Politically Exposed Persons Monitoring: A KYC-AML Exam Guide (2026)

Every JAIIB and CAIIB candidate eventually meets a question on politically exposed persons monitoring, and most lose marks not because the concept is hard but because they confuse it with plain customer due diligence. A PEP is not automatically a suspicious customer — but RBI's KYC Master Direction requires banks to treat such accounts with a permanently higher risk lens, from onboarding right through account closure. This guide walks through the exam-relevant rules on identification, enhanced due diligence, family/associate coverage, and ongoing monitoring, so you can answer both the definitional and the scenario-based questions confidently.

🕵️ Who Qualifies as a Politically Exposed Person

The RBI KYC Master Direction defines a Politically Exposed Person as an individual who is or has been entrusted with a prominent public function in a foreign country — think heads of state, senior politicians, senior government, judicial or military officials, senior executives of state-owned corporations, and important political party officials. Note the word "foreign": the Indian regulatory framework's PEP definition is explicitly built around foreign public functionaries, though banks are expected to apply similar caution to domestic prominent public figures as a matter of prudent risk management, even where the strict legal PEP tag does not apply.

This distinction is a favourite exam trap. Questions often present a senior Indian bureaucrat or a state minister and ask whether the account must be treated as a "PEP account" under the master direction — the technical answer is that the formal PEP classification is for foreign public functionaries, while domestic dignitaries are handled under a bank's internal enhanced-monitoring policy. Once a customer is identified as a PEP, the bank must obtain senior management approval before establishing the relationship, and must continue that heightened posture for as long as the relationship lasts, not just at onboarding. Practically, this ties directly into the account-opening controls covered under customer identification and beneficial ownership requirements, since a PEP determination is really a special case of knowing exactly who you are banking.

💡 Exam Tip: If a question asks "who approves opening an account for a PEP," the answer is always senior management — never a branch manager acting alone, regardless of relationship value.

📋 Enhanced Due Diligence Requirements for PEP Accounts

Once flagged, a PEP account moves into the enhanced due diligence (EDD) track rather than the standard KYC track. This means the bank must establish the source of wealth and source of funds using more than a self-declaration — independent verification, where feasible, is expected. It also means more frequent periodic updation of KYC records; while a low-risk customer may be reviewed once every ten years and medium-risk once every eight years, PEP accounts sit in the high-risk bucket and are reviewed at least every two years, sometimes annually depending on the bank's internal risk matrix.

Transaction monitoring thresholds are also tightened. Alerts that would be routine for a standard retail account — a large cash deposit, a sudden inflow from an overseas remittance, a pattern of round-tripping — get escalated faster and reviewed by a more senior compliance function when the account belongs to a PEP. This is the same logic that governs correspondent banking due diligence, where the counterparty's own KYC rigour becomes the deciding factor in whether a relationship is even opened. The KYC specific requirements chapter is worth revisiting here, since it lays out the documentation hierarchy banks must follow for high-risk categories — see the KYC specific requirements chapter for the full list of officially valid documents and the risk-categorisation logic that feeds into EDD triggers.

⚠️ Common Mistake: Students often assume a PEP account can be closed the moment risk is detected. In reality, banks must first file the relevant suspicious transaction report and only then decide on exit, following board-approved exit procedures — abrupt account closure without documentation is itself a compliance lapse.

🌍 Family Members, Close Associates and Cross-Border Risk

The PEP net is wider than just the named individual. Family members and close associates of a PEP — spouses, children, parents, and known business partners — are also brought under the same enhanced monitoring regime, because layering money through relatives is one of the oldest tricks in the money-laundering playbook. A joint account, a beneficiary nomination, or even a guarantor relationship linked to a known PEP is enough to trigger the enhanced review, which is why relationship managers are trained to run family-network checks, not just individual-name checks, during onboarding.

Country risk compounds this further. An account holder connected to a jurisdiction with weak AML supervision, active conflict, or FATF grey-list status attracts additional scrutiny even without a PEP tag, and the two risk factors stack when both are present — a foreign PEP from a high-risk jurisdiction is about as high-risk as a KYC file gets. This cross-border angle links closely with two other exam-heavy areas: the country-risk chapter within this subject, and the broader sibling topics on sanctions screening in banks and beneficial ownership identification, both of which examiners like to combine with PEP scenarios in a single case-study question.

📌 Remember: PEP status is a lifetime tag in practice — even after a person demits public office, RBI guidance requires continued enhanced monitoring for a reasonable period, since influence and residual risk don't vanish the day a term ends.

⏱️ Ongoing Monitoring, Reporting and Exit Triggers

PEP monitoring does not stop at onboarding — it is a continuous obligation. Banks must run their PEP accounts through periodic name-screening against updated global PEP and sanctions databases, refresh risk ratings when public roles change, and document every review decision for audit trail purposes. Where transaction patterns don't match the declared source of funds or business profile, the account triggers a Suspicious Transaction Report to FIU-India, following the same reporting discipline used for other high-risk categories under the broader anti-money-laundering framework.

For exam purposes, remember the sequencing: identify → senior management approval → EDD onboarding → continuous monitoring → periodic KYC updation → STR filing if warranted → documented exit if risk becomes unmanageable. Examiners frequently scramble this sequence in MCQs and ask you to spot the step that's out of order, so internalising the flow (not just the individual facts) is the fastest way to lock in marks on this topic.

Before moving to practice questions, it helps to place this topic within the wider subject map. Money-laundering typologies, global measures and country-risk material all feed into how examiners frame PEP scenarios — the country risk and money laundering chapter is a natural companion read, and the sibling article on FATF 40 Recommendations explains the global standard-setting body whose guidance underpins India's PEP rules. You can browse every related post on the KYC-AML and CFT tag hub, and check the latest circular updates at RBI rates and regulatory updates before your exam. For the authoritative regulatory text itself, the RBI's KYC Master Direction is hosted on the Reserve Bank of India website and is worth skimming at least once before test day.

🧠 Practice MCQs: Politically Exposed Persons Monitoring

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

❓ Frequently Asked Questions

Mastering politically exposed persons monitoring means learning the sequence — identification, senior approval, enhanced due diligence, continuous monitoring, and documented exit — rather than memorising isolated facts. Reinforce it with full-length CAIIB and JAIIB mock papers, and browse more KYC-AML explainers on the iibf.store blog to round out your revision.