When does due diligence need to go further?

due dilligence

Standard checks aren’t always enough. When a customer or transaction carries more risk than routine screening can handle, firms are required to step up to enhanced due diligence (EDD), a deeper layer of scrutiny built around the level of risk rather than a fixed checklist.

According to Opoint, the most common triggers are well established. Politically exposed persons and their close associates carry heightened corruption risk.

Customers or transactions linked to jurisdictions with weak anti-money-laundering controls raise red flags, as do correspondent banking relationships, where one bank services another in ways that can obscure who’s really involved.

Complex or opaque ownership structures, and transactions that are unusually large, oddly structured, or inconsistent with a customer’s known profile, round out the list.

EDD isn’t optional once these risk factors appear. Global standards, including the FATF’s Recommendation 10, set the international benchmark for customer due diligence and enhanced measures.

In the UK, Regulation 33 of the Money Laundering Regulations 2017 spells out when EDD must apply, while equivalent obligations sit within the EU’s Anti-Money Laundering Directives and US frameworks. The regulatory logic is consistent across jurisdictions: higher risk demands closer scrutiny, regardless of how that risk is labelled.

There’s no single list of customers who automatically require EDD, because the requirement is risk-based rather than prescriptive. In practice, PEPs and their associates, customers tied to high-risk countries, businesses with complex or cross-border ownership, and anyone flagging risk indicators during onboarding or monitoring tend to trigger it most often. Firms are left to make that call themselves, and to be able to justify it under regulatory scrutiny.

Crucially, the trigger doesn’t have to happen at onboarding. A customer who started out as standard risk can be reclassified into EDD the moment something changes, whether that’s acquiring PEP status, beginning transactions linked to a high-risk jurisdiction, or adverse media emerging about them.

This makes ongoing monitoring central to the process: a corruption case or regulatory action surfacing against an existing customer is often the moment escalation kicks in, and how quickly that’s caught depends on the breadth and speed of the news data feeding the monitoring system.

Once EDD is triggered, the obligations deepen. Firms must verify sources of funds and wealth, map out beneficial ownership, run closer adverse media screening, and apply enhanced ongoing monitoring rather than a one-off check.

Read the full Opoint post here. 

Read the daily FinTech news

Copyright © 2026 FinTech Global

Enjoying the stories?

Subscribe to our daily FinTech newsletter and get the latest industry news & research

Investors

The following investor(s) were tagged in this article.