Identifying a politically exposed person is only the first step. A strong PEP risk assessment considers political influence, geography, source of wealth, financial activity, and business relationships.
Corruption risk remains widespread. Transparency International’s 2025 Corruption Perceptions Index found that 122 of 182 countries scored below 50, making geography and public influence important when assigning PEP risk levels.
PEP status does not automatically mean criminal activity or equal risk. Effective PEP EDD can include senior approval, source of wealth and funds checks, enhanced screening, and ongoing monitoring.
In this guide, we explain how PEP risk levels are assessed, which factors can increase risk, when PEP EDD is required, and how compliance teams can apply stronger due diligence and ongoing monitoring.
Binderr PEP Screening and Risk Assessment Software
Identifying a PEP is only the starting point. Binderr combines PEP screening with sanctions, watchlists, adverse media, customer verification, and dynamic risk scoring to help compliance teams understand the wider risk behind each match and assign more appropriate PEP risk levels.
- Screen individuals and businesses globally
- Check PEPs, sanctions and watchlists
- Detect adverse media risk signals
- Apply dynamic customer risk scoring
- Reduce screening false positives
- Support stronger PEP risk decisions
What Is a Politically Exposed Person?
A politically exposed person, or PEP, is someone who currently holds or previously held a prominent public function that may create greater exposure to bribery, corruption, misuse of public funds, or influence-related financial crime. PEP status does not imply wrongdoing, but it is an important factor in a wider PEP risk assessment used to determine appropriate controls.
Foreign PEPs - Foreign PEPs include heads of state, senior politicians, judges, military leaders, senior government officials, executives of state-owned enterprises, and influential political party officials in another country. Because their roles may involve significant authority or access to public resources, FATF expects enhanced measures for these relationships, often making PEP EDD a key part of onboarding and ongoing monitoring.
Domestic PEPs - Domestic PEPs hold prominent public roles within the customer’s own country, but they should not automatically be treated as equally high risk. Their position, influence, access to public funds, geography, and financial profile should shape the PEP risk assessment, with regulators such as the UK FCA supporting a proportionate, risk-based approach.
International Organisation PEPs - International organisation PEPs are senior individuals entrusted with prominent functions in major international bodies, such as directors, deputy directors, senior board members, or officials with equivalent authority. Their PEP risk levels should reflect the degree of influence they hold, the organisation’s role, geographic exposure, and any financial or reputational risk indicators.
Family Members and Close Associates - PEP screening should extend beyond the named individual because family members and close associates can sometimes hold assets, control companies, receive payments, or maintain business interests on a PEP’s behalf. A complete PEP risk assessment should therefore consider immediate family ties, joint ownership, close business relationships, beneficial ownership, and other significant financial connections.
Check PEPs Easily with Binderr
What Are PEP Risk Levels?
PEP risk levels help compliance teams decide how much scrutiny a politically exposed person should receive. Firms often classify customers as lower, medium, or higher risk based on political influence, geography, wealth, transactions, business interests, and adverse information.
There is no single global model for low, medium, or high PEP risk. Firms must build their own PEP risk assessment methodology around applicable laws, regulatory guidance, customer risk, and internal risk appetite.
Each risk category should lead to proportionate controls. Lower-risk relationships may need periodic review, while medium-risk cases often require deeper verification and closer monitoring.
High-risk relationships may trigger more extensive PEP EDD, including senior management approval, source of wealth and source of funds checks, enhanced adverse media screening, and more frequent monitoring.
PEP Risk Level | Typical Characteristics | Possible Compliance Response |
Lower PEP Risk | Limited political influence, transparent wealth, low-risk geography, predictable transactions | Proportionate enhanced controls and periodic review |
Medium PEP Risk | Greater political influence, cross-border exposure, complex wealth or business interests | Additional verification, management review, and closer monitoring |
High PEP Risk | Powerful public role, high-risk jurisdiction, unexplained wealth, adverse media, opaque structures, or unusual transactions | Full PEP EDD, senior approval, enhanced monitoring, and possible escalation |
The exact treatment depends on the jurisdiction and regulatory framework. The goal is to make PEP risk levels reflect the actual financial crime exposure rather than treating every PEP as automatically high risk.
Start Risk Screening Today
Why Do PEP Risk Levels Matter?
PEP risk levels help firms match compliance controls to the actual level of political and financial crime exposure identified during a PEP risk assessment.
They also determine when deeper checks, closer monitoring, or PEP EDD may be needed to manage higher-risk relationships.
- Set the level of scrutiny: PEP risk levels determine how deeply a customer should be reviewed, from basic verification to more intensive checks and monitoring.
