Customer checks used to be much simpler. A person would show their ID; you would check their details, and they could move forward if nothing raised a concern. That basic process can leave gaps today.
The problem is that fraud can happen just as quickly as digital onboarding. Fake documents and synthetic identities can make a person look legitimate at first glance. This makes the basic Know Your Customer (KYC) process harder to rely on by itself.
Protecting your business from fraud takes more than basic customer checks. This guide explains enhanced due diligence (EDD), when it’s needed, what it can involve, and how technology can support the process.
- KYC identifies basic warning signs. EDD investigates further into issues such as identity fraud, nominee ownership, and suspicious activity.
- EDD Triggers Include PEP Status, High-Risk Jurisdictions, Complicated Ownership Structures, and Strange Transactions.
- Automation, identity verification, sanctions screening, and adverse media checks can help teams handle EDD without slowing down legitimate customers.
- A clear, risk-based EDD process helps show regulators that your checks work in practice, not just on paper.
What Is Enhanced Due Diligence (EDD)?
Enhanced due diligence, or EDD, is like doing extra careful checking. It’s used by organizations to look closely at customers and transactions that seem riskier than usual.
While standard customer due diligence focuses on verifying customer identities and conducting basic risk assessments, EDD goes a step further. It involves a deeper and more thorough examination of various aspects of a customer’s profile, business activities, and financial transactions.
How Does EDD Work?
Enhanced due diligence works by digging deeper into the background and activities of customers. It aims to uncover potential risks that might not be apparent through standard due diligence procedures.
EDD typically involves:
- Customer Identification: The first step in any due diligence process is verifying the customer’s identity. This includes verifying personal and business information to ensure you are dealing with the right entity.
- Risk Assessment: EDD goes beyond basic risk assessment. It evaluates various factors like the customer’s financial stability, reputation, and their potential exposure to illicit activities.
- Source of Funds: Understanding the source of funds for financial transactions is crucial. It helps detect money laundering or other illicit activities.
- Ongoing Monitoring: Unlike standard due diligence, EDD is not a one-time process. Continuous monitoring of customer activity is essential to identify any suspicious behavior or changes in risk over time.
- Compliance with Regulations: EDD ensures that the customer or transaction complies with all applicable laws and regulations.
- Documentation: Proper documentation of the EDD process is essential for audit and compliance purposes.
Why Enhanced Due Diligence Matters for Modern Businesses
Risk levels vary between clients. Using a standardized approach means that companies could be wasting time on lower-risk clients while ignoring any potential issues with high-risk accounts. EDD allows organizations to allocate their efforts effectively.
Preventing Money Laundering
Money laundering does not always present itself clearly. Illicit funds can move through seemingly legitimate financial operations, fake corporations, or other financial channels. Enhanced due diligence involves taking additional measures and technology to investigate suspicious transactions whose origins may be questionable.
Identifying Hidden Beneficial Owners
Companies can appear legitimate based on their official records, but those records may not always reveal who ultimately controls the business. EDD can involve looking beyond standard registration information to identify the ultimate beneficial owner (UBO).
Detecting Sanctions and Financial Crime Risks
A customer who clears the initial screening process might appear on a sanctions list at some future point in time. With continuous screenings, businesses can identify these shifts without needing a one-off screening at onboarding.
Supporting Regulatory Compliance
Regulators expect businesses to take a risk-based approach. That means applying more checks to customers who present higher risks. A clear EDD process helps show that these checks are actually being carried out.
Preventing Penalties
Weak customer checks can lead to regulatory action, financial losses, and reputational damage. A documented EDD process gives businesses a clear record of how they identify and manage higher-risk customers.
Key Triggers That Require Enhanced Due Diligence (EDD)
EDD isn’t needed for every customer. It usually comes into play when a customer, transaction, or relationship presents a higher level of business risk.
Here are some common triggers:
Politically Exposed Persons (PEPs)
A politically exposed person (PEP) refers to someone who holds a prominent public function, as well as relatives and close associates of such individuals. Based on their position, PEPs could be at a higher risk of being involved in bribery or corruption. Therefore, companies dealing with PEPs require additional due diligence.
High-Risk Countries or Jurisdictions
A customer who lives in or sends money through a high-risk country may require closer review. The country itself doesn’t mean the customer has done anything wrong, but it can mean more checks are needed.
Complex Ownership Structures
Corporate hierarchies exist among subsidiaries and stockholders in many countries. Such hierarchies are legitimate, but they create complexities that conceal the real identities of the individuals who control the business. EDD can help businesses investigate whether a complex ownership structure presents additional risk or requires further review.
High-Risk Industries and Products
Higher financial crime risk is inherent in certain sectors and specific products. Certain industries—including cash-intensive operations, gaming, cryptocurrency, and more—may necessitate further investigation based on individual company risk assessments.
Unusual or High-Value Transactions
A large transaction isn’t automatically suspicious. But if a payment is unusually large, structured in an unusual way, or doesn’t match what is known about the customer, it may need a closer look.
