after the person ceases to hold the function, and longer where the residual risk stays high. A former finance minister who now runs a consultancy advising on state contracts has not stopped being interesting.
What enhanced due diligence actually requires
Three obligations sit on a confirmed PEP relationship, and all three need evidence in the file.
- Senior management approval before the relationship is established, or before it continues once an existing client is identified as a PEP. A named person, a date, a reason. Not a workflow status that flipped to approved on its own.
- Source of wealth and source of funds established by adequate measures. Wealth is where the overall net worth came from. Funds is where this specific deposit came from. They are different questions and a payslip answers neither on its own. The evidence standards are the same ones set out in source of funds checks.
- Enhanced ongoing monitoring of the relationship for as long as it lasts, with a lower threshold for review than an ordinary client would get.
PEP status is never a reason to file a suspicious activity report on its own. Being a politically exposed person is not suspicious behaviour, and treating it as such generates noise that buries the reports that matter.
The false positive problem
Name screening against commercial PEP databases produces a great many hits that are not the person in front of you. Common names, transliteration from non Latin scripts, and databases that list every municipal councillor in some countries all push the alert rate up. A firm that tunes its matching too loosely will drown its compliance team in review work and start clearing alerts on autopilot, which is worse than not screening at all because it manufactures a record of decisions nobody made.
Practical mitigations are unglamorous. Match on date of birth and nationality as well as name. Record the discounting rationale in one line rather than a status change. Keep a whitelist of previously discounted matches so the same person does not regenerate the same alert at every periodic review, and make sure the whitelist expires so it does not become permanent blindness. All of it belongs in the audit trail the regulator will ask for.
Where the screening sits in the stack
PEP checks run at the same moment as the identity check, before funding, and again on a schedule. Most firms buy the data rather than build it, because maintaining a global PEP database is not a side project. What the firm owns is the decision layer: the thresholds, the review queue, the approval record and the periodic rescreen. Our Broker CRM holds those decisions against the client record so that the approval, the evidence and the monitoring history sit in one place instead of three inboxes.
Timing is the other design decision. Screening at application, before any funding, keeps the approval question in front of a human while the relationship can still be declined cleanly. Screening only after the first deposit means the firm is already holding money belonging to someone whose file has not been completed, and unwinding that involves a return of funds to source and an explanation to the client that nobody enjoys giving. Periodic rescreening then runs on a risk based cycle, more often for higher risk files, with an event driven trigger on top: a change of address to a higher risk country, a new beneficial owner on a corporate account, or a large deposit outside the client's declared pattern should all pull the file back into review regardless of when the last scheduled check ran.
None of this is legal advice, and thresholds differ by jurisdiction. What does not differ is the shape of the question a supervisor asks after the fact: who knew, who approved, and what did you do about it afterwards.
"Nobody gets in trouble for having a politically exposed client. They get in trouble for having one and not being able to prove anyone senior ever looked at the file."
— Roman Onta, Executive Director, SINGUARD
Key Takeaways
- PEP status covers family members and known close associates, not only the official themselves.
- Domestic and foreign PEPs both attract enhanced measures, with the depth set by risk.
- Senior management approval, source of wealth and enhanced monitoring all need dated evidence in the file.
- Loose name matching floods the review queue and produces cleared alerts nobody actually reviewed.
Frequently Asked Questions
Are trading firms allowed to onboard a PEP?
Yes. PEP status is not a prohibition. It triggers enhanced due diligence: senior management approval before the relationship starts, established source of wealth and funds, and enhanced ongoing monitoring for the life of the relationship.
How long does someone stay a PEP after leaving office?
Enhanced measures normally continue for at least twelve months after the person ceases to hold the prominent public function, and longer where the firm's own risk assessment says the residual exposure remains high.
Does a PEP match mean the firm must file a suspicious report?
No. Being politically exposed is not suspicious activity. A report is filed when the firm has actual grounds for suspicion about the conduct or the funds, which is a separate assessment from the screening result.
About the Author
Roman Onta is an Executive Director at SINGUARD. He builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals side by side with his brother Alex Onta, and he helped on the design of eTrader, the division Alex built and leads. His ground is worldwide payment processing, AML compliance and the corporate structures brokers are built on, work the two of them carry together, shaped by executive roles in the UAE and international corporates. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.