Relatives and Close Associates (RCAs): What Are They and Why Do They Matter in PEP Compliance?

A Politically Exposed Person (PEP) does not function in a state of void. Those in their close vicinity are frequently at risk of money laundering, bribery, or corruption. With the fact of their close proximity to a PEP, Relatives and Close Associates (RCAs) may be employed in illegal cash transfers or conceal the genuine beneficial ownership of assets. Giving financial institutions and Designated Non-Financial Business or Professions (DNFBP) working definitions or examples of close associates and family members is highly recommended for governments. The boundaries of working definitions and examples should not be taken either broadly or too narrowly. 

The particular subtleties that make RCA identification a distinctive challenge for compliance teams are the subject of this section. The following topics are going to be covered in this article; 

• What Are Relatives and Close Associates (RCAs)?
• Who Counts as a 'Family Member'?
• Who Counts as a 'Close Associate'?
• Why RCAs Are the Biggest Compliance Blind Spot
• How to Identify RCAs: Data Sources and Methods
• EDD Obligations for RCAs
• RCA Screening Best Practices

What Are Relatives and Close Associates (RCAs)?

Relatives and close associates are a category of politically exposed individuals who have a friendship or family relationship with a PEP.  RCAs are also commonly mentioned as PEPs by association. FATF definition of Relatives and Close Associates (RCAs) is family members of PEPs and individuals who are closely associated with PEPs, either socially or professionally. 

Financial Action Task Force (FATF) Recommendation 12 is also applicable to the PEP's close associates and family members. The scope of the family members and close associates is not defined in the recommendation because it is somewhat dependent on the socioeconomic situation and cultural composition of the PEP's home nation.  Some people may be eligible for PEP status due to their relationship or closeness to another person, even though many are politicians or perform duties in government. Since the number of people who meet the criteria for being family members and close associates is variable and may fluctuate dramatically over time, identifying such people is also difficult. 

Relatives and close associates are two distinct sub-categories of RCAs with different identification challenges. 

Who Counts as a 'Family Member'?

FATF typically includes spouses or partners, parents, children and their spouses or partners. Some jurisdictions extend to siblings, grandparents, grandchildren, in-laws. UK Money Laundering Regulations 2017 provides explicit family member list. EU AMLD4 Article 3(9) defines family members. The US provides no explicit list under BSA.

When it comes to family members, this includes pertinent elements like the influence that specific family member forms typically have and the size of the circle of close relatives and dependents. In many societies, parents, siblings, spouses/partners, and children are the only family members who are seen as close or influential. Cousins, grandparents, grandkids, and even tribes and family groups may be incorporated in other cultures and traditions. Comparison of family member definitions by jurisdiction can be seen in the following table. 

Table 1: Comparison of family member definitions by jurisdiction. 

One problematic assumption a compliance officer can make about the family scope gap analysis is that their local regulator and PEP database provider utilize the same definition. If your data source simply flags parents and children, but your regulator mandates screening for siblings and in-laws, you have a systemic compliance gap. Few key compliance questions to ask at this point is as follows:

• Does your PEP database cover the same family scope as your regulatory obligations? 
• Data Mapping: Is the relationship type, as in brother-in-law,  clearly labeled by our PEP database supplier, or are they all just categorized as RCA?
• In countries where domestic partnerships and common-law marriages are not formally recorded, how can you find and screen partners in accordance with the de-facto partner rule?
• Is the relationship invisible to your existing data set, or does your system automatically raise the RCA flag if a PEP's child-in-law is a senior executive at a company you onboard?
• How soon does your ongoing monitoring technology change the current client's risk profile when a member of their family becomes a PEP? 

Who Counts as a 'Close Associate'?

This is where it gets difficult to draw visible lines between everyday individuals and PEPs. FATF includes: 

• Individuals with joint beneficial ownership or control of legal entities with the PEP 
• Individuals with close business relationships with the PEP 
• Individuals who are sole beneficial owners of an entity known to be set up for the benefit of the PEP.

In practice the following relationships are examples of close associates: 

• Known partners which are non-family members like girlfriends, boyfriends, mistresses.  Notable members of the same political party, civil organization, labor or employee union as the PEP
• Business partners or associates, particularly those who are connected in some other way like shared membership in a corporate board or who share beneficial ownership of legal entities with the PEP. 
• Advisors, lawyers, childhood friends who become business fronts, political fixers, gatekeepers. The definition is intentionally open-ended because corruption networks are creative.

The key challenge is, 'close associate' is a relationship, not a role, which is much harder to identify than family members. When it comes to personal relationships, the social, economic, and cultural background can also influence the proximity those connections are in general. 

