FCA Issues Final Guidance on Politically Exposed Persons (FG25

Finextra

a day ago

A more proportionate, risk-based approach to AML compliance
On 7 July 2025, the Financial Conduct Authority (FCA) published its finalised guidance FG25/3, updating how firms should treat politically exposed persons (PEPs) under the UK Money Laundering Regulations. This update follows a comprehensive multi-firm review, a public consultation (GC24/4), and recent amendments to the 2017 Money Laundering Regulations.
The aim is to reinforce a risk-sensitive and proportionate approach to Enhanced Due Diligence (EDD) obligations, particularly when dealing with domestic PEPs, their family members, and close associates. The FCA's new stance reflects changes in UK legislation and encourages firms to reduce unnecessary friction during onboarding, especially for low-risk individuals.
What's Changed and Why It Matters
The FCA has made several important clarifications in this guidance. Most notably, the starting point for all firms should now be that UK PEPs present a lower risk than foreign PEPs, unless other risk factors are present. This principle should also apply to their family members and known close associates. This shift is intended to ease the experience of low-risk customers and avoid disproportionately burdensome checks, aligning with broader expectations under the Consumer Duty.
The FCA also confirmed that non-executive board members (NEBMs) of UK civil service departments are no longer to be treated as PEPs. Similarly, the updated guidance includes a clearer definition of high-ranking military officials and limits judicial PEP classification to Supreme Court judges only. The Northern Ireland Assembly has been added to the list of devolved administrations, making it explicit that its members fall under the scope of national PEP definitions.
Importantly, firms now have greater flexibility when approving PEP relationships. While approval from senior management remains mandatory, it no longer has to come from the Money Laundering Reporting Officer (MLRO) specifically. Instead, firms can designate other suitably trained senior staff, provided that the MLRO retains oversight of the process and ensures compliance with the FCA's standards and the firm's internal risk framework.
A Smarter Approach to Risk Assessment
The FCA reiterates that not all PEPs pose the same level of risk. The revised guidance introduces clear indicators for distinguishing between lower-risk and higher-risk PEPs. For example, UK politicians who hold no ministerial office, or those from countries with low corruption and transparent public institutions, may qualify for less intrusive EDD. In such cases, firms can rely on public records, internal data, or simplified documentation rather than conducting repeated or intensive reviews.
In contrast, PEPs from countries with weak governance, high corruption levels, or opaque procurement processes may still warrant more stringent due diligence. These situations will require more detailed verification of source of wealth and funds, senior-level approvals, and ongoing monitoring.
The guidance also clarifies that former PEPs must continue to be treated as such for a period of 12 months after leaving office. However, their family members and close associates may be declassified sooner, unless specific risk factors justify further scrutiny. The FCA encourages firms to monitor trigger events, such as elections, and suggests inviting customers to inform them of changes in circumstances to keep records current.
Group-Wide Expectations and Cross-Border Challenges
Firms headquartered in the UK are now expected to apply this risk-based, proportionate approach across all subsidiaries and branches, including those outside the UK, unless local law prohibits it. For foreign firms operating in the UK, the FCA expects compliance with UK Regulations for all business relationships within the UK.
The FCA does not offer guidance on conflicts with non-UK legislation, but stresses that firms should be clear on how they resolve such discrepancies in line with their own risk frameworks.
Family Members and Close Associates
The updated guidance clarifies the definition of PEP-connected individuals. Spouses, civil partners, parents, children and their partners, and now siblings are all clearly included. Others, such as uncles, aunts or more distant relatives, should only be brought into scope if there's a justifiable reason based on the PEP's risk profile.
Close associates remain those with joint business interests or known legal structures set up for a PEP's benefit. However, association alone does not make someone a PEP, and the guidance reinforces that such individuals should not be subject to automatic exclusion or excessive scrutiny.
Practical Implications for Firms
The finalised guidance emphasises the need for well-documented policies, appropriately trained staff, and clear, consistent risk assessments. Firms should avoid defaulting to a one-size-fits-all approach. Declining a business relationship on the basis of PEP status alone, without evidence of unmanageable risk, is unlikely to be considered appropriate, particularly in light of the FCA's expectations under Consumer Duty.
If a firm chooses to apply enhanced measures beyond those required, this must be justified and proportionate, based on an individual's role, jurisdiction, or other contextual factors, not merely their status.
This is a welcome recalibration of the FCA's expectations around PEPs. It aims to strike a better balance between financial crime prevention and fair customer treatment. Firms should now ensure that their PEP processes are aligned with the new guidance and consider how these updates impact both onboarding journeys and ongoing monitoring strategies.
For those in compliance, legal, operations, or product, this is the time to review internal PEP policies, update delegation frameworks, and train relevant staff accordingly. The FCA's message is clear: proportionality, documentation, and risk-based judgment must be at the heart of your AML controls.