Customer Due Diligence vs Enhanced Due Diligence is an important distinction in banking compliance and anti-money laundering (AML) procedures. Both processes help financial institutions understand their customers, assess potential risks, and identify activity that may require further investigation.
However, they are not the same. Customer Due Diligence (CDD) establishes a customer’s identity, financial profile, and the purpose of the banking relationship. Enhanced Due Diligence (EDD) involves additional checks and scrutiny when a customer, transaction, or business relationship presents a higher level of risk.
Understanding the difference helps explain why banks request identification documents from all customers but may ask certain customers for additional information about their businesses, transactions, or financial backgrounds.
What Is Customer Due Diligence (CDD)?
Customer Due Diligence is the process through which a financial institution identifies and verifies its customers, understands the nature and purpose of the relationship, and develops an appropriate customer risk profile.
CDD is a fundamental part of AML and Know Your Customer (KYC) controls. It is not limited to collecting identity documents when an account is opened. It also includes understanding customer activity and keeping relevant information up to date.
Common CDD measures include:
- Identifying the customer using reliable information and documents.
- Verifying the customer’s identity.
- Identifying beneficial owners where the customer is a company or other legal entity.
- Understanding the purpose and intended nature of the business relationship.
- Establishing an expected transaction profile.
- Assessing relevant customer, product, geographic, and delivery-channel risks.
- Conducting ongoing monitoring and updating customer information when necessary.
For example, when an individual opens a personal bank account, the bank may obtain identification details, occupation, expected income, account purpose, and anticipated transaction activity. This information helps the bank understand whether subsequent account activity is consistent with the customer’s stated circumstances.
The FATF Recommendations establish international standards for customer due diligence and other AML/CFT controls. Their implementation is reflected in the laws and regulatory requirements of individual jurisdictions.
What Is Enhanced Due Diligence (EDD)?
Enhanced Due Diligence is a more intensive level of customer scrutiny applied when the assessed risk of money laundering, terrorist financing, or other financial crime is higher.
EDD builds on ordinary CDD rather than replacing it. The institution collects additional information, examines relevant circumstances more closely, and may increase the frequency or depth of ongoing monitoring.
Depending on the identified risks, EDD measures may include:
- Obtaining additional information about the customer’s identity, occupation, business, or activities.
- Establishing the source of funds and source of wealth.
- Understanding the reasons for particular transactions.
- Obtaining further information about beneficial owners or connected parties.
- Seeking senior management approval where required.
- Increasing the frequency of customer reviews.
- Conducting more detailed monitoring of transactions and account activity.
For example, a bank may apply enhanced checks to a customer whose business activities, geographic exposure, ownership structure, or transaction patterns present higher risks. The exact measures should be proportionate to the risks identified.
The FATF guidance on Politically Exposed Persons discusses additional measures that may apply to PEP relationships, including senior management approval, source-of-wealth and source-of-funds enquiries, and enhanced ongoing monitoring.
Customer Due Diligence vs Enhanced Due Diligence: Key Differences
The main difference is the level of scrutiny and the additional measures required to address identified risks.
| Area | Customer Due Diligence (CDD) | Enhanced Due Diligence (EDD) |
|---|---|---|
| Purpose | Establish customer identity and understand the relationship | Address higher or specific financial crime risks |
| Application | Fundamental customer due diligence measures | Additional measures based on assessed risk |
| Information | Identity, occupation, purpose, expected activity and ownership | More detailed information about background, funds, wealth, transactions or connected parties |
| Verification | Standard verification appropriate to the circumstances | More extensive verification where necessary |
| Monitoring | Ongoing monitoring based on customer risk | Greater scrutiny or more frequent monitoring where warranted |
| Approval | Normal account-opening and approval processes | Additional management approval where required by applicable rules or policy |
| Risk level | Applied as part of the institution’s general CDD framework | Used where higher-risk circumstances justify enhanced measures |
CDD and EDD are therefore complementary components of a risk-based AML framework.
When Do Banks Apply Enhanced Due Diligence?
Enhanced Due Diligence is generally considered when a risk assessment identifies circumstances requiring additional scrutiny. The exact triggers depend on applicable laws, regulations, and the institution’s risk-based policies.
