Enhanced Due Diligence (EDD): When It Applies and What It Requires

Enhanced due diligence (EDD) is the deeper level of customer checks that an accountancy or finance firm must apply when a client or transaction presents a higher risk of money laundering or terrorist financing. Where standard customer due diligence answers "who is this client?", EDD answers "why should we be comfortable acting for them, and how do we keep watching?" Getting this wrong is one of the most common reasons firms are sanctioned by their supervisor, so it pays to be clear on exactly when EDD bites and what it requires.

When is enhanced due diligence required?

Under the UK's Money Laundering Regulations 2017 (regulation 33), EDD is mandatory in defined higher-risk situations. These include any business relationship or transaction involving a person established in a high-risk third country, any relationship with a politically exposed person (PEP) or their family members and close associates, correspondent relationships, and any case the firm's own risk assessment flags as high risk. EDD is also triggered where a transaction is unusually complex or unusually large, follows an unusual pattern, or has no apparent economic or legal purpose.

An important change lands on 30 June 2026. The Money Laundering and Terrorist Financing (Amendment) Regulations 2026 narrow the automatic high-risk-third-country trigger: mandatory EDD will apply to jurisdictions subject to a Financial Action Task Force (FATF) "call for action" (currently a very short list including North Korea, Iran and Myanmar) rather than the longer "increased monitoring" grey list. The trigger for one-off transactions is also tightened to those that are "unusually complex or unusually large." This is a meaningful narrowing, but it does not remove a firm's wider obligation to apply EDD wherever its own risk assessment identifies elevated risk.

What EDD actually involves

EDD is not simply "collect another document." Regulation 33 sets out specific measures a firm should take, scaled to the risk. In practice that means obtaining additional information to establish the customer's identity and the identity of any beneficial owner, understanding and evidencing the source of funds and source of wealth behind the relationship, and seeking information on the purpose and intended nature of the transactions. For higher-risk relationships, firms should also obtain senior management approval before onboarding or continuing the relationship, and apply enhanced ongoing monitoring — checking more often and more closely than they would for a standard client.

Source of funds vs source of wealth

These two terms are frequently confused, and supervisors test the difference. Source of funds is the origin of the specific money used in a transaction — for example, the bank account a deposit came from. Source of wealth is the bigger picture: how the client accumulated their overall assets in the first place, such as a business sale, inheritance or years of employment income. Evidencing both, proportionately, is central to good EDD: a plausible source of funds can still sit on top of an implausible source of wealth.

PEPs and high-risk relationships

A politically exposed person carries higher inherent risk because of the potential for bribery and corruption. EDD for a PEP includes establishing the source of their wealth and funds, obtaining senior management sign-off, and monitoring the relationship more intensively. The same principles extend to sanctioned-adjacent risk, which is why EDD and sanctions screening are best run as complementary controls rather than separate box-ticking exercises.

Documenting your decisions

The single biggest practical lesson from enforcement cases is that EDD is judged on what you can evidence, not what you concluded in your head. Firms should record why a relationship was treated as high risk, what additional measures were taken, who approved it, and how ongoing monitoring will be applied. A short, well-reasoned EDD file that shows proportionate, risk-based thinking is far stronger than a thick folder of documents with no analysis.

How EDD fits the wider AML framework

EDD sits inside a firm's broader anti-money laundering controls — risk assessment, customer due diligence, ongoing monitoring and reporting. The direction of travel across the UK, EU and globally is towards more rigorous, better-evidenced checks: the EU's new Anti-Money Laundering Authority (AMLA), operational in Frankfurt since July 2025, is building towards direct supervision of selected high-risk firms later this decade. Keeping EDD skills current is therefore a genuine professional-development priority — our AML and compliance CPD courses cover risk-based due diligence in depth.

Frequently asked questions

Is enhanced due diligence the same as customer due diligence?

No. Customer due diligence is the baseline applied to every client. Enhanced due diligence is an additional, deeper layer applied only where higher risk is present — for example a PEP, a high-risk jurisdiction, or an unusually large transaction.

Do I always have to apply EDD to clients in high-risk countries?

From 30 June 2026 the automatic trigger applies to jurisdictions subject to a FATF call for action, not the full grey list. However, you must still apply EDD wherever your own risk assessment identifies elevated risk, regardless of which list a country sits on.

What happens if a firm fails to apply EDD properly?

Failure to apply adequate EDD is a common cause of supervisory enforcement, ranging from remediation directions to financial penalties, and can expose the firm and its officers to wider money-laundering liability.

Enhanced due diligence is, at heart, proportionate professional scepticism applied to your highest-risk clients — and evidenced. Get the triggers, the measures and the documentation right, and EDD stops being a compliance headache and becomes a genuine risk control.