Enhanced Due Diligence (EDD) Guide
Complete 2026 Playbook
When CDD is not enough — PEPs, high-risk jurisdictions, complex structures, and HNW private banking relationships all require EDD. This is the complete playbook: triggers, Source of Wealth, approvals, monitoring, and real workflows from HSBC, JPMorgan, Barclays, and Emirates NBD.
Enhanced Due Diligence is the highest-stakes work in any KYC team. Every major AML fine since 2012 — HSBC, Danske, Standard Chartered, Goldman 1MDB, TD Bank — traces back, at root, to EDD failures. A PEP whose source of wealth was not reconstructed. A complex structure whose UBO was never drilled to natural persons. A cash-intensive business whose counterparties were never corroborated. When EDD fails, the fines are in the billions and named senior managers face personal liability.
This guide is the working playbook for EDD at a global bank in 2026. It covers (1) what specifically changes when you move from CDD to EDD, (2) how to build a complete Source of Wealth file, (3) how the three PEP tiers each shape the approach, (4) the approval workflow and who signs what, (5) how ongoing monitoring adjusts post-EDD, and (6) real scenario walk-throughs from HSBC Private Banking, JPMorgan London, Barclays GCC Mumbai, and a bank’s Dubai DIFC branch.
Senior KYC Analysts, Team Leads, Managers, and anyone preparing for EDD-focused interviews at tier-1 investment banks (Goldman Sachs, JPMorgan, Morgan Stanley, Barclays, Citi, BofA), custody firms (BNY, State Street, Fidelity International), private banks (HSBC, Emirates NBD private banking), or senior KPO review roles at eClerx and Genpact.
The 7 Core EDD Measures
Standard CDD produces a risk-rated customer profile. EDD layers seven additional measures on top — each addressing a specific risk factor that standard measures cannot resolve.
Source of Wealth (SoW) Reconstruction
The single most important EDD output. Not to be confused with Source of Funds (SoF, which covers the specific money being deposited). SoW is the complete documented story of how the customer built their total net worth over their lifetime.
A complete SoW file typically includes:
- Career history with employment letters, role certifications, and senior-level attestations
- Business wealth — company financials, founder equity documentation, exit or acquisition agreements
- Investment wealth — brokerage statements, dividend records, capital-gains tax filings
- Inherited wealth — wills, probate documents, testator’s own SoW where relevant
- Property wealth — title deeds, purchase and sale agreements, rental-income statements
- Tax filings that reconcile declared income to reported net worth over 5–25 years
No single document is sufficient. The strength of the file is in the reconciliation: if the customer declares $50M net worth, the documents must add up to roughly that number via plausible channels.
Senior Management Approval Memo
An EDD file cannot be approved by the analyst who built it. FATF Recommendation 12 requires senior management approval for PEP relationships; 6AMLD extends this to RCAs and high-risk third-country customers. In practice, the memo is signed by a named Head of Compliance, MLRO, or equivalent senior executive.
What the memo documents:
- Risk factors identified and the specific EDD trigger
- Key findings from SoW, SoF, and screening
- Any open concerns and the mitigants
- Conditions of approval (monitoring cycle, periodic review frequency, transaction limits)
- Named approver, date, and regulatory basis
Under regimes like UK SMCR, DFSA’s senior-executive licence framework, and Singapore’s IAC, the named approver carries personal regulatory liability for the decision.
Enhanced Screening — Multi-Language & Deeper Database
Standard screening catches English-language adverse media and tier-1 sanctions. EDD extends coverage.
- Local-language adverse-media searches (Arabic, Mandarin, Russian, Spanish, Portuguese for customers exposed to those markets)
- Deeper database coverage — premium PEP databases with RCA tracing, court record databases, regulatory enforcement registries
- Automated re-screening on a daily or weekly cycle (not only periodic)
- Named-individual screening across all UBOs, directors, authorised signatories, and known RCAs
Deeper UBO Trace Through Complex Structures
In standard CDD, you drill to 25% ownership thresholds. In EDD for complex structures, you trace to natural persons even below 25% where control paths exist — voting agreements, veto rights, trustee arrangements, nominee patterns. For multi-layered holdings, you map the complete ownership chart and document how economic benefit flows to real people.
