What Are PEP Tiers? Understanding Tier 1-4 and RCAs

A PEP flag is a starting point, not a complete AML risk assessment. A head of government, regional official or political associate may trigger screening, but each presents different risks. PEP tiers help compare seniority and influence, while RCA screening identifies relevant family and business connections.

PEP status is not evidence of criminal conduct. FATF treats PEP controls as preventive measures. Tier 1-4 classifications help prioritise reviews but are not universal regulatory standards. Lower-tier PEPs may still pose high risk due to factors such as opaque ownership, unexplained wealth or high-risk jurisdictions.

In this guide, you’ll learn what PEP tiers 1-4 mean, how PEP classification and PEP levels differ from overall customer risk ratings, and how relatives and close associates fit into PEP screening. We’ll also cover enhanced due diligence, ongoing monitoring and practical ways to assess PEP-related risk through effective RCA screening.

What Are PEP Tiers?

PEP tiers are categories used by some AML teams and screening providers to group politically exposed persons by public influence. A common four-tier model ranks the most prominent national roles as Tier 1, with less senior, regional or local roles in later tiers. These PEP levels can support operational decision-making, but FATF does not mandate this system, so definitions vary.

PEP classification helps prioritise screening, enhanced due diligence, source-of-wealth and source-of-funds checks, approval and monitoring. It is not the same as a customer risk rating: other factors, such as geography, ownership, adverse media, transaction activity and RCA screening results, must also be considered.

PEP Tier 1-4 Classification at a Glance

PEP tiers help financial institutions and screening providers group politically exposed persons by prominence and potential risk. This form of PEP classification can make alerts easier to prioritise, but Tier 1-4 is not a universal FATF classification system. Definitions vary by provider, jurisdiction and internal policy, so the table below is illustrative rather than legally fixed.

A Tier 1 PEP generally requires the closest review, but any PEP tier or PEP level can present meaningful risk. Assess the individual’s role, jurisdiction, RCA relationships, beneficial ownership, sanctions, adverse media, source of wealth, source of funds and ongoing monitoring results before assigning an overall customer risk rating. 

Effective RCA screening is particularly important where family or business connections may create indirect exposure.

What Is a Tier 1 PEP?

A Tier 1 PEP is generally among the most politically prominent individuals in a screening provider’s framework, although Tier 1 is not a universal FATF category. Examples may include heads of state or government, senior ministers, central bank governors, senior judges and military leaders. This PEP classification generally represents the highest PEP level within a provider’s model.

A match may require enhanced due diligence, source-of-wealth and source-of-funds checks, senior management approval and ongoing monitoring. RCA screening should also be considered where relevant family members, close associates or connected entities are identified. However, Tier 1 status is a risk indicator, not evidence of wrongdoing, and should not alone determine the customer’s overall AML risk rating.

What Is a Tier 2 PEP?

A Tier 2 PEP generally holds a highly influential public or institutional role below the most senior national positions. Examples may include ambassadors, senior diplomats, military officers, judges, international organisation leaders, state-owned enterprise executives and regional officials. Within many PEP classification frameworks, this represents a high but not necessarily top PEP level.

Because Tier 2 is not a universal regulatory category, definitions vary by provider. Assess the individual’s role, jurisdiction, current or former status, ownership, source of wealth and funds, adverse media and other risk factors. RCA screening can help identify connected individuals or entities that may affect the assessment. Enhanced due diligence and ongoing monitoring may be appropriate based on the overall customer risk profile.

What Is a Tier 3 PEP?

A Tier 3 PEP generally holds a qualifying political or public-sector role below senior national leadership, such as a regional official, political adviser or senior subnational civil servant. Definitions vary by provider, and the same role may receive a different PEP classification or PEP level in another database.

Tier 3 does not automatically mean low risk; firms should also assess jurisdiction, public function, ownership, source of wealth and funds, adverse media, sanctions and RCA relationships. Where risk indicators exist, RCA screening, enhanced due diligence and ongoing monitoring may be appropriate.

What Is a Tier 4 PEP?

