Enhanced Due Diligence (EDD): The Complete UK Guide

When EDD Applies, What It Requires, and How Firms Get It Right

Enhanced Due Diligence (EDD) is the elevated set of customer due diligence measures required by the Money Laundering Regulations 2017 (MLR 2017) for higher-risk customer relationships. It applies to specific defined situations — Politically Exposed Persons, customers from high-risk third countries, complex or unusually large transactions, and any other relationship the firm assesses as higher risk. Where EDD applies, the firm’s obligations extend significantly beyond standard Customer Due Diligence: source of funds and source of wealth must be established and verified, the rationale for the relationship must be understood, ongoing monitoring must be intensified, and senior management approval is typically required to establish or continue the relationship.

This guide explains how EDD works in practice — when it triggers, what each EDD measure actually requires operationally, what documentation firms need to maintain, and where the FCA’s expectations have evolved over the last several years. It also covers the recruitment dimension — what financial crime teams need to look like to deliver EDD effectively at scale, and what FD Capital looks for when placing senior financial crime professionals into firms with material EDD populations.

What’s missing from most online explanations of EDD is the operational reality. The regulations describe what EDD must include; this guide describes what good EDD actually looks like — and what typically goes wrong when firms treat EDD as a tickbox addition to their standard onboarding rather than a substantively different framework.

Where EDD Comes From — The Regulatory Framework

EDD is required by Regulation 33 of the Money Laundering Regulations 2017. The regulation specifies the situations in which EDD applies and the measures that must be taken. The framework is reinforced by the FCA’s Financial Crime Guide and supplemented by sector guidance from the JMLSG (Joint Money Laundering Steering Group). For the broader legislative context, see our MLR 2017 Guide.

The trigger conditions for EDD under Regulation 33 are:

• Politically Exposed Persons (PEPs) — including their family members and known close associates. See our PEPs Guide for detailed treatment
• Customers established in or with relevant transactions involving high-risk third countries — countries identified by the European Commission or the UK Government as presenting strategic deficiencies in their AML/CTF frameworks
• Complex or unusually large transactions — without an apparent economic or lawful purpose
• Any other situation where the firm’s risk-based assessment indicates higher risk — captured by the firm’s risk assessment under Regulation 18

Beyond these regulatory triggers, the FCA expects firms to apply EDD where their own risk-based assessment indicates the relationship presents elevated money laundering or terrorist financing risk — even where one of the specific Regulation 33 triggers does not apply.

The Six Core EDD Measures

Where EDD applies, Regulation 33 specifies six core measures that firms must consider taking. Not all six apply to every relationship — the firm must take the measures appropriate to the specific risk profile of the customer.

1. Obtaining additional information about the customer and their beneficial ownership

Where standard CDD captures basic identity and beneficial ownership information, EDD extends this — additional verification of beneficial owner identity, deeper investigation of corporate structures, identification of indirect beneficial ownership through trusts or holding entities, and verification of the rationale for complex ownership structures.

2. Obtaining additional information on the intended nature of the business relationship

Understanding why the customer is establishing the relationship, what activities they intend to undertake, the expected transaction profile, and the geographic scope of activity. This goes beyond the basic relationship-establishment information captured in standard CDD.

3. Establishing the source of funds and source of wealth

The most operationally significant EDD measure. Source of funds (SoF) refers to the origin of the specific funds being used in the transaction or relationship. Source of wealth (SoW) refers to the origin of the customer’s overall wealth — how they accumulated their assets over time. Both must be established with verification, not just self-declaration.

For PEPs and high-net-worth customers, SoW evidence might include: salary records, business sale proceeds, inheritance documentation, property sale proceeds, investment returns, family wealth structures, and similar. The verification standard requires documentary evidence — bank statements, sale contracts, tax returns, audited business accounts, and corroborating third-party records.

4. Increased monitoring of the business relationship

EDD relationships require more intensive ongoing monitoring than standard relationships. This includes: more frequent customer review cycles, lower transaction monitoring alert thresholds, more detailed transaction analysis, and proactive outreach to the customer where activity patterns change. See our Transaction Monitoring Guide for operational detail.

