PEP Risk Management: A Practical CAMS Guide

Table of Contents

• • Why PEP Status Changes Risk
• • Who Should Be Considered Around the PEP?
• • PEP Due-Diligence Checklist
• • Source of Wealth and Source of Funds
• • Approval and Monitoring Are Not Formalities
• • When Should a PEP Relationship Be Escalated?
• • Common CAMS Traps

Quick answer: A politically exposed person is not automatically suspicious. Effective PEP risk management identifies the entrusted public function, connected people and entities, source of wealth and funds, expected activity and jurisdictional exposure, then applies the approval and monitoring required by the governing regime.

PEP questions in CAMS often test whether the candidate can hold two ideas at once: public influence can increase corruption exposure, but status alone does not establish wrongdoing. The correct response is risk-based, evidence-led and respectful of the customer’s legitimate activity.

Why PEP Status Changes Risk

Entrusted public functions can create access to public funds, procurement, licences, policy decisions or influential networks. That exposure may increase the risk of bribery, corruption, embezzlement or laundering of proceeds.

The risk varies. A role’s seniority, decision power, jurisdiction, access to value, time in office and links to state-owned activity may all matter. Product, channel and transaction risk also affect the picture. A simple account with transparent salary income does not present the same control problem as opaque companies, private-banking structures and unexplained cross-border wealth.

Who Should Be Considered Around the PEP?

The analysis should not stop at the named individual. Relatives and close associates may be relevant because they can own companies, hold accounts, receive transfers or exercise influence connected with the PEP.

The task is to identify real relationships and control, not to label an entire family or network as suspicious. Useful questions include:

• Who owns or controls the customer’s companies and legal arrangements?
• Do relatives or associates appear in the flow of funds?
• Is the relationship consistent with the stated role and activity?
• Has ownership changed without a clear purpose?
• Are intermediaries performing a genuine service or reducing transparency?

PEP Due-Diligence Checklist

Area	What to establish
Public function	Role, responsibilities, seniority, jurisdiction and relevant period
Relationships	Relatives, close associates, companies, trusts and connected accounts
Source of wealth	How the person’s overall wealth was accumulated
Source of funds	Origin of the money or assets used in the specific activity
Expected behaviour	Products, amounts, counterparties, geography and transaction purpose
Approval	Required senior or specialist approval under law and policy
Monitoring	Activity and events that would change the risk assessment

Source of Wealth and Source of Funds

A defensible PEP assessment distinguishes the customer’s wider wealth from the money used in a particular transaction.

Source-of-wealth evidence should fit the person’s career, businesses, investments, inheritance or other stated accumulation. Source-of-funds work should trace the specific payment or asset. An incoming transfer from a company controlled by the customer may identify the immediate sender without explaining the company’s underlying activity.

Consistency matters. Job title, public remuneration, business interests, asset ownership, transaction size and timeline should form a coherent picture. A mismatch is an investigation point, not automatic proof.

Approval and Monitoring Are Not Formalities

Where required by the applicable regime, senior approval should be informed. The approver needs the risk assessment, unresolved issues, proposed controls and reason the organisation believes the relationship can be managed.

Monitoring should use the expected profile. Relevant change can include new companies, different counterparties, unexplained wealth, unusual public contracts, geographic shifts, adverse information or transaction behaviour that no longer fits the stated purpose.

A list-screening result or media mention is not a final decision. Identity, source credibility, allegation status, relevance and supporting evidence must be reviewed.

When Should a PEP Relationship Be Escalated?

Escalation is justified when required information is unavailable, explanations conflict with reliable evidence, ownership or control remains opaque, activity departs materially from the expected profile, or mandatory restrictions may apply.

The escalation should state the precise concern. “Customer is a PEP” is not sufficient analysis. A useful case note might explain that a connected company received unexplained payments from a public contractor, ownership changed shortly before onboarding and the supplied wealth evidence does not support the account activity.

Common CAMS Traps

• PEP equals criminal: status changes risk; it does not prove misconduct.
• Screening completes the assessment: screening identifies possible status or information, while due diligence establishes relevance and context.
• One control fits every PEP: mandatory requirements and risk-sensitive depth must be separated.
• Relative equals nominee: a relationship may be relevant without proving hidden ownership.
• Senior signature equals governance: approval must be based on a clear assessment and workable controls.
• High risk requires exit: first decide whether the relationship is lawful and can be managed proportionately.

For the wider process, read customer due diligence vs EDD and AML red flags vs suspicious activity.

The CAMS exam rewards the answer that investigates the specific exposure, applies the correct authority and avoids turning a risk category into a conclusion.