Why RCAs Are the Biggest Compliance Blind Spot

Studies by Transparency International and FATF reveal that RCAs are mostly instrumental in PEP corruption; a sitting head of state hardly ever enters a bank with their own identity. The funds hardly ever move under the PEP's name. Rather, RCAs offer the "layers" of separation required to go around conventional screening. Some examples of these cases are as follows; 

• In Isabel dos Santos' case, daughter of Angola president, billions moved through business associates. Business associates used were a childhood friend, and a business manager, Mário Leite da Silva, and few more associates to direct state oil funds into Dubai-based shell companies. UK, US, and EU sanctions/asset freezes as a result of Luanda Leaks" investigation.
• In Gülnara Karimova's case, daughter of the Uzbekistan president, close associates were employed for laundering. Through proxies and boyfriends, she bought expensive real estate in the UK and Switzerland by using her then-boyfriend, Rustam Madumarov, as the legitimate owner of British Virgin Island businesses. More than $1 billion in assets frozen/seized across several European jurisdictions, which were mainly kept in Swiss Banks. 
• Teodorin Obiang, son of Equatorial Guinea president, owned luxury assets in family members' names. He did asset layering and used the national treasury as a personal account to purchase supercars and homes worth over $100 million through family-owned businesses and enablers. The outcome was “Ill-Gotten Gains" conviction in France, asset forfeiture in the US and Switzerland.

The pattern is, PEP status flags the individual, but the money moves through RCAs. 

The reasons these situations are blind spots mainly are ; 

• The "Legitimacy" Shield: During first onboarding, business associates like the ones in Isabel Dos Santos case,  appear less risky with their own credible business history. 
• The Lack of a "Paper Trail": A close associate as in Karimova's boyfriend or a PEP's private attorney, might not show up in any official registration. Meanwhile, a family member can occasionally be located through birth and marriage records.
• Low-Intensity Screening: Without specific RCA data inputs, many automated systems may not have the depth to recognize a cousin-in-law or a long-term business partner, even though they are designed to highlight senior political figures.

How to Identify RCAs: Data Sources and Methods

The following  are practical operational content. The methods to identify RCAs include: 

• PEP databases →  Most include known family members and close associates. Coverage varies dramatically by provider and by region. Benefit from risk scoring for relationships which is now included in databases. Additionally, seek out suppliers who use AI-assisted entity resolution. Even with minor spelling differences, this technology links a name in a corporate register to another name that is similar and cited as a PEP's cousin in a local news article.

The conservative way is focusing on a particular customer. Graph databases like Neo4j or integrated platform tools show the edges, the links,  between the nodes, people/entities. In contrast to relational databases, Neo4j is excellent in linking PEPs to family members, shell corporations, or high-risk jurisdictions. The advantage is that it makes Indirect associations or circular ownership visible. Direct querying of indirect relationships becomes possible. PEP B and Customer A somehow have the same offshore registered agency or private legal representative.

• Customer self-declaration → Onboarding forms should ask about PEP relationships, but customers may not disclose. It is simple to avoid standard "Yes/No" PEP inquiries. The smart onboarding comes with the use of dynamic survey questionnaires. The form should ask, "Do you hold any joint business interests with a person holding a public function?" as the follow-up question, if the user chooses a high-risk industry or nation. A major candidate for further RCA screening is a client who leaves the ‘occupation’ or ‘source of wealth’ sections ambiguous.

• Adverse media screening → News coverage often reveals PEP-associate relationships before databases update.  Long before they show up in official databases, PEP-associate relationships like  silent partners or romantic partners  are frequently revealed through news coverage. In a complicated news narrative, make use of AI-backed sentiment & entity linking tools and techniques that can differentiate between a PEP and its RCA. An investigation report from the previous year might connect a business consultant and a minister through a joint purchase of opulent real estate. Local, non-English tabloids and provincial gazettes frequently make reference to RCAs. To capture these customized connections, your AMS needs to cover multilingual sources.

• Corporate registry searches → UBO analysis can reveal PEP connections. Ultimate beneficial ownership analysis is the best method for identifying professional close associates. Financial institutions now have standardized legitimate interest access to UBO registers under the EU AML regulations. Use automated API lookups to cross-reference PEP lists with the business partners of your customers. Seek out corporate proxies, people who are directors of several businesses that belong to the same PEP family. A good deal of RCAs serve as nominee directors. Instead of focusing only on ownership, compliance teams are becoming more interested in control, as in the person with the ability to choose the board.

• Social media / OSINT → For enhanced due diligence on higher-risk cases. Manual or automated OSINT is recommended in high-risk or high-net-worth situations. Social relationships can be mapped with the use of related platforms. Pay attention to the integrity of Identity Verification (IDV). OSINT is being utilized to confirm whether the close associate is a real person or a synthetic identity designed to serve as a front. AI-generated deepfakes are also part of the discussion. Close association can be verified by Social Media Intelligence(SOCMINT). Publicly accessible images or tagging on social media sites can reveal a PEP visiting a client's private wedding. 

Emerging RCAs are frequently overlooked by standalone PEP databases. You may identify the gray area associations by  a unified workflow. The result information originates from a combination of PEP lists, adverse media, and UBO data. A PEP's business partner may not yet be on a list. UBO screening reveals that they share a registered office address with your client, and adverse media identifies them in a corruption investigation. Sanction Scanner’s combined PEP and adverse media screening approach is a solution to the data silo problem. The RCA relationships are recognised which single PEP databases miss. 

