Politically Exposed Persons pose a specific money-laundering risk: they have access to public funds or decision-making authority, which increases the likelihood that their accounts or transactions involve the proceeds of corruption.
The FATF, whose recommendations India implements through PMLA and the RBI’s KYC Master Directions, places PEP screening at the centre of risk-based anti-money laundering compliance. Yet PEP screening in India is frequently implemented inadequately — covering too narrow a definition of PEP, using databases that are insufficiently current, failing to re-screen when lists change, or generating such high false positive volumes that the review process is operationally unsustainable. This guide addresses all of these implementation failures.
Table of Contents
- Who Is a PEP Under Indian Regulation
- Why PEPs Require Enhanced Due Diligence
- PEP Database Selection: What to Look for
- Sanctions Screening India: The Lists That Matter
- False Positive Management: The Operational Challenge
- Re-Screening: Why Onboarding-Only PEP Checks Are Insufficient
- Key Takeaways
- Frequently Asked Questions
- Conclusion
Who Is a PEP Under Indian Regulation
Under FATF Recommendation 12 and the RBI KYC Master Directions, a Politically Exposed Person is an individual who is or has been entrusted with a prominent public function. The definition covers: heads of state and government; senior politicians (including Members of Parliament, state legislators, and party officials above a defined seniority threshold); senior government officials (including senior civil servants, military officers of flag-rank and above, and senior judiciary members); senior executives of state-owned enterprises; and important political party officials.
Critically, the PEP designation extends beyond the individual to their immediate family members (spouse, children, parents) and close associates — individuals who share beneficial ownership of assets, or who maintain close business relationships with the PEP. This extension is where most PEP screening implementations fall short: screening the individual named customer but not their spouse, adult children, or known business partners.
In India, the definition of “prominent public function” is broader than many compliance teams assume. It includes district-level officials, heads of state PSUs, and state government ministers — not just central government and senior bureaucracy. An IAS officer of Joint Secretary rank, a state Cabinet minister, and the Managing Director of a state-owned financial institution are all PEPs under the applicable definition.
Why PEPs Require Enhanced Due Diligence
The elevated AML risk associated with PEPs is not hypothetical. Transparency International’s annual Corruption Perceptions Index consistently places India below the global median for perceived public sector corruption. The FATF’s India Mutual Evaluation Report (2010, with subsequent follow-up assessments) identified PEP risk management as an area requiring strengthened implementation.
For Regulated Entities, the consequences of PEP compliance failure are direct. If an RE maintains an account for a PEP without conducting Enhanced Due Diligence, and the account is subsequently found to have received or moved corruption proceeds, the RE faces PMLA enforcement action — potentially including prosecution, monetary penalties, and reputational damage.
Enhanced Due Diligence for PEPs requires: senior management approval for the relationship (at or above the Chief Compliance Officer or equivalent level); documented assessment of the source of wealth and source of funds — not just income declared, but evidence of how it was generated; ongoing monitoring at an enhanced frequency; and more frequent periodic re-KYC (annually regardless of the customer’s standard risk tier).
PEP Database Selection: What to Look for
The quality of PEP screening is directly dependent on the quality of the PEP database being used. Several categories of providers exist: global commercial databases (Dow Jones Risk & Compliance, Refinitiv World-Check, LexisNexis Risk Solutions), which cover international PEPs comprehensively but may have variable coverage of state-level Indian officials; India-specific databases, which focus on the full spectrum of Indian political and government officials; and open-source and government-published lists, which are incomplete as standalone sources but provide useful supplementary data.
For Indian Regulated Entities, the minimum standard database should cover: Members of Parliament and state legislators, state and central cabinet ministers, senior civil servants (Joint Secretary and above at central level, Commissioner and above at state level), senior military officers, senior judiciary (High Court judges and above), heads and senior executives of central and state PSUs, and important political party officials.
