Politically Exposed Persons (PEPs) in Canada: FINTRAC Requirements and Screening Rules

A politically exposed person (PEP) is someone who holds, or has held, a senior government, judicial, military, or state-linked position, either in Canada or abroad. Under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), FINTRAC requires reporting entities, including money services businesses (MSBs) and foreign money services businesses (FMSBs), to determine whether a client is a PEP, a head of an international organization (HIO), or a family member or close associate of one of these persons.

PEP status is a risk category, not an accusation. Holding one of the listed offices does not mean a person is under investigation, has done anything improper, or must be declined as a client. What changes is the level of scrutiny a reporting entity must apply, and how that scrutiny gets documented. Canada also treats foreign PEPs differently from domestic PEPs and HIOs: the risk treatment, the duration of the status, and even whether the determination is mandatory or risk-based all diverge. MSBs and FMSBs carry an added layer that many other sectors do not: certain large transactions trigger a determination requirement on their own, independent of the business relationship. This article sets out what FINTRAC actually requires, where the FINTRAC guidance ends and operational best practice begins, and how a Canadian MSB builds a PEP program that holds up under examination.

What Is a Politically Exposed Person in Canada?

A politically exposed person is an individual who holds, or has recently held, a specific senior office in government, the judiciary, the military, or a state-owned institution, in Canada or in a foreign state. The politically exposed person meaning under the PCMLTFA is split into three distinct categories, each with its own rules: domestic PEPs, foreign PEPs, and heads of international organizations. FINTRAC does not treat these three categories interchangeably, and neither should a reporting entity's procedures.

Domestic Politically Exposed Persons

A domestic PEP is a person who currently holds, or has held within the last five years, one of the following offices or positions in or on behalf of the Canadian federal government, a provincial or territorial government, or a municipal government:

Governor General, lieutenant governor, or head of government

Member of the Senate, House of Commons, or a provincial legislature

Deputy minister or equivalent rank

Ambassador, or attaché or counsellor of an ambassador

Military officer with a rank of general or above

President of a corporation wholly owned by the Crown (federally or provincially)

Head of a government agency

Judge of a provincial appellate court, the Federal Court of Appeal, or the Supreme Court of Canada

Leader or president of a political party represented in a legislature

Mayor, reeve, or other similar chief officer of a municipal or local government

A person ceases to be a domestic PEP five years after leaving office, or five years after death. The obligation to mitigate the associated risk continues for that full five-year window.

Foreign Politically Exposed Persons

A foreign PEP is a person who holds, or has held, one of a similar list of senior offices or positions in or on behalf of a foreign state: head of state or government, member of the executive council or a legislature, deputy minister or equivalent, ambassador (or attaché or counsellor of one), military officer of general rank or above, president of a state-owned company or bank, head of a government agency, judge of a court of last resort, or leader or president of a political party represented in a legislature.

This status does not expire. Once a reporting entity determines that someone is a foreign PEP, they remain a foreign PEP forever, including after death, regardless of citizenship, residence, or where they were born. There is no requirement to redetermine foreign PEP status once it has been established, though the enhanced measures tied to that status continue to apply for the life of the business relationship.

Heads of International Organizations

A head of an international organization (HIO) is a distinct category from PEP, not a subtype of it. FINTRAC defines an HIO as a person who currently holds, or has held within the last five years, the position of head of an international organization established by the governments of states, an institution of such an organization, or an international sports organization. The head is typically the individual who leads the body day to day, such as a president or chief executive officer.

An international organization, for this purpose, is one set up by the governments of more than one country, bound by a formal agreement, with its own legal status distinct from any member country. Examples FINTRAC has identified include the United Nations and its institutions (such as the World Bank Group, the IMF, and the WHO), NATO, the OECD, INTERPOL, and the World Trade Organization, among others. HIO status ceases five years after the person leaves the position, or five years after death, mirroring the domestic PEP timeline rather than the permanent foreign PEP timeline.

Who Counts as a PEP Family Member or Close Associate?

