Why EDD matters
Standard KYC/KYB is the baseline. EDD is the additional procedure applied when something about the customer raises the risk profile: politically exposed persons (PEPs), high-risk jurisdictions, cash-intensive businesses, money service businesses, certain MCCs, or transaction patterns inconsistent with the customer's stated activity.
A well-run program tiers its customer base by risk and routes the elevated tier through EDD workflows automatically.
When EDD is required
EDD is triggered by: (a) regulatory categories (PEPs, certain industry codes), (b) geographic risk (FATF-listed jurisdictions, OFAC-adjacent regions), (c) transaction risk (large cash flows, structuring patterns, frequent counterparties in high-risk areas), and (d) ongoing-monitoring outputs that re-classify a customer mid-relationship.
Common pitfalls
- Documentation thin spots. EDD requires more than a flag in the CRM \u2014 it requires gathered evidence (source of funds, expected activity, ownership documentation) that the sponsor bank's examiner can review.
- No refresh cadence. EDD customers require periodic refresh, typically annual at minimum. Without a refresh workflow, the file goes stale and exams find it.
- Manual everything. A program with even a few hundred EDD customers needs automation \u2014 alert routing, document collection, and reviewer workflow.
EDD is where regulatory pressure becomes operational complexity \u2014 invest in the workflow early.