What is enhanced due diligence (EDD)?
Enhanced due diligence (EDD) is the deeper, more rigorous level of customer scrutiny that financial institutions, cryptocurrency exchanges, and other regulated entities apply to high-risk customers and relationships that present an elevated risk of money laundering, terrorist financing, or other financial crime. Where standard customer due diligence (CDD) verifies who a customer is, enhanced due diligence digs deeper into why their activity is consistent with a legitimate profile—examining source of funds, source of wealth, ownership structures, and ongoing transaction patterns.
EDD is a core requirement of every anti-money laundering (AML) compliance program. Under a risk-based approach mandated by the Financial Action Task Force (FATF), regulators expect institutions to apply standard checks to most customers and reserve enhanced due diligence measures for those that score highest on risk—politically exposed persons (PEPs), customers in high-risk jurisdictions, complex corporate structures, and counterparties exposed to sanctions or illicit activity.
In the cryptocurrency industry, enhanced due diligence extends beyond traditional identity verification to on-chain analysis. Virtual asset service providers (VASPs) use blockchain analytics to assess wallet exposure, trace source of funds across chains, and evaluate counterparty risk—evidence that traditional EDD processes designed for bank accounts and wire transfers cannot produce.
Why does enhanced due diligence matter?
Enhanced due diligence is the control that separates a compliance program that merely identifies customers from one that genuinely understands and manages financial crime risk. Standard CDD confirms identity; EDD determines whether a high-risk relationship can be safely onboarded and monitored at all.
The regulatory mandate is explicit. The USA PATRIOT Act introduced enhanced due diligence requirements for correspondent banking and foreign relationships, and FATF Recommendation 10 requires enhanced measures whenever money laundering or terrorist financing risks are higher. AML compliance failures tied to inadequate due diligence on high-risk customers have produced some of the largest enforcement actions on record—global AML fines have exceeded $10 billion in the past five years.
The stakes are especially high where customers operate through shell companies, opaque ownership structures, or jurisdictions with weak AML controls. Without EDD, financial institutions risk onboarding the ultimate beneficial owners of laundered funds, sanctioned entities, or the proceeds of crime—exposing themselves to penalties, criminal liability, and reputational damage. A documented, risk-based EDD process is what allows an institution to serve higher-risk customers profitably while satisfying examiners.
How does enhanced due diligence work? Key components
An enhanced due diligence process applies additional scrutiny on top of standard customer due diligence. The specific measures are calibrated to the level of risk, but an effective EDD program consistently includes the following components.
Identity verification and beneficial ownership
EDD goes beyond basic KYC (Know Your Customer) to establish the ultimate beneficial ownership (UBO) behind a customer or entity. For corporate customers, this means mapping ownership structures, identifying shell companies, and verifying the natural persons who ultimately control the relationship. Establishing beneficial ownership is essential to ensuring an institution understands who it is truly doing business with.
Source of funds and source of wealth
A defining feature of enhanced due diligence is verifying source of funds (the origin of the specific money in a transaction) and source of wealth (how the customer accumulated their overall assets). Compliance teams collect documentation—financial statements, transaction histories, and on-chain records—to confirm that a high-risk customer’s activity is consistent with a legitimate economic profile.
PEP and adverse media screening
Enhanced due diligence requires screening customers against politically exposed persons (PEP) databases, sanctions lists, and adverse media sources. PEPs and their close associates present elevated corruption and bribery risk, and adverse media screening surfaces negative news that may indicate involvement in financial crime even where no formal sanction or designation exists.
Ongoing monitoring and risk scoring
EDD is not a one-time event. High-risk relationships require intensified ongoing monitoring, with more frequent reviews, lower alert thresholds, and continuous transaction monitoring to detect red flags. Dynamic risk scoring updates a customer’s risk rating as their behavior changes, ensuring enhanced measures stay aligned with real exposure rather than a static onboarding snapshot.
When is enhanced due diligence required?