Database update frequency is critical. Political positions change frequently — elections, cabinet reshuffles, appointments, and retirements. A database that is updated monthly may miss PEP changes that occurred three weeks ago. The best databases are updated multiple times per week, with change notifications that allow the screening system to re-screen affected customers when a relevant status change occurs.
Sanctions Screening India: The Lists That Matter
Sanctions screening is distinct from PEP screening but is typically implemented as part of the same compliance workflow. Sanctions screening checks whether a customer, counterparty, or transaction is subject to a formal legal prohibition — a sanctions designation — that would make transacting with them illegal.
For Indian financial institutions, the primary sanctions lists are: the United Nations Security Council Consolidated List (mandatory for all UN member states under UNSCR 1267 and successor resolutions — designating individuals and entities associated with Al-Qaeda, ISIS, and related groups); the OFAC SDN List (relevant for any USD-denominated transaction, any transaction with US persons, or any correspondent banking relationship); the EU Consolidated List; and the India-specific list under the Unlawful Activities (Prevention) Act, maintained by the Ministry of Home Affairs.
For institutions with cross-border exposure — trade finance, remittances, international payments — additional lists apply based on the jurisdictions involved. The FATF grey list adds an enhanced due diligence requirement (not a prohibition) for customers from or counterparties in grey listed countries, which as of 2025 includes several jurisdictions in South Asia and beyond.
Sanctions lists are updated continuously — the UNSC and OFAC lists can be updated multiple times per week. A screening system that checks at onboarding but does not maintain continuous re-screening against list updates has a fundamental gap: a customer clean at onboarding may be designated the following month.
False Positive Management: The Operational Challenge
False positive management is the most significant operational challenge in PEP and sanctions screening. A false positive is a match returned by the screening algorithm that, on human review, does not represent a genuine match. Common names — particularly common Indian surnames — against large PEP databases can generate dozens of false positives per screening event, each requiring human review.
Unmanaged false positive volumes create an operational problem: reviewers overwhelmed with false positives spend insufficient time on genuine matches. Studies of AML compliance programmes have found that alert fatigue — the consequence of unmanaged false positive rates — is a leading cause of genuine suspicious activity going undetected.
The technical responses to false positive management are: name fuzzy matching calibration (balancing sensitivity against specificity — a higher sensitivity catches more genuine matches but generates more false positives); supplementary matching on date of birth, nationality, and address (reducing false positives where the name matches but other identifiers do not); and risk-tiered review workflows (automatically clearing low-risk apparent matches while escalating high-risk ones for human review). The appropriate calibration depends on the RE’s customer base demographics and the specific lists being screened against.
Re-Screening: Why Onboarding-Only PEP Checks Are Insufficient
The most common PEP screening implementation failure is treating it as an onboarding check only. A customer who is not a PEP at the time of account opening may become a PEP subsequently — after being elected, appointed to a senior government position, or joining the board of a PSU. A customer who is a PEP when onboarded may relinquish that status — changing their risk profile.
The RBI KYC Master Directions require ongoing monitoring throughout the customer relationship. For PEP screening specifically, this means: re-screening existing customers when PEP databases are updated (to catch newly designated PEPs in the existing customer base), re-screening when a customer profile change event occurs, and integrating PEP status changes into the risk tier review workflow — so that a customer who becomes a PEP mid-relationship is automatically routed to enhanced due diligence.
For large financial institutions with millions of customers, this requires automation: manual re-screening of the entire customer base every time the PEP database updates is not operationally feasible. Effective screening platforms provide change-notification feeds — alerting the institution when a specific customer’s match status changes — rather than requiring full customer base re-screening.
Conducting Enhanced Due Diligence for PEPs: A Practical Process
Enhanced Due Diligence for PEP customers is required by both the RBI KYC Master Directions and PMLA, but the specific operational process is left to each Regulated Entity to design and document. The quality of PEP EDD varies dramatically across institutions — from genuinely rigorous source of wealth and funds verification to a senior manager signing a form confirming they are “satisfied” without any documented basis for that satisfaction.
