The FCA update

Politically Exposed Persons (PEPs) are individuals who hold prominent public functions, either in this country or elsewhere, and due to the influence and authority associated with their positions, they may present a higher risk of involvement in illicit activities such as corruption, money laundering, or terrorist financing.
As such, identifying whether a prospective client is a PEP is critically important. If a client is determined to be a PEP, enhanced due diligence (EDD) measures must be applied. Failing to carry out these additional checks could amount to non-compliance with the Money Laundering Regulations.
Regulation 35 of the Money Laundering Regulations outlines the criteria for identifying and categorising PEPs. Notably, a recent amendment has introduced a distinction between domestic PEPs and foreign PEPs, with domestic PEPs—provided there are no other risk indicators—now subject to a less intensive level of EDD.
In June 2025, the Financial Conduct Authority (FCA) issued a response to clarify the regulatory expectations around PEPs. However, some commentators have criticised the FCA’s guidance, suggesting it was a missed opportunity and that the clarification lacked sufficient detail and certainty.
Before examining the FCA’s update on PEPs, it is important to first understand the requirements for enhanced due diligence under the Money Laundering Regulations.
Regulation 33(1)(d) - MLR 2017
Regulation 33 sets out the obligation to apply enhanced customer due diligence
Regulation 33(1) states that a relevant must apply enhanced customer due diligence measures and enhanced ongoing monitoring in addition to customer due diligence measures (under Regulation 28 & if application Regulation 29) to manage risk in 7 circumstances:
(a) in any case identified as one where there is a high risk of money laundering or terrorising financing -
(i) by the relevant person under regulation 18(1) or
(ii) in information made available to the relevant person under regulation 17(9) and 47
(b) in any business relationship where a person established in a high-risk third country or in relation to any relevant transaction where either of the parties to the transaction is established in a hight-risk third country
(c) in relation to correspondent relationships with a credit institution or financial institution (in accordance with regulation 34)
(d) if a relevant person has determined that a customer or potential custom is a PEP, or a family member or know close associate of a PEP (in accordance with Regulation 35)
(e) in any case where the relevant person discovers that a customer has provided false or stolen identification documentation or information and the relevant person proposes to continue to deal with that customer
(f) in any case where -
(i) a transaction is complex or unusually large
(ii) there is an unusual patter of transactions, or
the transaction or transactions have no apparent economic or legal purpose, and
(g) in any other case which by its nature can present a higher risk of money laundering or terrorist financing
Regulation 33(3A)
Regulation 33(3a) sets out the enhance due diligence measures which a relevant person must include
(a) obtaining additional information on the customer and the customer's beneficial owner;
(b) obtaining additional information on the intended nature of the business relationship;
(c) obtaining information on the source of funds and source of wealth of the customer and the customer's beneficial owner;
(d) obtaining information on the reasons for the transactions;
(e) obtaining the approval of the senior management for establishing or continuing the business relationship
(f) conducting enhanced monitoring of the business relationship by increasing and timing of controls applied, and selecting patterns of transactions that need further examination
Regulation 33(5)
Regulation 33(5) states that depending on the requirements of the case, the enhanced customer due diligence measures required under Regulation 33(1) may also include, among other things—
(a) seeking additional independent, reliable sources to verify information provided or made available to the relevant person;
(b) taking additional measures to understand better the background, ownership and financial situation of the customer, and other parties to the transaction;
(c) taking further steps to be satisfied that the transaction is consistent with the purpose and intended nature of the business relationship;
(d) increasing the monitoring of the business relationship, including greater scrutiny of transactions.
Regulation 33(6)
In this regulation, consideration is given to the risk factors
Regulation 33(6) provides information on assessment and management.