Under a risk-based approach, institutions apply EDD whenever a customer or transaction presents higher risk. Common triggers include:
- Politically exposed persons (PEPs) and their family members or close associates, due to elevated corruption risk.
- High-risk jurisdictions and high-risk countries, including those identified by FATF as having strategic AML deficiencies.
- High-risk customers and industries, such as cash-intensive businesses, money service businesses (MSBs), and complex multinational structures.
- Unusual or large transactions, including activity inconsistent with a customer’s known profile or transaction patterns.
- Exposure to illicit activity, such as counterparties connected to sanctioned entities, darknet markets, mixers, or other high-risk sources.
Where risk is assessed as low, institutions may apply simplified due diligence (SDD)—a lighter level of checks. The art of an effective program is matching the intensity of due diligence to the level of risk, conserving analyst resources for the relationships that genuinely warrant enhanced scrutiny.
Enhanced due diligence vs. customer due diligence: what’s the difference?
Enhanced due diligence and customer due diligence are linked levels within the same AML framework, distinguished by depth and trigger.
Customer due diligence (CDD) is the standard process applied to most customers: verifying identity, understanding the nature of the relationship, and assessing baseline risk. CDD answers, “Who is this customer, and what risk do they present?”
Enhanced due diligence (EDD) is the elevated process applied to high-risk customers: verifying source of funds and wealth, mapping beneficial ownership, conducting PEP and adverse media screening, and intensifying ongoing monitoring. EDD answers, “Why is this high-risk relationship safe to maintain, and how do we monitor it?”
| Customer Due Diligence (CDD) | Enhanced Due Diligence (EDD) | |
| Applies to | Standard / lower-risk customers | High-risk customers and relationships |
| Depth | Identity verification, baseline risk assessment | Source of funds/wealth, UBO, PEP & adverse media screening |
| Monitoring | Standard ongoing monitoring | Intensified, more frequent monitoring |
| Trigger | Default for all customers | Risk-based triggers (PEPs, high-risk jurisdictions, sanctions exposure) |
| Regulatory basis | FATF Rec. 10, BSA/CIP | FATF Rec. 10 (enhanced measures), USA PATRIOT Act |
How is enhanced due diligence used in cryptocurrency compliance?
Crypto EDD applies the same risk-based principles as traditional finance, but adds an on-chain dimension that traditional processes cannot reach.
Wallet-level risk assessment. In crypto, EDD includes screening customer and counterparty wallet addresses for exposure to sanctioned entities, darknet markets, mixers, scams, and stolen funds. Blockchain analytics provides this wallet-level evidence in real time across 1,000+ assets and protocols.
Source of funds tracing. Because public blockchains record every transaction on an immutable ledger, compliance teams can trace the on-chain source of funds for a high-risk customer directly—following fund flows across chains and bridges to determine whether assets originated from legitimate or illicit activity. Chainalysis provides attribution for over 40% of global crypto activity, giving EDD analysts the data to substantiate source-of-funds conclusions.
Counterparty and VASP due diligence. When a crypto business interacts with another VASP, EDD evaluates that counterparty’s compliance posture, licensing, and risk exposure. This is the crypto equivalent of correspondent banking EDD and is central to Travel Rule compliance.
Ongoing on-chain monitoring. Crypto EDD pairs onboarding checks with continuous transaction monitoring, so that emerging red flags—new exposure to a sanctioned address or a mixer—trigger review even after a high-risk customer is onboarded.
Risks and common misconceptions about enhanced due diligence
“EDD means rejecting all high-risk customers.” Enhanced due diligence is a risk-management tool, not an automatic decline. Its purpose is to enable institutions to serve high-risk customers safely by understanding and monitoring their risk—not to exclude them outright.
“Crypto is too anonymous for meaningful EDD.” Public blockchains are pseudonymous, not anonymous. Blockchain analytics can trace fund flows, establish wallet exposure, and verify on-chain source of funds—often giving compliance teams more granular evidence than traditional EDD on cash or wire transfers.
