PEPs & Adverse Media Screening in UAE

No area of AML compliance attracts more regulatory scrutiny, or generates more enforcement findings, than the handling of politically exposed persons. PEPs, by virtue of the public positions they hold, present a heightened corruption risk: their access to state resources, regulatory decisions and public contracts creates opportunities for bribery, embezzlement and the laundering of proceeds through the financial system.

For a jurisdiction like the UAE – a major hub for international business, real estate investment and wealth management, attracting clients from across the Middle East, Africa, South Asia and beyond, PEP exposure is not a theoretical risk. It is a daily operational reality for banks, real estate brokers, family offices, corporate service providers and legal professionals alike.

This guide explains what a PEP is under UAE law, how the three categories of PEP are defined and treated, what adverse media screening is and why it matters, which tools compliance teams use for PEP and adverse media screening in the UAE, and exactly when EDD becomes a legal requirement rather than a discretionary control.

1. What Is a Politically Exposed Person (PEP)? Definition & Categories

A Politically Exposed Person is an individual who holds, or has held within a recent period, a prominent public function at a national or international level. The category exists in AML law because individuals in such positions have access to power, public funds and regulatory decisions that create both the opportunity and the incentive for corruption and because the proceeds of that corruption are frequently laundered through the financial system.

Under UAE law, the PEP definition is established in Cabinet Decision No. 10 of 2019 and is consistent with FATF Recommendation 12. The definition covers individuals in the following prominent public functions:

• Heads of state, heads of government, ministers and deputy or assistant ministers

• Members of parliament or equivalent legislative bodies

• Members of the governing bodies of political parties

• Members of supreme courts, constitutional courts or other high-level judicial bodies whose decisions are not subject to further appeal

• Members of courts of auditors or the boards of central banks

• Ambassadors, charges d’affaires and high-ranking officers in the armed forces

• Members of the administrative, management or supervisory bodies of state-owned enterprises

• Directors, deputy directors and members of the board of international organisations

2. Domestic vs Foreign vs International Organisation PEPs

UAE and international regulatory frameworks distinguish between three categories of PEP based on the jurisdiction in which they hold their public function. The distinction matters because the risk profile, and therefore the EDD intensity required, differs between categories. The table below summarises all PEP categories, including close associates and family members:

A Note on Domestic PEPs in the UAE

One area of practical difficulty in the UAE is the treatment of domestic PEPs, individuals holding prominent public functions within the UAE itself. FATF Recommendation 12 originally permitted jurisdictions to apply a risk-based approach to domestic PEPs (rather than automatic EDD), but the CBUAE, DFSA and FSRA have all moved to require EDD for domestic PEPs as part of the post-grey-list reform programme.

This means that UAE-based regulated firms cannot treat a UAE government official, senior military officer or state entity executive as a standard CDD customer merely because they are local. The same EDD framework that applies to a foreign head of state applies to a senior UAE official.

3. UAE Regulatory Requirements for PEP Screening

All regulated entities in the UAE, financial institutions and DNFBPs alike, are required to screen customers against PEP lists as part of the customer due diligence process. The screening obligation applies at onboarding and on an ongoing basis throughout the relationship.

At Onboarding

Before establishing a business relationship, the firm must screen the customer’s name, and the names of all UBOs of corporate customers, against a current PEP database. The screening must be configured to handle:

• Name variations and transliterations: Arabic names in particular have multiple romanisation forms. A PEP screening tool that only matches exact strings will miss obvious hits. Fuzzy matching, phonetic matching and alias coverage are essential.

• Date of birth matching: name-only screening generates high false-positive rates. Date of birth matching significantly reduces false positives and improves match confidence.

• Gender and nationality filtering: where available, these fields improve match precision without sacrificing recall.

Where a PEP match is identified at onboarding, the firm must obtain senior management approval before establishing the relationship, conduct EDD including source of wealth verification, and document the decision-making process in the customer file.

Ongoing Screening

PEP status can change mid-relationship. A customer who was a private individual when first onboarded may subsequently be appointed to a prominent public function, at which point they become a PEP and EDD must be applied. Conversely, a former PEP may move beyond the lookback period and may be eligible for EDD de-escalation.

Regulated firms must have a process for ongoing PEP screening that either runs automated real-time screening against updated lists or conducts periodic batch rescreening at intervals appropriate to the firm’s risk profile. Relying solely on onboarding screening and assuming nothing changes is a regulatory finding waiting to happen.