5. Increased number of transaction monitoring controls

EDD relationships are typically monitored against multiple scenarios simultaneously, with tighter thresholds and additional behavioural analytics applied. Where standard customers might be monitored against a baseline scenario set, EDD customers are monitored against extended scenarios specific to higher-risk patterns.

6. Senior management approval to establish or continue the relationship

For PEP relationships specifically, senior management approval is required to establish the relationship — and to continue it after annual review. The “senior management” standard is interpreted in practice as someone with appropriate seniority to take an informed risk decision; the MLRO is typically not sufficient on their own (they advise; the senior manager decides). For other EDD relationships, senior management approval is best practice even where not strictly required.

Source of Funds vs Source of Wealth — A Critical Distinction

The distinction between source of funds and source of wealth is one of the most consequential operational details of EDD. Confusing the two — or failing to evidence both where required — is one of the most common findings during FCA financial crime supervisory reviews.

For a PEP customer transferring £2m for investment, both SoF and SoW are required. SoF would be evidenced by the bank statement showing the £2m inflow from a specific source — say, a property sale. SoW would be evidenced by the customer’s broader wealth profile — career history, prior business interests, family inheritance, and other sources that explain how they came to own the property in the first place.

EDD for High-Risk Third Countries

Customers established in, or with material transactions involving, countries identified as presenting strategic AML/CTF deficiencies are subject to EDD by default. The list of high-risk third countries is maintained by the UK Government and aligned with FATF identifications. Firms need to monitor changes to the list and apply EDD prospectively when countries are added.

The EDD measures for high-risk third country relationships typically focus on:

• Enhanced verification of identity and beneficial ownership
• Detailed understanding of the rationale for the relationship
• Source of funds verification with particular scrutiny of cross-border flows
• Intensified ongoing monitoring with country-specific scenarios
• Senior management awareness of the relationship

EDD for Complex and Unusually Large Transactions

Regulation 33 applies EDD to transactions that are complex or unusually large, or unusual patterns of transactions, that have no apparent economic or visible lawful purpose. This trigger is independent of customer risk classification — even an otherwise standard-risk customer engaging in unusual transactional behaviour triggers EDD on those transactions.

The EDD measures for complex/unusual transactions focus on understanding the transaction itself: counterparty identification and verification, transaction rationale, source of funds in the transaction, and the customer’s broader transaction pattern. Where the rationale cannot be established, the transaction may need to be declined, suspicious activity reporting considered, and the relationship reviewed.

Documentation Standards — What Good EDD Files Look Like

EDD files need to evidence the substantive work undertaken — not just the conclusion. Good EDD files typically contain:

• Risk assessment — the firm’s documented assessment of the customer’s risk classification and the reasons for it
• Trigger documentation — which Regulation 33 trigger applies and on what basis
• Identity verification — beyond standard CDD, with additional documents where appropriate
• Beneficial ownership — with extended evidence including ownership chains, ultimate beneficial ownership, and rationale for complex structures
• Source of funds documentation — bank statements, sale contracts, transfer evidence with verification
• Source of wealth documentation — for PEPs and similar — with multi-source corroboration
• Relationship rationale — documented understanding of why the customer is establishing the relationship and intended activity
• Senior management approval — for PEP relationships, documented approval at the appropriate level
• Monitoring intensification — record of the EDD-specific monitoring framework applied to the customer
• Annual review documentation — refreshed assessment, refreshed source of wealth, refreshed senior management approval (for PEPs)

The FCA’s financial crime supervisory work increasingly examines EDD file quality directly. Files that consist of standard CDD with an “EDD” label rather than substantively different content are a common finding — and a meaningful supervisory concern.

EDD in Different Sectors

The regulatory framework applies uniformly but the practical application varies by sector:

EDD in wealth management firms

Wealth management has the highest concentration of EDD relationships in UK financial services — high-net-worth and ultra-high-net-worth clients regularly trigger EDD on PEP, high-risk country, or risk-assessment grounds. The SoW component is particularly demanding because wealth profiles are typically complex, multi-generational, and span multiple jurisdictions. Strong wealth management firms have dedicated EDD specialists within their financial crime teams.

EDD in payments and e-money firms

Payments firms face EDD obligations primarily from cross-border transactional patterns and corporate customers from high-risk third countries. The transaction monitoring intensification component is dominant — payments EDD is less about relationship-level wealth verification and more about heightened transactional surveillance.