Independent Corroboration
Standard CDD accepts customer attestation supported by customer-provided documents. EDD adds third-party verification — registry of beneficial owners, Companies House filings (UK), Secretary of State registries (US states), AD Register (UAE), SEBI filings (India), tier-1 press reports corroborating declared business activity, professional references from established advisors, and where feasible in-person meetings for HNW private banking.
Enhanced Ongoing Monitoring
Monitoring sensitivity is elevated across the board:
- Lower alert thresholds tuned to the customer’s specific profile
- Tighter behavioural-model sensitivities for pattern deviation
- Manual review of recurring transactions above defined limits
- Cross-referencing transactions against the declared expected profile on a quarterly basis at minimum
- Event-triggered refresh on any material change — new counterparty, volume shift, new jurisdiction, adverse media hit
Shorter Periodic Review Cycles
Standard medium-risk customers get 2–3 year reviews; high-risk 1 year. EDD customers typically get annual at minimum, with Foreign PEPs and highest-risk categories often moving to semi-annual or quarterly. Periodic reviews for EDD customers are also structurally different — SoW is re-verified at each cycle, adverse media is re-screened, transaction activity is reconciled against profile, and any material changes trigger senior re-approval.
PEP EDD — The Three Tiers
Politically Exposed Persons are the most frequent EDD trigger globally. FATF Recommendation 12 distinguishes three tiers, each with its own EDD weight. Understanding which tier applies is critical because regulatory expectations differ materially.
Tier 1 — Foreign PEPs
A Foreign PEP is a politically exposed person in a jurisdiction other than the bank’s home jurisdiction. Always classified as high-risk under FATF R12 and essentially every national regulation (FinCEN, MLR 2017, 6AMLD, DFSA AML Module, MAS Notices). Foreign PEPs — including former heads of state, foreign finance ministers, senior foreign judiciary, and senior foreign military officers — trigger automatic EDD regardless of other factors.
EDD depth expected: Full SoW reconstruction across the entire political tenure plus pre-tenure career, multi-language adverse media covering the customer’s home jurisdiction, senior approval from named Head of Compliance or MLRO, annual or more frequent review, and dedicated enhanced monitoring.
Tier 2 — Domestic PEPs
A Domestic PEP is a PEP in the bank’s own jurisdiction. Most jurisdictions (UK, EU, UAE, Singapore, Canada) require a risk-based approach for Domestic PEPs — they are not automatically high-risk but EDD is applied where risk factors are present (large accounts, high-risk sectors, cash-intensive business, adverse media). The US FinCEN CDD Rule does not carve out Domestic PEPs specifically, treating them under general EDD where warranted.
EDD depth expected: Risk-proportionate. For a Domestic PEP at a tier-1 political level (senior minister, central bank governor), apply full EDD. For a low-tier Domestic PEP (mid-level parliamentarian from a clean jurisdiction), a lighter but still enhanced approach may be appropriate with documented justification.
Tier 3 — International Organisation PEPs
Senior individuals at the UN, IMF, World Bank, WTO, and other international organisations. Treated similarly to Foreign PEPs in most jurisdictions — always EDD, senior approval required. Given the diplomatic-immunity context of many international organisation roles, independent corroboration of SoW is particularly important.
Relatives and Close Associates of PEPs carry the same EDD obligations. Family members (spouse, children, parents, siblings, in-laws) and close business associates (joint beneficial ownership of legal entities, long-standing professional relationships) all require the same treatment as the PEP themselves. A common EDD failure: onboarding the brother-in-law of a senior minister without PEP classification because the analyst checked only the customer name, not the family tree.
