CDD RTS under AMLR: what changes for KYC and remote ID?

TL;DR: The final EU AMLR customer due diligence RTS turns KYC into a risk-based orchestration problem, according to Namirial, with eID, EUDI Wallets and qualified trust services as the default path and remote fallback verification governed by documented safeguards. The control assumption is no longer checklist completion but evidencing why each identity journey, data point and re-screening decision was proportionate.

Editorial analysis by NHI Mgmt Group, based on content published by Namirial: “Customer Due Diligence, AMLA’s Final RTS: What’s Changing for KYC and Remote Onboarding”.

Key questions

Q: How should organisations distinguish KYC from customer due diligence in AML onboarding?

A: KYC is the broader customer verification framework, while customer due diligence is the core process inside it.

Q: When should firms use alternative remote identification instead of eID or a wallet?

A: Use alternative remote identification only when the customer cannot reasonably present the document in person and does not have access to eID or qualified trust services that meet the preferred route.

Q: What breaks when KYC data and screening are not integrated?

A: Re-screening, PEP checks, beneficial ownership verification and periodic refreshes become inconsistent and slow.

Practitioner guidance

• Map onboarding journeys to the preferred verification hierarchy Determine which customer flows can use identity documents, eID means, EUDI Wallets or qualified trust services as the primary path, and document when fallback remote verification is justified.
• Rebuild fallback logic for remote identification Define the Article 7 safeguards your alternative remote process must satisfy, including holder matching, communication integrity, evidence quality, interruption on doubt and secure retention.
• Calibrate data collection to risk level Align your data model with the RTS rules on names, address, birthplace, nationality and low-risk simplifications, so each journey collects only what the risk profile supports.

Bottom line: The RTS turns AML KYC into a governed identity lifecycle, where verification, monitoring and refresh decisions must be tied to risk.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →