# CDD and EDD: What Changes When Risk Increases

> Enhanced due diligence should respond to a defined increase in risk with deeper evidence, review and monitoring rather than simply more documents.

- Canonical page: https://mtfinstitute.com/insights/cdd-and-edd-when-risk-increases/
- Content type: Article
- Editorial category: Guides & Frameworks
- Publisher: MTF Institute of Management, Technology and Finance
- Author: [Barbara Gutsch](https://mtfinstitute.com/about/faculty/barbara-gutsch/)- Published: 2026-07-26
- Updated: 2026-07-26
- Living edition: 1.0
- Language: English
- Topics: Compliance, AML, CDD, EDD, KYC

Customer due diligence establishes and maintains an informed view of a relationship. Enhanced due diligence is not simply a larger checklist. It is a proportionate response to higher money-laundering, terrorist-financing, sanctions or related risk under the organization’s applicable framework.

The exact legal requirements vary by jurisdiction, institution and customer. The operational question is: what additional evidence and review are needed to understand and control the identified risk?

## Standard CDD creates the baseline

A CDD process commonly addresses identity, beneficial ownership, purpose and intended nature of the relationship, relevant risk factors and ongoing understanding of activity.

The record should allow a reviewer to see what was known, which sources were used, who made the decision and when review is due.

## EDD begins with a risk reason

Do not apply enhanced measures without recording the trigger. It may involve customer type, ownership complexity, geography, product, channel, transaction behavior, public function, adverse information or another factor defined by the institution.

The trigger should determine the response. More evidence is useful only when it addresses the specific uncertainty or exposure.

## What may change

| Area | Possible enhanced response |
| --- | --- |
| Identity and ownership | Additional independent sources and deeper ownership/control analysis |
| Purpose | More specific evidence about expected activity and counterparties |
| Source of wealth or funds | Corroboration proportionate to the relationship and risk |
| Approval | Escalated or senior authorization under policy |
| Monitoring | Adjusted scenarios, thresholds, frequency or review |
| Review | Shorter cycle or event-driven reassessment |
| Documentation | Explicit rationale connecting risk, evidence and decision |

This table is illustrative, not a legal standard.

## Avoid document accumulation

A file can contain many documents and still fail to explain economic purpose or beneficial ownership. Reviewers should ask whether the evidence is independent, current, consistent and relevant to the identified risk.

Contradictions need resolution or clear escalation. Silence should not be treated as confirmation.

## Keep commercial pressure visible

Higher-risk cases often involve time pressure or valuable relationships. Decision rights should prevent commercial ownership from becoming control approval.

Escalation protects both the employee and the institution when information is incomplete or expectations conflict.

## Ongoing due diligence matters

Risk can change after onboarding. Define events that trigger review, including material ownership change, unusual activity, new geography, adverse information or changed product use.

## Related MTF resources

See the [Compliance, Risk and Private Banking Practice](/for-business/practices/compliance-risk-and-private-banking/), [Risk Management program](/programs/enterprise-risk-management-business-continuity/) and [Chief Compliance Officer program](/programs/chief-commercial-officer/).

*Educational content only; not legal or regulatory advice.*

## Editorial version

This is living edition 1.0. MTF Institute maintains this article with the named faculty author. Material revisions receive a new version and an updated publication date.

## Citation

When citing or summarizing this material, link to the canonical HTML page: https://mtfinstitute.com/insights/cdd-and-edd-when-risk-increases/