Due Diligence
CDD vs EDD: Customer Due Diligence vs Enhanced Due Diligence Explained
Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) are two of the most important — and most confused — concepts in anti-money laundering. They are not rival methods. They are two levels of the same process: CDD is the standard check applied to every customer, and EDD is the deeper scrutiny reserved for higher-risk cases.
Getting the distinction right matters. Apply too little diligence to a high-risk customer and you expose the institution to financial crime and regulatory penalties; apply heavy checks to everyone and you waste resources and frustrate low-risk customers. This guide explains what each one is, how they differ, and exactly when EDD is required.
What Is Customer Due Diligence (CDD)?
Customer Due Diligence is the baseline set of checks a regulated institution performs to know who its customer is and to understand the risk they present. It applies to all customers and is the foundation of any KYC (know-your-customer) programme.
Standard CDD generally includes:
- Identifying the customer and verifying their identity from reliable documents or data.
- Identifying the beneficial owner where the customer is a company or legal arrangement.
- Understanding the purpose and intended nature of the business relationship.
- Ongoing monitoring of transactions to ensure they remain consistent with what is known about the customer.
What Is Enhanced Due Diligence (EDD)?
Enhanced Due Diligence is a deeper, more intensive level of scrutiny applied when a customer or situation presents a higher risk of money laundering or terrorist financing. EDD does not replace CDD — it builds on top of it, adding extra steps and evidence.
Typical EDD measures include:
- Verifying the source of funds and source of wealth — establishing where the money actually comes from.
- Gathering additional information about the customer, their background, and the purpose of the relationship.
- Senior management approval before establishing or continuing the relationship.
- More frequent and intensive ongoing monitoring of the account and its activity.
CDD vs EDD: Key Differences
| Customer Due Diligence (CDD) | Enhanced Due Diligence (EDD) | |
|---|---|---|
| Applies to | All customers | Higher-risk customers only |
| Depth | Standard identity & risk checks | Deeper scrutiny and evidence |
| Source of funds | Not always required | Typically required |
| Approval | Standard onboarding | Senior management sign-off |
| Monitoring | Ongoing, risk-based | More frequent and intensive |
When Is Enhanced Due Diligence Required?
EDD is driven by a risk-based approach: the higher the assessed risk, the deeper the diligence. Common situations that trigger EDD include:
Common EDD triggers
- Politically exposed persons (PEPs) and their close associates or family.
- High-risk jurisdictions — countries with weak AML controls or under international scrutiny.
- Complex or unusually large transactions with no clear economic purpose.
- Correspondent banking relationships, especially cross-border.
- High-risk sectors or customers whose activity is difficult to verify.
When any of these factors are present, standard CDD is not enough — the institution must escalate to EDD to manage the elevated risk.
Why the Distinction Matters
The CDD/EDD split is how institutions apply resources proportionately. It reflects the core principle of modern AML: not every customer poses the same risk, so not every customer should receive the same scrutiny. Applying EDD to genuinely high-risk relationships is also where much financial crime is caught — particularly at the integration stage of money laundering, where source-of-wealth checks expose funds that cannot be legitimately explained.
When EDD surfaces activity that cannot be satisfactorily explained, it often leads to the next step: filing a Suspicious Activity Report (SAR).
Frequently Asked Questions
What is the difference between CDD and EDD?
CDD is the standard set of identity and risk checks applied to all customers. EDD is a deeper level of scrutiny applied only to higher-risk customers and situations, adding steps such as source-of-funds verification and senior management approval.
When is Enhanced Due Diligence required?
When a customer or transaction presents higher money-laundering risk — for example politically exposed persons, customers in high-risk jurisdictions, complex or unusually large transactions, and correspondent banking relationships.
Does every customer need EDD?
No. Every customer needs some level of CDD, but EDD applies only to those assessed as higher risk. It is driven by a risk-based approach, so lower-risk customers receive standard or, in some cases, simplified due diligence.
What does Enhanced Due Diligence involve?
Verifying the source of funds and source of wealth, gathering more detailed information about the customer and the purpose of the relationship, obtaining senior management approval, and applying more frequent ongoing monitoring.
Is a PEP always subject to EDD?
Yes. Politically exposed persons are treated as higher risk by default, so relationships with PEPs generally require enhanced due diligence, including senior sign-off and closer ongoing monitoring.
Key Takeaways
CDD and EDD are two levels of the same duty. Every customer gets Customer Due Diligence — verify who they are and understand their risk. Higher-risk customers get Enhanced Due Diligence on top: source of funds and wealth, senior approval, and closer monitoring. The trigger is risk, and getting the escalation right is what keeps an AML programme both effective and proportionate.