EDD Obligations for RCAs

Same Enhanced Due Diligence(EDD) requirements apply to RCAs as to PEPs themselves.  These include source of wealth, source of funds, senior management approval, and ongoing monitoring. You need to confirm not only the source of funds for a particular transaction (SoF), but also how the person amassed their source of wealth, or their entire net worth (SoW). The SoW of an RCA who is a PEP's student child or not working spouse frequently originates from the PEP.  To verify that the funds are legitimate, you must subsequently analyze the PEP's personal wealth. Senior management or a designated Money Laundering Reporting Officer (MLRO) must approve the onboarding of an RCA or the continuation of a partnership with one. RCAs are not one-and-done checks. To spot trends that could indicate smurfing or layering on behalf of the PEP, they need ongoing monitoring for transactions.

The challenge is, the customer may not know they're classified as an RCA, or may not understand why enhanced requirements apply. A business owner may be unaware of the cousin of their silent partner being  elected to a senior position in another jurisdiction. Communication and documentation are critical at this point. Train front-line employees to clarify that EDD is a regulatory requirement based on associated risk rather than an accusation of wrongdoing. This is effective to create a transparent communication environment and prevent customer churn.

If a close associate is a lawyer, accountant, or wealth manager, the EDD should pay close attention to whether they are offering fronting services for the PEPs. Regulators are increasingly focusing on the enablers.  Other than just checking  a box, keep a record of the reasons the person is an RCA and why the risk is considered tolerable. Since FATF stresses a risk-based strategy, proportionality is also a subject of discussion. A low-level local official's distant relative might need less paperwork. Determine when an RCA is declassified. In general, it is 12 months after the PEP leaves office, depending on the jurisdiction and depending on risk assessment. 

RCA Screening Best Practices 

The best practices to follow while applying  RCA screening are as follows; 

• Ensure your PEP database includes RCA coverage, not just primary PEPs. Use a sophisticated, dependable, and effective PEP and RCA database to learn more about the history of RCAs and PEP networks. The system should  pull a PEP's known RCAs into the same risk ecosystem when you search for them. The best scenario is using graph-based entity resolution to connect family members in various jurisdictions. When a person is mistakenly classified as a PEP or RCA by the screening system, false positives emerge. Ineffective screening outcomes can be prevented by using a streamlined AML solution with enhanced algorithms, unique risk criterias, and better data control.

• Include PEP relationship questions in onboarding forms.  This contains the names, addresses, dates of birth, and official ID numbers of those RCAs. Additionally, PEPs should specify the specifics of their relationships with RCAs. To find possible PEPs and RCAs, companies must do an appropriate PEP risk assessment. A practical method of identifying RCAs is by direct self-declaration.  Asking RCAs if  there are any members of immediate family, close business associates, or joint owners who presently hold or have held a significant public position within the past 12 months.

• Cross-reference PEP matches with adverse media for hidden relationships. Acquiring knowledge about RCAs alone is insufficient. To ensure that an RCA's identification and relationship to its associated PEP are accurate, you must authenticate it. This entails cross-referencing it with client information that is already on file, official public databases like government records, and other trustworthy information sources. Adverse media searches and social media intelligence findings are helpful in many cases. A business associate may not have yet been placed on an official list but was named in a recent investigative report. It can also need getting in touch with an RCA or the PEP who works with them directly to have them verify this information. 

• Review corporate structures for PEP-connected beneficial owners.  Examine corporate structures to see if any of the entity's directors or beneficial owners (UBOs) are also RCAs. A PEP-controlled shell is sometimes indicated by a corporation where the majority of directors are professional proxies including lawyers or accountants. Each RCA has a distinct transaction profile. Large overseas payments may be routinely processed by a business owner's RCA. The RCA of a family member may indicate regular domestic transfers. Document what is typical for each kind of relationship as a solution. Then keep an eye out for certain changes, like abrupt increases in transaction volumes, the emergence of new participants for unclear business purposes, or intricate money routing across several accounts.  You are required to have a system that can locate PEPs who are publicly discoverable through databases, media, and business registers.  You are not expected to find all of their private acquaintances.

• Document all RCA identification methods for examiners. You need to have a written procedure in case a regulator inquires as to why you failed to report an RCA. In your AML policy, clearly state your means of identification. If you exclude distant relatives using a risk-based approach, you must justify and document the exclusion for examiners. In addition to conventional KYC, you require detailed relationship mapping, predicted transaction patterns, source of wealth verification, and proof of PEP link for RCAs. 

• Set RCA risk scoring. RCA of a foreign head of state ≠ RCA of a domestic municipal official. Not every RCA requires the same amount of care. Compared to a distant relative with little financial needs, a PEP's partner managing several worldwide firms requires more frequent reviews. A domestic member of parliament's business partner poses a medium level of risk. The adult offspring of a local government official in a jurisdiction with less risk. Analyze factors like transaction volumes, firm complexity, and regional exposure. Next, set up review cycles based on the degree of risk. This can be yearly for lower-risk connections, and four times a year for high-risk RCAs.