Enhanced Due Diligence (EDD)

EDD distinguishes between two critical concepts:

• Source of Wealth (SoW): The origin of the customer's total net worth—how they accumulated their assets over a lifetime (e.g., inheritance, business ownership, investments).
• Source of Funds (SoF): The specific origin of the money involved in a particular transaction or relationship (e.g., proceeds from a property sale, salary, loan disbursement).

Corroborating both requires documentary evidence such as audited financial statements, tax returns, and sale contracts.

EDD is not universally applied; it is triggered by specific high-risk indicators:

• Customer Risk: PEP status, presence in high-risk or sanctioned jurisdictions, adverse media findings.
• Product/Service Risk: Private banking, correspondent banking, complex trusts, or virtual asset services.
• Geographic Risk: Transactions involving FATF grey-listed or blacklisted countries.
• Behavioral Risk: Unexplained urgency, complex corporate structures with no economic rationale, or reluctance to provide identity documents.

A core EDD component is adverse media screening—the automated analysis of unstructured news, sanctions lists, and public records to identify negative information linking a customer to financial crime. This includes:

• Allegations of fraud, bribery, or money laundering.
• Regulatory enforcement actions or criminal convictions.
• Links to organized crime or terrorism financing.

Natural language processing (NLP) models parse sentiment and entity relationships to distinguish true risk from noise.

EDD requires piercing through complex corporate structures to identify the ultimate beneficial owner (UBO)—the natural person who ultimately owns or controls a legal entity. Key thresholds:

• Ownership of 25% or more of shares or voting rights.
• Control via other means, such as board appointment rights or veto powers.

Entity resolution algorithms disambiguate and link disparate data records to unmask hidden ownership chains involving shell corporations and offshore vehicles.

EDD is not a one-time event. High-risk relationships require continuous, enhanced monitoring:

• More frequent transaction scrutiny with lower alert thresholds.
• Periodic review cycles (typically annually) to re-verify identity, beneficial ownership, and risk profile.
• Real-time triggers for material changes in customer circumstances or new adverse media.

This dynamic approach ensures the risk profile remains current and defensible to regulators.

Regulatory expectations demand meticulous documentation of the EDD process:

• Rationale: Clear justification for the risk rating and EDD measures applied.
• Evidence: Copies of verified identity documents, proof of SoW/SoF, and board resolutions.
• Decisions: Records of senior management approval for onboarding or continuing high-risk relationships.

This audit trail is critical for demonstrating compliance during regulatory examinations and defending against enforcement actions.

The foundational risk assessment process that establishes a customer's baseline behavioral profile. CDD involves collecting and verifying identifying information—name, date of birth, address, and identification number—before a business relationship begins. While CDD applies to all customers, EDD represents the intensified version triggered when standard CDD identifies elevated risk factors. CDD creates the benchmark against which future anomalous activity is measured.

An individual entrusted with a prominent public function, along with their immediate family members and close associates. PEP status is the most common trigger for mandatory EDD due to the heightened risk of bribery, corruption, or abuse of office. PEP screening is not a one-time event—it requires ongoing monitoring throughout the relationship and for at least 12 months after the individual leaves public office, per FATF Recommendation 12.

The identification of the natural person who ultimately owns or controls a legal entity, piercing through layers of shell corporations and nominee directors. EDD investigations must establish beneficial ownership when complex corporate structures obscure the true principal. Key thresholds include:

• 25%+ equity interest as a standard indicator of control
• Senior managing officials identified when no qualifying owner exists
• Multi-jurisdictional tracing for offshore entities

Two distinct pillars of EDD investigation that trace the origin of assets:

• Source of Wealth (SOW): The overall origin of a customer's total net worth—how they accumulated their wealth over a lifetime (inheritance, business ownership, investments)
• Source of Funds (SOF): The specific origin of the particular funds involved in a given transaction or relationship (sale of property, loan disbursement, salary) EDD requires independent verification of both through documentary evidence such as audited financial statements, tax returns, or sale contracts.

The core FATF principle requiring institutions to allocate compliance resources proportionally to identified risk levels. This approach mandates that higher-risk customers receive intensified measures (EDD) while lower-risk segments may qualify for simplified due diligence. The risk-based approach prevents a one-size-fits-all compliance model and ensures that investigative effort concentrates where financial crime exposure is greatest—high-net-worth PEPs, cross-border correspondent banking, and complex offshore structures.

The automated analysis of unstructured public data—news articles, court records, regulatory enforcement actions, and sanctions lists—to identify negative information linking a customer to financial crime. In EDD, adverse media screening goes beyond simple name matching to include:

• Sentiment analysis to distinguish true risk from benign mentions
• Entity disambiguation to avoid false positives from common names
• Multilingual processing for global coverage Negative findings must be documented and assessed for materiality to the business relationship.