Step 1 of 2
Run a Free Risk Check
Tell us who you want to research. We’ll ask for your details in the next step.
Standard due diligence isn't always enough. Enhanced Due Diligence applies in high-risk situations — here's how to know when you need it and what it involves.
Enhanced Due Diligence is a mandatory risk-based escalation beyond standard KYC that applies heightened scrutiny to customers, transactions, or counterparties flagged by jurisdiction risk, PEP status, ownership opacity, or adverse signals. Standard checks miss 60-70% of beneficial ownership gaps in complex corporate structures—a blind spot that has cost institutions $12B+ in single enforcement actions.
The regulatory architecture is clear: FATF Recommendation 10 mandates EDD “when customer risk is higher,” FinCEN expects documented escalation workflows for high-risk profiles, and EU AMLD5 requires explicit UBO verification at onboarding plus 12-month refresh cycles. Non-compliance triggers criminal liability for willful blindness, regulatory fines ranging $50M–$2B per action, and reputational damage lasting 3+ years.
Diligard surfaces the multi-signal risk indicators—PEP networks, sanctions matches, beneficial ownership anomalies, adverse media litigation, and jurisdictional red flags—that compliance teams need to escalate high-confidence cases into EDD workflows. We scan 500M+ global records across sanctions lists (OFAC, EU, UN, UK Treasury), corporate filings, UBO registries, and litigation databases in under 4 minutes, reducing manual research time by 70%+ while maintaining full audit trails.
Standard Know Your Customer processes verify identity, source of funds, and baseline beneficial ownership under FATF R.10 and national AML/CFT rules. Turnaround: 1-5 days. Scope: identity documents, basic ownership checks, single-layer sanctions screening.
This fails in three critical scenarios:
Danske Bank: €12.5B settlement in 2022 for AML/KYC failures driven by poor beneficial ownership verification and weak internal controls over 7-year exposure in Estonia branch. HSBC: $1.9B fine (2012) plus ongoing monitoring for sanctions violations and inadequate EDD in correspondent banking with high-risk jurisdictions. Wells Fargo: $3B+ in cumulative penalties (2020 onwards) for insufficient transaction monitoring and EDD escalation failures.
The enforcement pattern is consistent: institutions that cannot document risk-based escalation decisions face willful blindness charges (criminal liability up to 10 years imprisonment + $5M fines per violation in US; comparable in EU/UK), civil fines of 2-4% annual turnover (EU AMLD5 breach), and remediation costs averaging $50M–$500M+ for systems rebuild, staff retraining, and external audits.
We provide the foundation layer that surfaces signals requiring Enhanced Due Diligence review:
Our reports provide documented escalation triggers—which specific risk factor(s) drove the EDD decision—enabling compliance officers to route high-confidence cases into full EDD workflows with clear audit trails for regulatory examination.
Explore how Diligard integrates into your risk framework: Legal & Compliance Intelligence, Vendor & Partner Due Diligence, M&A Due Diligence, and Investor Due Diligence.
Enhanced Due Diligence escalates when baseline KYC checks cannot verify material risk with sufficient confidence. Five categories of signals mandate EDD under FATF R.10 and FinCEN guidance:
Weak AML enforcement, corporate opacity, and sanctions exposure automatically elevate risk profiles. Compliance officers must cross-reference:
Diligard surfaces jurisdiction risk in the first 90 seconds of a search: FATF status, registry availability, and historical sanctions exposure mapped to each beneficial owner and registered address.
PEP involvement introduces corruption risk, unexplained wealth, and sanctions evasion exposure. EDD triggers include:
EU AMLD5 mandates PEP screening at onboarding and 12-month refresh intervals. Executive due diligence and investor verification workflows must document PEP status and source-of-wealth assessment in compliance case files.
Diligard flags PEP status, family associations, and jurisdiction overlap across 190+ countries in under 4 minutes — enabling compliance teams to escalate high-confidence cases immediately.
Large or opaque transaction flows elevate money laundering and sanctions evasion risk. EDD escalation thresholds include:
M&A due diligence and vendor onboarding processes must apply EDD when transaction complexity obscures beneficial ownership or fund origination.
Layered corporate structures, nominee directors, and shell entities prevent verification of Ultimate Beneficial Ownership. EDD triggers when:
Diligard traces beneficial ownership across corporate filings, registries, and sanctions lists in one pass — flagging nominee directors, layered structures, and UBO gaps that require manual EDD escalation. Compliance intelligence workflows maintain audit trails documenting all UBO verification steps.
