IndiciumIndicium
Log in
← Back to blog
Background checks for HR, Legal and Compliance

Turn public-source risk signals into audit-ready decisions.

Indicium helps regulated teams screen candidates, counterparties and sensitive hires — with dated sources, human review and reports your Legal team can defend.

Indicium's screening services combine database matching with human review to help DACH institutions confirm PEP status and document their due-diligence decisions.

What is PEP screening? Identifying politically exposed persons

PEP screening identifies individuals with prominent public functions and their associates, enabling the enhanced due diligence required under AML law.

PEP screening is the process of identifying individuals who hold or have held prominent public functions — as well as their family members and close associates — so that financial institutions and other obligated parties can apply the enhanced due diligence measures required under anti-money-laundering law.

What is a PEP?

A politically exposed person (PEP) is an individual entrusted with a prominent public function. The concept originates from the Financial Action Task Force (FATF) recommendations and is embedded in EU and national AML legislation across the DACH region. The rationale is straightforward: by virtue of their position, PEPs may be exposed to elevated risks of bribery, corruption, and misuse of public funds.

PEP status is not itself an accusation of wrongdoing. It is a risk indicator that triggers additional scrutiny rather than an automatic rejection.

Who counts as a politically exposed person?

The FATF and EU directives define several categories of public functions that confer PEP status. These typically include:

  • Heads of state or government, ministers, and equivalent political leaders
  • Members of parliament or similar legislative bodies
  • Senior members of the judiciary whose decisions are not subject to further appeal
  • Ambassadors and high-ranking officers in the armed forces
  • Members of the management bodies of central banks and international organisations
  • Senior executives of state-owned enterprises

In addition, the definition extends to individuals who have ceased to hold such functions. Under EU rules, the risk-based approach allows institutions to determine the duration of continued PEP treatment on a risk-sensitive basis, though many organisations apply a standard period of at least twelve months after the function ends.

What about family members and close associates?

PEP screening does not stop at the individual who holds the public function. Obligated entities must also identify:

  • Family members — spouses, registered partners, children, and parents
  • Close associates — individuals known to have joint beneficial ownership of legal entities or close business relationships with the PEP

This extended circle means that a screening match may surface not because the subject is a PEP themselves, but because they are connected to one.

What is the difference between domestic and foreign PEPs?

EU AML rules distinguish between domestic PEPs (individuals holding prominent functions within the member state) and foreign PEPs (those holding functions in another country). Foreign PEPs are generally treated as higher risk by default. Domestic PEPs may also warrant enhanced measures, but institutions can apply a risk-based approach and determine the extent of due diligence based on the specific exposure.

In practice, many DACH institutions apply enhanced due diligence to both categories, reserving simplified treatment only for cases where the risk assessment clearly supports it.

Why does PEP screening matter?

PEP screening is a legal requirement under the German Geldwäschegesetz (GwG), the Austrian Geldwäschegesetz, and the Swiss GwG, as well as the underlying EU AML directives. Failure to identify a PEP and apply the required enhanced due diligence can result in supervisory action, reputational damage, and in serious cases administrative penalties.

Beyond legal obligation, PEP screening serves a practical risk-management purpose. It helps institutions understand whether a customer’s profile, source of wealth, and source of funds warrant additional verification before entering or continuing a business relationship.

How does PEP screening work in practice?

A typical PEP screening workflow involves several steps:

  1. Data collection — The customer’s identifying information (full name, date of birth, nationality, aliases) is gathered during onboarding or periodic review.
  2. Database matching — The information is checked against structured PEP databases that aggregate publicly available information on holders of public functions worldwide.
  3. Hit evaluation — Potential matches are reviewed to confirm whether the individual is genuinely the PEP in question, a family member, a close associate, or a false positive caused by name similarity.
  4. Risk assessment — If PEP status is confirmed, the institution conducts enhanced due diligence, including establishing the source of wealth and source of funds, and obtaining approval from senior management.
  5. Ongoing monitoring — PEP status is not static. Periodic rescreening and continuous monitoring of adverse media help detect changes in the customer’s risk profile.

What are the common challenges?

Name-based matching is inherently noisy. Common names, transliteration differences, and incomplete date-of-birth data all contribute to false positives. Conversely, false negatives can occur when databases are outdated or when an individual’s public function is not widely reported.

Another challenge is scope. Determining whether a senior executive of a state-owned enterprise qualifies, or whether a former official still requires PEP treatment years after leaving office, demands judgement rather than automated rule application alone.

This is where human review complements automated screening. A trained analyst can assess context, review source material, and document the reasoning behind a decision in a way that a database match alone cannot.

How should PEP screening be documented?

Supervisors expect obligated entities to maintain records of their screening process, including the data sources consulted, the matches identified, the disposition of each match, and the enhanced due diligence measures applied. Documentation should be sufficient to demonstrate that the institution took appropriate steps to identify PEP status and manage the associated risk.

What does Indicium Technologies AG offer?

Indicium Technologies AG provides PEP screening as part of its due-diligence and background-check services for banks, insurers, private equity and venture capital firms, executive search firms, KRITIS operators, and family offices across the DACH region. Our process combines structured database screening with human final review by trained analysts, helping clients confirm PEP status, assess associated risk, and document their decisions.

This article provides general information and does not constitute legal advice in individual cases.

Ready to move from reading to doing?

See how a reviewable risk report is built – from name to verdict in minutes, not weeks.

Book a demo See a sample report