PEP Screening for Professional Services Companies — UK

Professional Services firms must comply with the Money Laundering, Terrorist Financing and Transfer of Funds (Information) Regulations 2017, which explicitly require Customer Due Diligence (CDD) including verification of beneficial ownership and identification of Politically Exposed Persons. The Economic Crime (Transparency) Act 2023 significantly strengthened these requirements. Additionally, sector-specific regulators—the FCA for financial advisory services, the SRA for law firms, and ICAEW/ACCA for accounting practices—impose enhanced standards. Failure to implement adequate PEP screening can result in regulatory penalties exceeding £10 million, professional license revocation, and criminal liability. These aren't guidelines; they're legal mandates with severe enforcement consequences.

Companies House PSC (Person of Significant Control) data is foundational but insufficient alone. The register contains 679,355 records in our dataset with average 14.4 PSCs per company, requiring systematic review rather than manual checking. Firms should cross-reference declared PSCs against global PEP databases, analyze ownership concentration patterns (our data shows 13.5 concentration risk score), and investigate beneficial ownership chains to identify ultimate controllers. However, PSC data has known gaps—some beneficial owners legitimately claim exemptions, offshore structures obscure real control, and data lags behind actual changes. Firms must supplement PSC review with document verification, source of wealth investigation, and continuous monitoring of changes. Professional Services should treat PSC data as starting point for enhanced due diligence rather than conclusive evidence of ownership.

Standard PEP screening verifies whether individuals appear on formal PEP lists and conducts basic beneficial ownership verification. Enhanced Due Diligence (EDD) goes significantly further, required when clients are PEPs or present heightened risk. For Professional Services, EDD includes source of wealth investigation tracing fund origins; analysis of business relationships and legitimacy; examination of whether transactions align with client profile; continuous monitoring throughout the engagement; and documentation of control structures and decision-making authority. Given the sector's 326,971 companies formed since 2020 and evolving threat landscape, firms should apply EDD more liberally than regulatory minimums suggest. Transactions involving government contracts, international components, high values, or beneficial owners from high-risk jurisdictions warrant EDD even absent formal PEP designation.

Regulatory guidance requires continuous monitoring, not one-time screening at engagement commencement. For Professional Services, this means systematic review whenever: beneficial ownership changes (Companies House filings trigger alerts); significant transactions occur; adverse media emerges about beneficial owners; or regulatory changes add new PEP designations. Given the sector's rapid growth—326,971 companies formed since 2020—and fluid nature of PEP designations, firms should implement automated monitoring systems rather than manual annual reviews. Recommended practice is quarterly systematic review of active clients, with real-time alerts for major changes. For high-value engagements or transactions, monthly review is appropriate. This continuous approach addresses regulatory expectations and protects against sudden beneficial owner elevation to PEP status that would require immediate transaction cessation.

Discovery of PEP connections requires immediate, documented action: immediately cease providing services pending compliance review; conduct enhanced due diligence on the specific PEP relationship including source of wealth, business legitimacy, and transaction rationale; escalate to senior compliance management and legal counsel; document the discovery, review process, and decision rationale; consider whether transaction termination or reporting to relevant authorities is required; and assess whether existing work should be reversed or reported as suspicious activity. For certain circumstances—particularly sanctions evasion indicators or involvement of designated individuals—firms must file Suspicious Activity Reports (SARs) with the National Crime Agency. The sector's regulatory environment makes this distinction critical: failure to act on discovered PEP connections can convert an innocent oversight into knowing facilitation of sanctions violations or money laundering. Professional Services firms must establish clear escalation procedures with zero tolerance for proceeding with PEP-connected work without documented compliance sign-off.