What it means
Standard customer due diligence establishes who someone is and roughly what they intend to do. Enhanced due diligence applies when the risk score is higher, and it asks harder questions: where did this wealth originate, who really controls this company, and does the activity match the stated business?
The triggers are broadly consistent across jurisdictions. They include politically exposed persons, meaning senior public officials and their close associates, customers based in high risk countries, complex ownership structures spanning several jurisdictions, and any relationship where the transaction pattern looks unusual for the stated business.
In practical terms EDD means gathering documents rather than ticking boxes. A firm might obtain audited accounts, trace ownership through each holding company to the individual beneficial owners, request evidence of the source of funds such as a sale contract or inheritance document, and run adverse media searches.
The consequence of getting it wrong is not just a fine. Regulators have imposed penalties running into hundreds of millions of dollars on firms with weak controls, and senior managers can be held personally accountable, so EDD is a board level matter rather than a back office chore.
Everything rests on a risk based approach, which means the depth of the work should match the risk rather than being applied uniformly. A firm is expected to document why it placed a relationship in a particular risk band and to revisit that judgement whenever the customer's behaviour or ownership changes.
The main tension is commercial. EDD is slow and expensive, so sales teams resent it, and the honest answer is that a small share of profitable relationships will fail the process and have to be declined or exited.
In practice
Real-world examples.
Example
A private bank onboards a client who is the finance minister's brother in law in another country. Because he qualifies as a politically exposed person by association, the relationship goes through enhanced due diligence, requires sign off from a senior manager and is reviewed every twelve months rather than every three years. The bank also obtains a copy of the share sale agreement that produced his wealth and keeps it on file.
Example
An accountancy practice takes on a property company whose shares are held by two overseas entities. The partner traces ownership through both layers, discovers a single individual holding 62% of the ultimate parent, and files that person as the beneficial owner before any work begins. Two adverse media hits are found, reviewed and documented as unrelated cases of mistaken identity.
Example
A payments company notices that a small online retailer is processing $400,000 a month against a projected $40,000. The account is placed under enhanced due diligence, the merchant cannot evidence the underlying sales with invoices or delivery records, and the relationship is terminated and reported to the relevant authority.
Think of it
“EDD is the abbreviation for Enhanced Due Diligence-extra checking for risky customers.
Case study
Seen in the real world.
The following is an illustrative and entirely fictional example. Brightwater Trust Services, an invented corporate services provider, took on a new client introduced by a long standing customer and applied only standard checks because the introduction came from a trusted source. The client's structure ran through three jurisdictions and the beneficial ownership was never traced to an individual.
Eighteen months later a regulatory inspection sampled twelve files and found four with incomplete beneficial ownership records, including that client. Brightwater's fictional management had to commission a full remediation of 900 client files, hire four temporary analysts and pause new business for a quarter while the backlog cleared.
The direct cost of the remediation exceeded the fee income the firm had earned from the entire affected group, and the founder later described the episode as the most expensive introduction the business ever accepted.
Watch out
Common mistakes.
- Treating enhanced due diligence as a one off exercise at onboarding rather than an ongoing obligation that requires periodic refresh and transaction monitoring.
- Accepting a customer's own statement about the source of their wealth without any supporting document, which is exactly the gap regulators look for.
- Stopping at the registered shareholder instead of tracing ownership through every layer to the real individuals behind the structure.
Questions
People also ask.
What is the difference between CDD and EDD?
Customer due diligence is the baseline identity and purpose check applied to everyone, while enhanced due diligence is the deeper investigation reserved for higher risk relationships.
Does EDD apply to suppliers as well as customers?
Many firms extend it to suppliers, agents and distributors, and in bribery and sanctions terms that is prudent even where the money laundering rules do not strictly require it.
Can a business decline a customer purely because EDD is too costly?
Yes, refusing or exiting a relationship on risk grounds is entirely legitimate, though the decision and its reasoning should be documented.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%