In financial crime compliance, the distinction between Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) is more than a regulatory checkbox—it is the fundamental decision point that separates standard onboarding from high-risk investigation. For anyone interviewing for a KYC, AML, or compliance analyst role, mastering this difference is not about reciting definitions; it is about demonstrating a risk-based mindset that regulators and employers demand.
The consequences of getting the distinction wrong are real. Filing standard CDD documentation for a customer who should have been escalated to EDD is a regulatory finding in itself, regardless of whether any suspicious activity was ever detected. EDD is also where AML programmes most often fail inspections—not because institutions never do the deeper work, but because the work is inconsistent, undocumented, or done so late that the examiner can see it was reactive rather than designed.
This expanded article breaks down the core concepts, the regulatory logic that underpins them, and provides a comprehensive set of interview questions and answers to help you articulate the why behind the process.
Contents
The Core Distinction: Baseline vs. Escalation
At its simplest, CDD is the baseline—the standard identity verification and risk assessment performed for every customer. EDD is the escalation—a deeper, more investigative process triggered when that baseline assessment reveals elevated risk factors.
A powerful way to frame this in an interview is to contrast their core questions. Where CDD asks “Who is this customer, and what do they intend to do?”, EDD asks “Where does their money actually come from, who really stands behind them, and does their activity match the story they told us?”.
This framing demonstrates that EDD is not merely “more documents.” It is a targeted investigation aimed at addressing a specific risk that has already been identified. As one industry guide puts it, a CDD file is a risk profile; an EDD file is an investigation record. Regulators assess them against different evidentiary standards, and that distinction matters at examination.
The FATF Recommendation 10 explicitly endorses this risk-based approach (RBA) : institutions must allocate more scrutiny where risk is higher, and less where it is lower. Applying the same level of due diligence to every customer regardless of risk profile is neither required nor efficient.
The Full Due Diligence Spectrum: SDD, CDD, and EDD
CDD and EDD do not exist in isolation. They sit on a three-tier spectrum that also includes Simplified Due Diligence (SDD) for genuinely low-risk relationships.
| Level | Risk Tier | Core Measures |
|---|---|---|
| SDD | Low risk | Streamlined verification; lighter identity assurance; standard monitoring |
| CDD | Medium risk (most customers) | Full identity verification; UBO identification; understanding purpose of relationship; regular monitoring |
| EDD | High risk | Enhanced verification through multiple sources; SoF/SoW analysis; senior management approval; intensive ongoing monitoring |
*Sources: * The key takeaway for an interview is that this is a sliding scale, not a binary choice. A candidate who can situate CDD and EDD within this broader spectrum demonstrates a more sophisticated understanding of how risk-based compliance actually operates.
Quick Comparison: CDD vs. EDD at a Glance
The following table summarizes the key operational differences you should be prepared to discuss.
*Sources: *
What Triggers Enhanced Due Diligence?
EDD is not a discretionary upgrade—it is a regulatory obligation triggered by specific risk factors defined in global AML frameworks. The triggers should be written down and applied consistently, never left to an analyst’s mood on a given day. They fall into five broad categories.
Customer Risk Factors
- Politically Exposed Persons (PEPs) and their family members and close associates. Many jurisdictions mandate EDD for all PEP relationships, regardless of other risk factors.
- Complex or opaque ownership structures: layered corporate entities, trusts, nominee arrangements, circular ownership, or ownership chains spanning secrecy jurisdictions.
- Cash-intensive businesses: money services, casinos, high-value dealers.
- Adverse media or screening hits: criminal allegations, regulatory actions, sanctions near-matches, or previous suspicious activity reports.
Geographic Risk Factors
- Countries identified by FATF as having strategic AML deficiencies (grey-listed or black-listed jurisdictions).
- Jurisdictions subject to sanctions or embargoes.
- Countries with high corruption indices, tax havens, or conflict zones.
Product, Transaction, and Delivery Channel Risk
- Private banking and wealth management.
- Correspondent banking relationships.
- Unusual transaction patterns inconsistent with the customer’s stated profile.
- New technologies or non-face-to-face relationships.
Operational Exposure
A crucial interview point: complexity alone does not automatically trigger EDD. Regulatory guidance is clear that where a structure is complex but the beneficial owner can be readily established, EDD may not be required. The trigger is opacity—the inability to see who ultimately owns or controls the customer—rather than complexity for its own sake.
The Investigative Core of EDD: Source of Funds and Source of Wealth
No EDD discussion is complete without a rigorous understanding of the distinction between Source of Funds (SoF) and Source of Wealth (SoW) . These are the evidentiary pillars of any high-risk investigation.
