Enhanced Due Diligence Is Usually Required For: A Complete EDD Guide

Enhanced due diligence is usually required when a customer or transaction carries a higher risk of money laundering. Sanctions evasion and terrorist financing pull a relationship into the same bracket. The clearest examples are politically exposed persons and customers tied to high-risk jurisdictions. Add to that any large or unusually complex transaction that falls outside a customer's normal profile. EDD digs deeper than standard checks. It investigates source of funds and beneficial ownership, and it tracks adverse media both before and during the relationship.

Financial crime keeps pressing on the global system. According to the United Nations Office on Drugs and Crime (UNODC), an estimated 2% to 5% of global GDP, or 800 billion to 2 trillion US dollars, is laundered each year. That scale explains the regulatory stance. Institutions are expected to apply a deeper layer of scrutiny to their riskiest relationships. A flat level of checking applied to everyone does not cut it.

This guide covers what EDD is and exactly when it kicks in. It lays out the checklist compliance teams work from. It also shows how an AML screening and monitoring platform turns a slow manual process into something a team can run at scale.

What is Enhanced Due Diligence (EDD)?

Enhanced Due Diligence (EDD) is a process for identifying and mitigating risks such as financial crime and money laundering. It rests on a risk-based approach: the higher the risk a customer presents, the more information a firm gathers and verifies. EDD digs into the customer's source of wealth and funds, beneficial ownership structure, other business relationships, and any negative news.

The point is simple. Standard checks tell you who a customer is. EDD tells you whether you can trust them.

EDD is an extension of Customer Due Diligence, but the two are not the same. CDD is the baseline applied to every customer. EDD is the deeper investigation reserved for the minority of customers whose risk score pushes them past that baseline. It also tends to mean ongoing monitoring rather than a single point-in-time check.

Enhanced Due Diligence Is Usually Required For These Customers and Transactions

Most AML frameworks point to the same set of triggers. The list below reflects what FATF, the EU, and US regulators currently treat as mandatory grounds for EDD.

• Politically exposed persons (PEPs). PEPs, their family members, and known close associates carry corruption and bribery risk because of the public power they hold or once held.
• High-risk third countries. Customers based in, or transacting through, jurisdictions flagged by the Financial Action Task Force trigger EDD automatically.
• Large, complex, or unusual transactions. Activity that has no clear economic purpose, or that sits well outside a customer's expected behavior, calls for a closer look.
• Correspondent banking relationships. Cross-border correspondent banking is treated as inherently higher risk and requires EDD under its own rules.
• Non-face-to-face onboarding. Relationships established without the customer being physically present, where the identity method does not meet a recognized assurance standard.
• Sanctions exposure. Any link between a customer, a related party, and a sanctioned entity demands EDD before onboarding continues.

In Europe, the EU Anti-Money Laundering Regulation (Regulation (EU) 2024/1624) sharpens this further. From 10 July 2027, EDD stops being a matter left mostly to a firm's judgment and becomes triggered by defined circumstances written into the rulebook, with deeper investigation of source of funds and source of wealth wherever it applies.

EDD is not only an onboarding gate. Firms should also escalate an existing customer to EDD when their risk profile changes. A new beneficial owner might appear. The business might shift sector, or activity might suddenly spike.

When Is Enhanced Due Diligence Required Under AML Regulations?

Enhanced due diligence is required by law and by international standard, not just as good practice. The exact trigger language differs by jurisdiction, but the principle is consistent across them.

In the United States, the Bank Secrecy Act (BSA) requires banks to perform due diligence sufficient for the institution to "form a reasonable belief that it knows the true identity of each customer," with heightened scrutiny for higher-risk accounts. Globally, FATF Recommendation 10 sets the customer due diligence baseline, Recommendation 12 covers PEPs, and Recommendation 13 mandates EDD for correspondent banking. In the EU, Article 18 of the Fourth Anti-Money Laundering Directive required EDD for high-risk third countries, and the incoming AML Regulation carries that forward in a directly binding form.

The common thread is the risk-based approach. As FATF puts it, "the amount and type of information obtained, and the extent to which this information is verified, must be increased where the risk associated with the business relationship is higher."

EDD vs CDD: What Actually Changes

It helps to see the two side by side. The difference between CDD and EDD is one of depth, not kind.

CDD verifies identity and assigns a risk rating to every customer at onboarding. It confirms the name, date of birth, address, and ID, screens against sanctions and PEP lists, and identifies beneficial owners for legal entities. For most customers, that is enough.

