How to conduct a background check on a PEP in a high-risk country

A politically exposed person (PEP) is someone who holds, or has held, a prominent public function, along with certain family members and close associates. The designation does not mean the person has committed bribery, fraud or money laundering. It signals that the individual may have greater access to public funds, regulatory decisions, procurement processes or state-owned enterprises, creating a higher compliance risk.

For an Australian company, screening a PEP in a high-risk country requires more than entering a name into a commercial database. A reliable review should establish the person’s identity, public role, wealth, business interests, relationships and exposure to government decisions. It should also test whether the proposed transaction could create an Australian foreign bribery, sanctions, money laundering or reputational risk.

The work becomes more difficult where records are incomplete, political institutions are weak, beneficial ownership is concealed or local reporting is unreliable. Transliteration can produce several spellings of the same name, while common names can generate false matches. A credible process therefore combines technology with human review, documentary evidence and a written decision trail.

The objective is risk-based rather than automatic exclusion. A business may be able to work lawfully with a PEP, but it should understand the connection, obtain appropriate approvals, apply enhanced monitoring and be prepared to decline the relationship where the source of wealth or purpose of the transaction cannot be explained.

Define the person and the risk before searching

Begin by identifying the individual precisely. Collect the full legal name, former names, aliases, date and place of birth, nationality, residential country, employer, job title and relevant identification documents. For companies, record directors, shareholders, beneficial owners, authorised representatives and anyone who can instruct the business. A name-only search is rarely sufficient in a high-risk jurisdiction.

Determine why the person may qualify as a PEP. The role may be domestic, foreign or connected to an international organisation, depending on the applicable law and the company’s risk framework. Senior ministers, judges, military leaders, senior civil servants, ambassadors, executives of state-owned enterprises and influential officials involved in licensing or public procurement commonly require attention. Some rules continue to treat a former officeholder as higher risk after leaving office.

Map related parties as well. Family members and close associates can include a spouse or partner, children and their partners, parents, business partners, advisers, nominees and entities controlled for the official’s benefit. The exact scope depends on the relevant legal and compliance standard, so staff should avoid treating every social contact as a close associate. The question is whether the relationship could provide access to assets, influence or concealed control.

Risk should be assessed in context. Consider the country’s corruption indicators, sanctions exposure, political stability, judicial independence, financial transparency, media freedom and history of state capture. Also examine the transaction: a low-value purchase from a private company may present a different risk from a mining concession, defence contract, customs arrangement or infrastructure tender. The risks of third-party introductions deserve specific attention where an adviser offers to “open doors” to officials.

Build a source strategy for difficult jurisdictions

Use several independent sources rather than relying on a single PEP database. Start with official government websites, parliamentary records, electoral registers, court documents, company registries, procurement portals and published asset declarations where available. Then compare those records with reputable local and international media, regulatory notices, investigative reporting and litigation databases.

Search in the relevant local language and across spelling variations. A person’s name may be rendered differently in English, Arabic, Cyrillic, Chinese or another language, and titles may be translated inconsistently. Search the person’s name alongside terms for bribery, corruption, procurement, sanctions, fraud, conflict of interest, investigation, arrest, resignation and state-owned enterprise in the relevant language. Record the search dates, databases used and search terms so another reviewer can reproduce the work.

Public information is useful, but it is not automatically reliable. Anonymous allegations, politically motivated attacks and copied articles should not be treated as established facts. Give greater weight to primary records and credible reporting that identifies documents, sources and dates. Separate verified facts, unresolved allegations and professional judgements in the file.

Where a national registry is inaccessible or opaque, request documents directly from the counterparty and verify them through independent channels. Useful material may include passports, corporate constitutional documents, ownership charts, tax or financial statements, employment histories, declarations of interest, bank references and contracts supporting the stated source of funds. A refusal to provide basic information is itself a risk factor, although it should be interpreted alongside the local availability of records.

Test wealth, ownership and the proposed transaction

A PEP review should explain how the person acquired wealth and how funds will move through the transaction. Ask about employment income, investments, inheritance, property, loans, dividends, trusts and business sales. Compare the declared wealth with known salaries, public filings, property holdings, directorships and lifestyle indicators. A mismatch does not prove corruption, but it warrants further evidence and senior review.