Family Members Under FINTRAC Rules

FINTRAC's family member definition is narrower than many reporting entities assume. Only the following relationships count:

Spouse or common-law partner

Biological or adoptive child

Mother or father

Mother or father of the spouse or common-law partner (in-law)

A child of the person's mother or father (sibling)

An ex-spouse or ex-partner still counts as a family member, on the reasoning that they may retain access to the PEP's funds after a relationship ends. For a foreign PEP's ex-spouse, that status is permanent. For a domestic PEP's or HIO's ex-spouse, it lasts until the underlying PEP or HIO status itself lapses.

Stepchildren and step-siblings are not family members unless a legal adoption has taken place. A niece or nephew is never a family member under this definition, though either could still be relevant as a close associate depending on the actual relationship. Extended relatives outside this list should be assessed under the close-associate criteria, not assumed into the family-member category.

What Makes Someone a Close Associate?

A close associate is someone connected to a PEP or HIO for personal or business reasons, in a way that could allow that person's funds or influence to move through the associate. FINTRAC's examples include business partners or co-owners of a business with the PEP, people in a romantic relationship with the PEP, individuals involved in financial transactions with the PEP, prominent members of the same political party or union, fellow board members, close collaborators on charitable work, and joint holders on a policy where one holder is a PEP. A person remains a close associate until that connection is genuinely lost, which is a judgment call the reporting entity has to document, not a fixed time period.

The foreign-versus-domestic distinction matters here too. Close associates of a foreign PEP must always be treated as high risk. Close associates of a domestic PEP or HIO are only treated as high risk where the reporting entity's own risk assessment supports that conclusion, and — for non-account-based sectors including MSBs — the requirement to determine a close-associate relationship for a domestic PEP or HIO is specifically tied to detecting a fact about an existing relationship, not to onboarding or periodic monitoring in the same automatic way it applies to foreign PEPs.

When Must a Canadian Business Make a PEP or HIO Determination?

MSBs and FMSBs must take reasonable measures to determine PEP, HIO, family member, or close-associate (foreign PEP) status at three points in a business relationship, plus a fourth trigger unique to certain transactions.

When a Business Relationship Begins

A determination is required when an MSB or FMSB enters into a business relationship with a person. Reasonable measures under FINTRAC guidance can include asking the client directly, checking open-source information, reviewing records already on file, or consulting commercially available screening data.

During Periodic Monitoring

The determination is not a one-time event. MSBs and FMSBs must periodically take reasonable measures to reassess whether an existing client has become a PEP, HIO, family member, or close associate since the relationship began. This is the requirement most often missed by businesses that screen only at onboarding.

When New Information Creates Grounds to Suspect PEP or HIO Status

FINTRAC calls this "detecting a fact." It applies when a reporting entity, or any of its employees or officers, discovers information — proactively or otherwise — that gives reasonable grounds to suspect an existing client is a PEP, HIO, family member, or close associate. This could come from a client's own disclosure, ongoing monitoring, general knowledge of current events, or an open-source or third-party database search. A name match on its own is a fact, but it is not automatically sufficient to meet the reasonable-grounds-to-suspect threshold; FINTRAC's guidance suggests corroborating a name match with other identifiers such as address, date of birth, or transaction activity before treating it as a determination.

Transaction-Based PEP Checks for MSBs and FMSBs

MSBs and FMSBs face a determination requirement that most other non-account-based sectors do not carry in the same form: certain large transactions independently trigger a PEP/HIO check, separate from the business-relationship triggers above. When providing services to a person located in Canada, an MSB or FMSB must take reasonable measures to determine PEP, HIO, family member, or close-associate status for the following, all measured in Canadian dollars:

Requestor-side transactions

Initiating an international electronic funds transfer of $100,000 or more

Transferring an amount of virtual currency equivalent to $100,000 or more

Transporting $100,000 or more in cash, money orders, traveller's cheques, or similar negotiable instruments (excluding cheques payable to a named person or entity), or an equivalent amount of virtual currency

Beneficiary-side transactions

Finally receiving an international electronic funds transfer of $100,000 or more for a beneficiary

Receiving virtual currency equivalent to $100,000 or more for remittance to a beneficiary

One exception applies across all of these triggers: if a reporting entity has already determined that a person is a foreign PEP or a family member of a foreign PEP, that determination does not need to be repeated, because foreign PEP status does not expire.