It states that when
- assessing whether there is a high risk of money laundering (ML) or terrorist financing (TF) in a particular situation, and
- the extent of the measures which should be taken to manage and mitigate that risk
- relevant persons must take account of risk factors including, among other thing:
Regulation 33(6)(a) - customer risk factors
These have been stated as
(i) the business relationship is conducted in unusual circumstances;
(ii) the customer is resident in a geographical area of high risk (see sub-paragraph (c));
(iii) the customer is a legal person or legal arrangement that is a vehicle for holding personal assets;
(iv) the customer is a company that has nominee shareholders or shares in bearer form;
(v) the customer is a business that is cash intensive;
(vi) the corporate structure of the customer is unusual or excessively complex given the nature of the company's business;
(vii) the customer is the beneficiary of a life insurance policy;
(viii) the customer is a third country national who is applying for residence rights in or citizenship of a state in exchange for transfers of capital, purchase of a property, government bonds or investment in corporate entities in that state];
Regulation 33(6)(b) - product, service, transaction or delivery channel risk factors
(i) the product involves private banking;
(ii) the product or transaction is one which might favour anonymity;
(iii) the situation involves non-face-to-face business relationships or transactions, without certain safeguards, such as an electronic identification process which meets the conditions set out in regulation 28(19);
(iv) payments will be received from unknown or unassociated third parties;
(v) new products and new business practices are involved, including new delivery mechanisms, and the use of new or developing technologies for both new and pre-existing products;
(vi) the service involves the provision of nominee directors, nominee shareholders or shadow directors, or the formation of companies in a third country;
(vii) there is a transaction related to oil, arms, precious metals, tobacco products, cultural artefacts, ivory or other items related to protected species, or other items of archaeological, historical, cultural or religious significance or of rare scientific value;]
Regulation 33(6)(c) - geographical risk factors
(i) countries identified by credible sources, such as mutual evaluations, detailed assessment reports or published follow-up reports, as not having effective systems to counter money laundering or terrorist financing;
(ii) countries identified by credible sources as having significant levels of corruption or other criminal activity, such as terrorism (within the meaning of section 1 of the Terrorism Act 2000), money laundering, and the production and supply of illicit drugs;
(iii) countries subject to sanctions, embargos or similar measures issued by, for example, the European Union or the United Nations;
(iv) countries providing funding or support for terrorism;
(v) countries that have organisations operating within their territory which have been designated—
(aa) by the government of the United Kingdom as proscribed organisations under Schedule 2 to the Terrorism Act 2000 M2, or
(bb) by other countries, international organisations or the European Union as terrorist organisations;
(vi)countries identified by credible sources, such as evaluations, detailed assessment reports or published follow-up reports published by the Financial Action Task Force, the International Monetary Fund, the World Bank, the Organisation for Economic Co-operation and Development or other international bodies or non-governmental organisations as not implementing requirements to counter money laundering and terrorist financing that are consistent with the recommendations published by the Financial Action Task Force in February 2012 and updated in June 2019.
Regulation 33(7)
Regulation 33(7), states that when making an assessment referred to in Regulation 33 (6), relevant persons must bear in mind that the presence of one or more risk factors may not always indicate that there is a high risk of money laundering or terrorist financing in a particular situation.
Regulation 35
This regulation sets out that enhanced due diligence is to apply to PEPs.
35.—(1) A relevant person must have in place appropriate risk-management systems and procedures to determine whether a customer or the beneficial owner of a customer is—
(a)a politically exposed person (a “PEP”); or
(b)a family member or a known close associate of a PEP,
and to manage the enhanced risks arising from the relevant person's business relationship or transactions with such a customer.
Who is a PEP?
Regulation 35(14) sets out who PEPs are:
For the purposes of paragraphs (9), (11) and 12), individuals entrusted with prominent public functions include—
(a) heads of state, heads of government, ministers and deputy or assistant ministers;
(b) members of parliament or of similar legislative bodies;
(c) members of the governing bodies of political parties;
(d) members of supreme courts, of constitutional courts or of any judicial body the decisions of which are not subject to further appeal except in exceptional circumstances;
(e) members of courts of auditors or of the boards of central banks;
(f) ambassadors, charges d'affaires and high-ranking officers in the armed forces;
(g) members of the administrative, management or supervisory bodies of State-owned enterprises;
(h) directors, deputy directors and members of the board or equivalent function of an international organisation.
Domestic PEPs and Forign PEPs
The amendments to Regulation 35 introduced in January 2024 (via the Money Laundering and Terrorist Financing (Amendment) Regulations 2023) implemented a presumption of lower risk for domestic PEPs, their family members, and known close associates, unless other risk factors exist.
Domestic PEPs and EDD
Clients are subject to customer due diligence (CDD) as part of standard onboarding and monitoring procedures. However, where a client presents higher risk factors, the relevant person must apply enhanced due diligence (EDD) in addition to the standard CDD.
Politically Exposed Persons (PEPs) are automatically considered high risk. Therefore, EDD must always be applied to them.
In cases where the PEP is classified as a domestic PEP and no other risk factors are present, the level of EDD required may be proportionately lower than that applied to foreign PEPs. However, this reduced level of EDD is still an additional layer on top of the mandatory CDD.