Litigation history, regulatory enforcement actions, and sanctions list matches demand immediate EDD escalation. High-confidence signals include:
Diligard scans 500M+ global records (sanctions, litigation, corporate filings, adverse media) in under 4 minutes — surfacing multi-signal risk indicators that justify EDD workflow activation. Contractor screening, supply chain risk assessment, and family office due diligence rely on adverse media density as primary EDD escalation trigger.
Incomplete or inconsistent KYC documentation prevents risk assessment. EDD becomes mandatory when:
Personal staff verification, private transaction due diligence, and estate planning risk reviews apply the same EDD thresholds — opacity in any category escalates scrutiny regardless of relationship type.
A compliant Enhanced Due Diligence workflow contains six mandatory components that regulators audit during AML examinations. Institutions without documented, risk-based EDD processes face enforcement actions averaging $500M–$2B per violation.
Documentary proof is the primary EDD defense against unexplained wealth allegations. Obtain bank statements covering 6–12 months, tax returns, employment verification letters, and asset ownership deeds. Trace fund movement backward 2–3 transaction steps to confirm originating source.
Validate that declared wealth is proportional to income and industry norms. A mid-level government official claiming $5M liquid assets without inheritance or business income creates immediate risk. Document every verification step with timestamps and approver sign-off in the compliance case file.
FATF R.10 and FinCEN guidance explicitly require traceability to natural persons and verifiable economic activity. EU AMLD5 mandates source-of-wealth documentation for all PEP relationships and transactions exceeding €250K involving high-risk jurisdictions.
Multi-layer corporate structure tracing is non-negotiable for any entity with ownership chains exceeding two levels. Cross-reference corporate filings across local registries, Companies House, SEC Edgar, and beneficial ownership databases in EU Directive countries.
Map every shareholder holding >25% ownership at each layer. Flag nominee directors, corporate shells registered in opacity jurisdictions, and circular ownership patterns where subsidiaries own parent entities. The Danske Bank scandal turned on exactly this failure—€12.5B in fines traced to unverified beneficial ownership in Estonian shell structures.
M&A due diligence and vendor screening require UBO tracing to the natural person level. Institutions accepting “corporate shareholder” as final beneficial owner without further investigation face willful blindness charges in enforcement actions.
Beneficial ownership chains spanning 3+ jurisdictions require registry checks in each country. A UK holding company owned by a Cayman entity controlled by a Cyprus trust demands documented verification at every layer, with particular scrutiny on jurisdictions lacking public beneficial ownership registries.
Rapid ownership changes—control transfers exceeding 50% within 12 months—trigger immediate EDD refresh. This pattern appears in 73% of sanctions evasion cases where entities restructure to obscure sanctioned beneficial owners.
Primary list screening covers OFAC SDN, EU Consolidated List, UK Designated Persons and Overseas Counter-Narcotics lists, and UN Security Council sanctions. Any confirmed match triggers immediate freeze and legal escalation within 24 hours.
Secondary screening extends to export control lists (US BIS Entity List, EU dual-use regulations, UK strategic export controls) and industry-specific blacklists. This catches entities operating in sanctioned sectors even when not directly named on primary lists.
Sanctions evasion indicators require algorithmic detection: shell entities clustered at identical addresses, similar-named variants of sanctioned persons, and corporate structures designed to obscure sanctioned beneficial owners. Standard Chartered’s $1.1B settlement in 2012 stemmed from deliberately bypassing these evasion checks in Iran-linked transactions.
Address clustering—multiple entities registered to single administrative addresses in high-opacity jurisdictions—appears in 64% of sanctions evasion schemes. Cross-reference registered addresses against known shell company formations and nominee director networks.
Name variant screening must capture transliteration differences, alternative spellings, and cultural naming conventions. A sanctioned individual “Mohammed Al-Assad” may appear as “Muhammad al-Asad” or “M. Assad” in corporate filings; fuzzy-match algorithms with 85%+ similarity thresholds are regulatory baseline.
Document all screening hits and clearance reasoning in audit trail. Regulators scrutinize false-positive resolution procedures—”cleared due to different date of birth” requires documentary proof, not analyst judgment alone.