PEP Determination Trigger Map for MSBs/FMSBs

The table below consolidates every point at which an MSB or FMSB must take reasonable measures to make a PEP/HIO determination.

Foreign PEP vs Domestic PEP: Why the Difference Matters

The definitions above matter less than what happens after a determination is made, and that is where foreign and domestic treatment genuinely diverge.

Dimension Foreign PEP (and family/close associate)Domestic PEP or HIO (and family/close associate)Status duration Permanent — never expires, even after death Five years after leaving office/position or death High-risk classification Mandatory — always treated as high risk Risk-based — high risk only if the entity's risk assessment concludes there is high risk of an ML/TF offence Source of wealth Required once the person is determined to be a foreign PEP or related person Required only where the risk-based assessment concludes high risk Enhanced measures Mandatory: added identity verification, enhanced ongoing monitoring, other risk-appropriate measures Same measures, but only triggered once the entity's own risk assessment calls for them Senior management review Required for transactions and, where the account/relationship review applies, ongoing Required only when the relationship or transaction has been assessed as high risk

In practice, this means a foreign PEP client is automatically on an enhanced track from the moment the determination is made. A domestic PEP or HIO client is not automatically enhanced; the entity's documented risk assessment does the work of deciding whether enhanced treatment applies. A program that applies identical treatment to both categories is either over-controlling domestic PEPs (wasted resources and client friction) or under-controlling foreign PEPs (a compliance gap), and either version tends to draw the wrong kind of attention during a FINTRAC examination.

What Must an MSB Do After Identifying a PEP or HIO?

Establish the Source of Wealth

Source of wealth refers to the origin of a person's total assets, reasonably explained rather than assumed. It can come from business activity, employment income, investments, real estate, inheritance, or other accumulated sources. Reasonable measures to establish it include asking the client directly or checking open-source information about them. This is not a full financial audit; it is a documented, defensible basis for believing the client's overall wealth is consistent with what is known about them.

Timing matters here. Once a business relationship is entered into, or a fact is detected, the entity has 30 days from that date to take reasonable measures to establish source of wealth, where applicable. For the transaction-based triggers, the clock runs 30 days from the date the transaction was conducted.

Establish the Source of Funds or Virtual Currency When Required

Source of funds (or source of virtual currency) is a narrower concept than source of wealth. It concerns the origin of the specific funds used for a specific transaction, not the person's assets as a whole. FINTRAC's guidance describes it as how the funds were acquired, not simply where they were transferred from. This obligation attaches to the transaction-related triggers above, alongside source of wealth, and follows the same 30-day timing rule measured from the transaction date.

Apply Enhanced Measures Where Required

Where enhanced measures apply, three components are consistently expected: additional measures to verify the person's identity, enhanced ongoing monitoring of the relationship, and any other measures appropriate to the specific risk the person presents. What "appropriate" looks like in practice depends on the client's transaction pattern, the jurisdictions involved, and the products used; a written procedure should describe what enhanced monitoring means operationally, not just restate the regulatory language.

Obtain Senior Management Review Where Required

A member of senior management must review the relevant transaction, or the decision to keep an account or relationship open, where FINTRAC's rules call for it. Senior management, for this purpose, means someone with the authority to make and be accountable for the decision, who understands the entity's money laundering and terrorist financing risk exposure, and who understands the entity's PEP/HIO obligations specifically. A sole proprietor with no employees or authorized agents is treated as their own senior manager. The reviewer's name and the date of review are both required elements of the record, discussed further below.

