Enhanced Due Diligence (EDD): When Standard KYC Is Not Enough
Enhanced Due Diligence is the bar examiners apply to your highest-risk customers. Here is exactly what to collect, document and escalate.
Enhanced Due Diligence (EDD) is the deeper investigation regulators expect for high-risk customers — PEPs, high-risk geographies, cash-intensive businesses, complex ownership structures and any relationship where standard KYC leaves residual risk above your tolerance.
Done well, EDD lets you keep profitable but sensitive customers while satisfying examiners. Done poorly, it becomes the first finding in every exam report. This guide explains exactly what good EDD looks like in 2026.
Who Triggers EDD?
EDD is triggered by customer type, geography, product or behavior. Politically Exposed Persons, customers domiciled or transacting in FATF grey- and blacklisted jurisdictions, money services businesses, crypto exchanges, gambling operators, precious metals dealers, defense exporters and customers with opaque ownership all qualify. So do customers whose transaction patterns sharply diverge from their declared risk profile.
What Evidence to Collect
Standard KYC plus three additional categories: (1) source of funds for the specific transactions, (2) source of wealth for the underlying balance, and (3) adverse media and reputational review with documented disposition. Where applicable, add corporate structure mapping, audited financials and references from regulated counterparties.
Source of Funds vs Source of Wealth
Source of funds describes where money for a specific transaction originated. Source of wealth describes how the customer accumulated their total net worth. Both are required for high-risk EDD.
Documenting the EDD Decision
Every EDD case must end with a written decision — approve, approve with conditions, decline or exit — signed by senior management. The memo should reference the evidence, the residual risks, the mitigants and the next review date. This memo is the single artifact examiners most often request first.
Ongoing EDD Cadence
High-risk customers require shorter review cycles — typically annual — plus continuous sanctions and adverse media rescreening. Material changes such as new beneficial owners, new geographies or significant transaction pattern shifts trigger an immediate off-cycle review.
Common EDD Mistakes
The three mistakes regulators cite most often are: collecting source-of-wealth narrative without supporting documents, approving high-risk customers without senior management sign-off, and treating adverse media as a checkbox rather than an investigation with a written disposition.
Operationalizing EDD
Use a case-managed workflow with required-field validation, evidence uploads, senior approver routing and SLA timers. Push EDD outcomes back into your transaction monitoring rules so the high-risk profile actually changes how alerts are scored. Treat EDD as a continuous program, not a one-time gate.
Key Takeaways
- EDD applies whenever residual risk exceeds your stated tolerance.
- Always collect both source of funds and source of wealth with evidence.
- Senior management sign-off is required and audited.
- Adverse media must end in a written disposition, not a screenshot.
Related Verification Services
In-depth investigation for high-risk customers.
Investigate and document wealth origin.
Document legitimate income sources.
Identify domestic and foreign PEPs.
Frequently Asked Questions
Is EDD required for every PEP?
Yes for foreign PEPs. Domestic PEPs are risk-rated, but most firms apply EDD by default for safety.
How long does EDD typically take?
Standard EDD completes within 3–7 business days; complex structures with multiple jurisdictions may take 2–4 weeks.
Can EDD be automated?
Most of the data collection and screening is automated, but the analyst judgment and senior approval must remain human.
What is the difference between EDD and SDD?
SDD (Simplified Due Diligence) is a lighter touch for demonstrably low-risk relationships; EDD is the opposite end of the same spectrum.
What happens if EDD reveals serious risk?
Decline, exit or restrict the relationship and consider filing a SAR if criminal activity is suspected.
Have a high-risk customer in the queue?
We complete full Enhanced Due Diligence — source of funds, source of wealth, adverse media and senior-ready memo — within five business days.