PEP screening explained: tiers, RCA and HIO
PEP screening is the check that identifies whether a customer is a politically exposed person, someone entrusted with a prominent public function whose position carries a higher risk of bribery and corruption, and extends that check to their relatives, close associates and to heads of international organisations. Unlike a sanctioned party, a PEP is not prohibited; the match triggers enhanced due diligence, not a block. This guide sets out what a PEP is, how PEP tiering works, who counts as a relative or close associate, why PEP lists drive homonym false positives, and the enhanced due diligence a PEP match requires.
PEP screening is the process of checking whether a customer, or a party connected to them, is a politically exposed person: an individual entrusted with a prominent public function whose position creates a heightened risk of involvement in bribery, corruption or the misuse of state assets. Being a PEP is a risk indicator, not a finding of guilt, and a PEP is not a prohibited party. The purpose of the check is to identify the exposure so the firm can apply enhanced due diligence, understand the source of the customer's funds and wealth, and keep the relationship under closer review. That response is the defining difference between PEP screening and sanctions screening.
What is a PEP?
A politically exposed person is someone entrusted with a prominent public function. Global standards distinguish foreign PEPs, such as heads of state, senior politicians, senior government, judicial or military officials, senior executives of state-owned enterprises and important political party officials, from domestic PEPs holding equivalent positions at home, and from persons who hold or have held a prominent function in an international organisation. The category captures the position, not the individual's conduct, because the concern is the opportunity that prominent public office creates for corruption and for laundering the proceeds. Most frameworks also recognise that political exposure does not end the day a person leaves office; the risk tapers rather than switching off, so many programs continue to treat a former PEP as exposed for a period after they step down, judged on the residual influence the role leaves behind rather than on a fixed calendar cut-off.
What is PEP screening?
PEP screening compares a customer, and parties connected to them, against data on politically exposed persons, their relatives and close associates, and heads of international organisations. A match does not prohibit the relationship; it flags that enhanced due diligence is required. That is the structural contrast with sanctions screening, where a confirmed match bars or freezes dealings. Because a PEP hit changes how a customer is handled rather than whether they can be onboarded at all, the quality of the match matters in a specific way: a false PEP flag imposes unnecessary enhanced due diligence and friction on a legitimate customer, while a missed one leaves a genuinely higher-risk relationship under normal handling. The comparison of the two checks and their different responses is set out in sanctions screening vs. PEP screening; this guide goes deeper on how PEP data itself is structured.
How does PEP tiering work?
PEP data is not a flat list; it is tiered by the seniority and reach of the public function, so a program can calibrate its response to the level of risk. There is no single global tier standard, but most data providers and programs grade exposure along similar lines. The table below sets out a common structure and the kind of enhanced due diligence each tier tends to attract.
| Tier | Typical positions | Handling |
|---|---|---|
| Tier 1 | Heads of state and government, senior national politicians, cabinet ministers | Highest scrutiny; senior management approval, source of wealth established |
| Tier 2 | Senior officials, senior judiciary and military, central bank and regulator leadership | Enhanced due diligence with documented source of funds |
| Tier 3 | Senior executives of state-owned enterprises, senior political party figures | Enhanced due diligence proportionate to role and jurisdiction |
| Tier 4 | Regional and local officials, more junior public functions | Risk-based review; lower-tier domestic exposure may attract standard-plus handling |
| RCA | Relatives and close associates of any of the above | Treated by reference to the linked PEP's tier and the nature of the connection |
Tiering matters because treating every PEP identically either over-burdens lower-risk relationships or under-scrutinises the most senior ones. A risk-based program screens all tiers but applies its heaviest diligence where the exposure is greatest.
Who counts as a relative or close associate?
PEP risk does not stop at the individual, because corruption proceeds are frequently held or moved through people close to the office-holder. That is why screening extends to relatives and close associates, usually abbreviated RCA. Relatives typically include spouses or partners, parents, children and their spouses, and siblings, since these are the parties through whom assets are most often placed. Close associates are individuals with a close business or personal connection to the PEP, such as a known business partner, a beneficial owner of a company jointly held with the PEP, or someone acting as a nominee on their behalf. Separately, heads of international organisations, or HIOs, senior figures in bodies such as international financial institutions and multilateral organisations, are treated as a distinct category of exposure alongside PEPs. Identifying RCAs and HIOs reliably is a relationship-mapping problem, which is why it depends on structured connection data rather than on name lists alone.
Why do PEPs generate more false positives?
PEP screening produces a heavier false-positive load than most checks for a simple reason: PEPs are, by definition, public figures, and public figures often have common, widely shared names. Screening a customer called after a sitting minister or a well-known official returns the PEP entry even when the customer is an entirely different person, and PEP records frequently carry sparse identifying data beyond the name and the office. The result is a high volume of homonym matches, where the vast majority of alerts are false positives, and a program that clears them by hand spends its enhanced due diligence budget on namesakes rather than on real exposure. The answer is not to loosen matching, which risks missing genuine PEPs, but to resolve identity: weigh the name against date of birth, jurisdiction, role and relationships so the real office-holder is separated from the look-alikes. This is why entity resolution is central to PEP screening rather than optional, as explained in our guide to reducing false positives in AML screening.
What enhanced due diligence does a PEP trigger?
