September 21, 2026

How to Adjudicate a PEP Alert (Step by Step)

Axle Team

Key takeaways

PEP status is a screening trigger, not a risk rating. U.S. agencies stated in 2020 that not all PEPs are high risk and that no unique due diligence steps are required for them.
Adjudication is two separate questions — is this match my customer, and if so, does the role change the relationship's risk? Answer them in that order, and don't let the second contaminate the first.
Confirmed foreign PEPs carry FATF-driven obligations: senior management approval, reasonable measures on source of wealth and funds, and enhanced ongoing monitoring.
Write disposition rationale at the match level, with the identifiers you compared, so next cycle's re-hit is a diff — not a re-investigation.

PEP alert adjudication is where screening programs quietly lose the most analyst time — not because the decisions are hard, but because most programs re-make the same decisions every cycle. Here is a workflow that satisfies FATF expectations and U.S. supervisory guidance without gold-plating every hit.

To adjudicate a PEP alert: confirm the match is your customer using identifiers, not just name similarity; classify the PEP type and role; assess whether the position creates corruption or influence risk in the context of the relationship; decide the disposition, with senior sign-off where policy requires it; and document the rationale at the match level.

PEP alert adjudication: what regulators actually require

Start with what is not required. In August 2020, FinCEN and the federal banking agencies issued a joint statement clarifying how PEPs fit into customer due diligence under the CDD rule:

There is no regulatory requirement in the CDD rule, nor is there a supervisory expectation, for banks to have unique, additional due diligence steps for PEPs.
— Interagency Joint Statement on PEP Due Diligence, Aug. 21, 2020

The same statement removes the assumption behind most over-escalation:

Not all PEPs are high risk solely by virtue of their status. Rather, the risk depends on facts and circumstances specific to the customer relationship.
— Interagency Joint Statement on PEP Due Diligence, Aug. 21, 2020

FATF Recommendation 12 sets the floor for foreign PEPs: institutions need risk-management systems to determine whether a customer or beneficial owner is a foreign PEP, and for confirmed matches must obtain senior management approval for the relationship, take reasonable measures to establish source of wealth and source of funds, and apply enhanced ongoing monitoring. FATF's guidance on Recommendations 12 and 22 frames these measures as preventive, not criminal — holding public office is not an accusation. Domestic and international-organization PEPs are handled on a risk-sensitive basis.

The six-step adjudication workflow

Confirm the match is your customer. Work identifiers, not name similarity: date of birth, nationality or residence, gender, known roles, photographs, associated entities. Name-only hits on common names are where most false positives live. Record which identifiers matched, which conflicted, and which were unavailable.
Classify the PEP type. Foreign, domestic, or international organization; current or former; the individual or a family member or close associate. FATF extends Recommendation 12 to family members and close associates, but the obligations differ sharply by category — a sitting foreign minister and a retired municipal official are not the same workflow.
Assess the function, not the label. What does, or did, the person control — budgets, procurement, licensing, state-owned enterprises? The Wolfsberg Group's PEP guidance argues for concentrating controls on people actually positioned to enrich themselves improperly, rather than diluting the category with everyone in public life.
Read the risk in relationship context. The interagency statement gives concrete texture on what lower risk looks like:
PEPs with a limited transaction volume, a low-dollar deposit account with the bank, known legitimate source(s) of funds, or access only to products or services that are subject to specific terms and payment schedules could reasonably be characterized as having lower customer risk profiles.
— Interagency Joint Statement on PEP Due Diligence, Aug. 21, 2020
Decide and route the disposition. A false positive closes with the identifier evidence documented. A true match triggers policy, not alarm: for foreign PEPs, senior management approval, source-of-wealth and source-of-funds measures, a risk-rating review, and enhanced monitoring going forward.
Document at the match level. The rationale should let a future reviewer — or system — see immediately why this list entry was cleared and what would need to change to reopen it. Capture the list entry ID, identifiers compared, sources checked, and the date basis of the decision.

Former PEPs and other judgment calls

"Once a PEP, always a PEP" is not the FATF standard. FATF's guidance directs institutions to handle clients who have left prominent public functions based on assessed risk — continuing influence, the seniority of the former role, the informal power that outlasts a title — rather than fixed declassification windows. In practice, a former minister with ongoing state-enterprise ties stays in enhanced monitoring; a long-retired official with a fully documented source of wealth may not need to.

The part most programs get wrong

The dominant cost in PEP adjudication isn't the first decision — it's the re-decision. Screening lists update constantly, so the same customer re-hits the same entry month after month, and list providers often carry one individual under several entries with different identifiers across list types. If dispositions live in free-text case notes, every re-hit becomes a full re-investigation.

Structure the disposition instead: entry ID, identifiers compared, outcome, rationale. The next hit then becomes a diff — what changed since the last adjudication? — and the answer is usually nothing, resolvable in seconds. In our experience this single change does more for PEP queue throughput than any screening-threshold tuning, and it builds exactly the audit trail examiners ask to see.

Where AI agents fit

PEP alert adjudication built on identifier comparison, structured rationale, and consistent policy application is the shape of work AI agents handle well. Baley, Axle's screening agent, adjudicates PEP, sanctions, and adverse-media hits with the evidence and reasoning documented on every disposition — and carries prior-disposition memory so re-hits don't restart from zero. If you're building the case internally, the AI readiness playbook covers the governance questions, and the ROI calculator can size what re-adjudication currently costs your team.

FAQ

Does a PEP alert require filing a SAR?

No. PEP status is not suspicious activity, and a confirmed PEP match is not by itself a reportable event. SAR obligations attach to the activity: if the transaction review surfaces something the customer profile can't explain, that drives the filing decision — PEP or not.

How long after leaving office is someone still a PEP?

There is no prescribed time limit. FATF's guidance calls for risk-based treatment of former PEPs — continuing influence and informal power matter more than the calendar. Hard declassification rules tend to be over-inclusive for minor former officials and under-inclusive for the ones who matter.

Is senior management approval required for every PEP relationship?

Under FATF Recommendation 12, senior management approval applies to establishing or continuing relationships with foreign PEPs. For domestic and international-organization PEPs, approval follows your risk assessment. The U.S. CDD rule adds no separate PEP-specific approval requirement.

If PEP re-hits are consuming your screening team's week, see how Baley adjudicates them with full evidence trails: axleruns.com/agent/baley.

How to Adjudicate a PEP Alert (Step by Step)

More from the blog