Enhanced Due Diligence (EDD)

Enhanced due diligence (EDD) is the deeper level of scrutiny applied to customers who present higher money laundering or terrorist financing risk. Where standard due diligence establishes who a customer is, EDD asks where their money comes from and whether the relationship makes sense — then keeps asking.

How it works

EDD is not standard due diligence performed more carefully. It asks different questions.

Standard due diligence establishes identity: who is this person, is the identity real, does anything on a watchlist match. EDD accepts all of that as answered and moves to the harder question — is this relationship what it appears to be. That means source of funds (where did the money in this specific transaction originate) and source of wealth (how did this person accumulate assets in the first place), which are distinct and routinely conflated.

The evidence bar rises accordingly. A customer’s statement about their occupation is sufficient under standard due diligence. Under EDD it needs corroboration — company filings, audited accounts, tax records, property registers, a plausible narrative that ties stated wealth to documented history.

Triggers fall into four families. Status: politically exposed persons and their close associates, because proximity to public funds creates corruption risk regardless of conduct. Geography: jurisdictions with weak AML controls or on FATF lists. Structure: ownership arrangements that obscure who ultimately benefits. Behavior: transaction patterns that do not fit the stated business.

EDD is also continuous rather than a gate. A relationship in EDD gets reviewed more often and monitored more closely, and senior management usually has to approve both opening it and keeping it.

Why it matters for identity verification

Every EDD finding is attached to an identity, and the whole exercise is worthless if that identity was never established properly.

The dependency runs deeper than it first appears. Source of wealth analysis traces a person’s history through company records, property registers and tax filings — all of which are searched by name and identifiers. If those identifiers came from a document nobody authenticated, the research traces someone else, or nobody at all, and produces a file that looks thorough and proves nothing.

Screening quality depends on the same foundation. A PEP or sanctions match on a common name is only resolvable with enough verified attributes to distinguish one person from another, which is why extracting and authenticating identity data from the customer’s document does more for screening precision than any tuning of the matching algorithm. Microblink’s AML, PEP and sanctions screening runs against verified identity data rather than a self-reported name.

Standard due diligence vs enhanced due diligence

What it can’t do

It cannot prove funds are clean. EDD builds a plausible, evidenced account of where money came from. Plausible is not proven, and a sufficiently well-constructed cover story survives it — which is why EDD reduces risk rather than eliminating it.

It is not a substitute for monitoring. EDD is heaviest at onboarding and periodic review. Behavior between those points is caught by transaction monitoring, and a relationship that passed EDD two years ago tells you nothing about last month.

PEP status is not wrongdoing. Being politically exposed is a risk category, not an allegation. Treating it as disqualifying leads to de-risking entire customer groups, which regulators have repeatedly criticized and which pushes those customers into less supervised channels.

It cannot outrun deliberate opacity. Layered ownership across jurisdictions that do not maintain public registers can be documented to the limit of what is knowable and still conceal the beneficial owner. EDD records the limit; it does not remove it.

Frequently asked questions

What triggers enhanced due diligence?

Higher-risk indicators: politically exposed person status, a high-risk jurisdiction, opaque ownership structures, unusual transaction patterns, or wealth that does not match the customer’s stated profile. Institutions define their own thresholds within a risk-based framework.

What is the difference between source of funds and source of wealth?

Source of funds is the origin of the money in a specific transaction or account. Source of wealth is how the customer accumulated their assets over time. They are separate questions and EDD requires both — conflating them is a common audit finding.

Is enhanced due diligence required for all PEPs?

For foreign PEPs, yes, under FATF standards. Domestic PEPs and international organization officials are handled on a risk-sensitive basis, so treatment varies by jurisdiction and by the institution’s own assessment.

How long does enhanced due diligence take?

Days to weeks, because it depends on gathering corroborating documentation from the customer and from third-party sources. That timeline is the reason strong identity verification at the outset matters — time spent researching the wrong person is entirely wasted.

Related reading

• Customer due diligence — the baseline EDD sits above
• Adverse media screening — what surfaces risk that watchlists miss
• FinCEN — the bureau receiving what EDD escalates
• KYC checklist for banks — how due diligence tiers work operationally