Back to Glossary

PEP Screening (Politically Exposed Person Screening)

PEP screening is the process of identifying whether a merchant, business owner, or ultimate beneficial owner (UBO) holds or has recently held a prominent public position (such as senior government official, judge, military leader, or head of a state-owned enterprise) to determine if enhanced due diligence (EDD) is required under anti-money laundering (AML) regulations.

PEPs present elevated risk for corruption, bribery, and illicit financial activity due to their access to public funds and political influence. Acquirers, payment service providers (PSPs), and financial institutions are legally required to identify PEP status during merchant onboarding and apply stricter monitoring controls throughout the business relationship.

Key Challenges in PEP Screening

The Danger of False Positives and Name Collisions

PEP databases often contain limited identifying information (name, birth year, country), leading to false matches with common names. A merchant named "John Smith" may match dozens of PEP records globally, requiring manual review to disambiguate. This creates operational bottlenecks and delays legitimate merchants.

Defining "Politically Exposed" Across Jurisdictions

Different regulators define PEPs differently. The Financial Action Task Force (FATF) includes heads of state, senior politicians, and high-ranking military officers, but local AML regimes vary on whether family members, close associates, or former PEPs (after a certain time period) require EDD. Payment providers operating across multiple jurisdictions must reconcile these definitions.

Ongoing Monitoring vs. Point-in-Time Screening

PEP status changes over time. An individual who was not a PEP at onboarding may later be appointed to a government role. Similarly, a former PEP may no longer require EDD after stepping down (depending on local rules). Continuous monitoring is necessary but resource-intensive, particularly for merchant monitoring at scale.

Source of Wealth and Source of Funds Verification

When a PEP is identified, risk teams must investigate the origin of their wealth and the specific funds used in the business relationship. This requires documentation (tax filings, employment records, asset disclosures) and may involve politically sensitive inquiries, particularly in jurisdictions with weak rule of law.

How to Build an Effective PEP Screening Process

1. Use Multiple PEP Data Sources

No single PEP database is comprehensive.

We recommend combining:

  • Commercial PEP lists (World-Check, Dow Jones, ComplyAdvantage)
  • Government-published registries (where available, such as sanctions lists or national asset disclosure databases)
  • Local media and adverse media screening to catch emerging risks

Cross-referencing reduces false negatives (missed PEPs) and provides corroborating evidence for positive matches.

2. Implement Fuzzy Matching with Manual Review Triggers

Automated PEP screening should use fuzzy matching algorithms to account for name variations, transliterations, and common misspellings. However, any match above a low threshold (e.g., 70% similarity) should trigger manual review rather than automatic rejection.

Risk analysts should verify:

  • Full name and known aliases
  • Date of birth or approximate age
  • Nationality and residence
  • Position title and tenure dates

If insufficient data is available to confirm or rule out a match, request additional documentation from the merchant.

3. Define Clear EDD Procedures for Confirmed PEPs

Enhanced due diligence for PEPs typically includes:

  • Source of wealth documentation (employment history, asset declarations, business ownership records)
  • Source of funds verification for the specific merchant account (bank statements, invoices, contracts)
  • Ongoing transaction monitoring with lower thresholds for suspicious activity
  • Senior management approval for account opening and periodic reviews

Document these steps in your AML policy and train underwriting teams on when to escalate. Effective merchant underwriting requires clear workflows for PEP risk assessment and approval.

4. Set a Time-Based De-escalation Policy for Former PEPs

Many jurisdictions allow reduced scrutiny for individuals who have not held a prominent position for a certain period (commonly 12-18 months).

Consult local AML regulations and define:

  • When a former PEP transitions to standard due diligence
  • How to document the decision (e.g., annual risk assessment sign-off)
  • Whether family members or close associates remain under EDD

Without clear rules, risk teams may apply inconsistent controls or waste resources on outdated risks.

5. Automate Continuous Monitoring

PEP status is not static. Implement automated re-screening at defined intervals (quarterly or semi-annually) and trigger alerts when:

  • A merchant's UBO is newly added to a PEP list
  • A PEP steps down from their role (potential de-escalation)
  • Adverse media links a PEP to corruption allegations or sanctions

Continuous monitoring ensures compliance with ongoing due diligence requirements and reduces surprise findings during audits.

Real-World Scenario: PEP Identification During Merchant Onboarding

A payment facilitator (PayFac) onboards an e-commerce merchant selling luxury goods. During UBO verification, the compliance team identifies that one of the beneficial owners (25% stake) is a former deputy minister of transportation in an Eastern European country. The individual left office 14 months ago.

