PEP Screening for Financial Services Companies — UK

PEP screening is mandated under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 and enforced by the FCA, PRA, and NCA. Financial services firms must identify PEPs during onboarding and ongoing monitoring to prevent money laundering and terrorist financing. Non-compliance has resulted in FCA fines exceeding £100 million in recent years, plus civil liability for transactions involving sanctioned individuals. The sector's 212,629 active companies face escalating enforcement, particularly among the 132,406 companies formed since 2020, where compliance infrastructure is often immature. Regulators increasingly view inadequate PEP screening as a primary enforcement priority.

Companies House provides three critical datasets: director records (233,943 entries), beneficial ownership data (216,696 PSC records), and filing histories. Director records reveal control structures and allow cross-referencing against PEP lists. PSC data (averaging 14.1 ownership concentration) identifies true beneficial owners, preventing PEPs from hiding behind nominee directors. Filing histories show ownership changes over time, revealing restructuring patterns suspicious of asset concealment. By analysing these datasets systematically, financial services firms can map control chains, identify undisclosed political connections, and detect when individuals with sanctions exposure attempt to distance themselves from regulated entities through rapid structural changes.

A PEP is defined as an individual holding or having held a prominent public function, including heads of state, government ministers, judges, military officers, and central bank officials. The UK framework extends to Relatives and Close Associates (RCAs) of PEPs, recognising that family members often benefit from political connections. In the financial services sector, this means screening: all directors and officers (Company secretary, CFO, CIO, compliance officers); all beneficial owners and PSCs; and significant customers or counterparties. Given the sector comprises 212,629 companies with average 9.1-year lifespans, individuals may have held political roles years ago, requiring historical background checks. Continuous monitoring is essential, as individuals can be newly designated as sanctions targets at any time, particularly following geopolitical crises.

FCA guidance recommends continuous monitoring with re-screening at minimum annually, though high-risk clients warrant quarterly or monthly re-screening. Given the sector's rapid growth (132,406 companies since 2020) and geopolitical volatility, many leading firms implement monthly or event-driven re-screening protocols. Re-screening should occur immediately following: sanctions announcements, elections in clients' home countries, adverse media reports, or significant ownership changes. Financial services firms must also implement alerts triggered by new PEP designations or sanctions listings, requiring immediate client review. The 0.8% dissolution rate and average 9.1-year company lifespan suggest many entities have existed through multiple geopolitical cycles, increasing likelihood of undetected PEP exposure if re-screening is infrequent or inadequate.

Effective PEP screening integrates multiple data sources: (1) UK Consolidated List and EU sanctions registers for official designations; (2) OFAC SDN list and UN Security Council designations for international coverage; (3) Companies House records (officer, PSC, and filing data) for ownership mapping; (4) adverse media databases and news archives for reputational risks; (5) beneficial ownership verification databases for confirming true control; (6) geographic risk databases for high-corruption-risk jurisdictions. Many financial services firms utilise specialist compliance technology platforms that automate screening, flag matches, and maintain audit trails. Given the sector's 216,696 PSC records and 233,943 director records requiring screening, manual processes are insufficient. Robust solutions enable continuous re-screening, relationship mapping, and escalation workflows, reducing false positives while increasing detection of genuine risks aligned with regulatory expectations.