A Tier 4 PEP generally refers to someone with comparatively lower or local political prominence, such as a municipal or district official. However, Tier 4 is not a globally standardised regulatory category, so definitions vary by provider and jurisdiction. It is therefore important to confirm the provider’s PEP classification methodology before relying on this PEP level.

It is a screening indicator, not a final risk rating. Teams should verify the person’s identity and role, assess relevant risk factors, conduct RCA screening where appropriate, and apply proportionate due diligence and monitoring.

Are PEP Tiers the Same as PEP Risk Levels?

Not necessarily. A PEP tier generally reflects a person’s political seniority and prominence, while PEP levels may be used by different providers to organise relative exposure. Neither necessarily represents the customer’s complete risk. Tiering varies by provider and is not a fixed FATF standard. It helps prioritise PEP screening and determine whether enhanced due diligence may be appropriate.

A customer's PEP risk rating requires a broader, dynamic assessment. Consider their PEP status, jurisdiction, source of wealth and funds, ownership, customer profile, transaction behaviour, adverse media and sanctions exposure. PEP classification is only one input, not a complete risk rating. This supports proportionate CDD, EDD, approvals and ongoing monitoring without assuming every PEP or RCA is high risk.

Domestic, Foreign and International Organisation PEPs

PEP classification depends on whether an individual holds a prominent public function domestically, abroad or within an international organisation.

Understanding these categories helps compliance teams apply appropriate PEP screening, AML checks, RCA screening and risk-based due diligence. Although PEP tiers and PEP levels can help organise alerts, the underlying regulatory category and customer circumstances should guide the final assessment.

Foreign PEPs

Foreign politically exposed persons (PEPs) are individuals who hold or have held prominent public roles in another country, such as senior politicians, judges, military leaders or central bank officials.

FATF Recommendation 12 requires enhanced due diligence, including senior management approval, source-of-wealth and source-of-funds checks, and ongoing monitoring. PEP status is not evidence of wrongdoing but should be assessed alongside jurisdiction, ownership, adverse media and transaction activity. Where relevant, RCA screening should also identify family members and close associates connected to the foreign PEP.

Domestic PEPs

Domestic PEPs hold or have held prominent public functions in their own country. In the UK, they should generally be treated as lower risk than non-domestic PEPs unless additional risk factors exist. Firms should still assess factors such as political influence, procurement powers, source of wealth, source of funds and adverse media on a case-by-case basis.

A domestic PEP may appear in a particular PEP tier or PEP level within a screening database, but that classification should not replace a broader customer risk assessment. RCA screening may also be appropriate where family, ownership or business relationships create additional exposure.

International Organisation PEPs

International organisation PEPs are individuals holding prominent roles at bodies such as the United Nations, World Bank or IMF. FATF may include senior managers, directors, deputy directors and equivalent officials. Firms should verify the role, tenure and connections, then assess corruption, sanctions and ownership risks. PEP status informs screening and EDD but does not automatically determine overall customer risk.

The relevant PEP classification, PEP tier or PEP level should be recorded where available, while RCA screening should be conducted when the customer has a documented relationship with a qualifying PEP.

What Does RCA Mean in PEP Screening?

RCA stands for Relatives and Close Associates. In PEP screening, it refers to someone connected to a politically exposed person through family, business, ownership or another close relationship. RCAs are not automatically PEPs or evidence of wrongdoing, but they may require additional review.

Effective RCA screening helps compliance teams identify indirect exposure that may not appear when screening only the officeholder’s name. Teams should verify the relationship, assess ownership, source of wealth and funds, sanctions, adverse media and jurisdictional risk. Definitions vary by jurisdiction, so firms should follow applicable law and their documented risk methodology.

An RCA may be linked to the underlying PEP’s PEP tier or PEP level in some commercial databases, but this is not a universal regulatory rule. The relationship should remain clearly documented as part of the wider PEP classification and customer risk assessment.

Who Counts as a Close Associate of a PEP?

A PEP close associate is someone with a documented professional, financial or ownership relationship that may create indirect AML risk. Examples include joint beneficial owners, close business partners and people who own entities established for a PEP’s benefit.