Source of Funds (SoF) refers to the direct origin of the specific funds being used in a particular transaction or to fund an account. It answers: Where did this money come from? Examples include a salary payment, the sale of a property, or a loan disbursement. Verification typically involves bank statements, sale contracts, payslips, or loan agreements.
Source of Wealth (SoW) is broader. It refers to the origin of the customer’s total accumulated net worth over time. It answers: How did this person build their overall wealth? This requires understanding career history, business ownership, inheritance, investment track record, and historical asset accumulation. SoW verification is deeper than SoF and is typically required for the highest-risk relationships, especially PEPs and ultra-high-net-worth individuals.
The critical analytical step is testing for consistency. Where the size of balances in an account is inconsistent with the customer’s stated SoW, or where the initial source of capital is unclear, the institution must take additional steps to corroborate SoW. A PEP who declares $3 million in assets but can only verify $500,000 in salary is a textbook red flag: the gap between stated wealth and verifiable income is itself the risk indicator.
Interview Questions and Sample Answers
Below are the questions you are most likely to face, along with structured answers that go beyond textbook definitions.
Q1: What is the difference between CDD and EDD?
Why they ask: This is the foundational question. Interviewers want to see if you can articulate the distinction clearly and concisely, and whether you understand that EDD is an escalation of intensity rather than a different category of check.
Sample Answer:
“CDD is the standard due diligence we conduct for every customer to verify their identity, identify beneficial owners, understand the nature and purpose of the relationship, and assign an initial risk rating. It is the floor below which no relationship sits. EDD is the same idea taken further—a heightened intensity of the same checks, applied where standard CDD does not give us enough comfort. EDD goes beyond standard verification by requiring a deeper analysis of Source of Funds and Source of Wealth, enhanced adverse media research, full ownership unwrapping, senior management approval, and more intensive ongoing monitoring. In short, CDD establishes the baseline risk profile; EDD produces an investigation record that explains why the elevated risk is acceptable and what controls manage it.”
Q2: What triggers Enhanced Due Diligence?
Why they ask: They want to see if you can identify concrete risk indicators rather than giving a vague answer, and whether you understand that triggers must be consistently applied rather than decided ad hoc.
Sample Answer:
“There are several defined trigger categories. The most prominent are PEP status—including family members and close associates—and connections to high-risk jurisdictions that have weak AML enforcement or are subject to sanctions. Other triggers include adverse media findings such as criminal allegations or regulatory actions, complex or opaque ownership structures that obscure the Ultimate Beneficial Owner, cash-intensive business models, and unusual transaction patterns inconsistent with the customer’s profile. A key point is that these triggers should be written down and applied consistently to every customer; EDD should never be a matter of an analyst’s mood on a given day. Complexity alone, for example, is not sufficient—the trigger is opacity, the inability to see who really owns or controls the customer.”
Q3: What is the difference between Source of Funds (SoF) and Source of Wealth (SoW)?
Why they ask: This is a classic EDD question that tests your understanding of investigative depth and whether you can apply the distinction analytically.
Sample Answer:
“Source of Funds (SoF) refers to the origin of the specific funds being used in a particular transaction or to fund the account—for example, a salary payment, the sale of a property, or a loan. Source of Wealth (SoW) is broader: it is the origin of the customer’s total accumulated wealth over time, including career history, business ownership, inheritance, and investment returns. In EDD, we must establish both, and critically, we must test them for consistency. If a customer declares substantial wealth but can only document a modest salary, that gap must be investigated and explained. SoW is crucial for understanding the legitimacy of a high-risk customer’s overall financial position, especially for PEPs and ultra-high-net-worth individuals.”
Q4: How would you handle a PEP relationship during onboarding?
Why they ask: This scenario tests your practical application of EDD procedures for a specific high-risk category, including whether you understand that PEP status extends beyond the individual themselves.
Sample Answer:
“Handling a PEP requires a structured EDD approach. First, I would confirm the PEP status and understand the scope—PEP status extends to immediate family members and close associates, not just the individual holding public office. Then I would conduct a deep background check using reliable databases and adverse media to assess any associated corruption or bribery risk. I would rigorously verify both Source of Funds and Source of Wealth using documents like tax filings, company ownership records, and open-source intelligence. The relationship would require senior management or MLRO approval before onboarding, and I would establish enhanced ongoing monitoring with more frequent reviews. The objective is not to reject the customer automatically, but to gather enough evidence to understand and manage the risk.”
Q5: How would you approach EDD on a company with a complex ownership structure?
Why they ask: Corporate onboarding is where EDD is most commonly triggered and where the highest stakes lie. This question tests your ability to operationalise the “opacity” principle.
