Blog Image

PEP Screening UAE: What Businesses Need to Know

If your business operates in the UAE, PEP screening should be an important part of your AML and customer due diligence process.

Politically Exposed Persons, commonly known as PEPs, can present higher money laundering and corruption risks because of their public position, influence or access to public resources. That does not mean every PEP is involved in financial crime. Instead, UAE AML rules require businesses to identify PEPs and apply additional controls where the relevant risk exists.

For businesses, the challenge is often knowing what PEP screening actually involves.

Is asking a customer whether they are a PEP enough? Do beneficial owners need to be screened? What happens when a customer is identified as a PEP? And can a business simply refuse to work with them?

This guide explains the basics of PEP screening in the UAE, including who should be screened, what businesses need to do after a PEP match and common mistakes to avoid.

What Is a Politically Exposed Person (PEP)?

A Politically Exposed Person is generally an individual who is or has been entrusted with a prominent public function in the UAE or another country.

The UAE AML framework includes roles such as:

  • Heads of state or government
  • Senior politicians
  • Senior government officials
  • Judicial officials
  • Military officials
  • Senior executives of state-owned corporations
  • Senior officials of political parties
  • Individuals entrusted with management or prominent functions in international organisations

The definition can also extend to certain family members and known close associates of a PEP.

This is important because PEP screening is not simply about checking the name of the person sitting in front of you.

A business may also need to consider whether a customer’s beneficial owner, beneficiary, family member or close associate falls within the relevant PEP category.

Why Is PEP Screening Important in the UAE?

PEPs can potentially have greater access to government contracts, public funds, regulatory decisions or other resources. Because of this, the UAE AML framework treats relevant PEP relationships as requiring additional scrutiny based on the applicable risk classification.

The purpose of PEP screening is not to label someone as a criminal.

In fact, the UAE Central Bank’s guidance makes clear that PEP requirements are not intended to mean that businesses should automatically avoid dealing with PEP customers. Instead, businesses should conduct the necessary due diligence and make informed, risk-based decisions about whether to establish or continue the relationship.

That distinction is important.

PEP status is a risk factor, not proof of wrongdoing.

Who Should Businesses Screen?

An effective PEP screening process should go beyond the customer’s name.

Depending on the nature of the business and applicable regulatory requirements, businesses should consider screening:

  • Customers
  • Beneficial owners
  • Beneficiaries
  • Controlling persons
  • Relevant family members
  • Known close associates

For legal entities, this is particularly important.

Imagine a company approaches your business for a new relationship. The company itself does not appear to be a PEP, but its ultimate beneficial owner is a senior government official.

The PEP risk has not disappeared simply because the customer is a company.

The UAE Central Bank specifically requires financial institutions to have systems to determine whether a customer or beneficial owner is a PEP.

What Is PEP Screening?

PEP screening is the process of checking whether a customer or relevant connected person matches information identifying them as a politically exposed person.

A business may use:

  • Automated screening systems
  • Commercial PEP databases
  • Public databases
  • Reliable background information
  • Manual internet searches
  • Other appropriate screening and due diligence sources

The CBUAE guidance specifically recognises automated screening systems and background searches as tools that financial institutions can use to identify PEPs.

However, simply purchasing a screening tool does not automatically make a company’s PEP process compliant.

The business still needs a procedure for reviewing potential matches and deciding what action should be taken.

When Should PEP Screening Be Performed?

During Customer Onboarding

PEP screening should form part of the initial customer due diligence process.

Before establishing a business relationship, the business should determine whether the customer or relevant beneficial owner is a PEP where applicable. CBUAE guidance states that PEP classification should take place during CDD before the business relationship begins.

A customer questionnaire can ask whether the person is a PEP, but businesses should not rely only on the customer’s answer.

The CBUAE specifically advises that a customer’s own declaration should be supplemented with additional due diligence.

During Ongoing Monitoring

PEP screening should not necessarily be treated as a one-time onboarding exercise.

A customer’s circumstances can change.

Someone who was not politically exposed when the relationship started could later be appointed to a prominent public position.

Similarly, an existing beneficial owner may become a PEP.

For certain CBUAE-regulated licensed persons, the rulebook requires periodic PEP checks, including at least once every 12 months in the relevant context.

Businesses should therefore establish an appropriate ongoing screening process based on their regulatory requirements and risk profile.

What Happens If a Customer Is Identified as a PEP?

Finding a PEP match does not mean that the business should immediately reject the customer.