EDD in asset management and AIFM firms

Asset management EDD typically falls on institutional and ultra-high-net-worth investors, with the operational burden often delegated to fund administrators and transfer agents under outsourcing arrangements. The firm retains regulatory accountability and must oversee the delegate’s EDD framework — see Third-Party Risk Management Guide.

EDD in private banks

Private banks combine the wealth management EDD profile with cross-border transactional exposure, often for the same customers. The EDD framework is typically the most operationally demanding in UK financial services and requires substantial financial crime team resources.

The FCA’s Evolving Expectations

The FCA’s expectations on EDD have evolved meaningfully over the past five years:

Substantive over procedural focus. Earlier supervisory work often focused on documented procedure quality. Recent work focuses on operational effectiveness — what the firm actually does in practice, not just what its documented procedures say.

Source of wealth depth. The FCA has been increasingly explicit that source of wealth verification for PEPs and ultra-high-net-worth customers must be substantive — not based on customer self-declaration alone, with multi-source corroboration where wealth is significant.

Ongoing monitoring intensification. The “increased monitoring” measure is examined for substantive evidence of intensification, not just labelling. Firms whose monitoring of EDD customers looks identical to standard customer monitoring are flagged.

Senior management engagement. The senior management approval for PEP relationships is examined for substantive engagement, not pro-forma approval. Senior managers approving PEPs without sight of the actual EDD work fail this test.

Periodic refresh. Annual review of EDD relationships is mandatory and the FCA examines whether the refresh involves substantive updating of source of wealth, source of funds, and relationship rationale.

Common EDD Pitfalls

Treating EDD as enhanced CDD checklists. The single most common pitfall — substantively the same work as standard CDD with additional checkboxes rather than meaningfully different content.

Self-declared source of wealth. Source of wealth based on customer questionnaire response without verification falls short of the substantive verification standard.

Inadequate verification of complex ownership structures. Where customers use trusts, holding companies, or other complex structures, EDD must penetrate to ultimate beneficial ownership with rationale for the structure.

Pro-forma senior management approval. Senior managers approving PEP relationships based on summary papers without seeing the underlying EDD evidence.

Static monitoring frameworks. EDD customers monitored on the same scenarios as standard customers, with the “intensification” being merely a higher-priority alert routing rather than different scenario coverage.

Annual review collapse. Where the firm scales beyond capacity, annual EDD reviews become administrative refreshes of date stamps rather than substantive re-verification.

Inadequate technology. Firms managing EDD on spreadsheets and email at scale typically experience quality degradation as the population grows. Specialist customer due diligence platforms become operationally necessary at scale.

EDD and Recruitment — What Strong Financial Crime Teams Look Like

Effective EDD requires specialist team capability beyond standard AML/CDD competence:

• EDD case officers — typically senior AML analysts with experience handling complex source of wealth verification, beneficial ownership investigation, and PEP analysis
• Financial crime investigation capability — the ability to investigate adverse media findings, corporate ownership chains, and unusual transaction patterns
• Sector specialists — for wealth management and private banking, sector knowledge of how high-net-worth wealth is typically accumulated, common structures, and red flags
• Third-party data and verification skills — comfort with using world-check / RDC / similar PEP and sanctions databases, corporate registries, adverse media sources, and verification through reputable third parties
• Senior oversight (MLRO and Deputy MLRO) — capable of running the framework, engaging senior management on PEP approvals, and managing FCA dialogue on financial crime matters

For senior financial crime hiring specifically, see our SMF17 Guide and MLRO Recruitment page.

Further Reading and Authoritative Sources

For the regulatory framework, see Regulation 33 of MLR 2017. For the FCA’s expectations, see the Financial Crime Guide. The JMLSG Guidance provides detailed sector-specific implementation guidance.

Related Guides: AML and Financial Crime

Part of FD Capital’s series of practical guides for FCA-regulated firms: MLRO Guide — Pillar | Customer Due Diligence (CDD) | Know Your Customer (KYC) | Politically Exposed Persons (PEPs) | Sanctions Screening | MLR 2017 Compliance Guide | Transaction Monitoring | Suspicious Activity Reports (SARs) | SMF17 — The MLRO Function