State-Owned Enterprises (SOEs) and Politically Exposed Persons (PEP) Screening: Why SOE Links Matter

Most compliance teams have politically exposed persons (PEPs) screening tuned to catch the obvious names. Presidents, ministers, ambassadors, central bank governors. The list of prominent public officials is well understood, and screening engines flag them reliably. The blind spot sits somewhere else entirely, in the finance director of a national oil company, the board member of a state-owned bank, the chief executive of a sovereign wealth fund. These people control state resources on a scale that dwarfs many elected officials, yet they routinely slip through screening programs built around government titles alone.

That gap matters because the risk these individuals carry is identical in kind to the risk a government minister carries. Both sit close to public money. Both can be pressured, bribed, or tempted into moving that money for private benefit. History bears this out repeatedly. Some of the largest corruption and money laundering cases of the past two decades ran through state-owned enterprises rather than government ministries, precisely because the enterprises controlled the cash while attracting less scrutiny than the officials who oversaw them. The finance function of a national oil company has moved more illicit value in single transactions than most corrupt politicians handle in a career.

This article explains why state-owned enterprise executives qualify as politically exposed persons, how the connection often hides one or two ownership layers deep, where it collides with sanctions law, and what a screening program needs to catch it. The throughline is a single, uncomfortable fact. The people best positioned to loot a state are frequently not the ones holding political office, and a screening program indexed only to political titles will miss them by design.

The following topics are going to be covered in this article;

1. Are SOE Executives PEPs?
2. What Counts as an SOE, and Who Within It Is a PEP
3. The Indirect Link Problem
4. Where SOE Screening Meets Sanctions: The 50% Rule
5. Building SOE Screening Into Your Program
6. How Sanction Scanner Helps

1. Are SOE Executives PEPs?

Senior managers, board members, and executives of SOEs are classified as PEPs under The Financial Action Task Force (FATF) standards, because their control over state resources creates the same corruption and money laundering risk as government officials. This includes leaders of national oil companies, state banks, sovereign wealth funds, and other government-controlled entities. Screening for SOE links is therefore a core part of PEP compliance.

The point worth internalizing is that political exposure does not require a political title. The chief financial officer of a national oil company has never run for office and may never appear in a headline, yet that person authorizes the movement of billions in state revenue. FATF’s Recommendation 12, the global standard for PEP treatment, deliberately uses the phrase "prominent public functions" rather than "public office" precisely to capture this. A prominent function inside a government-controlled enterprise counts. The title on the business card does not have to say "minister" for the risk to be ministerial in scale.

The logic behind this classification is straightforward once stated plainly. PEP status exists to flag individuals whose position gives them access to public funds and the influence to misuse that access. An SOE executive has both in abundance. The head of a state oil trader decides who receives lucrative supply contracts. The chief executive of a state bank decides which politically connected borrowers receive credit on favorable terms. The investment committee of a sovereign wealth fund allocates national savings across global markets. Each of these functions carries the identical corruption vector that PEP screening was designed to address, which is why FATF, the EU’s Anti-Money Laundering Directives, and national regulators all treat senior SOE figures as PEPs rather than as ordinary corporate customers.

It is worth noting that being classified as a PEP implies no wrongdoing whatsoever. The overwhelming majority of SOE executives are honest professionals doing legitimate jobs. PEP status is a risk indicator, not an accusation, and it triggers enhanced scrutiny rather than exclusion. The purpose is to ensure that a financial institution understands who it is dealing with and can spot the minority of cases where public position is being abused.

2. What Counts as an SOE, and Who Within It Is a PEP

An SOE is an entity in which a government holds significant ownership or control. That definition sounds simple until it meets the real world, where ownership arrangements are rarely clean. Wholly government-owned entities obviously qualify. So do majority-owned ones. The harder cases involve control that exists below a majority stake, where a government holds 30 or 40 percent but exercises effective control through board appointments, veto rights, or golden shares. Control, not just the percentage on paper, is what determines SOE status.

Certain categories of SOE carry consistently high exposure. National oil and gas companies sit at the top, given the sums involved and the corruption history of the extractives sector. State banks, sovereign wealth funds, state utilities, defense manufacturers, and national airlines round out the high-risk group. These are the entities where a single executive decision can redirect enormous public value.

Not everyone inside an SOE is a PEP, and treating every employee as one would drown a compliance program in noise. FATF focuses on those entrusted with prominent functions, meaning senior management, board members, and senior executives. A branch teller at a state bank is not a PEP. The bank’s chief executive and board are.