Instead, the business should investigate the match and apply the appropriate enhanced due diligence measures.

For foreign PEPs, the UAE AML framework requires relevant businesses to:

  1. Have appropriate risk-management systems to identify PEPs.
  2. Obtain senior management approval before establishing or continuing the relevant business relationship.
  3. Take reasonable measures to establish the source of funds and source of wealth.
  4. Conduct enhanced ongoing monitoring.

The exact treatment of domestic PEPs and persons entrusted with prominent functions in international organisations depends on the applicable risk circumstances. Where the relationship is high risk, the additional measures can apply.

Source of Wealth vs Source of Funds

This is an area where businesses sometimes get confused.

Source of Wealth

Source of wealth is about how the customer’s overall wealth was accumulated.

For example, the business may need to understand whether wealth comes from:

  • Salary or professional income
  • Business ownership
  • Investments
  • Property
  • Inheritance
  • Other legitimate sources

Source of Funds

Source of funds is about where the money involved in a particular transaction or relationship actually comes from.

For example, a customer may have substantial personal wealth, but the business may still need to understand where the specific funds being used for a transaction originated.

For relevant PEP relationships, UAE AML requirements call for reasonable measures to establish both source of funds and source of wealth.

What Is Enhanced Due Diligence for PEPs?

Enhanced Due Diligence, or EDD, means applying additional scrutiny where the risk warrants it.

For a PEP relationship, this may include:

  • Obtaining additional identification information
  • Understanding the customer’s professional background
  • Establishing source of wealth
  • Establishing source of funds
  • Understanding ownership structures
  • Reviewing relevant adverse information
  • Increasing transaction monitoring
  • Obtaining required senior-management approval
  • Conducting periodic reviews

The exact EDD measures should be proportionate to the risks identified.

A good PEP process is not about collecting paperwork for its own sake. It is about understanding who the customer is, where their money comes from and whether the relationship creates unacceptable AML/CFT risks.

PEP Screening and Beneficial Ownership

Beneficial ownership is one of the most important parts of PEP screening.

Consider this example:

A UAE company wants to open a business relationship with your firm. The company’s shareholder structure includes another company, which is ultimately owned by an individual who holds a prominent government position.

If your screening process only checks the name of the UAE company, you may completely miss the relevant PEP connection.

That is why businesses need to understand the customer’s ownership and control structure as part of their CDD process.

The CBUAE requires financial institutions to consider whether the beneficial owner is a PEP, not simply whether the direct customer is one.

What About Family Members and Close Associates?

PEP screening can extend beyond the PEP themselves.

The UAE framework includes direct family members and known close associates within the relevant definition. The CBUAE identifies direct family members as including spouses, children, spouses of children and parents. Known close associates can include people with joint ownership or other close business relationships with the PEP in specified circumstances.

This means businesses should not assume that a customer is outside the PEP framework simply because their own name does not appear as the primary PEP.

Can a Business Refuse a PEP Customer?

PEP status alone does not automatically mean that a business must refuse the relationship.

The UAE’s approach is risk-based.

The objective is to identify the risk, perform appropriate due diligence and make an informed decision.

However, if the business cannot satisfactorily understand the customer’s identity, beneficial ownership, source of wealth, source of funds or other relevant risk factors, it may need to reconsider whether the relationship can be established or continued.

A business should also follow its internal AML risk appetite and the requirements of its relevant Supervisory Authority.

PEP Screening vs Sanctions Screening

These two checks are sometimes confused, but they are not the same.

PEP Screening

Looks for political exposure and related risk factors.

Sanctions Screening

Looks for individuals, entities or countries subject to applicable financial sanctions or restrictions.

A person can be a PEP without being sanctioned.

Likewise, a person can be sanctioned without being a PEP.

For that reason, businesses should not treat PEP screening as a replacement for sanctions screening or other AML checks.

The CBUAE AML guidance treats sanctions screening and PEP/EDD measures as separate components of the wider CDD framework.

Common PEP Screening Mistakes in the UAE

1. Asking the customer and stopping there

A customer saying “No, I am not a PEP” is not necessarily enough.

The CBUAE advises businesses not to rely solely on customer declarations.

2. Screening only the customer

A business may screen the director but forget about the ultimate beneficial owner.

That can create a significant gap in the AML process.

3. Treating every PEP as automatically suspicious

Being a PEP is not evidence of money laundering.

The correct approach is to assess and manage the risk.