- Shape due diligence requirements: A higher PEP risk assessment score may trigger stronger source of wealth, source of funds, identity, ownership, and adverse media checks.
- Guide approval and escalation: Medium or high-risk cases may require senior management approval, compliance escalation, or full PEP EDD before the relationship can continue.
- Control monitoring frequency: Higher-risk PEPs often need tighter transaction monitoring, more frequent reviews, and faster reassessment when new risk indicators appear.
- Support defensible decisions: Risk ratings should be backed by documented evidence, not assumptions. This helps firms show why specific controls were applied and whether the relationship remains within their risk appetite.
Key Factors in a PEP Risk Assessment
A strong PEP risk assessment looks beyond the PEP label and evaluates the customer’s role, geography, financial profile, relationships, and behaviour. These factors help firms set appropriate PEP risk levels and decide when stronger controls or PEP EDD may be necessary.
Nature and Seniority of the Public Function - The more authority a PEP holds, the greater the potential exposure to corruption or misuse of public resources. A PEP risk assessment should consider decision-making power, control over budgets, procurement influence, licensing authority, access to public assets, and influence over state-owned enterprises.
Country and Geographic Risk - Geography can significantly change PEP risk levels. Compliance teams should assess corruption exposure, AML weaknesses, sanctions risk, political instability, transparency standards, and whether the PEP operates in or has links to higher-risk jurisdictions.
Source of Wealth - Source of wealth explains how a PEP accumulated their overall assets and financial position. A strong review compares salary, investments, property, business ownership, inheritance, dividends, or company sales against publicly available information to identify unexplained or inconsistent wealth.
Source of Funds - Source of funds focuses on where the money used in a specific transaction or business relationship comes from. Salary payments, business proceeds, investments, property sales, loans, or inheritance should be checked for consistency, especially when PEP EDD is required for higher-risk relationships.
Business and Ownership Structures - Complex corporate structures can increase risk when they make ownership or control difficult to understand. Shell companies, offshore entities, trusts, nominee shareholders, layered holding companies, and unexplained intermediaries may raise PEP risk levels if they appear designed to obscure beneficial ownership or asset flows.
Transaction Behaviour - Customer activity should make sense when compared with known income, business activity, geography, and expected account use. Large unexplained transfers, rapid movement of funds, unrelated third-party payments, offshore transactions, or activity inconsistent with the customer profile can significantly affect a PEP risk assessment.
Adverse Media and Allegations - Credible reports involving corruption, bribery, fraud, embezzlement, organised crime, sanctions, or government investigations can increase PEP risk. Adverse media should be assessed for credibility, relevance, recency, and source quality before influencing PEP risk levels or triggering enhanced controls.
Family Members and Close Associates - Risk does not always sit with the PEP alone. Family members, business partners, close associates, or connected companies may be used to hold assets, receive payments, control businesses, or move funds, making these relationships important when deciding whether PEP EDD or closer monitoring is required.
Streamline the PEP Risk Assessment Process Using Binderr
A strong PEP risk assessment requires more than checking a name against a database. Binderr brings KYC, KYB, AML screening, beneficial ownership information, and dynamic risk assessment into one workflow so teams can evaluate identity, ownership, political exposure, adverse information, and other risk factors without switching between disconnected systems.
- Verify customer identities accurately
- Screen PEP and AML exposure
- Identify and verify UBOs
- Map complex ownership structures
- Score customer risk dynamically
- Maintain complete decision audit trails
What Is PEP Enhanced Due Diligence?
PEP EDD is a deeper level of due diligence used when a politically exposed person presents elevated financial crime risk beyond standard customer checks. It builds on the PEP risk assessment by examining identity, purpose of the relationship, source of wealth, source of funds, transaction behaviour, adverse indicators, and whether the activity fits the customer’s profile. The depth of review should match the relevant PEP risk levels, making EDD a risk-based investigation rather than a simple document collection exercise.
When Is PEP EDD Required?
Identifying someone as a PEP does not, by itself, determine the exact controls to apply. A PEP risk assessment should first consider the person’s role, geography, source of wealth, financial activity, and wider risk profile so firms can assign appropriate PEP risk levels and decide how much scrutiny is needed.
Under FATF standards, foreign PEPs are subject to enhanced measures, while higher-risk domestic and international organisation PEPs also require stronger controls. Depending on the jurisdiction, PEP EDD can include senior management approval, source of wealth and source of funds checks, and enhanced ongoing monitoring. In the EU, these requirements are also reflected in Article 42 of Regulation (EU) 2024/1624, which will generally apply from 10 July 2027.
Start Your First Compliance Check
What Does PEP EDD Include?