Drawing that line in practice requires judgment rather than a mechanical rule. The senior management tier clearly qualifies, covering the chief executive, chief financial officer, and other C-suite roles. Board members qualify because they hold ultimate oversight and can direct the entity’s decisions. Below that, the picture blurs. A regional head who controls a significant business line may warrant PEP treatment, while a mid-level manager with no discretionary authority over public funds generally does not. The guiding question is whether the individual is genuinely entrusted with a prominent function, not merely employed by an entity that happens to be state-owned. Most compliance programs resolve this by defining SOE PEP scope around named senior roles and board seats, then applying a risk-based judgment to anyone below that tier who nonetheless exercises meaningful control.

The relatives and close associates of these executives deserve attention as well. FATF extends PEP treatment beyond the individual to family members and known associates, because a corrupt SOE executive rarely holds illicit assets in their own name. A spouse who suddenly appears as the sole shareholder of a company winning SOE contracts, or an adult child with no relevant experience installed as a consultant to a state enterprise, are classic patterns that ownership mapping is meant to expose.

3. The Indirect Link Problem

The SOE connection is rarely sitting in plain view on the counterparty you are onboarding. It hides in the ownership structure behind that counterparty, and this is what makes SOE screening genuinely difficult.

Consider the common patterns. A private company that is majority-owned by an SOE inherits SOE-linked risk, even though its own name gives no hint of a government connection. A joint venture with a state oil company creates exposure through the partnership itself. A supplier whose controlling shareholder happens to be an SOE executive is PEP-adjacent, carrying risk that never surfaces if screening stops at the entity name on the invoice.

These are not edge cases dreamed up for illustration. They are the standard architecture of how state-linked money moves through the private economy. A national oil company rarely contracts in its own name for sensitive transactions. It works through trading intermediaries, service companies, and joint ventures, each a legally distinct entity with its own name and its own clean-looking corporate record. The SOE connection is real and material, but it lives in the ownership register rather than on the letterhead. An institution that screens the trading intermediary and finds nothing has not actually cleared the relationship. It has simply failed to look where the risk was sitting.

The screening challenge is structural. In each of these cases, the SOE link sits one or two ownership layers removed from the party actually being screened. Run a name check on the immediate counterparty and nothing fires, because the counterparty itself is not an SOE and its executives are not named PEPs. The connection only becomes visible when ownership is mapped, when the layers are peeled back to reveal who ultimately owns and controls the entity. Identifying the ultimate beneficial owner (UBO) is not a separate compliance exercise from PEP screening here. It is the mechanism that makes SOE-linked PEP detection possible in the first place, which is why business ownership verification has to run alongside name screening rather than after it.

The difficulty compounds across jurisdictions. Ownership records that are transparent in one country are opaque or entirely unavailable in another, and SOEs in the highest-risk jurisdictions are precisely the ones whose ownership chains are hardest to trace. A layered structure might route through a holding company in a secrecy jurisdiction, then through a nominee, before arriving at the SOE or its executive. Each layer is a place where a name-only screen loses the thread. This is the gap that has produced some of the most damaging compliance failures on record, where an institution onboarded a private company, screened it cleanly, and only discovered the state-linked ownership after enforcement action made it public.

There is also a timing dimension that catches programs off guard. Ownership can change after onboarding. A private supplier that was genuinely independent when the relationship began can be acquired by an SOE, or have an SOE executive quietly take a controlling stake, months or years later. Without periodic re-verification of ownership, the SOE link that did not exist at onboarding never gets detected, and the relationship carries hidden PEP exposure indefinitely.

4. Where SOE Screening Meets Sanctions: The 50% Rule

For SOEs headquartered in sanctioned jurisdictions such as Russia, Iran, Venezuela, and North Korea, two distinct compliance regimes converge on the same entity. PEP risk and sanctions risk stop being separate questions and become a single, compounded one.

The mechanism that fuses them is OFAC’s 50 Percent Rule. Under this rule, an entity that is owned 50 percent or more, directly or indirectly, in the aggregate by one or more blocked persons is itself considered blocked, even when it never appears on the Specially Designated Nationals (SDN) list by name. A great many SOEs in sanctioned states, along with their subsidiaries, fall under this rule without being separately designated. The ownership aggregation feature matters especially here. If two blocked persons each hold 30 percent and 20 percent of an entity, the combined 50 percent triggers the block, and sanctioned-state SOEs frequently sit behind exactly this kind of layered, aggregated ownership.