This led to a key question in the industry: how should this lower level of EDD for domestic PEPs be applied in practice?
LSAG 25
The Legal Sector Affinity Group Guidance issued on 23 April 2025 stated the following:
Changes to signing off to enable a PEP to be onboarded as a client has also changed to enable senior members to sign off, but the Money Laundering Reporting Officer would still have oversight and accountability. This has also been mention in the FCA update dated 07/07/2025.
Financial Conduct Authority Guidance
The Financial Conduct Authority (FCA) have provided a 19 guidance titled, 'Finalised Guidance Financial Conduct Authority. FG 25/3 The treatment of politically exposed persons for anti-money laundering purposes.'
The key areas for improvement include:
Lower Risk and Higher Risk
You can edit text on your website by double clicking on a text box on your website. Alternatively, when you select a text box a settings menu will appear. your website by double clicking on a text box on your website. Alternatively, when you select a text box
- Lower risk indicators: PEPs may pose a lower risk if they are subject to rigorous public scrutiny, lack executive decision-making power, or have ceased to be PEPs for over a year. In such cases, firms may adopt less intrusive due diligence measures.
- Higher risk indicators: PEPs who display wealth inconsistent with known income, face credible allegations of misconduct, or are involved in large, non-transparent public procurements may require more stringent EDD.
Financial Thoughts
If you are regulated under the Money Laundering Regulations, you are required to have effective systems and controls in place to identify Politically Exposed Persons (PEPs), as well as their family members and close associates.
These systems must be capable of:
Identifying a client’s PEP status
Assessing the level of risk they pose
Applying appropriate risk-based mitigation measures
Ultimately, the responsibility for conducting the risk assessment, applying the correct level of due diligence, and ongoing monitoring rests with you.
These decisions should be informed by the requirements of the Money Laundering Regulations and any relevant sector-specific guidance.
It is essential that you document your rationale—including how you assessed the risk and determined the due diligence measures applied. Proper documentation provides a clear audit trail and demonstrates compliance.
Source:
Financial Conduct Authority Finalised Guidance dated 07/07/2025
Legal Sector Affinity Group Guidance - 23/04/2025
Glossary of Acronyms and Phrases
You can edit text on your website by double clicking on a text box on your website. Alternatively, when you select a text box a settings menu will appear. your website by double clicking on a text box on your website. Alternatively, when you select a text box
| Acronym or phrase | Meaning |
| AML | Anti-money laundering These are methods to counter money laundering |
| CDD | Client (or customer) Due Diligence |
| EDD | Enhanced Due Diligence Enhanced Due Diligence is in addition to Customer Due Diligence. |
| FCA | Financial Conduct Authority |
| PEP | Politically Exposed Person Regulation 35(12) (a)“politically exposed person” or “PEP” means an individual who is entrusted with prominent public functions, other than as a middle-ranking or more junior official; (b)“family member” of a politically exposed person includes— (i)a spouse or civil partner of the PEP; (ii)children of the PEP and the spouses or civil partners of the PEP's children; (iii)parents of the PEP; (c)“known close associate” of a PEP means— (i)an individual known to have joint beneficial ownership of a legal entity or a legal arrangement or any other close business relations with a PEP; (ii)an individual who has sole beneficial ownership of a legal entity or a legal arrangement which is known to have been set up for the benefit of a PEP; |
Money Laundering Regulations
List of Money Laundering Regulations mentioned in this post
| MLR 2017 | |
| Regulation 17 | Risk Assessment by Supervisory Authorities |
| Regulation 18 | Risk Assessment by relevant persons |
| Regulation 19 | Policies, Controls and Procedures |
| Regulation 28 | Customer Due Diligence Measures |
| Regulation 29 | Additional Customer Due Diligence Measures - Credit Institutions and Financial Institutions |
| Regulation 33 | Obligations on regulated persons to apply enhanced due diligence |
| Regulation 34 | Enhanced Customer Due Diligence: Credit Institutions, Financial Institutions and correspondent |
| Regulation 35 | Enhanced Customer Due Diligence: Politically Exposed Persons |
| Regulation 47 | Duties of Supervisory Authorities: Information |
Disclaimer
This post is not intended to be legal or regulatory advice. This post should not be considered as such. If you require advice you should engage a suitably qualified lawyer/barrister or compliance practitioner.
See our disclaimer