Being a colleague, acquaintance or employee does not automatically qualify someone as an RCA. Compliance teams should verify the relationship, assess ownership, check sanctions and adverse media, and apply relevant PEP due diligence requirements. RCA screening should focus on evidence of a meaningful connection rather than assumptions based on proximity or association.

Where a screening provider assigns an RCA to a particular PEP tier or PEP level, firms should review the provider’s methodology and apply their own risk-based PEP classification. The RCA’s overall risk may differ from the connected PEP’s risk and should be assessed using the customer’s own circumstances, behaviour and financial profile.

How Should Businesses Assess the Risk of a PEP or RCA?

Assessing PEP and RCA risk requires more than confirming a screening match or relying on a PEP tier. Businesses should combine political exposure with customer, geographic, ownership and financial information.

A risk-based PEP assessment helps compliance teams determine whether enhanced due diligence, source-of-wealth checks, senior management approval or ongoing monitoring may be appropriate. It also helps teams apply PEP classification and PEP levels consistently without treating either as a substitute for a complete customer risk assessment.

Step 1: Confirm the PEP match

Verify the customer's identity using identifiers such as full name, date of birth, nationality, location, public position and tenure. Accurate identity resolution helps distinguish a genuine politically exposed person from a false positive caused by a common-name match.

Do not escalate a customer based solely on a name similarity. Confirm whether the individual is a current or former PEP, and document the evidence supporting the PEP screening result before applying enhanced due diligence or assigning a higher PEP risk level. This first step also ensures that any subsequent PEP classification is based on the correct individual.

Step 2: Identify the exact public function

Establish the individual's current or former role, seniority, institution, jurisdiction and period in office. The exact public function helps determine whether the person qualifies as a foreign PEP, domestic PEP or international organisation PEP.

Record the role clearly because PEP tiers, PEP levels and classifications vary between screening providers. A precise position assessment supports proportionate PEP compliance, source-of-wealth checks, source-of-funds verification and ongoing monitoring.

Step 3: Determine relationship to the customer

Determine whether the customer is the PEP, a family member, a relative, a close associate or a beneficial owner connected to the PEP. Also check whether the customer is a director, shareholder or joint beneficial owner alongside a politically exposed person.

Identifying the relationship is essential for RCA screening and beneficial ownership analysis. Relatives and close associates may create indirect PEP exposure, but their risk should be assessed based on the nature, evidence and closeness of the relationship rather than assumed automatically. Effective rca screening should therefore record both the relationship type and the connected PEP's relevant PEP classification or PEP level.

Step 4: Assess geography and corruption exposure

Assess the relevant jurisdiction's institutional strength, corruption environment, political stability, AML/CFT controls, transparency and enforcement record. These factors can materially affect the customer's overall PEP risk assessment, regardless of the assigned PEP tier or other PEP levels used by a provider.

FCA and HMRC guidance also highlight corruption levels, government procurement influence, licensing powers and institutional transparency as relevant indicators. Combine geographic risk with adverse media, sanctions screening, ownership information and customer behaviour to support a documented, risk-based decision.

Step 5: Assess source of wealth and funds

Assess whether the customer’s source of wealth and source of funds are understandable, documented and proportionate to their occupation, public function and known circumstances. For PEPs and RCAs, unexplained wealth, inconsistent income or complex transfers may indicate elevated corruption or money-laundering risk.

Request reliable evidence where appropriate, such as financial statements, employment records, ownership documents, tax information or transaction records. The level of enhanced due diligence (EDD) should reflect the customer’s overall risk profile and the requirements of applicable AML/CFT regulations, rather than being determined solely by PEP tiers or a database's PEP classification.

Step 6: Screen for additional risk signals

Combine PEP screening with sanctions and watchlist checks, adverse media screening and reviews for credible criminal allegations. Also examine opaque companies, unusual ownership structures, unexplained beneficial ownership and links to high-risk jurisdictions or industries.