Building a Complete SoW File: Step-by-Step
Source of Wealth is where EDD succeeds or fails. The reconstruction follows a consistent six-step workflow.
Step 1 — Customer Narrative
Start with the customer’s own account of how they built their net worth. Capture the full timeline: career phases, business exits, inherited wealth, property events, investment returns. This becomes the framework you will verify against. Weak or inconsistent narrative is itself a red flag.
Step 2 — Career Documentation
Employment letters, role certifications, board membership records, salary history where available, professional registrations. For senior executives and professionals, industry press coverage and LinkedIn footprint can corroborate declared roles.
Step 3 — Business Wealth Documentation
Company financials over 5–10 years, founder equity documentation, cap table at key events, share purchase or exit agreements, dividend history, proceeds evidence from business sales. For private companies, audited financials carry substantially more weight than management accounts.
Step 4 — Investment & Property Wealth
Brokerage statements showing portfolio value and historical returns, dividend records, capital-gains tax filings. For property: title deeds, purchase and sale agreements, rental-income statements, property valuations from established valuers.
Step 5 — Inherited Wealth
Will copies, probate or letters of administration, death certificate of testator, estate solicitor correspondence. Where inheritance is material, the testator’s own SoW may need to be verified — particularly if the testator was a PEP or high-risk customer themselves.
Step 6 — Reconciliation & Narrative Memo
The final step: a written memo reconciling declared net worth to documented sources. Gaps between declared and documented must be explained. The memo becomes the core exhibit in the EDD file and the document a regulator will read first during examination.
EDD Approval Workflow — Who Signs What
| Risk Level | Required Approval | Regulatory Basis |
|---|---|---|
| Foreign PEP (Tier 1) | Head of Compliance + MLRO written approval | FATF R12, FinCEN CDD Rule, MLR 2017 Reg 35 |
| Domestic PEP (high-tier) | Senior compliance officer / Head of Compliance | MLR 2017, 6AMLD, DFSA AML Module |
| Complex structure (offshore layers) | Senior compliance + where risk material, MLRO | FATF R24, R25 beneficial ownership |
| High-risk jurisdiction exposure | Senior compliance officer | FATF R19, EU 6AMLD Article 18a |
| Correspondent banking | Head of Financial Crime / dedicated sanctions officer | FATF R13, FinCEN USAPA 312 |
| Cash-intensive business | Senior compliance officer + on-site verification | Bank policy, FATF typology guidance |
| Adverse media (material) | Senior compliance + MLRO for sanctions-adjacent cases | Bank policy |
EDD in Action — Real Scenarios
Scenario 1 — EDD from day one: Foreign PEP at Dubai DIFC
A former finance minister from a Sub-Saharan African country applies to open a $10M private banking relationship at a bank’s Dubai DIFC branch. Foreign PEP status identified immediately at screening.
Workflow: Ahmed, a Senior KYC Manager, commissions SoW documentation spanning 25 years — public-sector earnings (ministerial salary bands, pension), private-sector earnings before and after tenure, family wealth from known business holdings, property portfolio across three continents, board memberships. Adverse media screened in English, Arabic, and two local languages. Written approval obtained from Head of Compliance and MLRO before the relationship opens. Ongoing monitoring engaged at enhanced sensitivity; quarterly review cycle replaces the standard annual. Total process: ~three weeks.
Scenario 2 — Complex structure at JPMorgan London
A family office seeking to open a £75M investment relationship presents a six-layer structure: UK LLP → Luxembourg holding → Jersey trust → BVI company → Cayman fund → natural-person beneficiaries. No single layer exceeds the 25% ownership threshold when viewed in isolation.
Workflow: EDD trigger: complex ownership structure. The KYC Manager maps the complete chart, drills control paths through the trust deed, settlor instructions, and voting agreements. Identifies three natural persons with effective control through combined ownership and trustee appointments. Full SoW on each controlling individual. Senior approval obtained from Head of Financial Crime. Annual review with intermediate refresh on any structural change.