Regulatory or Risk-Based Triggers
EDD may also be required when regulations, internal risk assessments, or other compliance requirements identify a customer or relationship as high risk. Businesses should document why EDD was triggered and what additional checks were performed.
Enhanced Due Diligence and KYC
KYC is a broader framework that includes different steps and methods used by banks and businesses to check who their customers are and understand the risks connected to them.
EDD is an integral part of the KYC framework, especially when dealing with high-risk customers. KYC is not a one-size-fits-all approach, and EDD allows organizations to tailor their due diligence efforts to the specific risks posed by individual customers.
Conducting Due Diligence for Fintech Companies
As the financial industry continues to embrace technological innovation, financial technology (fintech) companies have become prominent players.
Conducting due diligence on these entities requires a tailored approach:
- Understanding the Business Model: EDD for fintech companies involves understanding their unique business model, including their technology stack, sources of funding, and the types of financial services they provide.
- Assessing Cybersecurity Measures: Given the data-driven nature of fintech, evaluating their cybersecurity measures is crucial. EDD should include an assessment of their data protection and encryption practices.
- Customer Data Handling: How fintech companies handle customer data is of utmost importance. EDD should delve into their data privacy and compliance measures.
- Regulatory Compliance: Make sure the fintech company follows the financial rules and standards in the places where they do business.
Technology Used for Enhanced Due Diligence
Manual EDD can take a lot of time, especially as your customer base grows. The right technology helps businesses carry out thorough checks without making onboarding unnecessarily slow.
Automated Identity Verification
Document checks, biometric liveness checks, and database searches make identity authentication even simpler and quicker. They can also spot mismatched information that may be missed during a manual review.
PEP and Sanctions Screening
Automated screening matches clients against PEP and sanctions lists, allowing you to identify any updates since their onboarding process. Periodic rescreening enables companies to discover emerging threats.
Adverse Media Monitoring
Adverse media searches can uncover reports or other public information related to fraud, corruption, money laundering, and other financial crimes. Automated software can keep an eye on news stories and flag relevant information for review.
Beneficial Ownership Data
Finding the real owners of a company can be difficult when ownership is spread across multiple businesses or countries. Ownership data tools can bring information from corporate records together, making these checks faster.
Transaction Monitoring
Monitoring systems enable you to identify suspicious patterns, such as swift transfer of money or activities outside the norm for the individual customer. By detecting such activity, EDD becomes an ongoing process instead of a single event.
Best Practices for Effective Enhanced Due Diligence
A written policy is only one part of an effective EDD process. These practices can help businesses apply EDD consistently and document how higher-risk customers are reviewed.
Use a Risk-Based Approach
A risk-based approach directs additional review toward relationships that present higher levels of risk.
Define EDD Trigger Conditions
Write down, specifically, what triggers EDD in your organization. Vague criteria lead to inconsistent application, which is exactly what an examiner will flag.
Verify Information From Reliable Sources
Cross-check customer-provided information against independent, authoritative sources — government registries, licensed data providers — rather than accepting self-reported details at face value.
Understand the Customer’s Expected Activity
Establish a baseline for what normal activity looks like for each high-risk customer. Without that baseline, “unusual” has no meaning, and monitoring tools have nothing to compare against.
Investigate Beneficial Ownership Thoroughly
Go beyond the initial ownership disclosure when additional information is needed to understand who ultimately owns or controls the business.
Combine Automated and Manual Screening
Automation can help identify patterns at scale, while a trained analyst can provide context and nuance. A strong EDD process uses both rather than treating one as a replacement for the other.
Establish Clear Escalation Procedures
Defining exactly who should review cases flagged as potentially involving suspicious activities, along with their timeline for doing so, can prevent weeks worth of inactivity.
Keep Evidence and Decisions Documented
Every EDD decision — including the decision not to escalate — should have a documented rationale behind it. This is what turns “we did due diligence” from a claim into something demonstrable.
Regularly Update Customer Risk Profiles
A customer’s risk level isn’t fixed at onboarding. New information, new transaction patterns, or a status change (like becoming a PEP) should trigger a profile update.
Test and Improve EDD Controls
Test your EDD controls periodically to ensure they are detecting the types of errors intended. Relying solely on the assumption that everything is fine until something goes wrong does not guarantee effectiveness.
Wrapping Up
Enhanced customer due diligence is a powerful risk management tool that organizations can leverage to protect themselves from financial risks and regulatory non-compliance.
Knowing what EDD involves, how it works with KYC, and how to use it well, especially in industries like fintech, is really important for businesses and banks to do well in the global economy today.
By keeping up to date, using advanced tools, and following the best methods, organizations can become really good at due diligence. This helps them build trust and handle the constantly changing world of risk and compliance.
Looking to add more checks to your customer screening process? Connect with FTx Identity to learn how automated identity verification can help with EDD-related checks.