Once a PEP, Always a PEP
“Once a PEP, always a PEP” is a widely repeated compliance phrase suggesting political exposure never expires. FATF’s own June 2013 guidance actually says something more careful: status “could always remain,” and that how a former official should be handled must be based on a risk assessment, not a prescribed time limit. Several secondary compliance sources misstate this as FATF actively mandating permanent classification, which the primary guidance doesn’t say.
Key takeaways
- “Once a PEP, always a PEP” is a widely repeated simplification, not FATF’s actual, precisely worded position.
- FATF’s real 2013 guidance says status “could always remain,” and explicitly requires a risk-based assessment rather than a fixed time limit.
- A meaningful amount of secondary compliance content misquotes FATF as actively mandating permanent PEP classification, which the primary source doesn’t say.
- The EU sets an actual hard floor: at least 12 months of continued monitoring under Article 22 of Directive (EU) 2015/849, distinct from FATF’s fully open standard.
- The genuine rationale behind extended monitoring is real: residual influence and access don’t necessarily disappear when an official leaves office.
- A defensible declassification decision weighs seniority, residual influence, jurisdiction risk, and what’s actually changed, not elapsed time alone.
- The same risk-based principle extends to a former PEP’s family members and close associates, tied to the same underlying risk assessment.
On this page
What the phrase actually claimsWhat FATF’s guidance actually saysWhy so much content misquotes this as FATF’s actual positionThe EU’s actual hard floor: a genuine contrast worth knowingThe genuine rationale behind extended monitoringWhat a genuine risk-based declassification decision actually weighsWhy the answer genuinely differs by jurisdiction and institutionThe same logic extends to family members and close associatesGetting this right in a compliance programmeFAQsRead more
12 months
Minimum continued monitoring period for former PEPs under EU Directive (EU) 2015/849, Article 22
Source: European Parliament and Council
Jun 2013
Date of FATF’s guidance on Recommendations 12 and 22 addressing former PEP treatment
Source: FATF
What the phrase actually claims
“Once a PEP, always a PEP” is industry shorthand suggesting that political exposure is permanent, that someone who held a prominent public function should be treated as a PEP indefinitely, with no expiry regardless of how much time has passed since they left office. It’s a catchy, memorable phrase. It’s also, on close reading of the actual source, a meaningful oversimplification of what FATF’s guidance genuinely says.
What FATF’s guidance actually says
FATF’s June 2013 guidance on Recommendations 12 and 22 addresses this directly, and its precise wording matters: it describes “a possible open ended approach”, phrased as “once a PEP, could always remain a PEP”, not a mandatory, absolute rule. The guidance then states plainly that the handling of a client no longer entrusted with a prominent public function should be based on an assessment of risk, not on prescribed time limits. That’s a conditional, risk-based standard, genuinely different in character from a blanket instruction that political exposure never expires under any circumstances.
Why so much content misquotes this as FATF’s actual position
This is worth naming directly, because it’s a real, recurring pattern across compliance content: numerous sources describe FATF as actively “promoting” or “pushing for” the once-a-PEP-always-a-PEP rule, treating it as FATF’s stated position rather than accurately describing FATF’s actual, more nuanced guidance. The distortion happens gradually: FATF’s conditional “could always remain” language, paired with its explicit rejection of fixed time limits, gets compressed over successive retellings into the flatter, catchier “always,” losing the risk-based qualifier that was the entire point of the original guidance.
The EU’s actual hard floor: a genuine contrast worth knowing
Unlike FATF’s fully open-ended, risk-based standard, EU law sets an actual fixed minimum. Article 22 of Directive (EU) 2015/849 requires firms to continue assessing the risk posed by a former PEP for at least 12 months after they leave public office, a genuine regulatory floor rather than FATF’s purely case-by-case approach. This creates a real, practical distinction: EU-regulated firms have a mandatory minimum monitoring period they cannot go below, while firms operating purely under FATF’s own recommendation-level guidance have no fixed floor or ceiling at all, only a documented risk judgement.
The genuine rationale behind extended monitoring
Setting the misquote aside, the underlying concern extended monitoring addresses is real and well-founded. A former senior official can retain meaningful informal influence, personal networks, residual access to state resources or decision-makers, long after formally leaving office, in a way a title change on paper doesn’t necessarily reflect. A retired but still politically connected minister may genuinely be able to influence decisions involving state-owned enterprise funds years after leaving government, which is exactly the kind of residual risk a purely time-based cutoff, six months, twelve months, would arbitrarily ignore regardless of the individual’s actual continuing influence.
