“We only deal with a former minister once in a while, it’s not really something a small UAE company needs to worry about.”
Why this matters
The stakes of getting PEP screening wrong
Politically exposed persons, or PEPs, are individuals who hold or have held a prominent public position: ministers, members of parliament, senior judges, heads of state-owned enterprises, ambassadors, senior military officers, and their close family and business associates. In the UAE, the Central Bank and the Ministry of Economy expect regulated businesses, and increasingly non-financial ones like real estate brokers, gold traders, and corporate service providers, to identify these clients and apply enhanced due diligence before onboarding them.
The problem is that most companies operate on folklore rather than the actual rulebook. Below are five myths that quietly cause the most damage, and what the reality looks like when you run proper PEP checks in a UAE compliance program.
Myth 1: A PEP is just a corrupt official you should avoid
The word “politically exposed” sounds like an accusation, so business owners assume the safe move is to refuse the client outright. That reading is wrong on two counts.
First, PEP status is not a finding of wrongdoing. The FATF definition is functional: it flags people whose position could be abused for money laundering, bribery, or misuse of state funds. Most PEPs never abuse anything. Second, blanket refusal is itself a compliance problem in the UAE, because it can amount to unjustified de-risking and, in some cases, discrimination.
The correct response is not rejection but escalation: senior management approval, source-of-wealth documentation, and ongoing monitoring. A PEP client can be entirely legitimate. What changes is the depth of the file you keep on them.
Myth 2: Only banks need to worry about PEP screening
Scope
Who is actually on the hook
The UAE’s AML framework, notably Federal Decree-Law No. 20 of 2018 and its implementing regulations, extends screening obligations well past the banking sector. Designated Non-Financial Businesses and Professions, known locally as DNFBPs, are covered too.
- Real estate agents and brokers handling transactions of AED 55,000 or more in cash
- Dealers in precious metals and stones above the same threshold
- Auditors, accountants, and corporate service providers setting up companies or trusts
- Lawyers and notaries managing client money or property transfers
If your business sits in any of these buckets and you have never run a PEP check, you are not “below the radar.” You are simply the next inspection.
Myth 3: A quick Google search is enough
This is the most expensive shortcut in the industry. Searching a client’s name and skimming the first page of results feels like due diligence, but it fails on three fronts.
- Coverage. Public search engines do not index the specialised PEP databases, sanctions lists (OFAC, UN, EU, UK, UAE local lists), and adverse-media archives that a real screening tool cross-references.
- Transliteration. Arabic names have multiple valid English spellings. “Mohammed” and “Muhammad” are the same name; a Google search treats them as different queries.
- The audit trail. Regulators do not accept “I looked him up” as evidence. You need a timestamped record showing what lists you screened against, what hits came back, and how each hit was resolved.
Manual research also misses the family members and known close associates, which is where a large share of laundering activity actually flows. A niece with signing authority over a company account can be the real risk while the PEP himself looks clean on paper.
The most expensive myth of all
Believing that because your client is “a friend of the family” or “introduced by someone we trust,” no formal check is needed. UAE banks routinely freeze corporate accounts when a downstream counterparty turns out to be a sanctioned or high-risk PEP that the account holder never screened. Recovery takes months, sometimes ends in licence revocation, and the personal fines under Cabinet Decision No. 10 of 2019 reach into the millions of dirhams for compliance officers held responsible.
Myth 4: Once you’ve screened a client, you’re done
PEP status is not static. A mid-level civil servant you onboarded three years ago may since have been promoted to deputy minister. A client’s brother-in-law may have taken a seat on a state-owned enterprise board last quarter. Neither event will announce itself in your CRM.
The UAE regulator expects continuous monitoring, not a one-off check at onboarding. In practice this means:
- Rescreening the full client book against updated PEP and sanctions lists at defined intervals, typically daily or weekly for higher-risk portfolios
- Setting alerts for adverse media that mentions your clients by name
- Reviewing enhanced due diligence files at least annually for existing PEP relationships
- Refreshing source-of-wealth evidence when transaction patterns change materially
The compliance file is a living document. Treat it as a snapshot and you will fail your next audit.