EDD starts where CDD ends. When the risk rating comes back high, the firm collects additional identifying information from more independent sources, verifies the source of funds and wealth, commissions deeper adverse media and network checks, and sets the customer up for closer ongoing monitoring. Standard customers get periodic review. EDD customers get continuous attention.

Source of Funds vs Source of Wealth

These two terms sit at the center of any serious EDD investigation, and compliance teams treat them as separate questions. Mixing them up is a common audit finding.

Source of funds confirms where the money for a specific transaction came from, such as a property sale, a business disposal, or an inheritance. Source of wealth establishes how the customer built their total assets over their lifetime. A complete EDD file answers both, backed by supporting documents like financial statements, tax records, or contracts, and checks that the explanation is lawful and consistent with everything else known about the customer.

When a wealthy customer's stated income does not square with their net worth, that gap is exactly what EDD exists to surface.

Financial Due Diligence and How It Relates to EDD

Financial due diligence is a related but distinct discipline, and the terms get blurred. Worth separating them.

In a corporate or investment context, due diligence in finance usually means reviewing a target's books, contracts, and liabilities before a deal closes. AML enhanced due diligence overlaps where it examines a customer's financial standing, source of wealth, and the legitimacy of their funds, but its purpose is different. Financial due diligence protects the buyer in a transaction. EDD protects the institution and the financial system from being used to launder money.

For a regulated firm, financing due diligence on a high-risk client and AML EDD often run together. The same source-of-funds evidence that satisfies an investment committee also feeds the AML file. Teams that share one platform across both simply avoid doing the work twice.

Why Enhanced Due Diligence Matters

An EDD process is a core part of any working AML program. Beyond the obvious compliance benefit, it builds a stronger picture of who a firm is actually doing business with.

Without it, an institution is exposed to financial crime it cannot see coming. By investigating high-risk customers and transactions before they cause damage, firms catch the risk factors tied to suspicious activity early. A few concrete benefits follow.

1. Increased Risk Awareness

Gathering more information on customers and transactions gives a firm a sharper read on the risk in front of it. That awareness makes suspicious activity easier to spot and harder for a bad actor to slip past, which reduces the odds of financial crime being committed through the institution.

2. Stronger Sanctions and Adverse Media Screening

EDD strengthens sanctions screening by feeding richer data into the comparison. With more known about a customer, a firm can judge with more confidence whether it is dealing with a listed party, and a broad adverse media sweep surfaces reputational red flags that lists alone miss.

3. Improved Compliance Posture

Running EDD lifts overall AML compliance by adding insight into a customer's assets and activities. That depth helps a firm meet its legal obligations on money laundering and terrorist financing, and it gives examiners a clear, documented basis for every high-risk decision.

If you want to see how this works on real data, book a demo with our AML experts and we will walk through an EDD case end to end.

Enhanced Due Diligence Checklist

A practical EDD checklist gives a team a repeatable structure rather than a fresh judgment call each time. The steps below cover what most regulators expect to see in a high-risk file, and they double as the EDD form individual analysts work through.

1. Apply a Risk-Based Approach

Identify and investigate high-risk customers based on a documented risk model. Score the customer accurately so the level of EDD matches the level of risk, and remember that regulators such as the Financial Conduct Authority enforce penalties where firms get this wrong.

2. Collect Additional Credentials

For high-risk customers, gather extra identifying information beyond the standard CDD set. Pull from a wider range of reliable, independent sources so the picture does not rest on documents the customer supplied alone.

3. Verify Source of Funds and Beneficial Ownership

Establish where the customer's wealth comes from and confirm it is legitimate. Check that the value of their assets lines up with what is known about them, investigate any inconsistency, and trace the ultimate beneficial ownership of corporate customers down to the real people in control.

4. Track Transactions on an Ongoing Basis

Scrutinize transaction history with attention to purpose, value, timing, and counterparties. This is continuous work, not a one-off pass, and accuracy here is what keeps a firm above the expected compliance threshold.

5. Run Adverse Media and Negative News Checks

Analyze relevant press coverage to build a full reputational profile. Negative findings may signal that the customer carries more risk than the business should accept.

6. Document the Investigation

Write up the findings so the decision is defensible. Build risk factors tailored to the customer's industry, and keep a clear record that an examiner could follow without further explanation.

7. Maintain a Risk-Based Monitoring Strategy

Use software to set alerts tied to each customer's profile and to flag any change in behavior. The aim is to stay responsive to risk as it shifts, not to wait for a periodic review to catch it.