Consider Suspicious Transaction Reporting Separately

PEP status alone does not automatically require a suspicious transaction report (STR). It does not mean the client is under investigation, and it does not require terminating the relationship. An STR is triggered by reasonable grounds to suspect that a transaction is related to money laundering or terrorist financing, which is a distinct legal threshold assessed on the facts of the transaction itself. A PEP determination is one input into that broader assessment, particularly where the source of funds or wealth explanation is inconsistent with what is known about the client, but the determination and the STR decision are separate compliance conclusions and should be documented as such.

PEP Screening in Canada: A Defensible Workflow for MSBs and FMSBs

PEP screening requirements in Canada are not satisfied by running a name through a database and moving on. A defensible process treats automated screening as the starting point, not the conclusion. A name match from a screening tool is a possible match; it becomes a confirmed determination only once a compliance officer has reviewed the surrounding facts and reached a documented conclusion. That conclusion, whatever it is, is the documented compliance decision the file needs to survive an examination.

A practical sequence for MSBs and FMSBs:

Collect sufficient identifying information on the client at the relevant trigger point

Run the required PEP/HIO determination against current, reliable data

Resolve any potential name matches by checking supporting identifiers (date of birth, address, occupation, known transaction history)

Establish whether the person is the PEP/HIO themselves, a family member, or a close associate, and on what basis

Document the evidence reviewed and the reasoning for the conclusion reached

Apply the appropriate risk assessment outcome (automatic high risk for foreign PEPs and their family/close associates; risk-based for domestic PEPs and HIOs)

Establish source of wealth, and source of funds or virtual currency where the trigger requires it

Obtain the required senior management review and record the reviewer and date

Apply enhanced ongoing monitoring proportionate to the risk

Reassess when periodic monitoring runs, or when new facts emerge

Compliance software can prompt the right questions, flag potential matches, and structure the record, but it cannot make the underlying determination. Field data entered without analysis is the single most common weak point examiners find in PEP files: a screening hit that was cleared with no documented reasoning looks, on paper, identical to a hit that was never reviewed at all.

What Records Must Be Kept for PEP and HIO Determinations?

FINTRAC's non-account-based sector guidance, which governs MSBs and FMSBs, separates the recordkeeping obligation into two categories with different content and different retention triggers.

Business relationship records

When a determination is made at onboarding, during periodic monitoring, or through a detected fact, the entity must keep a record of the PEP's or HIO's office or position and the name of the relevant organization or institution, the date of the determination, and the source of the person's wealth, if known. These records must be kept for at least five years after the day they were created.

Transaction records

Where a senior manager reviews one of the applicable large transactions and a PEP/HIO determination was made, the record must additionally include the source of the funds or virtual currency used in the transaction (if known), the name of the senior manager who reviewed it, and the date of that review, alongside the office/position, organization, and determination date already noted above. These transaction records must be retained for at least five years from the day the last business transaction with that person was conducted, which is a different retention anchor than the five-years-from-creation rule that applies to business relationship records. For family members and close associates, it is also good practice to record the nature of the relationship to the PEP or HIO, even though FINTRAC frames this as advisable rather than strictly mandatory.

For evidence standards examiners look for across all client files, not just PEP files, see ComplyFactor's FINTRAC Examination Readiness Checklist.

Common PEP Compliance Mistakes Canadian MSBs Should Avoid

Screening only at onboarding and skipping periodic monitoring, which is a distinct and separate FINTRAC trigger

Treating every PEP determination as evidence of suspicious activity, rather than as a risk classification

Applying identical treatment to foreign PEPs and domestic PEPs, when the automatic-versus-risk-based distinction changes what is legally required

Overlooking family members entirely, particularly the in-law and sibling relationships that FINTRAC's definition explicitly captures

Failing to apply the mandatory high-risk treatment to close associates of foreign PEPs

Accepting a screening-tool hit as a confirmed determination without documented human review

Not documenting unsuccessful reasonable measures when source of wealth or source of funds information could not be obtained

