Enhanced due diligence (EDD)

What Is Enhanced Due Diligence (EDD)?

Enhanced Due Diligence, abbreviated EDD, is a heightened form of Customer Due Diligence that institutions apply when a customer, transaction, or relationship carries an above-average risk of money laundering, terrorist financing, or related financial crime. Where standard Know Your Customer verification sets the floor that every customer has to clear, EDD builds additional investigation on top of that floor for a defined set of elevated-risk situations. Those situations usually involve politically exposed persons, customers linked to jurisdictions the Financial Action Task Force labels high-risk, firms operating in money-laundering-prone sectors such as cash-heavy businesses or cryptocurrency, and accounts that later monitoring singles out as suspicious. The work itself centers on tracing where a customer's funds and wealth originate, digging into press coverage and reputational history, and watching transactions far more closely and frequently than a typical account warrants. Because a risk assessment switches EDD on rather than applying it to everyone, a firm has to keep a transparent, documented method for choosing which customers and relationships fall under this tougher standard.

Why It Matters

EDD earns its keep in exactly the situations where routine checks are likeliest to let a genuine threat slip past, since elevated-risk customers carry precisely the exposure that baseline verification was never built to surface. The enforcement record makes the stakes concrete. Credit Suisse paid $475 million in fines to U.S. and U.K. regulators, among them the SEC and the Financial Conduct Authority, after it failed to apply adequate enhanced due diligence to a high-risk client tied to a fraudulent Mozambican government lending scheme. The penalties, though, form only one layer of cost. Weak EDD also damages a firm's reputation and its place in the wider financial system, because correspondent banks, regulators, and trading partners now weigh an institution's anti-money-laundering controls before agreeing to keep doing business with it. Losing correspondent access or a key counterparty can hurt far more than any single fine, since it limits the firm's ability to move money and serve clients across borders. Handled well, EDD gives an institution documented proof that it spotted, investigated, and kept watching its riskiest relationships early, which is precisely the trail examiners expect to find.

How Enhanced Due Diligence (EDD) Works

Most EDD programs run through five connected stages:

• Risk-based trigger identification: the firm tests each customer and relationship against set criteria, including high-risk geographies, politically exposed person status, and sector, to decide which ones call for EDD.
• Source of funds and wealth verification: analysts establish where the customer's money and broader wealth originate, reaching well beyond the identity checks a standard review involves.
• Enhanced background and media review: the team digs deeper into adverse media, litigation records, and reputational signals than a routine check requires.
• Senior management approval: before onboarding a higher-risk relationship, senior compliance or risk leaders generally have to sign off.
• Ongoing enhanced monitoring: the account then draws closer transaction monitoring and more regular risk reassessment than a standard customer receives.

Each stage feeds the next, so a weak trigger step leaves all the later monitoring pointed at the wrong accounts.

Regulatory and Compliance Considerations

The backbone of EDD sits in international standards, above all the Financial Action Task Force's Recommendation 10, which sets out when the heightened process should apply, and that standard flows into national law through regimes such as the U.S. Bank Secrecy Act and the USA PATRIOT Act. Regulators seldom hand institutions a complete, universal checklist of every circumstance that demands EDD. Each firm instead has to design and record its own risk-based methodology for deciding which customers, jurisdictions, and transaction types cross into heightened scrutiny, then stand behind that methodology when examiners test it. On this model, supervisors judge a program less by whether a written policy exists and more by whether the firm applied it uniformly and can prove, with documentation, that it caught and investigated the high-risk relationships its own rules were meant to flag. The boundaries also keep shifting. Newer threats, including the expanding use of stable coins in cross-border illicit flows that FATF's 2025 guidance highlights, steadily enlarge what a credible program must cover, making ongoing updates a continuous duty for banking and financial services firms rather than a one-time project.