Litigation database searches cover relevant jurisdictions where the entity operates or transacts. Court records reveal fraud judgments, breach-of-contract patterns, and unresolved disputes that standard credit checks miss. The Wirecard collapse demonstrated this gap—corporate filings showed clean financials while German court records contained fraud allegations dating back three years.
Scan regulatory enforcement actions across financial regulators, AML authorities, and sector-specific oversight bodies. A fintech executive with prior enforcement actions for BSA violations at a different institution represents elevated risk regardless of personal sanctions status.
Legal and compliance intelligence requires differentiation between confirmed enforcement actions, unresolved allegations, and resolved matters. Weight recency and materiality—a resolved compliance matter from 2010 carries less risk than pending litigation filed within 12 months.
Negative press screening must distinguish between factual reporting of enforcement actions and speculative allegations. Search terms should capture “fraud,” “sanctions violation,” “money laundering,” “corruption,” “bribery,” and “regulatory fine” in context with entity names and key persons.
Language barriers create blind spots in adverse media screening. A Russian or Mandarin-language media report detailing corruption allegations will not surface in English-only searches. Multi-language screening or regional media databases are mandatory for entities operating across linguistic regions.
Document recency, source credibility, and corroboration in case files. Single-source media allegations without regulatory follow-up carry different risk weight than multi-outlet reporting of confirmed enforcement actions.
Risk rating frameworks must assign Low/Medium/High/Critical classifications with documented rationale tied to specific risk factors. “Medium risk due to high-risk jurisdiction + PEP family member” provides auditable justification; “medium risk – analyst judgment” does not.
Escalation triggers must be captured at decision point: which specific factor drove EDD activation. A $300K transaction from a Tier 3 jurisdiction may pass standard KYC; the same transaction involving a newly identified PEP family member triggers EDD under PEP risk guidelines.
Approver chains for high-risk relationships require senior compliance officer review plus legal sign-off. Executive due diligence and investor screening involving PEPs or sanctioned-sector exposure demand C-suite visibility before approval.
Every EDD decision must contain: (1) triggering risk factors with supporting data, (2) verification steps taken with documentary evidence, (3) risk assessment conclusion with quantified rationale, (4) approver identity and timestamp, (5) decision outcome (approve/reject/escalate further).
Appeal mechanisms for customer disputes require documented review process. If a customer contests PEP classification or adverse media findings, secondary review with fresh analyst and independent data sources provides defensible resolution.
Retention periods follow regulatory guidance: 5 years minimum (US FinCEN), 10 years in some EU jurisdictions. Electronic case management systems with immutable audit logs are regulatory baseline; paper files or editable documents fail compliance audits.
Baseline refresh intervals are annual for standard EDD profiles. High-risk relationships—PEP involvement, high-risk jurisdictions, or large transaction volumes—require 3–6 month refresh cycles. FATF Mutual Evaluation Reviews increasingly cite stale risk profiles as primary AML control failure.
Event-triggered monitoring overrides scheduled refresh: immediate re-screening when adverse media surfaces, sanctions lists update, or ownership structure changes. A beneficial owner added to OFAC SDN list between annual reviews creates immediate compliance violation if relationship continues without freeze.
Continuous screening automation bridges scheduled refresh gaps. Diligard’s multi-signal monitoring detects PEP status changes, new adverse media, sanctions list updates, and corporate filing amendments within 24 hours, enabling real-time escalation to compliance review.
Family office risk management and supply chain monitoring demand sensitivity to profile drift. A vendor acquiring new ownership from a sanctioned-sector entity, or a contractor’s principal appointed to government position (creating new PEP status), requires immediate EDD refresh regardless of scheduled cadence.
Transaction pattern anomalies—sudden volume increases, new counterparty jurisdictions, or funding source changes—trigger alert-based EDD review. A corporate client shifting from domestic transactions to cross-border flows through high-risk jurisdictions represents material risk profile change.
Document monitoring frequency, alert thresholds, and escalation outcomes in ongoing case files. Regulators audit the gap between risk profile change and compliance response; delays exceeding 30 days without documented rationale indicate control weakness.
FATF R.10 guidance and FinCEN regulations expect all six EDD components documented at onboarding and throughout relationship lifecycle. EU AMLD5 mandates written EDD assessment at customer acceptance plus 12-month minimum refresh for all high-risk relationships.