Once a PEP match is confirmed, the risk-based approach calls for enhanced due diligence beyond standard onboarding. That typically means obtaining senior management approval to establish or continue the relationship, taking reasonable measures to establish the source of the customer's wealth and the source of the funds involved, and applying enhanced ongoing monitoring to the relationship. The depth is calibrated to the PEP's tier and jurisdiction: a foreign head of state attracts the fullest scrutiny, while lower-tier domestic exposure is handled proportionately. Crucially, none of this prohibits the customer; it documents that the firm understood the exposure and managed it, which is exactly what an examiner tests. The whole response has to be recorded, the match, the tier, the source-of-wealth evidence, the approval and the monitoring decision, so the file shows a defensible judgement rather than an unexamined green light. How often to re-run that monitoring is covered in our ongoing monitoring frequency guide.
How does BriteBase screen for PEPs?
Our data layer maintains tiered PEP, RCA and HIO coverage, so a program can screen the full network, PEPs, their relatives and close associates, and heads of international organisations, and calibrate diligence by tier rather than treating every match alike. Because PEP screening is dominated by homonym noise, agentic entity resolution weighs the name against date of birth, jurisdiction, role and relationships to separate the real office-holder from namesakes, which is designed to reduce false positives by up to 80% without loosening the match. RCA and HIO links are carried as structured relationship data rather than inferred at review time, so the connection between a customer and a PEP is evidenced. The data is available as the risk-intelligence layer behind an existing stack through the sanctions, PEP and adverse-media data layer, or consumed directly on the BriteBase PEP screening workflow.
FAQ
What is a politically exposed person?
A politically exposed person, or PEP, is an individual entrusted with a prominent public function whose position creates a heightened risk of bribery, corruption or misuse of state assets. Global standards distinguish foreign PEPs, such as heads of state, senior politicians, senior government, judicial and military officials and senior state-owned enterprise executives, from domestic PEPs holding equivalent roles at home, and from heads of international organisations. Being a PEP is a risk indicator tied to the office, not an accusation of wrongdoing, which is why a PEP is not a prohibited party. The consequence for a firm is that identifying a PEP does not bar the relationship; it requires enhanced due diligence to understand the source of funds and wealth and to keep the relationship under closer review. Most frameworks also treat exposure as tapering after a person leaves office rather than ending abruptly, judged on residual influence.
How is PEP screening different from sanctions screening?
The two checks trigger opposite responses. A confirmed sanctions match bars or freezes dealings with the party, because sanctions are a prohibition. A confirmed PEP match does not prohibit anything; it flags that enhanced due diligence is required, because political exposure is a risk indicator rather than a ban. That structural difference changes what a false match costs. A false sanctions hit wrongly blocks a legitimate customer; a false PEP hit wrongly imposes enhanced due diligence and friction on one, while a missed PEP leaves a higher-risk relationship under normal handling. Both checks match parties against curated data, but they sit at different points in the risk framework and are handled by different teams and procedures. The consequence is that a program needs both, run together but resolved separately, so that a sanctions block and a PEP flag are never conflated, and each triggers the response the framework actually requires.
How does PEP tiering work?
PEP tiering grades exposure by the seniority and reach of the public function, so a program can match its response to the level of risk rather than treating every PEP identically. There is no single global tier standard, but most providers grade along similar lines: heads of state and senior national politicians at the top, then senior officials, judiciary and central bank leadership, then senior state-owned enterprise and party figures, then regional and local officials. Relatives and close associates are handled by reference to the linked PEP's tier. The purpose is calibration: the most senior tiers attract the fullest enhanced due diligence, including senior sign-off and established source of wealth, while lower-tier domestic exposure is handled proportionately. The consequence of ignoring tiering is that a program either over-burdens low-risk relationships with unnecessary diligence or under-scrutinises the most senior ones, so a risk-based approach screens all tiers but concentrates effort where exposure is greatest.
Who counts as a relative or close associate of a PEP?
Relatives and close associates, abbreviated RCA, are the people through whom a PEP's corruption proceeds are most often held or moved, which is why screening extends to them. Relatives typically include spouses or partners, parents, children and their spouses, and siblings. Close associates are individuals with a close business or personal connection to the PEP: a known business partner, a joint beneficial owner of a company held with the PEP, or someone acting as a nominee on their behalf. Separately, heads of international organisations, or HIOs, are treated as their own category of exposure alongside PEPs. The consequence is that PEP screening is a relationship problem, not just a name-list check: identifying RCAs and HIOs reliably depends on structured connection data linking a customer to the office-holder. Without that data, the risk that hides one step removed from the PEP, in a relative or associate, stays invisible to a direct name screen.
Why do PEPs cause so many false positives?
PEPs generate a heavier false-positive load than most screening checks because they are, by definition, public figures, and public figures often have common, widely shared names. Screening a customer who happens to share a name with a sitting minister or a well-known official returns the PEP entry even when the customer is a completely different person, and PEP records frequently carry little identifying data beyond the name and the office. The result is a high volume of homonym matches where the vast majority of alerts are false positives. The consequence is that a program clearing them by hand spends its enhanced due diligence effort on namesakes instead of real exposure. Loosening the match to cut volume risks missing genuine PEPs, so the sustainable fix is entity resolution: weighing the name against date of birth, jurisdiction, role and relationships to separate the real office-holder from the look-alikes before a reviewer sees the alert.
Sources
Screen PEPs without the homonym noise.
Book a demo and we will show you tiered PEP, RCA and HIO screening with agentic entity resolution applied, so enhanced due diligence lands on real office-holders, not namesakes. Designed to reduce false positives by up to 80% without loosening the match.
Book a demo