PEP EDD combines deeper verification, financial checks, senior oversight, and ongoing monitoring to manage elevated political and financial crime risk.
The exact measures should reflect the outcome of the PEP risk assessment and the customer’s assigned PEP risk levels, with stronger controls applied where risk is higher.
Verify Identity and PEP Status - Effective PEP EDD starts with confirming who the customer is, what public role they hold or previously held, the relevant country, dates of service, associated entities, and any relevant family members or close associates. A reliable PEP risk assessment should use multiple credible sources rather than depend on a single commercial database.
Establish Source of Wealth - Source of wealth checks help explain how the PEP built their overall financial position. Depending on the PEP risk levels, firms may review company accounts, tax records, property documents, investment statements, employment information, asset declarations, or sale agreements to confirm that declared wealth is plausible and consistent.
Establish Source of Funds - Source of funds checks focus on the origin of money used in a specific transaction or relationship. Bank statements, transaction records, investment documents, sale contracts, dividend records, or loan agreements can help verify whether the funds are legitimate and consistent with the customer’s PEP risk assessment.
Obtain Senior Management Approval - Senior approval should be a genuine risk decision, not a checkbox. Decision-makers should understand the customer profile, PEP risk levels, source of wealth, source of funds, adverse information, key red flags, and proposed controls before approving or continuing a higher-risk relationship.
Conduct Enhanced Ongoing Monitoring - PEP risk can change after onboarding, so PEP EDD should continue through enhanced monitoring of transactions, ownership changes, political status, sanctions exposure, adverse media, jurisdiction risk, and unusual financial behaviour. New information should trigger a fresh PEP risk assessment when necessary.
Run PEP EDD and Ongoing Monitoring with Binderr
Higher-risk PEP relationships can require additional investigation before onboarding or continuing the relationship.
Binderr helps teams move from standard due diligence to PEP EDD by triggering enhanced workflows, collecting additional information, supporting deeper ownership analysis, and monitoring customers for future changes in risk.
The supplied Binderr framework specifically positions EDD as deeper investigation for high-risk customers and supports automated EDD workflows.
- Trigger risk-based EDD workflows
- Collect additional customer information
- Investigate source of risk deeper
- Review complex ownership connections
- Monitor PEP status continuously
- Receive alerts when risk changes
PEP Risk Assessment Example
Realistic scenarios help show how PEP risk assessment decisions can differ even when both customers meet the definition of a politically exposed person. The key is to assess the full context rather than assign identical PEP risk levels to every case.
Scenario A: Lower-Risk Domestic PEP
A domestic official with limited control over public funds, transparent employment income, ordinary banking activity, and no credible adverse media may present comparatively lower risk. The relationship can still require PEP controls, but the PEP risk assessment may support lighter monitoring and proportionate checks rather than the most intensive form of PEP EDD.
The firm should still document the customer’s role, source of wealth, expected activity, and relevant relationships. This creates a clear audit trail showing why the assigned PEP risk levels are proportionate to the actual exposure.
Scenario B: High-Risk Foreign PEP
A senior foreign official who controls major public procurement, uses offshore companies, holds unexplained wealth, moves large sums across jurisdictions, and faces credible corruption allegations presents a very different risk profile. In this case, the PEP risk assessment would likely justify a high-risk classification and significantly deeper scrutiny.
The firm may need extensive PEP EDD, including senior management approval, detailed source of wealth and source of funds checks, ownership analysis, adverse media review, and enhanced ongoing monitoring. These controls help determine whether the relationship can be managed within the firm’s risk appetite.
How Often Should PEP Risk Be Reviewed?
A PEP risk assessment should not stop after onboarding. PEP risk levels can change when a customer takes on a new political role, acquires a business, enters a higher-risk jurisdiction, shows unusual transaction activity, or becomes linked to new sanctions or adverse media.
Firms should combine scheduled reviews with event-driven reassessment. Higher-risk customers may need more frequent checks and stronger PEP EDD, while any major change in wealth, ownership, geography, political exposure, or financial behaviour should trigger an immediate review of the existing risk rating.
Common Mistakes to Avoid in PEP Risk Assessment
A strong PEP risk assessment depends on context, evidence, and regular review, not just automated screening or a one-time risk score.
Avoiding these mistakes helps firms assign more accurate PEP risk levels and apply PEP EDD where deeper scrutiny is genuinely needed.
Relying Only on PEP Databases - PEP databases are useful for initial detection, but they should not replace a full PEP risk assessment. Firms still need to verify the customer’s role, geography, financial profile, relationships, and wider context before assigning PEP risk levels.