4. Adverse Media Screening: What It Is and Why It Matters

Adverse media screening is the process of searching for negative information about a customer, UBO or associated party in publicly available media sources: news articles, court records, regulatory enforcement notices, government databases, NGO reports and investigative journalism.

Adverse media screening is distinct from PEP and sanctions screening. A customer may not appear on any PEP list or sanctions list but may have been the subject of credible media reporting linking them to corruption, fraud, money laundering, organised crime or terrorist financing. Without adverse media screening, this information is invisible to the compliance team.

Why Adverse Media Matters in the UAE Context

The UAE’s position as a major international financial and trade hub means that its financial system is exposed to clients and transactions from across the world, including from jurisdictions with high levels of corruption, weak rule of law and limited formal prosecutorial capacity. In many cases, the only public record of financial crime involvement is media reporting because prosecutions have not occurred or are ongoing in jurisdictions where the evidence is difficult to access.

Adverse media screening is also essential for identifying reputational risks that are not captured by formal lists. A customer who is a known associate of a sanctioned individual, who has been identified in a Pandora Papers or FinCEN Files leak, or who has been the subject of regulatory censure in another jurisdiction, will typically not appear on a PEP or sanctions list but the information is in the public domain and should be part of the firm’s assessment.

What Counts as Material Adverse Media?

Not all negative news is material for AML purposes. A traffic offence or minor civil dispute is not the same as a corruption investigation. The firm’s adverse media policy should define the categories of media that are considered material and require escalation:

• Financial crime: money laundering, fraud, bribery, corruption, tax evasion, embezzlement, insider trading

• Organised crime: association with criminal organisations, drug trafficking, human trafficking

• Terrorist financing or extremism: any credible link to terrorist financing or designated terrorist organisations

• Regulatory enforcement: censure, fines, licence revocations or criminal referrals by financial regulators in any jurisdiction

• Reputational risk: credible reporting in established media outlets of conduct that, while not necessarily criminal, would cause the firm reputational damage

5. Handling Close Associates and Family Members of PEPs

FATF Recommendation 12 and UAE regulatory frameworks extend the PEP framework to two additional categories: Relatives and Close Associates (RCAs). These are individuals who, while not PEPs themselves, have personal or business relationships with PEPs that expose them to equivalent corruption risk.

Family Members

Family members of PEPs are typically defined to include spouses, children, parents, siblings and in-laws. The precise scope varies between regulatory frameworks: FATF guidance refers to ‘family members’ without exhaustive definition, while some UAE regulators specify the degree of relationship. In practice, most compliance programmes apply the PEP framework to immediate family members as a minimum.

The AML logic behind including family members is straightforward: PEP-related corruption and bribery proceeds are frequently held in, or transferred through, accounts and assets held in family members’ names, precisely because this creates one layer of distance from the PEP themselves.

Close Associates

Close associates are individuals who are known to have a close business relationship with a PEP, who jointly own legal entities or assets with a PEP, or who are otherwise known to be closely connected. The ‘known to’ standard is important: the obligation is to apply EDD where the close associate relationship is known or can reasonably be identified, not where it has been deliberately concealed.

In practice, identifying close associates requires more than a database check. It requires a review of corporate ownership records (are there entities jointly owned with a PEP?), open-source intelligence (are there public reports of business relationships?), and customer declarations (has the customer disclosed any connections to PEPs?).

7. When EDD Becomes Mandatory: PEP Triggers

Under UAE law, EDD is not discretionary for PEPs, it is mandatory wherever a defined trigger applies. The table below maps the key PEP-related EDD triggers to the required actions and UAE regulatory basis:

Senior Management Approval: What It Means in Practice

The requirement for senior management approval before establishing or continuing a PEP relationship is one of the most commonly misapplied EDD obligations. “Senior management” in this context means a person with genuine authority and oversight responsibility, not a team leader or relationship manager sign-off. Regulators expect the approving individual to have actually reviewed the EDD file and made an informed risk-based decision.

A signature in a box on an onboarding form is not senior management approval. The approving individual should review the customer’s PEP status, the source of wealth assessment, the nature of the proposed relationship, and the compliance team’s recommendation, and should document their decision and the basis for it.

Once a PEP relationship is approved, the obligation does not end. EDD for PEPs requires enhanced ongoing monitoring of the relationship and transactions, more frequent periodic review of the customer file, and immediate re-assessment if adverse media emerges or if the PEP’s circumstances change materially.