Relatives and Close Associates are family members, business partners, and other nearby connections of a Politically Exposed Person. They are often treated as higher risk because access to a PEP’s influence, resources, or network can be used to conceal ownership, move funds, or bypass controls. Screening them helps institutions see risk beyond the named individual.
What Relatives and Close Associates Mean in Screening
Relatives and close associates are not the politically exposed person themselves, but they can sit close enough to the person’s influence, wealth, or decision-making circle to matter for risk decisions. In practice, this concept extends screening beyond a single named individual and helps institutions identify hidden ownership, influence, or relationship-based exposure.
The term is used in anti-money laundering and sanctions-adjacent screening because risk can flow through family links, business ties, and other close relationships. A PEP may appear low risk on paper, while a connected person is the real channel for influence, assets, or transaction activity.
Why Relatives and Close Associates Are Screened Separately
Screening these connected parties is important because proximity can create indirect exposure even when the PEP is not the direct account holder, customer, or beneficial owner. The relationship itself can be material: it may indicate a path to conceal ownership, move funds, or obtain favourable treatment through association.
Good screening programmes treat relatives and close associates as a distinct risk lens rather than a duplicate of PEP screening. That matters because the relevant question is not only “Who is the individual?” but also “Who benefits from, influences, or stands beside that individual?”
How the Risk Changes for Institutions
The main operational effect is broader risk visibility. Once relatives and close associates are in scope, institutions are better able to detect nominee arrangements, indirect control, and attempts to keep high-risk activity outside the PEP’s own name. That improves onboarding, ongoing monitoring, and periodic review.
This also changes how organisations interpret alerts and ownership signals. A transaction, company structure, or account relationship that might look ordinary in isolation can become significant when linked to a connected person. The screening result therefore informs escalation, enhanced due diligence, and case investigation.
What Strong Screening Needs to Capture
Effective screening depends on relationship mapping, not just name matching. Institutions need to recognise family links, business partnerships, household or close personal ties, and other associations that can reveal indirect access to capital or control. The quality of the screening outcome depends on whether those links are identified, maintained, and reviewed over time.
Definitions can vary across regulators and programmes, so teams should align their internal treatment of “close associate” and “relative” with the policy standard they are applying. Where the definition is broad, the screening scope should be broad enough to catch indirect risk without turning every acquaintance into a high-risk case.
Risk and Threat Considerations
Relatives and close associates are screened because they can be used as proxies for influence, ownership, or control. If institutions only screen the named PEP, they may miss the relationship that actually carries the risk signal, which creates blind spots in onboarding and transaction monitoring.
Failure mechanism: Adversaries or complicit insiders use family or business relationships to disguise beneficial ownership, route funds through connected parties, or present a lower-risk face to the institution while preserving access to the PEP’s network.
Impact: The organisation can approve risky relationships, miss suspicious flows, and fail to identify where enhanced due diligence or escalation is warranted, increasing exposure to financial crime and control failure.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0, CIS Controls v8 and NIST SP 800-53 Rev 5 set the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.OC-03 — Mission, Objectives, and Risk Context | Defines risk context and stakeholder exposure that drives broader screening scope. |
| Recommendation — Map connected-party screening to enterprise risk context and define escalation ownership for PEP-related relationships. | ||
| CIS Controls v8 | CIS-5 — Account Management | Supports controlling and reviewing high-risk account and relationship exposure. |
| Recommendation — Use account governance and review processes to flag and investigate PEP-linked relationships. | ||
| NIST SP 800-53 Rev 5 | AU-6 — Audit Review, Analysis, and Reporting | Supports reviewing alerts and relationship indicators to detect concealed exposure patterns. |
| AC-2 — Account Management | Supports lifecycle control over accounts that may be linked to higher-risk connected parties. | |
| Recommendation — Correlate screening results with audit and monitoring data to surface indirect PEP exposure. Apply account review and monitoring controls to connected-party relationships and changes. | ||
| ISO/IEC 27001:2022 | A.5.7 — Threat intelligence | Supports using external risk intelligence about exposed individuals and connected parties. |
| Recommendation — Incorporate relevant external risk intelligence into screening and escalation workflows. | ||
Practitioner Guidance
Governance implication: Treat relatives and close associates as a policy-defined screening population, with a clear rule for how far relationship-based risk extends and who owns the review when a connection is identified. That keeps screening decisions consistent across onboarding, periodic review, and alert investigation.
What to watch for: Pay close attention to indirect ownership, shared addresses, repeated counterparties, business ties, and other relationship patterns that suggest the PEP’s influence is being exercised offstage. Those signals often matter more than the individual’s own profile.
Related resources from NHI Mgmt Group
- How should financial institutions monitor relatives and close associates of politically exposed persons without creating unnecessary friction for legitimate customers?
- Why do relatives and close associates of politically exposed persons increase financial crime risk for banks and fintechs?
- What do compliance teams get wrong when they monitor relatives and close associates of politically exposed persons?
- Why do service accounts create governance gaps that IGA does not close?
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on October 31, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org