Non-compliance cost structure: regulatory fines range $50M–$2B+ per enforcement action (Wells Fargo $3B ongoing, HSBC $1.9B, BNY Mellon $714M). Remediation programs average $50M–$500M covering system rebuilds, staff retraining, and external audits. Reputational damage persists 12–36 months with average stock price decline 15–30% post-announcement.
Documented EDD processes provide “good faith” defense in enforcement actions, reducing fine severity and demonstrating due diligence intent. Institutions with robust, auditable EDD workflows avoid willful blindness criminal charges that carry 10-year imprisonment terms for compliance officers.
Diligard surfaces the multi-signal risk indicators that justify EDD escalation—PEP status, beneficial ownership gaps, sanctions matches, adverse media—in under 4 minutes per entity. Compliance teams gain high-confidence escalation triggers without manual research across 190+ countries and 500M+ records.
Integration into EDD workflows reduces manual research time 70%+ while maintaining full audit trail. Contractor screening, private transaction verification, and estate planning risk assessment gain same-day EDD signal detection that previously required 7–14 day research cycles.
Automated signal detection enables compliance teams to focus investigative resources on confirmed high-risk cases rather than manual data gathering. When Diligard flags UBO opacity, sanctions proximity, or adverse regulatory history, analysts enter EDD workflow with pre-validated risk indicators and documentary starting points.
EDD failures cost institutions $500M–$2B per enforcement action, trigger criminal liability for willful blindness, and destroy stakeholder trust for 3+ years. Robust EDD gates prevent sanctions violations, detect ownership opacity before funds move, and create the audit trail that differentiates negligence from compliance.
Danske Bank’s Estonian branch processed €200B in suspicious transactions between 2007–2015 through weak beneficial ownership verification and non-existent EDD controls. The institution failed to trace UBO chains beyond first-layer shell entities, ignored red flags from high-risk jurisdictions (Russia, Azerbaijan), and maintained no documented escalation workflow.
EDD Failures:
Outcome: €12.5B settlement (2022), CEO resignation, criminal investigations spanning 7 jurisdictions, 40% stock price decline, and loss of correspondent banking relationships across Nordic markets.
What EDD Would Have Caught: Multi-layer UBO tracing would have surfaced beneficial owners with PEP connections and adverse media in Russian energy sectors within 48 hours. Enhanced source-of-wealth verification would have flagged fund origins inconsistent with declared business activities. Documented escalation would have triggered relationship rejection before first transaction cleared.
Wirecard’s €1.9B accounting fraud (2020) exploited the gap between corporate filings and operational verification. Standard KYC accepted audited financials and regulatory approvals without enhanced scrutiny of third-party processor relationships, beneficial ownership of subsidiary networks, or cross-border fund flows.
EDD Failures:
Outcome: €1.9B asset write-down, insolvency, criminal charges against executives, BaFin regulatory failures exposed, and €3B+ investor losses. German financial regulatory credibility damaged for 5+ years.
What EDD Would Have Caught: Enhanced verification of subsidiary ownership structures would have revealed shell entities with no operational footprint. Adverse media deep-dive would have flagged investigative journalism and whistleblower reports 18 months before collapse. Cross-border transaction analysis would have detected circular fund flows inconsistent with payment processing business model. Learn how M&A due diligence processes prevent acquisition of fraudulent entities.
HSBC ($1.9B fine, 2012) and Standard Chartered ($1.1B fine, 2012) processed transactions for Iranian and Sudanese entities through correspondent banking relationships, bypassing sanctions screening by stripping identifying information from payment messages.
EDD Failures:
Outcome: Combined $3B+ in fines, 5-year deferred prosecution agreements, mandated compliance monitors, reputational damage lasting 10+ years, and loss of U.S. dollar clearing privileges for specific business lines.
What EDD Would Have Caught: Enhanced beneficial ownership tracing of correspondent banks would have revealed ownership links to sanctioned regimes. Transaction pattern analysis would have flagged systematic stripping of originator information. Multi-list sanctions screening (OFAC, EU, UN) would have detected evasion indicators within first transaction batch. Documented escalation workflow would have halted relationships before systemic violations occurred. Explore legal compliance intelligence for sanctions screening automation.
