Join our Newsletter — 33% off our NHI Course

Enhanced due diligence risk triggers: what IAM teams should learn

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 21826
Topic starter  

TL;DR: Enhanced due diligence is the deeper AML control used when customers, transactions, or relationships present elevated risk, with FATF-style risk-based screening, source-of-funds checks, transaction monitoring, and senior review shaping how firms prove accountability according to Sumsub. The governance lesson is that EDD works only when risk signals, evidence collection, and escalation are treated as one lifecycle, not as disconnected compliance tasks.

Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Enhanced Due Diligence (EDD): When It Is Required and How It Works”.

Key questions

Q: What breaks when enhanced due diligence is treated as a one-time check?

A: When EDD is treated as a one-time check, the organisation loses the ability to catch changes in ownership, behaviour, or jurisdictional risk after onboarding.

Q: How should organisations decide when a customer needs enhanced due diligence?

A: Organisations should escalate to enhanced due diligence when a customer, beneficial owner, transaction, or jurisdiction creates a materially higher AML risk than standard onboarding can explain.

Q: What are the warning signs that EDD is failing in practice?

A: The warning signs are repeated manual overrides, weak source-of-funds evidence, unclear beneficial ownership, and alerts that do not reopen the case when risk changes.

Practitioner guidance

  • Define explicit EDD triggers Map high-risk customers, PEP status, jurisdiction exposure, complex ownership, and unusual activity into documented escalation criteria that front-line teams can apply consistently.
  • Require independent evidence for high-risk cases Do not rely on customer statements alone for source of funds, source of wealth, or beneficial ownership.
  • Link monitoring to case escalation Connect sanctions screening, PEP screening, adverse media, and transaction monitoring to the EDD case file so new risk signals reopen review instead of staying in separate queues.

Bottom line: Enhanced due diligence is the higher-scrutiny branch of AML governance for relationships that move beyond ordinary risk.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →


This topic was modified 3 days ago by NHI Mgmt Group

   
Quote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 21634
 

Enhanced due diligence is a governance test, not a paperwork stage: EDD only works when risk scoring, evidence capture, and escalation are treated as one control path. If those steps sit in separate tools or teams, the organisation may still collect documents but fail to make a defensible decision. The practitioner takeaway is that the governance model must prove continuity from trigger to review.

A question worth separating out:

Q: Who is accountable when enhanced due diligence reveals suspicious activity?

A: Accountability should sit with the function that owns the review workflow, usually compliance with support from fraud or security operations. The organisation must also define when the issue is escalated to regulators or a financial intelligence unit. Clear ownership matters because EDD fails when everyone sees the risk but no one closes the case.

👉 Read our full editorial: Enhanced due diligence is a governance test for high-risk identity


This post was modified 3 days ago by NHI Mgmt Group

   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.