The risk team escalates the case for EDD. They request:

  • A sworn declaration of the UBO's source of wealth (previous salary, investments, family inheritance)
  • Bank statements showing the origin of the capital invested in the merchant business
  • A background check for adverse media related to corruption or sanctions

The UBO provides documentation showing that the funds originated from the sale of a family property, supported by a notarized real estate transaction. The risk team approves the merchant with enhanced monitoring (monthly transaction review and quarterly re-screening for sanctions or adverse media). They document that the former PEP no longer requires full EDD after the 18-month threshold per their jurisdiction's AML regulations, but will maintain closer scrutiny for the first year of the relationship.

Six months later, automated monitoring flags that the former minister has been appointed as a board member of a state-owned bank. The risk team re-applies full PEP EDD controls and requests updated source of funds documentation.

Why PEP Screening Matters for Payment Providers

Regulatory Compliance and Audit Readiness

AML regulations in most jurisdictions (including the EU's 5th AML Directive, the U.S. Bank Secrecy Act, and FATF recommendations) explicitly require financial institutions to identify PEPs and apply EDD. Failure to screen for PEPs or document EDD decisions exposes payment providers to regulatory fines, enforcement actions, and reputational damage. Auditors and regulators will review PEP screening logs, match resolution records, and EDD documentation during examinations.

Reputational Risk Management

Processing payments for a PEP later linked to corruption or sanctions can result in negative media coverage, customer attrition, and loss of banking relationships. Even if the payment provider was unaware of the PEP status at onboarding, the association with financial crime damages credibility with partners, regulators, and the public.

Fraud and Financial Crime Prevention

PEPs are statistically more likely to be involved in bribery, embezzlement, and money laundering schemes due to their access to public resources.

Identifying PEP status early allows risk teams to scrutinize transaction patterns for red flags such as:

  • Large, unexplained cash deposits
  • Payments to or from high-risk jurisdictions
  • Business activity inconsistent with the declared merchant category

Early detection reduces exposure to illicit funds and limits liability if the merchant is later investigated by law enforcement.

Ecosystem Risk and Third-Party Exposure

In payment facilitation and marketplace models, a single PEP merchant can create systemic risk. If the PEP is involved in a public scandal, the platform may face scrutiny over its onboarding and monitoring processes. Additionally, banking partners (sponsor banks, card networks) may impose penalties or terminate relationships if they perceive inadequate PEP controls. Acquirers and payment facilitators need robust partner oversight to manage these cascading risks.

How Ballerine Supports PEP Screening and Enhanced Due Diligence

Ballerine's merchant risk management platform integrates PEP screening into the onboarding workflow, combining automated database checks with case management tools for manual review.

Risk teams can:

  • Screen UBOs and key management personnel (KMP) against multiple PEP data sources in a single API call
  • Receive match confidence scores with supporting evidence (position, tenure, jurisdiction)
  • Trigger customizable EDD workflows based on PEP risk level (current vs. former, domestic vs. foreign)
  • Automate continuous re-screening and receive alerts for status changes

For payment facilitators and acquirers managing high merchant volumes, Ballerine's merchant monitoring solution tracks PEP status changes over time and flags behavioral anomalies in PEP-linked accounts, reducing manual oversight while maintaining regulatory compliance.

Trusted by

Trusted by Leaders in the Payments Ecosystem

70%

Reduced manual efforts

49%

Improved review resolution time

30%

Increase in 
detected fraud

“We were able to downsize our compliance staff’s workload significantly, which allowed us to allocate the savings and workforce into more improvement projects.”

Shmulik Davar

VP Product at Fido

67%

Reduced Hiring Time

“Proactively navigating fintech regulations requires faster technology adoption. Next-gen compliance infrastructures should seamlessly integrate with existing and new systems and data sources.”

Ran Nachman

VP Regulation Solutions 
at eToro

67%

Reduced Hiring Time

“Proactively navigating fintech regulations requires faster technology adoption. Next-gen compliance infrastructures should seamlessly integrate with existing and new systems and data sources.”

Vicente Mederos

Head of Risk 

at Access Group

98%

Local Compliance

“User-friendly, reliable, and fast. It’s exactly what we needed to scale without adding complexity.”

Emily Rivera

Co-Founder

4.8 rating from 1.5k reviews

Author ImageAuthor ImageAuthor ImageAuthor Image

10+

Download from app store

Download for iOS

Ready to transform how your bank onboards, underwrites, and manages merchant risk?