102. A bank identifies a customer who is a politically exposed person (PEP). What is the appropriate action to take?

Answer: B

Explanation:

Conduct enhanced due diligence and ongoing monitoring

When a bank identifies a customer as a politically exposed person (PEP), the appropriate action is to conduct enhanced due diligence and ongoing monitoring. This is necessary to mitigate the potential risks associated with PEPs, who may present higher risks for money laundering and corruption.

A) Automatically reject the customer's account application

Automatically rejecting a customer's account application solely based on their status as a PEP is not appropriate. Financial institutions are required to assess risks and implement controls rather than outright deny services without due diligence.

B) Conduct enhanced due diligence and ongoing monitoring

This option is correct because it involves taking necessary steps to understand the risk associated with the PEP. Enhanced due diligence allows the bank to gather more information about the customer and their transactions, ensuring compliance with relevant regulations and mitigating potential risks.

C) Limit the customer's transactions to low-value amounts

Limiting transactions to low-value amounts does not effectively address the risks associated with PEPs. This approach fails to consider the comprehensive risk assessment that should be conducted, which typically includes enhanced scrutiny and ongoing monitoring rather than arbitrary transaction limits.

D) Assign the customer to a low-risk category to avoid scrutiny

Assigning a PEP to a low-risk category undermines the need for appropriate risk management practices. PEPs inherently carry higher risks, and categorizing them as low-risk would neglect the necessary vigilance required by financial institutions to prevent illicit activities.

Conclusion

The correct action for a bank upon identifying a customer as a PEP is to conduct enhanced due diligence and ongoing monitoring, which is essential for risk management and regulatory compliance. Other options either misinterpret the requirements for managing PEPs or lead to inadequate risk assessment practices that could expose the institution to legal and financial ramifications.