What a genuine risk-based declassification decision actually weighs
A defensible decision to declassify a former PEP, rather than either applying a rigid fixed period or defaulting to permanent classification without ongoing justification, generally weighs the seniority and nature of the position actually held, whether the individual retains any residual informal influence, decision-making access, or connections to state resources, the corruption risk and governance strength of the specific jurisdiction involved, and how much time has genuinely passed alongside what’s actually changed in the individual’s circumstances during that period, rather than treating elapsed time alone as sufficient justification either way.
Why the answer genuinely differs by jurisdiction and institution
Because FATF leaves this explicitly to risk-based judgement rather than a fixed international standard, the same former official can reasonably be treated differently by different institutions applying the same underlying guidance in good faith. A private bank in one jurisdiction might maintain enhanced monitoring on a specific former official considerably longer than a retail bank elsewhere would for a comparable individual, and both positions can be legitimately defensible if each is genuinely grounded in that institution’s own documented risk assessment rather than an arbitrary default.
The same logic extends to family members and close associates
FATF’s guidance is explicit that this same risk-based principle, rather than a fixed time limit, applies equally to family members and close associates of a former PEP: the period for which they should continue being treated as connected to that PEP is directly tied to the ongoing risk assessment of the underlying former official, not a separate, independently fixed clock.
Getting this right in a compliance programme
A compliance programme handling former PEP status well documents an actual risk assessment for every declassification decision, tied to the specific factors above rather than a single organisation-wide rule applied uniformly, respects any hard regulatory floor that genuinely applies, the EU’s 12-month minimum among them, rather than treating every jurisdiction as governed by FATF’s fully open standard, and avoids both extremes the misquoted phrase pushes toward: neither an unthinking permanent classification applied to every former official regardless of actual residual risk, nor a rigid, arbitrary fixed cutoff applied without any genuine risk judgement behind it.
Document a real risk-based PEP monitoring decision
Generate a policy draft that ties former PEP monitoring duration to documented risk factors, not a fixed rule.
Frequently asked questions
What does “once a PEP, always a PEP” actually mean?
It’s a compliance industry phrase suggesting political exposure never expires. FATF’s actual guidance is more conditional: political exposure “could always remain,” and handling should be based on risk assessment, not a fixed rule that status is permanent.
What does FATF’s guidance actually say about former PEPs?
FATF’s June 2013 guidance states the handling of someone no longer entrusted with a prominent public function should be based on a risk assessment, explicitly rejecting prescribed time limits, rather than mandating permanent classification.
Is FATF actually promoting the “once a PEP always a PEP” rule?
Not as an absolute mandate. Its precise wording is “could always remain a PEP,” a conditional, case-by-case standard, though a considerable amount of secondary compliance content describes it inaccurately as FATF’s fixed, active position.
Does the EU have a fixed minimum monitoring period for former PEPs?
Yes. Article 22 of Directive (EU) 2015/849 requires at least 12 months of continued risk assessment after a PEP leaves office, a genuine regulatory floor distinct from FATF’s fully open-ended, risk-based approach.
Why do some firms keep monitoring former PEPs indefinitely?
Because a former official can retain real informal influence, personal networks, and access to state resources long after formally leaving office, risk that a fixed time-based cutoff wouldn’t necessarily reflect.
What factors go into a legitimate PEP declassification decision?
The seniority of the position held, any residual influence or access to state resources, the corruption risk of the relevant jurisdiction, and what’s genuinely changed in the individual’s circumstances, not elapsed time alone.
Does the risk-based approach to former PEP status apply to their family members too?
Yes. FATF’s guidance ties the treatment of family members and close associates directly to the same ongoing risk assessment of the underlying former PEP, not a separately fixed timeline.
Can different institutions reasonably treat the same former PEP differently?
Yes, since FATF’s standard is explicitly risk-based rather than fixed. Different institutions can defensibly reach different monitoring decisions for a comparable individual if each is genuinely grounded in its own documented risk assessment.
Read more: our ultimate guides, whitepapers and templates
Related guides and resources to help you act on what you just read.
Last reviewed July 19, 2026 · 11 min read · Written for compliance and risk professionals · By the WhoWiki editorial team
Key takeaway: “Once a PEP, always a PEP” is a widely repeated compliance phrase suggesting political exposure never expires. FATF’s own June 2013 guidance actually says something more careful: status “could always remain,” and that how a former official should be handled must be based on a risk assessment, not a prescribed time limit. Several secondary compliance sources misstate this as FATF actively mandating permanent classification, which the primary guidance doesn’t say.