A politically exposed person is someone who holds or has held a prominent public function. That definition is deliberately broad, and the compliance obligation it creates is not a one-time check. It is a continuous assessment that begins at onboarding and persists for the duration of the relationship, and in many cases beyond it.
The distinction that matters operationally is not whether a customer is a PEP. It is what category of PEP they are, because the category determines the compliance response. A foreign PEP is always high risk and always requires enhanced due diligence. A domestic PEP requires a risk-based assessment, and that assessment must be documented, defensible, and reviewed at least annually. Getting the category wrong means either over-screening (wasting analyst capacity on standard-risk relationships) or under-screening (missing the enhanced controls the regulator expects).
This article covers the PEP categories under Philippine AML regulations, the EDD triggers for each, and how ongoing monitoring requirements differ from standard customer oversight.
What FATF Recommendation 12 requires
FATF Recommendation 12 establishes the international framework for PEP obligations. It defines three categories of politically exposed persons, each with distinct risk implications and compliance requirements.
Foreign PEPs are individuals who hold or have held prominent public functions in a foreign country. Under Recommendation 12, foreign PEPs are always considered higher risk. Enhanced due diligence is mandatory, not discretionary. There is no risk-based exception that allows a foreign PEP to be classified as standard or low risk.
Domestic PEPs are individuals who hold or have held prominent public functions within the institution's own country. Recommendation 12 takes a risk-based approach to domestic PEPs. Enhanced due diligence is required only when the business relationship is assessed as higher risk. The institution must make and document that assessment.
International organisation PEPs are individuals who hold or have held senior positions in international bodies such as the United Nations, the World Bank, or the International Monetary Fund. The FATF treats these the same as domestic PEPs: a risk-based approach, with EDD triggered by the risk assessment.
The framework extends beyond the PEP themselves to family members and close associates. Family members include spouses, children, parents, and parents-in-law. Close associates are individuals with a close personal or professional relationship, including joint beneficial owners of legal arrangements and sole beneficial owners of arrangements set up for the benefit of a PEP.
One provision that institutions frequently misapply: FATF Recommendation 12 does not prescribe a fixed period after which a former PEP ceases to be a PEP. The guidance is risk-based. The institution must assess how long the individual's influence and exposure to corruption risk persist after leaving office, and that assessment must be documented.
A second provision that matters: FATF guidance states explicitly that refusing to enter into or continuing a business relationship solely because the customer is a PEP is inconsistent with Recommendation 12. The obligation is to manage the risk, not to avoid it.
Philippine PEP categories under the 2018 IRRs
The 2018 Implementing Rules and Regulations of RA 9160 (the Anti-Money Laundering Act) define the specific positions that constitute domestic and foreign PEPs in the Philippine context. The categories are more granular than the FATF framework.
Domestic PEPs
Philippine domestic PEPs include the President, Vice President, cabinet secretaries, undersecretaries, and assistant secretaries. Members of the Senate and House of Representatives. Justices of the Supreme Court, Court of Appeals, Sandiganbayan, and Court of Tax Appeals. Generals of the Armed Forces of the Philippines and the Philippine National Police. Senior executives of government-owned and controlled corporations and government financial institutions. Local government unit heads. Chairs and commissioners of constitutional commissions. Senior officers of accredited national political parties.
The scope is extensive. A Philippine bank serving government employees, military personnel, or local officials will encounter domestic PEPs routinely. The compliance programme must be designed for volume, not exceptions.
Foreign PEPs
Foreign PEPs under the IRRs follow the FATF definition: individuals entrusted with prominent public functions by a foreign country. The critical distinction in the Philippine rules is that covered persons have no discretion to classify a foreign PEP as standard or low risk. The classification is automatic and the EDD obligation is mandatory.
Family members
The IRRs define family members as the PEP's legal spouse or common-law partner, children and their spouses or partners, and parents and parents-in-law. Siblings are included in the Philippine definition, which extends beyond the FATF minimum.
Close associates
Close associates are individuals known to have a close intimate personal or professional relationship with the PEP. This includes joint beneficial owners of legal entities or arrangements, and sole beneficial owners of entities or arrangements set up for the PEP's benefit.
The practical challenge is identification. A customer who is a close associate of a PEP may not disclose that relationship, and the institution's screening system may not detect it unless the PEP database includes associate records. This is where the quality of the screening data source matters as much as the matching algorithm.
EDD triggers and requirements
When EDD is mandatory
Enhanced due diligence is mandatory in two scenarios under the Philippine framework. First, for all foreign PEPs. No risk assessment is needed to trigger the obligation; the classification itself is the trigger. Second, for domestic PEPs, international organisation PEPs, and their family members and close associates when the risk assessment classifies the relationship as higher risk.