Trace ownership beyond the first corporate layer. Look for nominee shareholders, relatives, offshore entities, trusts, foundations, bearer-share structures and recurring changes in directors. Check whether the PEP, a family member or an associate controls a supplier, consultant, joint venture partner or bank account indirectly. Obtain a signed ownership declaration, but do not treat it as conclusive without corroboration.

The commercial purpose must make sense. Document what services will be supplied, who will perform them, how fees were calculated, where payment will be made and what deliverables will be produced. Unusually high commissions, vague success fees, cash payments, payments to unrelated accounts, requests for offshore settlement or “consulting” with no tangible output require escalation. Public procurement carries particular exposure, as explained in guidance on the use of agents.

For an Australian company, the sector matters. A Perth resources business dealing with a ministry over an exploration permit faces different pressure points from a Melbourne software supplier selling to a state-owned utility. Construction, mining, defence, infrastructure, health procurement and customs-related services should receive close scrutiny because government decisions can determine market access and revenue. Keep the assessment focused on actual influence and transaction mechanics, rather than treating a whole country or sector as automatically prohibited.

Apply Australian controls and internal approval

Australian reporting entities must consider their obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act and relevant AUSTRAC guidance. Enhanced customer due diligence may be required for foreign PEPs, including establishing source of wealth and source of funds, obtaining senior management approval and applying enhanced ongoing monitoring. The precise obligation depends on the entity, service and relationship, so compliance teams should match the process to the organisation’s regulated activities.

Sanctions screening is a separate exercise. Check Australian sanctions administered under the Autonomous Sanctions Act and related regulations, along with relevant United Nations measures and any contractual or banking restrictions that apply. A PEP may present corruption risk without being sanctioned, and a sanctioned person may not be a PEP. Screen associated companies, beneficial owners, vessels, banks and payment routes, not just the named customer.

Foreign bribery risk also matters even when the payment is made overseas. Australian companies and their personnel can face exposure for bribing a foreign public official, including through an intermediary. Review the Criminal Code framework, the company’s anti-bribery controls, gifts and hospitality records, charitable donations, political contributions and approval history. Make sure business staff understand that a local “facilitation fee” or customary commission can still create serious legal and accounting problems.

The compliance file should show who approved the relationship, what evidence was considered, which risks remain and what controls will apply. Controls might include restricted services, dual approval for payments, a prohibition on cash, audit rights, contractual anti-bribery warranties, training, beneficial ownership updates and periodic screening. Australian teams often work across offices in Sydney, Melbourne, Brisbane and Perth, so ownership of the decision should be clear rather than left to an informal handover between sales and legal.

Monitor the relationship and respond to warning signs

PEP due diligence is an ongoing process. A person can leave office, gain a new position, become subject to an investigation or acquire control of a company after onboarding. Re-screen customers and connected parties at intervals based on risk, and trigger an immediate review when there is a change in government, ownership, bank account, intermediary, contract scope or payment pattern.

Monitor transactions against the approved business purpose. Look for round-dollar invoices, split payments, unexplained refunds, payments to relatives, rapid transfers through multiple jurisdictions, cash withdrawals and fees that increase when a government decision is approaching. A request to alter records, backdate a contract or describe a commission as a “marketing expense” should be escalated promptly.

Provide a safe reporting route for staff, contractors and suppliers. Australian organisations should ensure that internal complaints can be raised without retaliation and that relevant whistleblower protections are considered. Broader international operations may also be affected by foreign reporting standards; a practical overview of whistleblower requirements can help teams understand why reporting channels and investigation records need careful design.

If concerns cannot be resolved, pause the transaction and seek advice from qualified legal or compliance professionals. Do not alert a customer unnecessarily if doing so could compromise an investigation or create tipping-off concerns under applicable law. Preserve search results, emails, documents, approvals and payment records. If a suspicion of money laundering or a related offence arises, consider whether a suspicious matter report, regulator notification or law-enforcement referral is required.

A defensible background check is a documented process, not a database screenshot. It identifies the person accurately, examines public office and relationships, verifies ownership and wealth, tests the commercial purpose, applies Australian legal controls and continues after onboarding. The key point to remember is that PEP status is a signal for deeper, evidence-based scrutiny—not proof of wrongdoing and not a reason to abandon risk management.