Accepting thin or unverified source of wealth explanations that do not match what is otherwise known about the client

Missing senior management review evidence, or recording that a review happened without naming who conducted it and when

Writing a PEP policy with no corresponding operational workflow for frontline or compliance staff to follow

Failing to update enhanced monitoring when a client's risk profile changes after the initial determination

Not retaining the reasoning for why a potential match was cleared, leaving the file unable to explain a decision an examiner questions later

These are described here as operational weaknesses observed across compliance programs, not as documented FINTRAC enforcement findings; where a specific enforcement action is relevant to your program, it should be verified against FINTRAC's published penalty decisions rather than assumed.

How PEP Controls Should Fit Into an AML Compliance Program

A PEP procedure that exists as a standalone document, disconnected from the rest of the compliance program, tends to fail quietly. It should connect directly to customer onboarding and the customer risk rating framework, so a PEP determination feeds the same risk score used elsewhere in the file. It should trigger the entity's existing enhanced due diligence and transaction monitoring procedures rather than duplicating them, and it should have a clear escalation path into the entity's suspicious transaction reporting process when the facts warrant it. Source of wealth and source of funds procedures, senior management review, staff training, and recordkeeping should all reference the same PEP policy rather than being described differently in different documents, and the PEP file evidence should be something an independent effectiveness review can actually test.

A full five-pillar build, including how PEP procedures integrate with risk assessment and training, is covered in ComplyFactor's AML compliance program service.

To confirm PEP files would hold up under FINTRAC's biennial requirement, see ComplyFactor's independent AML audit service.

PEP Compliance Checklist for Canadian MSBs and FMSBs

Use this checklist to test whether an existing PEP program is operating, not just documented on paper.

Do written procedures distinguish domestic PEPs, foreign PEPs, and HIOs as separate categories with separate treatment?

Are the specific family-member relationships FINTRAC recognizes documented and understood by staff who conduct determinations?

Are close-associate criteria documented, including the foreign-versus-domestic distinction in when they apply?

Are all three business-relationship triggers mapped: onboarding, periodic monitoring, and detected facts?

Are the MSB/FMSB transaction-based triggers configured in your systems, with the correct $100,000 CAD threshold?

Is a determination that a client is a foreign PEP flagged so it is not needlessly re-screened?

Is screening evidence, including the underlying facts reviewed for a potential match, retained in the file?

Are false-positive/cleared-match decisions documented with the reasoning, not just the outcome?

Is source of wealth evidence retained, and does it show reasonable measures were actually taken?

For applicable transactions, is source of funds or source of virtual currency evidence retained separately from source of wealth?

Is senior management review documented with a named reviewer and a review date?

Does enhanced ongoing monitoring for PEP/HIO clients look visibly different from monitoring applied to standard clients?

Are the two different record-retention periods (five years from creation for relationship records; five years from the last transaction for transaction records) tracked correctly?

Can a sampled PEP file demonstrate the full chain of reasoning an examiner would expect to see?

How ComplyFactor Can Help With PEP and High-Risk Client Controls

Building a PEP program that survives a FINTRAC examination takes more than a policy paragraph describing the definitions above. ComplyFactor works with Canadian MSBs, FMSBs, and other reporting entities to translate PEP and HIO requirements into an operational file: determination workflows staff can actually follow, source of wealth and source of funds documentation standards, senior management review templates, and record keeping that matches FINTRAC's retention rules for both relationship and transaction records.

Where an existing program already has PEP procedures in place, an independent AML audit tests whether those procedures produce defensible files in practice, sampling determinations, source of wealth evidence, and senior management sign-off against what FINTRAC actually expects to see. Where a program needs to be built or corrected, ComplyFactor's AML advisory and AML compliance program services design the PEP workflow alongside the rest of the risk-based program, and a fractional compliance officer engagement can take day-to-day ownership of PEP determinations, senior management review, and ongoing monitoring for businesses that do not yet have that function staffed internally.

