The PEP classification is well understood in principle. What causes problems in practice is the category around it: the client who isn't a PEP, but is close enough to one that the connection has to be assessed, documented, and risk-rated. This is the RCA — the Relative or Close Associate — and it's where proportionality judgements become genuinely difficult.
The difficulty isn't identifying that an RCA relationship exists. Screening tools and adverse media searches surface family and associate connections routinely. The difficulty is deciding what that connection means for your EDD obligations, and how to document the reasoning in a way that survives examiner scrutiny without over-escalating cases that don't warrant it.
What Makes Someone an RCA
The definition matters because it determines your obligations. An RCA is not simply anyone who knows a PEP. It's a person who is either a family member of a PEP, or someone known to have a close business or personal relationship with one. Both limbs require judgment — and that judgment needs to be exercised explicitly, not implicitly.
Family members present less ambiguity, though even here the degree of connection matters. A spouse of a sitting minister is an unambiguous RCA. A second cousin of a retired local government official requires a different analysis — the familial connection exists, but whether it creates meaningful PEP exposure depends on the nature of the PEP's position, the client's relationship with them, and whether any shared financial interests exist.
The RCA analysis is not a box to tick. It's a genuine assessment of whether the PEP connection creates a real risk of funds linked to corruption, bribery, or abuse of position entering the account. If that risk isn't real, the EDD should reflect that — not default to maximum scrutiny on every tangential connection.
The Proportionality Framework
Regulators and examiners both expect EDD to be calibrated to actual risk — not applied uniformly to every PEP-adjacent client regardless of the nature of the connection. Over-escalating low-risk RCA cases is itself a compliance failure, because it diverts resources from genuine risk and creates a paper trail that doesn't reflect reasoned judgment.
The variables that determine proportionate EDD for an RCA are:
| Factor | Higher Risk Indicator | Lower Risk Indicator |
|---|---|---|
| PEP position | Senior foreign government role, procurement authority | Retired, low-influence domestic role |
| Nature of nexus | Shared business interests, joint assets, financial dependency | Family connection only, no shared financial interests |
| Jurisdiction | High corruption-risk country, FATF grey/black list | Low corruption-risk, transparent jurisdiction |
| Client's own profile | Wealth not independently explainable, SOW gaps | Clear independent wealth source, no PEP dependency |
| Transaction profile | Flows inconsistent with stated wealth, PEP-linked counterparties | Transaction pattern consistent with stated business |
A client who is the adult child of a retired domestic civil servant with no procurement authority, whose own wealth is independently documented from a career in a different sector, and whose account transactions are consistent with that profile — this is not a case that warrants the same EDD intensity as a spouse of a sitting foreign minister from a high-corruption jurisdiction.
Documenting the Proportionality Decision
The file needs to show the reasoning, not just the outcome. An examiner looking at an RCA case wants to see three things: that the PEP connection was identified, that it was assessed against the relevant risk factors, and that the EDD applied was commensurate with that assessment.
- Identify the PEP — name, position, jurisdiction, current status (active or retired), and the basis for the RCA classification
- Assess the nexus — what is the nature of the relationship between the client and the PEP, and does it create financial exposure or dependency?
- Risk-rate the connection — applying the proportionality factors, what is the assessed risk level attributable specifically to the RCA status?
- Calibrate the EDD — what enhanced measures are applied, and why are they proportionate to the assessed risk rather than generic?
- Document the residual risk — after EDD, what risk remains, and is it within the institution's risk appetite?
The Ongoing Monitoring Dimension
RCA status is not static. A client whose parent was a mid-level civil servant at onboarding may become higher risk if that parent is subsequently appointed to a senior ministerial role. Conversely, a client whose spouse was a sitting PEP at onboarding becomes lower risk — though not necessarily non-RCA — after that spouse leaves office.
This means the RCA analysis needs to be live, not just conducted at onboarding. Annual review is the minimum trigger for reassessment. Adverse media alerts, transaction anomalies, and changes in the PEP's public profile are all events that should prompt a mid-cycle review of the RCA risk rating.
The RCA category exists because corruption risk doesn't stop at the PEP's own account. But it also doesn't extend equally to everyone in a PEP's orbit. The practitioner's job is to place the client correctly on that spectrum — and to show the working.