PEP Screening and Risk Assessment: A Practical Guide

PEP screening is an important part of customer and counterparty due diligence. But identifying a Politically Exposed Person is not always as simple as checking one name against a list.

For companies, financial institutions and compliance teams, relevant PEP exposure may also appear through a beneficial owner, director or another person connected to the business. This makes PEP risk assessment not only a name-matching task, but also a question of understanding corporate relationships and the context behind them.

At the same time, PEP data should be interpreted carefully. A match or connection does not establish misconduct, nor does it automatically determine the risk level of a company. Under FATF standards, PEP requirements are preventive in nature and should not be interpreted as implying that a PEP is involved in criminal activity.

This guide explains how PEP screening works, which factors matter in a PEP risk assessment, and why analysing connections around a company can provide additional context for due diligence.

What Is PEP Screening?

PEP screening is the process of checking whether a customer, beneficial owner or other relevant individual is a Politically Exposed Person or is connected to one in a way that may be relevant to due diligence.

The PEP acronym stands for Politically Exposed Person. FATF defines a PEP as an individual who is or has been entrusted with a prominent public function.

The main categories include:

• foreign PEPs — individuals entrusted with prominent public functions by a foreign country;
• domestic PEPs — individuals entrusted with prominent public functions domestically;
• international organisation PEPs — persons entrusted with prominent functions by an international organisation.

PEP due diligence commonly considers these relationships as part of the wider assessment. These relationships are important because financial or corporate structures can involve people beyond the PEP directly.

PEP status itself is not evidence of corruption, money laundering or another offence. It indicates that the person's public role may create additional exposure to risks such as bribery, misuse of public funds or money laundering and therefore requires an appropriate risk-based approach.

What Are the Main PEP Risks?

When discussing PEP risks in anti-money laundering, the concern is not the political position itself. The concern is whether the position or influence could potentially be misused.

Typical risk areas include:

Bribery and corruption. Public functions may provide access to public funds, licences, procurement decisions or other areas where conflicts of interest or corruption risks can arise.

Money laundering. Corporate structures may potentially be used to hold, transfer or disguise proceeds originating from corruption or other predicate offences.

Hidden ownership or control. The person exercising influence over a company may not always appear as its direct shareholder.

Complex ownership structures across jurisdictions. Complex ownership structures involving several jurisdictions can make relationships more difficult to understand and verify.

Sanctions exposure. PEP status and sanctions are separate concepts, but the same individual or entities within their network may also be relevant to sanctions screening.

These factors should be treated as inputs into a broader risk assessment rather than as proof that misconduct has occurred.

How the PEP Screening Process Works

An effective PEP screening process typically includes 4 stages.

1. Identify Relevant Persons

For companies, screening may cover beneficial owners, shareholders, directors and other persons with material ownership or control.

2. Screen Against PEP Data

Compare relevant individuals with available PEP data and verify possible matches using identifiers such as position, jurisdiction or date of birth.

A name match alone is not enough, and the source of the PEP information should also be considered. 

3. Assess the Risk

Assign a PEP risk rating based on factors such as public function, jurisdiction, ownership or control, business relationship and other relevant risk indicators.

PEP status should trigger further assessment, not an automatic risk conclusion. FATF provides detailed guidance on applying a risk-based approach to foreign, domestic and international organisation PEPs. 

4. Conduct Enhanced Due Diligence

Where required, PEP enhanced due diligence may include checking source of wealth and funds, reviewing ownership, obtaining senior management approval and applying enhanced monitoring.

The exact PEP customer due diligence measures depend on the applicable framework and risk level. 

5. Document and Monitor

Record the screening results and risk decision. Monitor relevant changes in PEP status, ownership or other risk factors over time.

PEP Data Sources: Why Provenance Matters

No single global PEP register covers every relevant individual and relationship in every jurisdiction.

Availability, format, completeness and update frequency vary significantly between countries.

YC World therefore brings together information from different types of publicly available sources. Its current Data Coverage includes, for example, an official PEP list for Denmark, Faroe Islands and Greenland, PEP information based on official declarations in Lithuania and PEP data published by Brazil's CGU. It also includes other open datasets such as Wikidata Politically Exposed Persons.

This distinction matters.

Information from an official government register and information from another open dataset may have different evidentiary value, methodologies, and update cycles.

From PEP Screening to Better Risk Assessment

The PEP compliance checks are most useful when they combine identification with context.

A list match can tell you that a person may be politically exposed. A broader review can help determine:

• who the person is;
• how they are connected to the company;
• what role they play;
• where the information comes from;
• whether other risk indicators are present;
• whether additional due diligence is appropriate.

For corporate risk management, this distinction is essential.

PEP screening should help identify questions that require investigation — not replace the investigation itself.

With YC World, compliance teams can explore PEP-related information alongside corporate connections, ownership data, and other risk indicators in one environment.

Explore the ownership, PEP-related connections, and risk indicators behind your counterparty

FAQ