4. Failing to obtain required approval

For relevant foreign PEP relationships, senior management approval is required before establishing or continuing the business relationship.

5. Not checking source of wealth and source of funds

PEP screening should lead into appropriate enhanced due diligence rather than ending with a database match.

6. Screening only once

PEP status can change, so ongoing screening and monitoring are important.

7. Ignoring false positives

A name match does not automatically mean you have found the correct person.

Businesses should compare information such as:

  • Full name
  • Date of birth
  • Nationality
  • Country
  • Position
  • Employer
  • Other identifying information

before treating a screening result as a confirmed match.

How Businesses Can Build a Better PEP Screening Process

A practical PEP screening framework can follow these steps:

Step 1: Identify the Customer

Complete normal KYC and CDD procedures.

Step 2: Identify Beneficial Owners

Understand who ultimately owns or controls the customer.

Step 3: Conduct PEP Screening

Use appropriate screening tools and reliable information sources.

Step 4: Investigate Potential Matches

Do not automatically classify every name match as a confirmed PEP.

Review additional identifying information.

Step 5: Determine the PEP Category

Establish whether the person is a foreign PEP, domestic PEP, related family member, close associate or another relevant category.

Step 6: Assess the Overall Risk

Consider the customer’s business, geography, transactions, ownership, source of funds and other relevant risk factors.

Step 7: Apply EDD Where Required

Obtain additional information and documentation appropriate to the risk.

Step 8: Obtain Required Approval

Where applicable, obtain senior-management approval before establishing or continuing the relationship.

Step 9: Monitor the Relationship

Pay attention to unusual or unexplained transactions and changes in the customer’s risk profile.

Step 10: Keep Records

Document the screening result, investigation, decision, approvals and relevant EDD performed.

PEP Screening Checklist for UAE Businesses

Use this as a starting point for your internal AML process:

  • [ ] Screen customers during onboarding
  • [ ] Screen beneficial owners
  • [ ] Consider relevant family members and close associates
  • [ ] Use reliable screening sources
  • [ ] Investigate potential matches
  • [ ] Avoid relying only on customer declarations
  • [ ] Establish source of wealth where required
  • [ ] Establish source of funds where required
  • [ ] Obtain senior-management approval where required
  • [ ] Apply enhanced ongoing monitoring
  • [ ] Conduct periodic/rescreening checks
  • [ ] Document decisions and EDD
  • [ ] Escalate genuinely suspicious activity through the appropriate AML reporting process

Frequently Asked Questions

Is PEP screening mandatory in the UAE?

UAE AML requirements require relevant Financial Institutions, DNFBPs and other covered entities to have appropriate systems and measures to identify PEPs and apply the applicable enhanced measures. The exact obligations depend on the entity’s regulatory framework and the type of PEP relationship.

Does being a PEP mean someone is suspicious?

No. PEP status is a risk factor and does not itself establish criminal or suspicious activity.

The purpose of PEP controls is to apply appropriate due diligence and risk management.

Do UAE nationals need PEP screening?

PEP screening should not be limited to foreign nationals. The UAE framework distinguishes between foreign and domestic PEPs, with additional measures depending on the category and risk of the relationship.

Do beneficial owners need to be screened for PEP status?

Yes. Relevant AML requirements specifically address identifying whether the beneficial owner is a PEP.

How often should PEP screening be performed?

Businesses should conduct onboarding screening and appropriate ongoing screening. For certain CBUAE-regulated licensed persons, the rulebook specifies checks at least every 12 months in the relevant circumstances. Businesses should follow the requirements applicable to their sector and Supervisory Authority.

Can a PEP customer still open a business account?

Potentially, yes. PEP status does not automatically prohibit a business relationship. The business must apply the appropriate risk-based due diligence, approvals and monitoring required by the applicable AML framework.

Final Thoughts

PEP screening in the UAE is more than checking a customer’s name against a database.

A strong process connects PEP screening with KYC, beneficial ownership checks, risk assessment, source-of-funds and source-of-wealth checks, enhanced due diligence and ongoing transaction monitoring.

The most important thing for businesses to remember is that PEP status is not proof of wrongdoing. It is a signal that may require additional scrutiny.

If your business identifies a potential PEP, don’t panic and don’t automatically reject the customer. Verify the match, understand the person’s role and relationship to the customer, assess the overall risk and apply the appropriate AML controls.

A well-designed PEP screening process helps businesses make informed decisions while strengthening their wider UAE AML compliance framework.