Common examples include:
1. Politically Exposed Persons (PEPs)
Politically Exposed Persons are individuals who hold or have held prominent public functions. Their positions may expose them to particular corruption or bribery risks.
PEP status does not mean that an individual is involved in wrongdoing. It is a risk factor that may require additional controls under applicable rules.
The FATF PEP guidance explains the preventive nature of these measures and the importance of assessing the actual risk of the relationship.
2. High-Risk Geographic Exposure
Customers or transactions connected with jurisdictions identified as higher risk may require additional assessment.
Banks should consider relevant country risks and the nature of the relationship rather than assuming that every customer connected with a particular country presents the same level of risk.
3. Complex Ownership Structures
Companies with multiple layers of ownership, trusts, nominees, or unclear beneficial ownership may require further investigation to establish who ultimately owns or controls the entity.
4. Unusual or Inconsistent Transactions
Transactions that differ significantly from a customer’s known occupation, business activities, income, or expected account behaviour may require further explanation.
For more on this subject, see Equicio’s guide to what makes a bank transaction look suspicious.
5. Higher-Risk Business Activities
Certain industries, products, services, or business models may carry higher exposure to financial crime risks. Banks may therefore need to understand the customer’s operations and transaction patterns in greater detail.
Practical Example: How CDD and EDD Work
Consider an individual who approaches a bank to open a personal account.
During the CDD process, the bank obtains identification documents, records the customer’s occupation, understands the purpose of the account, and establishes expected transaction activity.
This is the ordinary customer due diligence process.
Now consider a different situation. The customer declares modest employment income but subsequently proposes frequent, substantial international transfers involving several unrelated parties. The activity may not be consistent with the original customer profile.
The bank may request further explanations, supporting records, information about the underlying parties, and evidence of the source of funds. It may also review the customer’s expected activity and increase monitoring if the risk assessment justifies it.
These additional measures are examples of EDD.
The purpose is not to assume wrongdoing but to establish whether the activity is reasonable, supported by evidence, and consistent with the customer’s circumstances.
Is Enhanced Due Diligence Required for Every High-Value Customer?
Not necessarily. A high transaction value or substantial account balance does not automatically establish that a customer presents a high money laundering risk.
The institution should consider the full circumstances, including the customer’s profile, source of funds, nature of the relationship, transaction purpose, geographic exposure, and other relevant risk factors.
A customer with substantial legitimate business income and well-documented financial activity may present a different risk profile from a customer whose transactions are unexplained or inconsistent with their known circumstances.
The joint statement by US federal banking agencies on the risk-based approach to customer due diligence emphasises that customer risk should be assessed using the facts and circumstances of the relationship. Customer categories alone should not be treated as automatically presenting a uniform level of risk.
What Is the Relationship Between CDD, EDD and Ongoing Monitoring?
CDD and EDD are not isolated checks performed only when an account is opened.
Financial institutions are expected to conduct ongoing due diligence and monitoring appropriate to the customer’s risk profile. This helps identify changes in customer circumstances and activity that may require a reassessment.
For example, a customer may initially have a straightforward personal banking relationship. Later, the account may begin receiving significant business-related payments or international transfers that were not part of the original expected activity.
The bank may then update the customer’s profile, seek additional information, and reassess the risk.
This process connects customer due diligence with wider banking compliance controls and responsibilities.
For further information about the broader framework, read Equicio’s Anti-Money Laundering (AML) Guide.
Final Thoughts
Customer Due Diligence and Enhanced Due Diligence are essential but distinct parts of an effective AML compliance framework.
CDD provides the foundation by helping financial institutions identify customers, understand their financial profiles, and establish the purpose of business relationships.
EDD adds further scrutiny when the circumstances indicate higher risk. It may involve additional verification, source-of-funds enquiries, closer transaction monitoring, and further management oversight.
The key principle is that due diligence should be proportionate to the risks identified. Applying the right level of scrutiny helps financial institutions manage financial crime risks while treating customers fairly and avoiding unnecessary barriers to legitimate banking activity.