Enhanced Due Diligence in Banking

EDD in banking is a central part of the KYC compliance process. Banks request far more information from a high-risk client than they would under standard CDD, because that information is what lets them size and contain the money laundering risk each account carries.

The Financial Action Task Force recommends a set of practical EDD measures for banks:

• Obtain extra identifying information from a wider range of reliable, independent sources.
• Conduct further searches, including verified adverse media checks.
• Commission an intelligence report to understand the potential illicit activity of the client or beneficial owner.
• Verify the source of the funds or wealth involved in the relationship.
• Ask the client to clarify the intended purpose and expected pattern of the relationship.
• Build a risk-based monitoring plan that detects suspicious behavior or shifts in the customer's risk profile.

This is where banking and compliance pressures collide. A bank has to keep onboarding fast enough to compete while running checks deep enough to satisfy an examiner, and the only way to hold both is to automate the routine parts of EDD so analysts spend their time on genuine risk.

Which Customers and Countries Trigger EDD?

The high-risk picture changes as regulators update their lists, so a current source matters more than a fixed roster. As of the FATF plenary on 19 June 2026, there are 22 jurisdictions under increased monitoring, often called the grey list. Iraq and Bosnia and Herzegovina were added at that plenary, while Algeria and Namibia were removed after addressing their deficiencies.

The FATF also maintains a separate black list of high-risk jurisdictions subject to a call for action, which currently names the Democratic People's Republic of Korea, Iran, and Myanmar. Customers or transactions connected to either list are standard grounds for EDD.

Beyond geography, the customer types below routinely require enhanced due diligence:

• Politically exposed persons and their close associates.
• Customers in high-risk sectors such as cash-intensive businesses, gambling, and virtual assets.
• Clients with complex or opaque ownership structures.
• Anyone with unexplained wealth or income that does not match their profile.

How to Conduct Enhanced Due Diligence

To do EDD well, financial institutions need an AML program that turns these requirements into a consistent workflow. The four steps below capture the core of it.

1. Conduct a Risk Assessment

Before EDD begins, assess the risk the customer presents across location, business activity, reputation, and ownership structure. Ground the assessment in a documented risk-based approach that accounts for the relevant local and international rules.

2. Collect and Verify Additional Information

Gather more on the high-risk customer, including source of funds, nature of business, and beneficial ownership. Source it from reputable places and confirm it through independent verification rather than taking it at face value.

3. Monitor Customer Activity

Watch the customer's activity continuously to check it stays consistent with their stated business and source of funds. Review transaction patterns, behavior, and potential red flags on an ongoing basis.

4. Apply Risk-Based Controls

Based on the assessment and the information collected, put controls in place that fit the risk. That can mean enhanced transaction monitoring, tighter reporting to regulators, and additional due diligence as the relationship develops.

How KYC Hub Supports Enhanced Due Diligence

Done by hand, most of the work above is slow. Analysts pull adverse media, trace beneficial owners, and verify source of funds. On top of that, high-risk customers need continuous watching. It eats hours and still leaves gaps. KYC Hub's end-to-end AML screening and ongoing monitoring solution is built to solve exactly that.

Exhaustive AML screening checks customers against global sanctions, watchlists, and PEP data in one pass, so the people who should trigger EDD actually do. Global adverse media intelligence surfaces negative news in context. That cuts the noise that makes manual review painful. Continuous monitoring and AML alerts keep high-risk relationships under watch after onboarding. The profile changes that should escalate a customer get flagged, rather than sitting until a scheduled review.

Two more pieces make EDD investigations faster. Network intelligence maps the hidden connections between customers, entities, and beneficial owners, which is what catches concealed ownership and related-party risk. Broad global data coverage means a firm can run the same depth of check across the markets it operates in, instead of stitching together regional sources by hand.

The result is a process where analysts spend their time on real risk, not data gathering, and every high-risk decision comes with a documented trail. To see it on your own use case, book an AML screening demo.

Conclusion

Enhanced due diligence is the deeper layer of investigation a firm applies to the customers most likely to launder money or evade sanctions. It is usually required for PEPs, customers tied to high-risk countries, correspondent banking, and large or unusual transactions. At its core sit three checks: source of funds, beneficial ownership, and adverse media, all held under ongoing monitoring.

The cost of skipping it is far higher than the cost of doing it. A weak EDD program invites regulatory fines and legal liability, and the reputational damage tends to outlast both. Done well, with the right tooling underneath, EDD protects both the institution and the wider financial system while still letting a firm onboard good customers at speed.