Not all customers present the same level of risk. Regulators expect organisations to identify higher-risk relationships early, apply enhanced due diligence where appropriate, and demonstrate that decisions are consistent, proportionate and well documented.
For many compliance teams, this is where AML programmes are most likely to break down. High-risk customers often involve politically exposed persons, complex ownership structures, higher-risk jurisdictions or industries subject to increased scrutiny. Managing these risks effectively requires more than basic screening.
This article explores how enhanced due diligence fits into a modern AML framework, why jurisdictional risk matters, and how organisations can apply deeper controls without creating unnecessary friction.
Enhanced due diligence, commonly referred to as EDD, is the additional level of scrutiny applied to customers or counterparties that present a higher risk of money laundering or terrorism financing.
While standard due diligence may be sufficient for lower-risk relationships, regulators expect enhanced measures when specific risk factors are present. These may include:
EDD is not a one-size-fits-all process. It should be applied proportionately based on the nature and level of risk identified.
Effective enhanced due diligence starts with accurate risk identification. This requires more than a simple name check at onboarding.
A modern AML framework assesses customer risk across multiple dimensions, including:
By combining these factors, compliance teams can determine whether a customer falls into a higher-risk category and whether enhanced controls are required.
Jurisdictional risk is a critical component of enhanced due diligence. Countries differ significantly in their AML regimes, levels of corruption and exposure to financial crime.
Regulators expect organisations to consider jurisdictional risk when assessing customers, particularly where business activities span multiple regions. This often involves:
An effective jurisdictional risk assessment ensures that enhanced due diligence is applied consistently and defensibly.
For higher-risk customers, screening should extend beyond basic checks. Enhanced due diligence typically involves:
Ongoing monitoring is particularly important for PEPs and customers operating in higher-risk environments, as risk status can change over time.
Many organisations supplement external data sources with internal intelligence. Custom watchlists allow compliance teams to monitor specific individuals, entities or risk indicators relevant to their business.
When combined with risk-based rules, custom watchlists help ensure that enhanced due diligence is targeted and aligned with internal policies rather than applied uniformly across all customers.
This approach supports proportionality, a key principle in regulatory guidance.
Certain sectors face heightened regulatory scrutiny due to their inherent risk profiles. These may include gaming and gambling, digital assets, payments and other high-volume financial services.
In these environments, enhanced due diligence must balance regulatory expectations with operational realities. This requires:
Applying enhanced due diligence consistently across these sectors helps organisations manage risk without slowing legitimate business activity.
A key objective of enhanced due diligence is not only to identify risk, but to demonstrate that appropriate action has been taken.
Regulators expect organisations to maintain clear records showing:
Strong documentation and audit trails are essential for meeting these expectations.
Enhanced due diligence plays a central role in managing higher-risk customers and meeting regulatory obligations. As financial crime risk becomes more complex, organisations need AML frameworks that support deeper analysis, ongoing monitoring and consistent decision-making.
By combining enhanced screening, jurisdictional risk assessment and proportionate controls, compliance teams can manage high-risk relationships effectively while maintaining operational efficiency.