An effective PEP EDD process has five steps. Step one is PEP status confirmation and classification: determining not just that the customer is a PEP, but what category of PEP (domestic PEP, foreign PEP, or international organisation official), what their current or recent position was, and whether they are a PEP by virtue of their own position or through family or associate relationship.
Step two is source of wealth assessment: gathering and evaluating evidence of how the PEP accumulated their reported wealth. For a politician whose declared assets suggest significant wealth accumulation during public service, the source of wealth assessment requires careful documentation. For a retired senior civil servant whose wealth is consistent with career earnings and legitimate investment, the assessment is more straightforward.
Step three is source of funds for the specific transaction or account: understanding where the money being invested, deposited, or borrowed originates — not just the customer’s general wealth profile. Step four is ongoing monitoring with enhanced frequency: quarterly account review for active PEP accounts, immediate escalation when transactions are outside the established pattern. Step five is senior management approval and documentation: a written approval from the Chief Compliance Officer or equivalent, with the basis for approval documented, before the relationship is established or continued.
Key Takeaways
- PEP definition extends beyond the individual to immediate family members and close associates — most screening implementations fail to cover this extension adequately.
- PEP database quality determines screening quality — update frequency (multiple times per week), India-specific coverage (state-level officials, PSU executives), and change notification feeds are key selection criteria.
- Sanctions screening must be continuous — UNSC and OFAC lists update multiple times per week, and onboarding-only screening creates a structural compliance gap.
- False positive management is an operational priority — unmanaged false positive volumes create alert fatigue that allows genuine matches to be missed.
- Re-screening automation — alerts when customer match status changes with database updates — is essential for large institutions; periodic batch re-screening against a changing customer base is not operationally feasible.
Conclusion
PEP screening and sanctions compliance are not peripheral AML programme components — they are among the most frequently examined areas in regulatory inspections and the source of some of the most significant enforcement actions. The gap between a screening programme that is nominally present and one that is operationally effective is wide: it is the gap between an annual onboarding check and a continuous, automated, false-positive-managed screening workflow. The organisations that have closed that gap have done so by treating PEP and sanctions screening as a live operational system, not a compliance documentation exercise.
Frequently Asked Questions
Q: Who is considered a PEP under Indian regulation?
Under the RBI KYC Master Directions and FATF Recommendation 12, a PEP is any individual who holds or has held a prominent public function — including Members of Parliament, state legislators, cabinet ministers, senior civil servants (Joint Secretary and above), senior military officers, High Court judges and above, heads of PSUs, and important political party officials. The designation extends to their immediate family members and close associates.
Q: What is sanctions screening and which lists are required for Indian institutions?
Sanctions screening checks whether a customer or counterparty is designated on a formal sanctions list that prohibits transactions with them. For Indian institutions, the primary lists are the UN Security Council Consolidated List (mandatory), the OFAC SDN list (relevant for USD transactions and US-nexus relationships), the EU Consolidated List, and India’s UAPA list. All relevant lists must be screened continuously, not just at onboarding.
Q: How do you reduce false positives in PEP screening?
False positives are reduced through: calibrated fuzzy name matching (balancing sensitivity and specificity), supplementary matching on date of birth, nationality, and address to differentiate same-name individuals, risk-tiered review workflows that auto-clear low-risk apparent matches, and regular calibration of the matching algorithm against your specific customer demographic profile.
Conclusion
PEP screening and sanctions compliance are not peripheral AML programme components — they are among the most frequently examined areas in regulatory inspections and the source of some of the most significant enforcement actions. The gap between a screening programme that is nominally present and one that is operationally effective is wide: it is the gap between an annual onboarding check and a continuous, automated, false-positive-managed screening workflow. The organisations that have closed that gap have done so by treating PEP and sanctions screening as a live operational system, not a compliance documentation exercise.
