PEP Categories Explained: Domestic, Foreign, International Organisation — and RCAs
“PEP” is not one category but three, and the obligations attaching to each are not identical across regimes. Add relatives and close associates — RCAs — and the population a firm must actually identify is several times larger than the one most screening configurations look for. This guide sets out the four definitions precisely, explains where FATF and MAS diverge, and covers what enhanced due diligence requires once a match is confirmed.
Most PEP screening failures are not detection failures. The name matched, or would have matched had anyone looked. The failure is one of scope: the firm screened customers but not beneficial owners, or screened for foreign officials but not domestic ones, or never attempted close associates at all because the category felt too vague to operationalise.
Getting the categories right is therefore not a definitional exercise. It determines the size of the population you are obliged to find, and it is the question a supervisor asks first.
The Three Categories of PEP
Singapore’s AML/CFT Notices define a politically exposed person as a domestic PEP, a foreign PEP or an international organisation PEP. The distinguishing factor is where the prominent public function is or was held, not how senior it is.
- Domestic PEP — a natural person who is or has been entrusted domestically with prominent public functions.
- Foreign PEP — a natural person who is or has been entrusted with prominent public functions in a foreign country or jurisdiction.
- International organisation PEP — a natural person who is or has been entrusted with prominent public functions in an international organisation.
"International organisation" is itself defined: an entity established by formal political agreements between member countries that have the status of international treaties, whose existence is recognised by law in member countries, and which is not treated as a resident institutional unit of the country in which it is located. That excludes a great many bodies with international-sounding names, and includes the ones you would expect — the UN and its agencies, the IMF, the World Bank, regional development banks.
What Counts as a Prominent Public Function
The Notices define "prominent public functions" inclusively rather than exhaustively. The stated roles are:
- heads of state and heads of government;
- government ministers;
- senior civil or public servants;
- senior judicial or military officials;
- senior executives of state-owned corporations;
- senior political party officials;
- members of the legislature; and
- senior management of international organisations.
"Senior executives of state-owned corporations" is the limb that most often surprises commercial teams. It captures people who present as ordinary corporate customers, whose PEP status arises entirely from state ownership of their employer — which is why ownership structure and PEP screening cannot be run as independent checks. See UBO verification for the ownership side.
RCA: Relatives and Close Associates
RCA is the abbreviation the industry uses for the two related populations that PEP obligations extend to. MAS defines them separately and precisely.
A family member is a parent, step-parent, child, step-child, adopted child, spouse, sibling, step-sibling or adopted sibling of the politically exposed person. That list is closed and enumerable, which makes it tractable: it does not extend to cousins, parents-in-law or grandparents, though a firm may of course treat them as higher risk on its own assessment.
A close associate is a natural person who is closely connected to a politically exposed person, either socially or professionally. This is deliberately open-textured, and it is where firms struggle. Commonly recognised indicators include:
- joint beneficial ownership of a legal entity or arrangement with a PEP;
- sole beneficial ownership of an entity set up for the benefit of a PEP;
- a known business partner or someone holding a position alongside the PEP in the same organisation;
- a prominent, publicly known social or personal connection.
Where FATF and MAS Diverge
This is the distinction most likely to produce an under-compliant programme, because a control set built to the international baseline is not sufficient in Singapore.
FATF Recommendation 12 requires enhanced measures for foreign PEPs in all cases. For domestic PEPs and international organisation PEPs, it requires firms to take reasonable measures to determine status, and to apply the enhanced measures where the relationship is higher risk — a risk-sensitive approach. R12 extends to family members and close associates of all PEP types.
MAS does not replicate that split. Under the AML/CFT Notices, the enhanced due diligence measures apply where a customer or beneficial owner is determined to be a politically exposed person or a family member or close associate of one — with no distinction drawn between domestic, foreign and international organisation categories.
The practical consequence: a global firm that has configured its platform to the FATF minimum, applying mandatory EDD to foreign PEPs and risk-based treatment to domestic ones, is under-compliant on its Singapore book. This is worth checking directly rather than assuming, because the configuration is usually set once, centrally, and inherited. The requirement is set out in MAS Notice 626 for banks and Notice PSN01 for payment service providers.
How Long Does PEP Status Last?
The Singapore definitions use the phrase "is or has been entrusted with prominent public functions". Leaving office therefore does not, of itself, end PEP status — the definition reaches former office-holders on its face.
