Topic starter
23/10/2026 12:47 am
TL;DR: Customer due diligence is turning into a governed identity lifecycle because verification, monitoring and refresh decisions must be tied to risk, as Namirial explains. Identity workflows now need evidence for why each check, screen and review was proportionate.
Editorial analysis by NHI Mgmt Group, based on content published by Namirial: “Customer Due Diligence, AMLAâs Final RTS: Whatâs Changing for KYC and Remote Onboarding”.
Key questions
Q: When should firms use alternative remote identification instead of eID or a wallet?
A: Use alternative remote identification only when the customer cannot reasonably present the document in person and does not have access to eID or qualified trust services that meet the preferred route.
Q: What breaks when KYC data and screening are not integrated?
A: Re-screening, PEP checks, beneficial ownership verification and periodic refreshes become inconsistent and slow.
Q: How should organisations distinguish KYC from customer due diligence in AML onboarding?
A: KYC is the broader customer verification framework, while customer due diligence is the core process inside it.
Practitioner guidance
- Map onboarding journeys to the preferred verification hierarchy Determine which customer flows can use identity documents, eID means, EUDI Wallets or qualified trust services as the primary path, and document when fallback remote verification is justified.
- Rebuild fallback logic for remote identification Define the Article 7 safeguards your alternative remote process must satisfy, including holder matching, communication integrity, evidence quality, interruption on doubt and secure retention.
- Calibrate data collection to risk level Align your data model with the RTS rules on names, address, birthplace, nationality and low-risk simplifications, so each journey collects only what the risk profile supports.
Bottom line: The RTS turns AML KYC into a governed identity lifecycle, where verification, monitoring and refresh decisions must be tied to risk.
Glossary terms: Customer Due Diligence, Simplified Due Diligence, Qualified Trust Service Provider, Event-Driven Review
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 6 days ago by NHI Mgmt Group
23/10/2026 9:49 am
KYC governance is shifting from document collection to evidence orchestration. The RTS does not simply add more fields to capture. It requires firms to prove that each data point, source and verification route was proportionate to the risk profile, which changes the control model for onboarding and monitoring. That means compliance teams now have to govern the decision logic behind identity journeys, not just the identity artefacts themselves. The practitioner conclusion is clear: evidence design is now a core control design problem.
A question worth separating out:
Q: How should compliance teams prove that customer due diligence is proportionate?
A: They should retain enough evidence to show why the chosen data set, verification source and review frequency matched the identified risk. That means keeping decision logs, source quality rationale and exception handling together. Proportionality is defensible only when the programme can explain its choices after the fact.
👉 Read our full editorial: EU AMLR customer due diligence shifts KYC toward risk-based orchestration
This post was modified 6 days ago by NHI Mgmt Group