A new client walks in, and someone on your compliance team flags them as a politically exposed person. What happens next is where a lot of Kenyan reporting institutions get vague, treating it as “be a bit more careful” rather than a defined set of steps with an actual regulatory basis. The Proceeds of Crime and Anti-Money Laundering Regulations, 2023 are specific about what enhanced due diligence on a PEP actually requires.
Who actually counts as a PEP
Under the 2023 Regulations, a politically exposed person is someone who has been entrusted with a prominent public function, in Kenya or in another jurisdiction. This is a broader definition than some businesses assume: it is not limited to Kenyan officials, and it explicitly extends to any immediate family member or close business associate of that person. A client who is not personally a public official but is married to one, or runs a business jointly with one, can still trigger PEP status under this definition.
What the regulations actually require for a foreign PEP
For a foreign politically exposed person specifically, a reporting institution must put in place risk management systems to determine whether a customer or the beneficial owner behind a customer is a PEP, obtain senior management approval before establishing the business relationship, and, where the relationship is already established, before continuing it. This approval requirement is not a formality. It means the decision to take on or keep a PEP client cannot sit with a junior relationship officer alone.
What enhanced scrutiny actually means in practice
Beyond the senior approval step, the practical content of enhanced due diligence typically covers establishing the source of the client’s wealth and the source of funds involved in the specific transaction, not just their identity, applying closer and more frequent monitoring of the relationship than a standard customer would receive, and being prepared to consider a suspicious transaction report where the pattern of activity does not match what would reasonably be expected of that client. None of this is optional once PEP status is triggered. It is the baseline the regulations expect, and a file that cannot show these steps were actually taken is a weak file if a supervisor or the Financial Reporting Centre ever asks to see it.
Being a PEP is not an accusation
It is worth being clear internally, and with the client where appropriate, that PEP status is a risk classification tied to the nature of a public role, not a suggestion of wrongdoing. Treating every PEP relationship as a red flag to be avoided rather than a category requiring closer, well-documented diligence tends to produce exactly the kind of thin, defensive compliance file that looks worse under scrutiny than a properly conducted enhanced review would have.
Building this into your actual process
The most common gap is not a lack of awareness that PEP rules exist, it is a screening process that only checks the client’s own name and misses the family member or close associate limb of the definition entirely. A workable PEP screening step needs to specifically ask who a client’s immediate family and close business associates are, not just run the client’s own name through a check and move on.
