You Got a PEP Hit. Here's Exactly What Happens Next

What does a screening hit actually mean?

It means a name in your transaction resembles a name on a list — politically exposed persons, sanctions, or adverse media. Resembles. Screening matches on names, and names are not unique. A hit is the start of a question, not the answer to one.

The three flavours matter enormously. A PEP match means the person may hold or have held a prominent public position, which raises risk but forbids nothing. A sanctions match, if genuine, is a different animal entirely — that can make proceeding unlawful. Adverse media sits in between: information to weigh, not a verdict.

Step one: is it actually your customer?

Most hits die here. Compare the match against what you already verified in CDD: date of birth, country, middle names, age. A 34-year-old buyer in Parramatta matching a 70-year-old former minister overseas is not a match, and you can say so in one documented paragraph.

The discipline is writing the dismissal down. "Reviewed — different DOB and nationality, false positive, cleared by [name] on [date]" is thirty seconds now and a complete answer to a regulator later. An undocumented dismissal is indistinguishable from a hit nobody looked at.

It's a real PEP. Now what?

A confirmed PEP match means the transaction proceeds with enhanced due diligence, senior sign-off, and a genuine look at source of funds and source of wealth. You are answering one commercial question: does this person's money plausibly match their story? A public official buying within their visible means is a manageable risk. One whose funds have no plausible origin is a different conversation.

What you do not do is treat the customer as an accused. Being a PEP is a status, not an allegation. Plenty of PEPs buy property for the dull reason that they live somewhere.

It's a sanctions match. Different rules.

Confirm the match with the same identity rigour, but escalate immediately — this is principal-and-legal-advice territory, not business as usual. Dealing with a sanctioned party can be unlawful regardless of how the property transaction looks, so nothing proceeds while the match stands.

This is also where your quiet-room discipline matters most. The customer does not get told they matched a list while you work through it. If your review forms a suspicion you report it — and tipping off is a criminal offence, so the circle of people who know stays small by design.

When does a hit become a suspicious matter report?

When, on reasonable grounds, you suspect the transaction may involve proceeds of crime or other reportable conduct. A confirmed PEP alone is not that. A PEP plus evasive source-of-funds answers, or adverse media that lines up with what you are seeing in the deal, may well be. Once suspicion forms, the clock runs: 3 business days to lodge the SMR, 24 hours if terrorism financing is suspected.

Forming a suspicion is a judgement call, and it is the compliance officer's call to make — documented, dated, and made once, not relitigated in the tearoom.

Build the playbook before the second hit

The first hit is chaos because nothing was written down. So write it down now: who reviews a hit, what a documented dismissal looks like, who signs off a confirmed PEP, who gets a lawyer on the phone for sanctions, and how the file is kept for seven years. Half a page covers it.

Most screening tools were built for banks and tuned to drown compliance teams in alerts. Screening that lives inside the transaction — matched against CDD data you already hold — turns most hits into sixty-second dismissals instead of afternoon-long investigations.

Run a rehearsal before July. Take a recent completed sale, pretend the buyer's name returned a PEP match, and walk the playbook end to end: who sees the alert, who reviews, what gets written, who signs off. The gaps you find in a rehearsal cost nothing. The same gaps found during a live match, with a vendor asking why exchange has stalled, cost credibility and sleep.

And calibrate expectations across the agency now: hits will happen, most will be false positives, and a hit is not gossip. The worst outcome of a first screening match is not the match itself — it is half the office knowing about it by lunchtime. Discretion is a trained behaviour, and the training happens before the alert, never after.

Log the rehearsal itself, too. A dated note that the screening playbook was tested and by whom is training evidence, and training records are part of the program you keep for seven years. Cheap to write, persuasive to show.