The consequence is that a single SOE executive can occupy three overlapping risk categories at once. That person is a PEP under FATF standards. That person may be a sanctioned individual under OFAC designation. That person may control entities that are themselves blocked under the 50 Percent Rule despite never being listed. A screening program that catches only one of these three misses the full picture. Catching all three requires PEP data, sanctions data, and ownership analysis working together rather than in isolation.

The practical stakes here are higher than PEP screening alone. A missed PEP is a due diligence failure that regulators may penalize. A missed 50-Percent-Rule entity is a sanctions violation, and OFAC operates a strict liability regime, meaning an institution can be held responsible even when it did not know and did not intend to deal with a blocked party. The excuse that the entity was not on any list carries no weight, because the rule explicitly reaches entities that are blocked by operation of ownership rather than by name. For an institution dealing with counterparties linked to Russian, Iranian, Venezuelan, or North Korean SOEs, the difference between screening the name and analyzing the ownership is the difference between compliance and a reportable violation.

Sanctioned-state SOEs are engineered to exploit exactly this gap. When a government anticipates sanctions, it restructures its state enterprises through intermediary holding companies, minority stakes, and cross-ownership arrangements designed to keep any single blocked person below the visible 50 percent threshold on paper while preserving aggregate control. Detecting that requires aggregating ownership across multiple blocked persons and multiple layers, the specific analytical task the 50 Percent Rule demands and that name screening cannot perform.

5. Building SOE Screening Into Your Program

Turning this understanding into an operational program comes down to a handful of concrete capabilities. Each addresses one of the failure points described above, and a program missing any single one of them has a hole that SOE-linked risk can pass through. The checklist below captures what a screening program needs to reliably surface SOE-linked risk.

☐ PEP database flags SOE senior management and board members, not just government office holders

☐ Ownership mapping detects indirect SOE control, covering both majority stakes and significant-minority positions that confer control

☐ Sanctions screening covers sanctioned-state SOEs and their 50-Percent-Rule subsidiaries, including entities not separately listed

☐ Enhanced due diligence (EDD) is applied to confirmed SOE-linked relationships, establishing source of wealth and the purpose of the relationship

☐ Ongoing monitoring stays active, because SOE status and sanctions designations change as governments restructure entities and regulators add or remove listings

The enhanced due diligence step deserves particular care with SOE-linked relationships. Establishing a source of wealth for an SOE executive means understanding how their declared assets relate to their known compensation, and a mismatch between a modest official salary and substantial personal wealth is one of the clearest corruption indicators available. Documenting the purpose of the relationship matters just as much, because a legitimate business reason for an SOE-connected counterparty to hold an account should be clear and verifiable. Where it is not, that absence is itself a red flag worth escalating.

The last point on the checklist deserves emphasis. SOE screening is not a one-time onboarding check. Governments nationalize and privatize entities, ownership percentages shift, and sanctions regimes evolve month to month. An executive who was clean at onboarding can become a sanctioned person, or an entity that was privately held can pass into state control, without the counterparty ever notifying you. Static screening captures a moment. The risk moves continuously, and a program that screens once and files the result has already begun to fall out of date.

6. How Sanction Scanner Helps

Detecting SOE-linked PEP and sanctions risk requires three data layers working as one, and that is the architecture Sanction Scanner is built around. The PEP database identifies senior management and board members of state-owned enterprises, closing the gap that title-based screening leaves open. Ownership analysis within the Know Your Business module maps corporate structures to surface the indirect SOE links that sit one or two layers behind a counterparty. Sanctions screening catches exposure to sanctioned-state SOEs and the subsidiaries pulled in by the 50 Percent Rule, including entities that never appear on a list by name.

Bringing these three together is what separates a program that flags the obvious minister from one that catches the national oil company’s finance director hiding two ownership layers behind a private supplier. The obvious names were never the hard part. The SOE link is.

For institutions with meaningful exposure to emerging markets, commodity trading, cross-border correspondent banking, or any sector where state enterprises are active counterparties, this capability is not a refinement to an existing program. It is the difference between a screening function that produces a defensible audit trail and one that leaves a structural blind spot for regulators and criminals alike to find. The executives who loot state enterprises rely on that blind spot. Closing it starts with treating SOE links as a first-order screening priority rather than an afterthought to political-title matching, and it ends only with the combination of quality PEP data, genuine ownership analysis, and continuous sanctions coverage operating as a single system.

Sources

[1] Financial Action Task Force. FATF Glossary (Politically Exposed Persons, Recommendation 12). 2025.

[2] Office of Foreign Assets Control, U.S. Department of the Treasury. Frequently Asked Question 401: OFAC's 50 Percent Rule. 2025.

Minhac Celik

Marketing Lead

View full profile →