Sample Answer:
“Complex ownership is a trigger for EDD because opacity—the inability to see who ultimately owns or controls the entity—is itself a risk signal. My approach would be to map the ownership chain through every layer to natural persons, verifying intermediate entity registrations and investigating any nominee arrangements or trust structures. I would distinguish legal ownership from effective control, because the person exercising ultimate effective control may not hold shares above any minimum threshold. For each UBO identified, I would conduct identity verification, sanctions and PEP screening, and an assessment of their individual risk profile. If the structure spans multiple jurisdictions, I would verify registrations across those jurisdictions. The file would document the control relationships, ownership percentages, and the specific steps taken to pierce the opacity, including what sources were checked and when.”
Q6: A customer refuses to provide the additional documents requested for EDD. What do you do?
Why they ask: This assesses your judgment, adherence to policy, and ability to handle friction while maintaining compliance under commercial pressure.
Sample Answer:
“If a customer refuses to provide the necessary EDD documentation, I would first explain clearly why the information is required, the regulatory obligations behind the request, and what specific risk we are trying to mitigate. If they still refuse, I would escalate the case according to our internal policy. The account would likely be placed on hold or the onboarding declined, because we cannot proceed without sufficient evidence to mitigate the identified risk. A key point is that senior management approval is a hard requirement for high-risk relationships—a compliance officer alone cannot approve onboarding, and approval cannot be granted on incomplete evidence. Compliance must take priority over commercial pressure; proceeding without the required EDD would expose the institution to unacceptable regulatory and reputational risk.”
Q7: What is the role of senior management in EDD, and why is it necessary?
Why they ask: This tests whether you understand EDD as a governance process, not just an analytical one.
Sample Answer:
“Senior management approval is a standard EDD requirement: a named, accountable individual with the authority and understanding to assess the risk must sign off on taking the customer on, having seen the EDD findings. This is necessary for two reasons. First, it creates accountability: the decision to accept a high-risk relationship is elevated to a level with the authority to weigh regulatory and reputational risk against commercial interest. Second, it ensures the decision is documented and defensible—regulators increasingly expect audit-ready evidence behind EDD decisions, not just that checks were run but why EDD was warranted and what it found. A compliance officer alone cannot approve a high-risk customer; senior management sign-off is a hard requirement in most frameworks.”
Q8: How does ongoing monitoring differ between CDD and EDD?
Why they ask: EDD is not a one-time onboarding exercise. This question tests whether you understand that the enhanced scrutiny must persist throughout the relationship.
Sample Answer:
“CDD typically involves periodic review, often annually, with standard transaction monitoring thresholds. EDD requires enhanced ongoing monitoring: more frequent transaction monitoring, lower thresholds for alerts, more frequent periodic reviews (often quarterly or semi-annual), proactive adverse media monitoring, and prompt investigation of any unusual activity. The logic is that a high-risk relationship can change—a customer may become a PEP, begin transacting with a high-risk jurisdiction, or become the subject of adverse media after onboarding. EDD obligations follow the customer for the entire relationship, not just at onboarding, and risk re-assessment is continuous.”
Q9: How do you document an EDD decision so it survives an inspection?
Why they ask: Documentation is where EDD programmes most often fail. This tests whether you understand the evidentiary standard regulators apply.
Sample Answer:
“The EDD file is not a risk profile—it is an investigation record. Documentation must show not just that EDD was conducted, but why it was warranted and what it found. For a complex ownership case, the file should explain the control relationships, ownership percentages, and the steps taken to pierce opacity, including what sources were checked and when. For a PEP, it should include the adverse media findings, the SoF and SoW verification evidence, the senior management approval with the decision rationale, and the enhanced monitoring plan. Regulators assess EDD by what is on file, not what was discussed—documentation is the audit trail. An EDD decision that cannot be reconstructed from the file is, for inspection purposes, an EDD decision that was never properly made.”
Final Interview Tip: Move Beyond Definitions
The most common mistake candidates make is reciting definitions from a policy manual. Interviewers are far more impressed by decision-making narratives. When discussing CDD and EDD, be prepared to give a specific example: When did you decide EDD was required? What specific risk indicator triggered it? How did you resolve the ambiguity—for instance, where complexity existed but ownership was ultimately clear? How did you justify your decision in the documentation?
Demonstrating that you can connect the process to a real risk scenario—and explain why the escalation was proportionate and defensible—is what distinguishes a good candidate from a great one. The candidate who can say “I escalated this relationship because the ownership chain was opaque, not merely complex, and here is the evidence I gathered to resolve that opacity” is already thinking like the investigator the role demands.