Customer due diligence establishes and maintains an informed view of a relationship. Enhanced due diligence is not simply a larger checklist. It is a proportionate response to higher money-laundering, terrorist-financing, sanctions or related risk under the organization’s applicable framework.
The exact legal requirements vary by jurisdiction, institution and customer. The operational question is: what additional evidence and review are needed to understand and control the identified risk?
Standard CDD creates the baseline
A CDD process commonly addresses identity, beneficial ownership, purpose and intended nature of the relationship, relevant risk factors and ongoing understanding of activity.
The record should allow a reviewer to see what was known, which sources were used, who made the decision and when review is due.
EDD begins with a risk reason
Do not apply enhanced measures without recording the trigger. It may involve customer type, ownership complexity, geography, product, channel, transaction behavior, public function, adverse information or another factor defined by the institution.
The trigger should determine the response. More evidence is useful only when it addresses the specific uncertainty or exposure.
What may change
| Area | Possible enhanced response |
|---|---|
| Identity and ownership | Additional independent sources and deeper ownership/control analysis |
| Purpose | More specific evidence about expected activity and counterparties |
| Source of wealth or funds | Corroboration proportionate to the relationship and risk |
| Approval | Escalated or senior authorization under policy |
| Monitoring | Adjusted scenarios, thresholds, frequency or review |
| Review | Shorter cycle or event-driven reassessment |
| Documentation | Explicit rationale connecting risk, evidence and decision |
This table is illustrative, not a legal standard.
Avoid document accumulation
A file can contain many documents and still fail to explain economic purpose or beneficial ownership. Reviewers should ask whether the evidence is independent, current, consistent and relevant to the identified risk.
Contradictions need resolution or clear escalation. Silence should not be treated as confirmation.
Keep commercial pressure visible
Higher-risk cases often involve time pressure or valuable relationships. Decision rights should prevent commercial ownership from becoming control approval.
Escalation protects both the employee and the institution when information is incomplete or expectations conflict.
Ongoing due diligence matters
Risk can change after onboarding. Define events that trigger review, including material ownership change, unusual activity, new geography, adverse information or changed product use.
Related MTF resources
See the Compliance, Risk and Private Banking Practice, Risk Management program and Chief Compliance Officer program.
Educational content only; not legal or regulatory advice.