Scenario 3 — Mid-relationship EDD trigger at Barclays GCC
A corporate customer onboarded two years ago as a Medium-risk UK trading entity begins receiving wire transfers from a tax-haven jurisdiction — starting at £50K weekly, growing to £500K. The declared NOB is domestic UK trading only.
Workflow: Transaction monitoring alert fires. AML investigator reviews, escalates to the KYC team for CDD refresh. Refresh reveals a new beneficial owner: a family member who is a Domestic PEP in a grey-list jurisdiction. EDD triggered. Enhanced SoW on the PEP UBO, NOB re-documented to reflect actual counterparty exposure, senior approval obtained, transaction thresholds restricted. Relationship continues under annual review with quarterly monitoring touch-points.
Scenario 4 — Cash-intensive business at a BNY custody client
A regulated payment institution clients onboards at BNY as a custodian of retail e-wallet funds. The payment institution handles high transaction volumes, some cash-loading at retail points. EDD triggered by cash-intensive business model + regulated-entity oversight requirements.
Workflow: Enhanced review of the payment institution’s own AML programme, regulatory licence verification with the home supervisor, KYC-on-KYC across the institution’s key wholesale counterparties, on-site visit to operations. Review of the institution’s own STR filing history and any regulatory enforcement events. Senior approval obtained; monitoring calibrated to cash-loading patterns.
Common EDD Failures (and How to Avoid Them)
An analyst documents salary and business revenue (SoF) and marks SoW complete. Regulators expect lifetime net-worth reconstruction. Fix: always separate the SoF and SoW narratives; SoW must reconcile the total declared net worth.
Generic “approved by compliance” wording. Regulators expect a specific named individual with documented authority. Fix: template the memo with named approver, role, regulatory basis, and specific conditions.
English-only screening for a customer whose primary business and public exposure is in a non-English-speaking jurisdiction. Fix: where the customer or their exposure is materially non-English, local-language screening is mandatory.
EDD file placed on standard annual review with no trigger-based refresh logic. Fix: enhanced monitoring sensitivity plus event-triggered refresh on material changes (volume shifts, new counterparties, new sanctions exposure, adverse media).
Why EDD Capability Accelerates Your Career
Junior analysts handle CDD throughput. Senior analysts own EDD judgement. Managers own EDD governance. EDD capability is the single biggest differentiator between a Level 2 Senior Analyst and a Level 4 Manager at tier-1 banks — because EDD is where technical knowledge, independent judgement, and stakeholder management all have to converge.
Candidates moving into senior review and approval roles typically pair EDD experience with role-based credentials. IR-KAM (Internationally Certified KYC Manager) is built specifically around EDD sign-off, governance frameworks, and escalation judgement — the exact work Level 3–4 candidates do daily. Analysts still building execution depth benefit from GO-AKS (Globally Certified KYC Specialist) or IKYCA (Internationally Certified KYC Specialist). For EDD in crypto / VASP contexts, C2KO (Certified Crypto KYC Officer) maps to the emerging specialist segment.
Related Reading
- CDD vs EDD: When Due Diligence Becomes Enhanced
- Customer Due Diligence (CDD) Explained: The Complete Analyst’s Guide
- The 4 Steps of the KYC Process
- KYC Regulations Explained
- Top 100 KYC Interview Questions & Model Answers
Build EDD Judgement That Lands Senior Roles
EDD scenario interviews at JPMorgan, HSBC Private, Goldman Sachs, and Emirates NBD separate candidates who recite frameworks from those who actually own the judgement call. Practise the tough EDD scenarios out loud on AGZIT’s voice-based AI Mock Interview — with 10-dimension Scorecard feedback after every mock.
ATS Resume Builder
Voice-based
10-dimension
Coaching
Elevator pitch
DPR-based
30-day roadmap
Silver/Gold/Platinum
Trusted by KYC candidates targeting roles in Mumbai · Dubai · London · New York · Toronto · Singapore