What EDD requires
The EDD requirements for PEPs go beyond standard customer risk rating procedures in three specific ways.
Senior management approval is required before establishing a new business relationship with a PEP. This is not a post-facto notification. The approval must be obtained in writing before the account is opened or the service is provided.
Source of wealth must be verified independently. Self-declaration is not sufficient. Acceptable documentation includes BIR tax returns, Statements of Assets, Liabilities, and Net Worth (SALNs for government officials), and audited financial statements. The institution must verify that the declared wealth is consistent with the individual's known sources of income.
Source of funds must be established separately from source of wealth. Source of wealth explains how the customer accumulated their assets over time. Source of funds explains where the specific money in the transaction or relationship originates. The distinction matters because a PEP with legitimate wealth may still receive funds from corrupt sources.
Ongoing monitoring for PEP relationships
Enhanced transaction monitoring
PEP relationships require transaction monitoring with lower alert thresholds than standard accounts. The logic is straightforward: the same transaction that is unremarkable for a standard customer may be significant for a PEP, because the risk profile is different.
What this means in practice is that your monitoring rules need PEP-specific parameters. A high-value transfer from a standard commercial account may sit below your alert threshold. The same transfer from a domestic PEP's personal account should trigger review. This requires your monitoring platform to support customer-segment-specific thresholds, not just global rules applied uniformly.
Periodic review frequency
Domestic PEP relationships classified as high risk require at least annual review. Very high-risk PEP relationships should be reviewed semi-annually. Each review must reassess the risk classification, verify that source-of-wealth documentation remains current, check for changes in the PEP's public position or status, and confirm that monitoring parameters remain appropriate.
The review is not a checkbox exercise. It must produce a documented risk assessment that either confirms the existing classification or changes it with supporting rationale.
Continuous adverse media screening
PEP monitoring includes continuous screening against adverse media sources beyond standard watchlists. For Philippine domestic PEPs, relevant sources include Sandiganbayan case dockets, Office of the Ombudsman investigations, Commission on Audit findings, and international sanctions designations.
This screening runs alongside the institution's standard sanctions screening programme but uses different sources and triggers. A PEP who is not on any sanctions list may still be the subject of a corruption investigation, a lifestyle check, or an unexplained wealth order. Adverse media screening is designed to catch those signals.
Post-office obligations
When a PEP leaves office, EDD requirements do not end immediately. The Philippine framework requires EDD to continue for at least one year after the individual leaves the position that qualified them as a PEP.
After that initial period, the institution must conduct a documented risk assessment to determine whether the individual's influence and exposure to corruption risk have diminished sufficiently to reclassify the relationship. The high-risk classification may persist indefinitely if the assessment concludes that the risk factors remain present. A former president, for example, may retain significant political influence and access to government networks long after leaving office.
What this means for your screening programme
PEP database quality
The effectiveness of PEP screening depends on the comprehensiveness and accuracy of the PEP database your institution screens against. A database that covers only heads of state and cabinet ministers will miss the legislative, judicial, military, and local government positions that the Philippine IRRs include. A database that does not include family members and close associates will miss the relationships that create the highest practical risk.
Evaluate your PEP data source and PEP list coverage against the full Philippine domestic PEP definition. If your database does not cover LGU heads, constitutional commission members, GOCC senior executives, and national political party officers, you have a coverage gap.
Screening configuration for PEP matches
PEP matches require different handling than sanctions matches. A sanctions match may require immediate transaction blocking. A PEP match triggers a risk assessment and, potentially, enhanced due diligence. Your screening workflow must distinguish between the two and route each to the appropriate process.
The screening system should flag PEP matches with sufficient context for the analyst to make the risk assessment: the PEP's current or former position, the category (domestic, foreign, international organisation, family, associate), the source of the data, and the date of the last database update. Without this context, the analyst is making a classification decision without the information needed to make it correctly.
Filing obligations
PEP status alone does not trigger a suspicious transaction report. What triggers an STR is suspicious activity in a PEP account, the same standard that applies to any customer. The difference is that the enhanced monitoring applied to PEP accounts is more likely to surface the activity that warrants a filing.
When an STR is filed on a PEP, the narrative must reflect the enhanced due diligence that was performed, the monitoring parameters that were applied, and the specific activity that triggered the report. An STR on a PEP that reads identically to an STR on a standard customer suggests the enhanced controls were not actually in place.
These principles also align with Section 905 of the BSP Manual of Regulations for Banks, as amended by BSP Circular 950. If you want to see how PEP screening, risk-based EDD workflows, and configurable monitoring thresholds work inside a single AML platform, book a walkthrough of Fyscal ARCX and bring your current PEP policy with you.