What Is Enhanced Due Diligence?

Enhanced Due Diligence (EDD) refers to a heightened level of scrutiny applied by financial institutions and other regulated entities when assessing potential customers, transactions, or business relationships that present a higher risk of money laundering, terrorist financing, corruption, or other financial crimes. EDD goes beyond the standard Customer Due Diligence (CDD) measures and is a core component of an institution’s risk-based approach to anti-money laundering (AML) and countering the financing of terrorism (CFT) compliance frameworks.

EDD is not optional. It is mandated under many national and international regulations, including the Financial Action Task Force (FATF) recommendations, the Bank Secrecy Act (BSA) in the United States, the Fourth and Fifth Anti-Money Laundering Directives (AMLD) in the European Union, and equivalent statutes in other jurisdictions. Institutions must apply EDD to high-risk customers or transactions, as determined through their internal risk assessment policies.

Purpose and Legal Foundation

The main objective of EDD is to obtain a deeper understanding of high-risk customers and to monitor their financial activities more closely. While CDD focuses on establishing a customer’s identity and assessing general risk, EDD involves collecting additional information to evaluate the legitimacy of the customer's source of wealth, source of funds, and ongoing activity.

EDD is required by regulators to prevent criminals from using legitimate financial systems to obscure illicit gains or facilitate unlawful conduct. Regulators expect firms to identify red flags and take appropriate action, including filing Suspicious Activity Reports (SARs) when warranted. Failure to conduct adequate EDD can result in regulatory penalties, reputational damage, and legal consequences.

When EDD Is Required

Enhanced Due Diligence must be applied in specific scenarios, most notably when:

• A customer is classified as a Politically Exposed Person (PEP), meaning they hold or have held a prominent public function or are closely associated with such individuals.
• A customer is located in, or transacting with entities in, high-risk jurisdictions identified by FATF or national authorities.
• There are complex ownership structures, particularly in cases where beneficial ownership is obscured.
• There is a history of suspicious or unusual activity tied to the account or customer.
• The customer engages in private banking, correspondent banking, or other services associated with elevated risk.
• A new relationship is initiated without face-to-face interaction or through non-traditional channels.

Firms may also elect to apply EDD on a discretionary basis where internal risk assessments or transaction patterns justify it.

Components of Enhanced Due Diligence

EDD involves more comprehensive steps than standard due diligence. These often include:

• Obtaining more detailed identification documents and verification from reliable, independent sources.
• Identifying and verifying beneficial ownership information for entities with complex corporate structures.
• Investigating and documenting the source of funds and source of wealth.
• Conducting open-source intelligence (OSINT) and adverse media checks.
• Requesting supporting documentation for high-value or unusual transactions.
• Establishing the expected account activity and comparing actual behavior against this profile.
• Implementing ongoing monitoring at a higher frequency or with more stringent thresholds.

These measures should be documented and integrated into the firm's compliance systems, supported by internal controls and oversight mechanisms.

Implementation and Risk Management

Institutions are expected to embed EDD procedures into their AML compliance programs. This includes creating written policies, training staff, using appropriate technology, and maintaining detailed records. The decision to apply EDD should be based on a documented risk assessment that considers customer type, geography, products, delivery channels, and transactional behavior.

Technology plays a growing role in EDD. AML software solutions can automate adverse media screening, monitor transactional behavior in real time, and flag deviations from expected norms. However, these tools must be complemented by human analysis and judgment, particularly in nuanced cases.

Importantly, EDD is not a one-time process. It requires ongoing review and reevaluation of risk, especially when material changes occur in a customer’s profile, ownership structure, or transaction patterns.

Regulatory Expectations and Enforcement

Regulatory agencies worldwide expect financial institutions to demonstrate a consistent and well-documented EDD framework. Examiners typically review EDD procedures during audits and assessments. Weaknesses in applying enhanced measures can result in regulatory enforcement actions, including fines, sanctions, and even restrictions on certain business activities.

High-profile enforcement cases have often involved failures in EDD. For example, financial institutions that processed transactions for sanctioned individuals or failed to uncover the true beneficial owner of shell entities have been subject to large penalties.

The Bottom Line

Enhanced Due Diligence (EDD) is a critical component of global efforts to prevent the misuse of the financial system. It serves as a safeguard against high-risk activities and actors by requiring institutions to collect more detailed information and apply closer scrutiny than under standard due diligence. EDD is mandated by international standards and national regulations and must be proportionate to the specific risk profile of the customer or transaction. Effective EDD protects institutions from regulatory exposure and supports the integrity of the broader financial system.