CDD is the standard set of checks a regulated firm carries out on every customer, designed to verify identity and gauge the level of risk they present. EDD, by contrast, is reserved for higher-risk customers and layers on source-of-funds verification, beneficial-ownership mapping and more intensive monitoring.
Put simply, CDD is the baseline applied to everyone, while EDD is the escalation deployed when risk climbs, stresses Opoint.
Opoint recently communicated with its readers what is the difference between CDD and EDD.
EDD goes well beyond a routine identity check. It typically involves deeper background research into the customer and their beneficial owners, verification of both the sources of funds and wealth, closer and more frequent adverse media screening, and tighter ongoing monitoring across the life of the relationship. Where standard due diligence answers the question of who a customer is, EDD sets out to capture the full picture of the risk they carry.
The two regimes differ across almost every dimension. CDD applies to all customers by default and relies on standard identity and risk checks, with periodic monitoring and only basic identification of beneficial owners. EDD, applied solely to higher-risk customers, demands verified sources of funds, mapped and verified ownership structures, enhanced and more frequent monitoring, and closer, ongoing adverse media screening.
CDD remains the front-door process for any regulated business. It confirms a customer’s identity, establishes the nature of the relationship and assesses the risk involved. For the majority of customers, this baseline is entirely sufficient on its own.
EDD, meanwhile, exists for the relationships that warrant deeper scrutiny. Its purpose is not simply a verified identity but a comprehensive understanding of a high-risk relationship, achieved through source-of-wealth checks, ownership mapping and persistent oversight.
The move from CDD to EDD is triggered when assessed risk exceeds the standard threshold. Common triggers include politically exposed persons, customers based in high-risk jurisdictions, correspondent banking relationships, complex or opaque ownership structures, and unusual transaction patterns. Under a risk-based approach, it is the risk level, rather than any fixed category, that drives the escalation.
Adverse media screening features in both regimes, though at different intensities. CDD involves standard screening, while EDD requires closer, continuous checks given the higher stakes. Crucially, screening is only as effective as the news coverage underpinning it. Risk on a high-risk counterparty often surfaces first in local-language reporting, meaning the breadth and linguistic reach of the underlying data directly determine whether EDD actually catches what it should.
Read the full Opoint post here.
Copyright © 2026 RegTech Analyst
Copyright © 2018 RegTech Analyst