Ignoring Family Members and Close Associates - Risk can extend beyond the named PEP. Family members, business partners, close associates, and connected entities may hold assets, receive funds, or control companies, so excluding them can leave major gaps in PEP EDD and ongoing monitoring.
Confusing Source of Wealth With Source of Funds - Source of wealth explains how a customer built their overall financial position, while source of funds identifies where money used in a specific transaction comes from. Both can be essential to a reliable PEP risk assessment, especially where higher PEP risk levels require deeper financial scrutiny.
Using Static Risk Scores - PEP risk is not fixed. Political appointments, business ownership, adverse media, sanctions exposure, geography, and transaction behaviour can all change, so PEP risk levels should be reviewed and updated when new information appears.
Collecting EDD Documents Without Analysing Them - More documents do not automatically mean better PEP EDD. Compliance teams need to test whether the evidence actually explains the customer’s wealth, funds, activity, and risk profile, rather than simply building a larger file with unanswered questions.
How Technology Improves PEP Risk Assessment and EDD
Modern compliance platforms can connect PEP screening, sanctions checks, adverse media, identity verification, business verification, and beneficial ownership data in one workflow. This gives teams a clearer view of the customer and helps strengthen the PEP risk assessment without relying on disconnected checks.
Technology can also automate risk scoring, case management, alerts, audit trails, and ongoing monitoring. When new information appears, such as a sanctions match, ownership change, or adverse media hit, the system can help reassess PEP risk levels and trigger additional PEP EDD where required.
Automation should support, not replace, compliance judgement. The strongest systems help teams spot patterns, prioritise higher-risk cases, and document decisions while leaving final risk interpretation and escalation with qualified reviewers.
Run Compliance From One Platform
Regulatory Perspective for 2026
PEP regulations continue to emphasise proportionate controls, documented decision-making, and stronger measures for higher-risk relationships.
For compliance teams, this means aligning PEP risk assessment, PEP risk levels, and PEP EDD with current FATF, UK, and EU requirements.
FATF
FATF Recommendations 12 and 22 form the global foundation for PEP controls. They require additional preventive AML/CFT measures for relevant PEP relationships while making clear that PEP status does not itself suggest criminal activity, reinforcing the need for a proportionate PEP risk assessment and appropriate PEP risk levels.
United Kingdom
The FCA’s FG25/3, published in July 2025, reinforces a proportionate, risk-based approach to UK PEPs, their relatives, and close associates. In April 2026, the FCA also highlighted that firms should clearly distinguish standard CDD from PEP EDD, document enhanced measures, and apply stronger controls to higher-risk customers.
The UK also amended its Money Laundering Regulations in 2026, with key changes taking effect from 30 June 2026. These updates strengthen the wider compliance framework firms use when conducting a PEP risk assessment, applying enhanced due diligence, and reviewing customer risk.
European Union
Under the EU’s new AML Regulation 2024/1624, Article 42 requires senior management approval, adequate source of wealth and source of funds checks, and enhanced ongoing monitoring for PEP relationships. These measures make PEP EDD central to managing higher PEP risk levels across the EU.
The Regulation will generally apply from 10 July 2027, while AMLA must issue guidance by that date on PEP risk categories, close associates, and former PEPs. This should bring greater consistency to how firms assess and manage PEP exposure across the bloc.
Get Complete PEP Compliance Solution with Binderr
Binderr provides more than standalone PEP screening. Its unified compliance platform connects KYC, KYB, AML screening, PEP checks, beneficial ownership, dynamic risk assessment, CDD, EDD, monitoring, and reporting so compliance teams can manage changing PEP risk levels throughout the customer lifecycle.
Binderr’s supplied product positioning describes these capabilities as one unified workflow for standard and enhanced due diligence.
- Verify individuals with automated KYC
- Verify businesses through global KYB
- Screen PEPs and financial crime risk
- Identify UBOs and ownership structures
- Automate CDD and PEP EDD
- Maintain continuous audit-ready monitoring
Bottom Line
Effective PEP compliance is not about assigning the same risk rating to every person who appears on a PEP list. A strong PEP risk assessment combines accurate identification, proportionate PEP risk levels, source of wealth and source of funds checks, senior approval, and documented decision-making.
As customer circumstances change, firms should be able to adjust controls quickly. Integrated compliance technology can support ongoing monitoring, detect new risk signals, and trigger stronger PEP EDD when political exposure, ownership, geography, transactions, or adverse information changes.
With Binderr, compliance teams can connect PEP screening, sanctions and adverse media checks with dynamic risk scoring, enhanced due diligence and ongoing monitoring in one compliance workflow.