Myth 5: Family and associates don’t count
The cleanest laundering routes rarely go through the PEP directly. They go through a spouse’s consultancy, a son’s real estate holding company, or a business partner’s trading firm in a free zone. This is why the UAE regulations, aligned with FATF Recommendation 12, explicitly extend enhanced due diligence to family members and close associates of PEPs.
Family means parents, siblings, spouse, children, and their spouses. Close associates means individuals with joint beneficial ownership of legal entities, or anyone in a close professional relationship where control can be inferred. If you onboard a young entrepreneur whose only funding source is his uncle, and that uncle is a foreign minister, the enhanced due diligence obligation runs through the nephew whether or not he holds any office himself.
Getting the process right
Identify
Collect full legal name, date of birth, nationality, and role. Screen against domestic and international PEP lists plus sanctions databases before you open the account.
Investigate
For every match, document the source of wealth and source of funds. Request supporting evidence: employment contracts, share registers, property deeds, inheritance papers.
Monitor
Set transaction thresholds tailored to the risk profile. Route large or unusual transfers to a compliance officer for review before they clear.
The takeaway
PEP screening is a business decision, not paperwork
The UAE has spent the last five years tightening its AML regime to match global standards, and enforcement is no longer theoretical. Companies that treat PEP screening as a checkbox lose access to banking, correspondent relationships, and eventually their trade licences. Companies that build it into onboarding keep serving legitimate clients, including politically exposed ones, without fear of the next inspection.
Frequently asked questions
What exactly qualifies someone as a PEP in the UAE?
A politically exposed person is anyone entrusted with a prominent public function, either currently or in the recent past. In the UAE framework this includes heads of state, government ministers, senior judges, ambassadors, senior military officers, executives of state-owned enterprises, and senior officials of major political parties.
The definition also covers their immediate family and known close associates, because these individuals can be used to move funds on behalf of the PEP.
Am I legally allowed to work with a PEP in the UAE?
Yes. PEP status is a risk indicator, not a prohibition. UAE law requires you to apply enhanced due diligence, obtain senior management approval before onboarding, verify source of wealth and funds, and monitor the relationship on an ongoing basis.
If you complete those steps and the file is clean, the relationship is permitted. Refusing all PEPs on principle can itself create regulatory issues around unjustified de-risking.
How often should I rescreen existing clients against PEP lists?
For higher-risk portfolios, daily or weekly automated rescreening is standard practice. For lower-risk client books, monthly is typically acceptable. The point is that PEP status changes constantly as governments reshuffle and appointments are made, so a single check at onboarding is not enough.
Whatever cadence you choose, document it in your written AML policy and stick to it. Regulators want to see a consistent, defensible process.
What are the penalties for missing a PEP in the UAE?
Under Cabinet Decision No. 10 of 2019, administrative fines for AML violations range from AED 50,000 to AED 5,000,000 per breach, and can be doubled for repeat offences. Beyond fines, the Central Bank and Ministry of Economy can suspend or revoke licences and hold compliance officers personally accountable.
Reputational damage typically outlasts the fine. Correspondent banks and international partners drop relationships quickly when a UAE company appears in an enforcement notice.
Does PEP screening apply to family members even if they hold no public office?
Yes. FATF Recommendation 12, which the UAE follows, extends enhanced due diligence to family members and close associates of PEPs. This covers spouses, parents, children, siblings, and their partners, as well as anyone in a close business relationship where influence can be inferred.
In practice, funds are more likely to move through relatives than through the PEP directly, which is why this extension exists.
Can I outsource PEP checks to a third-party provider?
You can outsource the screening technology and even much of the analysis, but the legal responsibility stays with your business. Under UAE regulations, the licensed entity remains accountable for its AML program regardless of who performs the underlying checks.
Choose a provider with strong local database coverage, Arabic-name matching, and clear audit-trail exports, and keep oversight of the process in-house.
