A bank identifies a customer who is a politically exposed person (PEP). What is the appropriate action to take?

Automatically rejecting a PEP's application is not appropriate as it does not align with regulatory expectations. Financial institutions are required to assess the risks posed by PEPs rather than categorically denying them access to banking services. This choice fails to consider the necessary due diligence processes that allow for responsible risk management.

Limiting transactions to low-value amounts does not adequately address the risks posed by PEPs. While transaction limits could be a part of a risk management strategy, they do not replace the need for comprehensive due diligence and monitoring. This approach may lead to regulatory non-compliance and overlook significant risks associated with higher-value transactions.

Assigning a PEP to a low-risk category is fundamentally flawed, as it undermines the heightened risk associated with PEPs. This choice may give a false sense of security and lead to insufficient oversight, which can expose the bank to regulatory penalties and reputational harm.