FATF guidance likewise discourages fixed expiry periods in favour of a risk-based assessment of whether the individual still presents elevated risk. The relevant considerations are the seniority of the function held, how long ago it ended, whether the person retains informal influence, whether their current role connects back to the former one, and the corruption risk of the jurisdiction concerned.
What Enhanced Due Diligence Actually Requires
Once a PEP or RCA determination is made, three things must happen. They are specific, and each produces evidence:
- Senior management approval to establish or continue the relationship, or to undertake the transaction where no account is opened. Approval must be by someone with genuine authority, and it must be recorded — an unattributed tick in a workflow is not approval.
- Source of wealth and source of funds established by appropriate and reasonable means. These are different questions: source of wealth explains how the overall net worth was accumulated; source of funds explains the origin of the specific money in this relationship. Answering only the second is the most common shortfall.
- Enhanced ongoing monitoring, increasing both the degree and the nature of monitoring so as to determine whether the relationship or its transactions appear unusual or suspicious. "Enhanced" has to mean something demonstrably different from the baseline — tighter thresholds, shorter review cycles, additional scenarios — not the same rules with a flag attached.
Full treatment of the EDD workflow is in when EDD is required and how to apply it, and the monitoring side in transaction monitoring.
How a PEP or RCA Determination Actually Gets Made
Screening a name against a PEP list is one input of four, and on its own it is the weakest of them for close associates. A programme that can defend its coverage draws on all four:
- Customer declaration. Asking directly at onboarding whether the customer, any beneficial owner or any connected party holds or has held a prominent public function. Cheap, and it establishes a record — a false declaration is itself a material fact later.
- List and database screening. Commercial PEP data covering all three categories, with the RCA linkages that map a PEP to known family and associates. Coverage of domestic PEPs and of smaller jurisdictions varies considerably between providers and is worth testing rather than trusting.
- Ownership analysis. The route to the close associates nobody declares. Where a corporate customer’s ownership resolves to a natural person who is a PEP, or a PEP co-owns an entity with your customer, the relationship surfaces from structure rather than from a name list.
- Adverse media. Reporting frequently identifies associations — business partnerships, political financing, family connections — well before any structured dataset records them.
The uncomfortable implication is that close associate coverage is only as good as your UBO discovery and adverse media capability. Firms that treat PEP screening as a standalone list check have, by construction, no mechanism for finding the associates who matter.
Match Quality: the Practical Constraint
PEP screening generates false positives at a rate that shapes how the obligation is actually met. The names are frequently common, transliteration varies across scripts, and the same individual appears in different sources with different spellings, dates of birth and titles.
Two failure modes follow, and they pull in opposite directions:
- Matching too loosely buries analysts in alerts, which produces rushed dispositions and a review process that adds no assurance.
- Matching too tightly to control volume silently reduces the population being detected — the more dangerous error, because it is invisible in the metrics. Alert volumes fall and the programme looks healthier.
Because PEP status changes with elections and appointments, screening also has to repeat. Periodic rescreening against refreshed data is what keeps the population accurate after day one — see rescreening frequency and perpetual KYC. On tuning the balance itself, see reducing false positives.
Where PEP and RCA Programmes Fail
The recurring failures are consistent across firms and across jurisdictions:
- Screening the customer only. The obligation reaches beneficial owners, natural persons appointed to act on the customer’s behalf, and connected parties. A screening scope set to the named account holder misses the structures that matter most.
- No close associate capability at all. Family members get screened because they are on lists; close associates are quietly dropped because they are not. The obligation does not distinguish.
- Domestic PEPs treated as lower risk by default. Defensible under FATF, not under the MAS Notices.
- Source of funds recorded, source of wealth assumed. "Salary" explains a monthly credit; it does not explain an eight-figure balance.
- Screening at onboarding only. People become PEPs after they become customers. Elections happen, appointments are made, relatives take office. Without periodic rescreening the population is accurate only on day one.
- "Enhanced" monitoring that is identical to standard monitoring. A flag on a record changes nothing unless it changes the rules applied to that record.
The through-line is scope. Detection technology has improved considerably; the population being pointed at frequently has not. See PEP screening explained for the operational build, and customer risk rating for how PEP status should feed the risk model.
PEP and RCA Screening That Covers the Whole Population
One Constellation screens customers, beneficial owners, appointed persons and connected parties against domestic, foreign and international organisation PEP data — with RCA linkage, adverse media, continuous rescreening and an EDD workflow that records senior management approval and source of wealth.