Frequently Asked Questions

What is a politically exposed person in Canada?

A politically exposed person is someone who holds, or has recently held, a senior government, judicial, military, or state-linked office, either in Canada (a domestic PEP) or abroad (a foreign PEP). FINTRAC also recognizes a related but separate category, heads of international organizations (HIOs), and requires reporting entities such as MSBs to determine whether clients fall into any of these categories.

What is the difference between a domestic and foreign PEP?

A domestic PEP holds or held a listed Canadian federal, provincial, or municipal office. A foreign PEP holds or held an equivalent office for a foreign state. Foreign PEP status never expires and always triggers mandatory high-risk treatment. Domestic PEP status expires five years after leaving office and only triggers high-risk treatment where the entity's own risk assessment concludes there is high risk.

How long does someone remain a politically exposed person in Canada?

A foreign PEP remains one permanently, including after death. A domestic PEP or a head of an international organization ceases to hold that status five years after leaving the position, or five years after death, though the entity must keep mitigating the associated risk throughout that five-year period.

Are family members of a PEP also subject to FINTRAC requirements?

Yes, for a specific, narrow list of relationships: spouse or common-law partner, child, mother or father, in-laws (the spouse's mother or father), and siblings. Nieces, nephews, and unadopted stepchildren are not covered by the family-member definition, though they may be assessed as close associates depending on the actual relationship.

What is a close associate of a politically exposed person?

A close associate is someone connected to a PEP or HIO for personal or business reasons in a way that could allow funds or influence to move through them, such as a business partner, a person in a romantic relationship with the PEP, or a fellow board member. Close associates of foreign PEPs must always be treated as high risk; close associates of domestic PEPs or HIOs are assessed on a risk basis.

When must an MSB check whether someone is a PEP?

At three business-relationship points (onboarding, periodic monitoring, and when a fact is detected that creates reasonable grounds to suspect PEP status), plus at specific large transactions: international electronic funds transfers, virtual currency transfers, and transport of cash or negotiable instruments at or above $100,000 CAD, on both the requestor and beneficiary side.

Does being a PEP automatically make a customer high risk?

For foreign PEPs and their family members or close associates, yes, automatically. For domestic PEPs, HIOs, and their family members or close associates, high-risk treatment applies only where the entity's own documented risk assessment concludes there is a high risk of a money laundering or terrorist financing offence.

Does PEP status automatically require a suspicious transaction report?

No. PEP status is a risk classification, not evidence of suspicious activity. A suspicious transaction report is required only where the entity has reasonable grounds to suspect a transaction is related to money laundering or terrorist financing, based on the facts of that transaction, which is assessed separately from the PEP determination itself.

What is the difference between source of wealth and source of funds for a PEP?

Source of wealth is the origin of a person's total assets, reasonably explained. Source of funds (or source of virtual currency) is narrower: the origin of the specific funds used in a specific transaction. Both may need to be established for PEPs, depending on the trigger, generally within 30 days of the relevant event.

What records should an MSB keep for a PEP determination?

At minimum, the office or position and organization involved, the date of the determination, and the source of wealth if known, retained for five years from creation. Where a large transaction triggered senior management review, the record must also include the source of funds or virtual currency, the reviewer's name, and the review date, retained for five years from the last transaction with that person.

Keeping PEP Decisions Defensible Under FINTRAC

A sound PEP program comes down to six things: correctly classifying the person (domestic PEP, foreign PEP, HIO, family member, or close associate), applying the risk treatment that category actually requires, gathering real source of wealth and source of funds evidence rather than a checkbox, obtaining senior management review where it is required, keeping ongoing monitoring proportionate to the risk, and documenting every step in a way that explains the decision to someone who was not in the room when it was made.

None of this needs to be complicated, but it does need to be built deliberately rather than assembled from a generic template. If your current PEP procedures cannot answer these questions with confidence, or if you are building a program from scratch, ComplyFactor's Canadian AML advisory team can help design and test the workflow before FINTRAC does it for you.