These indicators should be assessed in context rather than treated as automatic proof of wrongdoing. A genuine PEP match combined with sanctions exposure, adverse media or unclear ownership may require escalation and deeper compliance review. The same principle applies during rca screening, particularly where an RCA is connected to complex entities or unexplained financial activity.

Step 7: Calculate overall risk

PEP status and tier should feed into a broader dynamic risk assessment rather than become the entire customer risk score. Consider the individual’s public function, domestic or foreign status, jurisdiction, RCA relationships, beneficial ownership, source of wealth, source of funds and transaction behaviour.

A lower PEP tier or lower PEP level can still involve high risk when other AML indicators are present. Similarly, a prominent PEP should be assessed using documented, proportionate criteria rather than automatically rejected or treated as suspicious. PEP classification is useful for organising exposure and prioritising review, but it should not replace the overall customer risk assessment.

Step 8: Apply proportionate controls

The overall risk outcome should determine the appropriate level of enhanced due diligence, senior-management approval, review frequency and ongoing monitoring. Higher-risk PEP or RCA relationships may require more detailed verification, closer transaction monitoring and regular reassessment.

Document the rationale for each decision, including the evidence reviewed and controls applied. Clear records support consistent PEP compliance, demonstrate a risk-based approach and create an audit trail for future reviews. They also help ensure that PEP tiers, PEP levels, PEP classification and rca screening results are used consistently across the customer lifecycle.

Common PEP Classification Mistakes to Avoid

PEP classification helps compliance teams organise political exposure, compare PEP levels and prioritise alerts, but it can also lead to inaccurate risk assessments when applied without context.

Avoiding common mistakes in PEP screening, RCA screening, RCA identification and AML risk assessment helps businesses apply proportionate enhanced due diligence and ongoing monitoring.

Assuming every PEP is automatically a criminal or unacceptable customer

Problem: Treating every PEP as criminal or automatically unacceptable can cause unfair decisions and inconsistent AML compliance. PEP status indicates risk, not wrongdoing.

Solution: Confirm the match, assess relevant risk factors, and apply proportionate EDD and ongoing monitoring.

Confusing PEP tier with overall customer risk

Problem: A PEP tier shows political prominence, not the customer's complete risk level. It may overlook geography, ownership, sanctions, products and transaction behaviour.

Solution: Use PEP classification and the relevant PEP levels alongside jurisdiction, ownership, source of wealth and funds, adverse media and other AML/CFT indicators to determine appropriate controls. Remember that PEP tiers are useful for triage but do not automatically establish a customer's overall risk rating.

Screening the PEP but ignoring RCAs

Problem: Screening only the officeholder can miss indirect exposure through relatives and close associates (RCAs), connected companies or legal arrangements.

Solution: Conduct appropriate RCA screening, review beneficial ownership and connected entities, assess the relationship, and monitor for unexplained transfers or other AML risks.

Automatically removing a PEP flag when someone leaves office

Problem: Removing a PEP flag immediately after someone leaves office can overlook continuing influence, business relationships and unresolved corruption risks.

Solution: Reassess former PEPs based on seniority, jurisdiction, ongoing influence, business interests, adverse media and source of wealth. Continue proportionate enhanced due diligence and monitoring while relevant risks remain.

Treating an RCA as guilty by association

Problem: Treating an RCA as suspicious solely because of their connection to a PEP can lead to unfair and poor AML decisions.

Solution: Verify the relationship, assess the RCA independently, review relevant risk factors, and document a proportionate, risk-based decision.

Bottom Line

PEP tiers can help prioritise screening, organise PEP levels and support PEP classification, but they do not replace a complete AML risk assessment. Because definitions vary, assess each individual’s public function, domestic or foreign status, current or former role, and any RCA relationship.

Effective compliance also considers geography, beneficial ownership, sanctions, adverse media, source of funds, source of wealth and ongoing monitoring. Apply enhanced due diligence proportionately, based on documented evidence rather than political status or tier alone. Appropriate RCA screening should also form part of the wider risk-based process where relevant.

Binderr Services helps businesses simplify PEP screening, RCA screening, AML checks and ongoing compliance monitoring in one place.

FAQs About PEP Tiers