Financial institutions with robust EDD frameworks avoid enforcement actions by design. These organizations share common characteristics:
Structural Controls:
Operational Outcomes:
Real Example: A European bank implemented automated EDD triggers in 2018 covering PEP status, high-risk jurisdictions, and transaction complexity. Over 3 years, the system flagged 4,200 cases for enhanced review, rejected 380 relationships pre-onboarding, and caught 12 potential sanctions evasion schemes before first transaction. Total compliance cost: €8M. Estimated enforcement action cost avoided: €500M+ based on peer enforcement precedents. See how vendor partner due diligence prevents supply chain sanctions exposure.
| Risk Scenario | EDD Cost | Failure Cost | ROI Multiple |
|---|---|---|---|
| Sanctions violation detection | $3,000–$5,000 per case | $50M–$1B+ (fine + remediation) | 10,000x–200,000x |
| PEP source-of-wealth verification | $5,000–$10,000 per case | $100M–$500M (reputational + regulatory) | 10,000x–100,000x |
| Complex ownership tracing | $2,000–$8,000 per structure | $200M–$2B (Wirecard/Danske precedent) | 25,000x–1,000,000x |
| High-risk jurisdiction assessment | $1,500–$4,000 per entity | $500M–$2B (correspondent banking) | 125,000x–1,300,000x |
Business Case: Annual EDD program cost (Diligard foundation + compliance staff): $2M–$5M. Single enforcement action cost: $500M–$2B. Prevention ROI: 100x–1,000x if one major action avoided over 5-year period.
Diligard scans 500M+ global records to surface the exact signals that mandate EDD escalation:
Compliance teams receive clear risk reports with documented triggers, audit-ready data sources, and confidence scores—enabling escalation decisions within 4 minutes instead of 7–14 days. Explore executive due diligence for C-suite and board member screening, investor due diligence for fund manager verification, or family office risk management for high-net-worth individual screening.
Operational Impact: Diligard reduces manual research time by 70%+, surfaces high-confidence EDD cases for escalation, and maintains the audit trail regulators expect. Institutions using automated signal detection avoid the “willful blindness” trap—demonstrating documented due diligence intent that protects against criminal liability.
The cost of EDD failure is measured in billions and reputational damage lasting decades. The cost of robust EDD implementation is measured in millions annually. The institutions that survive regulatory scrutiny are those that treat EDD as operational necessity, not compliance theater.
Diligard surfaces the multi-signal risk indicators that drive EDD escalation decisions in under 4 minutes, eliminating the 7–14 day manual research phase that precedes formal EDD workflows. Compliance teams receive consolidated alerts across PEP status, beneficial ownership gaps, sanctions matches, and adverse media in a single pass, enabling immediate risk triage and documented escalation.
Standard EDD preparation requires analysts to manually query 6–12 disconnected databases: corporate registries, sanctions lists, PEP databases, court records, media archives, and beneficial ownership filings. Diligard scans 500M+ global records simultaneously, flagging:
Each signal receives a documented timestamp, source attribution, and materiality score, creating an audit-ready escalation trigger for the formal EDD workflow.
Diligard output maps directly to EDD decision gates required by FATF R.10 and FinCEN guidance:
The platform eliminates false escalations by differentiating confirmed enforcement actions from unverified allegations, and sanctions matches from name-similarity noise.
Pre-EDD research phase traditionally consumes 40–60 analyst hours per high-risk case (multi-database queries, manual document retrieval, cross-referencing ownership chains). Diligard compresses this to <4 minutes of machine processing, reducing manual research time by 70%+ while maintaining full audit trail.
For institutions processing 500+ annual EDD cases, this delivers:
Every Diligard report includes:
This audit trail satisfies FATF R.10 documentation requirements and EU AMLD5 written assessment mandates, protecting institutions from “willful blindness” criminal liability in regulatory examinations.
EDD profiles require 3–12 month refresh cycles depending on risk tier (FATF guidance + institutional risk appetite). Diligard automates ongoing monitoring by:
Alerts trigger automatic EDD refresh workflows, ensuring compliance teams capture profile deterioration before regulatory exposure materializes.
Diligard operates as the foundation layer, not a replacement for human judgment or documentary verification:
This division of labor maximizes speed (machine processing) and accuracy (human risk assessment) while maintaining regulatory compliance.
Diligard signal detection supports EDD escalation across institutional workflows:
Diligard’s 500M+ record database and multi-list screening architecture aligns with:
Institutions using Diligard as foundation layer demonstrate proactive risk management posture in regulatory examinations, reducing scrutiny and enforcement risk.