“EDD is a one-time onboarding step.” Effective EDD requires ongoing monitoring throughout the relationship. A customer’s risk profile changes over time, and static checks miss the very activity EDD exists to catch.
“More documentation equals better EDD.” Collecting paperwork is not the same as managing risk. The challenge for many institutions is converting source-of-funds and ownership data into accurate risk scoring and actionable monitoring—particularly across crypto exposure that traditional tools cannot interpret.
The central operational risk is misallocating scrutiny: applying enhanced measures inconsistently, or failing to update risk ratings as customer behavior evolves. Both leave gaps that sophisticated actors exploit.
How Chainalysis helps strengthen enhanced due diligence
Chainalysis provides the blockchain intelligence that powers enhanced due diligence for crypto—giving compliance teams the on-chain evidence to assess high-risk customers, verify source of funds, and monitor relationships continuously.
Chainalysis Address Screening: Screens customer and counterparty wallet addresses against sanctions lists, known illicit entities, and risk categories—the wallet-level layer of crypto EDD that traditional name screening cannot provide.
Chainalysis KYT (Know Your Transaction): Delivers real-time transaction monitoring and dynamic risk scoring across 1,000+ assets and protocols, intensifying ongoing monitoring for high-risk customers and reducing false positives by up to 90%.
Chainalysis Reactor: Enables compliance teams to trace on-chain source of funds and visualize fund flows when EDD requires deeper investigation. Reactor’s analysis has been validated under the Daubert standard in U.S. courts—a structural advantage unmatched by other blockchain analytics providers.
Chainalysis VASP Risking: Assesses the compliance posture and risk exposure of counterparty crypto platforms, supporting enhanced due diligence on VASP relationships.
Chainalysis Academy: Has certified over 50,000 professionals in blockchain analytics and crypto compliance, helping AML teams build the expertise to apply EDD effectively in digital assets.
Frequently asked questions about enhanced due diligence
Q: What is enhanced due diligence (EDD)?
A: Enhanced due diligence (EDD) is the deeper level of customer scrutiny that regulated institutions apply to high-risk customers and relationships. It goes beyond standard customer due diligence to verify source of funds and source of wealth, establish beneficial ownership, screen for politically exposed persons and adverse media, and apply intensified ongoing monitoring to manage money laundering and financial crime risk.
Q: When is enhanced due diligence required?
A: Enhanced due diligence is required whenever a customer or transaction presents higher risk—including politically exposed persons (PEPs), customers in high-risk jurisdictions, complex or opaque ownership structures, unusually large transactions, and counterparties exposed to sanctions or illicit activity. Under a risk-based approach, institutions reserve EDD for these elevated-risk relationships.
Q: What is the difference between CDD and EDD?
A: Customer due diligence (CDD) is the standard process applied to most customers to verify identity and assess baseline risk. Enhanced due diligence (EDD) is the elevated process applied to high-risk customers, adding source-of-funds and source-of-wealth verification, beneficial ownership mapping, PEP and adverse media screening, and intensified ongoing monitoring.
Q: How does enhanced due diligence work in cryptocurrency?
A: In crypto, enhanced due diligence adds on-chain analysis to traditional checks. Compliance teams use blockchain analytics to screen wallet addresses for exposure to sanctioned entities and illicit activity, trace on-chain source of funds across chains, assess counterparty VASP risk, and monitor high-risk customers continuously for emerging red flags.
Q: What documents are required for enhanced due diligence?
A: EDD typically requires documentation to verify source of funds and source of wealth (such as financial statements and transaction histories), beneficial ownership and corporate structure records, identity verification for ultimate beneficial owners, and the results of PEP, sanctions, and adverse media screening. In crypto, this is supplemented by on-chain evidence of wallet exposure and fund flows.
Chainalysis enables enhanced customer due diligence by giving compliance teams on-chain evidence to verify a high-risk customer’s source of funds, screen wallet exposure against sanctioned and illicit entities, and continuously monitor those relationships across 1,000+ assets and protocols.