Enhanced Due Diligence (EDD) is one of the most important — and most misunderstood — concepts in compliance. Every business that deals with high-risk clients, large cross-border transactions, or politically connected individuals needs to understand not just what EDD is, but precisely when it is required and what it involves. Getting this wrong exposes a business to serious regulatory consequences, financial liability, and reputational damage.
This guide provides a comprehensive explanation of Enhanced Due Diligence — what it is, how it differs from standard Customer Due Diligence, when it is triggered, what it involves, and how it applies to South African businesses operating under FICA.
What is Enhanced Due Diligence (EDD)?
Enhanced Due Diligence (EDD) refers to a set of in-depth verification and risk assessment processes that are applied to customers or transactions that present a higher-than-normal risk of financial crime. Whereas standard due diligence confirms who a customer is, EDD goes further — establishing the source of their funds and wealth, scrutinising their business activities, and applying a higher level of ongoing scrutiny to their transactions.
EDD forms a critical part of the Anti-Money Laundering and Countering the Financing of Terrorism (AML/CFT) obligations that apply to Accountable Institutions under South African law. It is designed to ensure that businesses are not unwittingly used to facilitate money laundering, corruption, the financing of terrorism, or other financial crimes — particularly in circumstances where the standard verification process is insufficient to adequately assess the risk.
What is the Difference Between EDD and Customer Due Diligence (CDD)?
To understand EDD, it is first necessary to understand how it relates to Customer Due Diligence (CDD) — the broader framework of identity verification and risk assessment within which EDD operates.
CDD refers to the range of due diligence checks that businesses conduct on their customers to verify identity, validate information, and assess risk. In South Africa, the term CDD is often used interchangeably with Know Your Customer (KYC), which refers to the specific procedures and mechanisms used to verify customer identities before conducting business. For a comprehensive explanation of both concepts, refer to our detailed guides: What is Customer Due Diligence? and What is KYC? Know Your Customer Explained for South African Businesses.
Within a risk-based compliance framework, due diligence operates across three tiers. Simplified Customer Due Diligence (SCDD) is applied to low-risk customers where the threat of money laundering is demonstrably minimal. Standard CDD is applied to the majority of ordinary customers during the normal onboarding process. Enhanced Due Diligence is applied in specific circumstances where the risk level is assessed to be higher than standard — requiring deeper investigation, additional information, and more rigorous ongoing monitoring.
EDD is, therefore, an extension of CDD — not a replacement for it. It builds upon the foundational identity verification and risk checks of standard CDD and adds a further layer of scrutiny that is proportionate to the risk at hand.
When is Enhanced Due Diligence Required?
The question of when EDD is required is one of the most commonly asked in compliance — and one of the most important to answer correctly. Under South Africa's Risk-Based Approach (RBA), the obligation to apply EDD arises when a customer, business relationship, or transaction presents risk indicators that elevate the potential for financial crime beyond the standard threshold.
The following circumstances typically trigger an EDD requirement:
- The customer is identified as a Politically Exposed Person (PEP) — specifically, a Domestic Politically Exposed Person (DPEP) or a Foreign Politically Exposed Person (FPEP), or a close associate or immediate family member of either. Under FICA, PEPs are legally required to be subjected to EDD procedures given their heightened exposure to corruption risk. For a detailed explanation of PEP categories and obligations, refer to our guide: What is a Politically Exposed Person (PEP)?
- The customer or transaction has connections to a high-risk country or jurisdiction — that is, a country identified as having significant deficiencies in its AML/CFT framework, including current or recently-listed FATF greylisted or blacklisted jurisdictions
- The transaction is unusually large, complex, or structured in a way that appears designed to obscure its purpose — such as appearing to be unnecessarily convoluted or economically irrational
- The customer's beneficial ownership structure is opaque or complex, making it difficult to establish with confidence who the Ultimate Beneficial Owner (UBO) actually is
- The customer operates in a high-risk industry or business sector, such as cryptocurrency, gambling, foreign exchange, or money or value transfer services
- The transaction is a large cross-border transfer involving parties in multiple jurisdictions
- The customer has been identified as having adverse media coverage, a law enforcement flag, or an association with financial crime
- The customer is a high-net-worth individual associated with a private wealth management, investment, or private banking relationship
- Ongoing monitoring of an existing customer reveals changes in transaction behaviour or other indicators that suggest an increase in risk
It is important to note that the identification of any of the above risk indicators does not automatically imply wrongdoing on the part of the customer. Rather, it triggers the obligation to apply a higher level of scrutiny — the purpose of which is to satisfy the business that the relationship and its associated transactions are legitimate.
What Does an Enhanced Due Diligence Check Involve?
Although the exact scope of an EDD check will vary depending on the specific risk context, a comprehensive EDD process will typically build upon standard CDD by incorporating the following additional checks and procedures:
- Verification of the source of funds — establishing where the money involved in the transaction originates from and confirming that it is derived from a legitimate source.
- Verification of the source of wealth — establishing how the individual has accumulated their overall financial position, particularly relevant for high-net-worth individuals and PEPs where the scale of wealth requires explanation.
- Screening against PEP lists, sanctions lists, and adverse media — confirming that the customer does not appear on any regulatory watchlists, sanction registers, or in any adverse media coverage that would indicate a financial crime risk. For a detailed explanation of these checks, refer to our guide: What is AML Screening? PEP, Sanctions & Adverse Media Explained.
- Identification and verification of the Ultimate Beneficial Owner (UBO) — particularly important where the customer is a legal entity such as a company or trust, and where ownership structures may be complex.
- Senior management approval — in many cases, establishing or continuing a high-risk business relationship requires the explicit approval of senior management within the Accountable Institution.
- Enhanced ongoing monitoring — high-risk customers are subject to more frequent and more intensive transaction monitoring throughout the life of the business relationship, with any unusual activity triggering immediate review.
- Periodic EDD reviews — for long-term high-risk relationships, EDD is not a once-off exercise. Accountable Institutions are required to conduct periodic reviews — typically annual — to ensure that the risk assessment remains current and accurate.
EDD Red Flags: What to Look For
EDD may surface information that constitutes a red flag — an indicator that warrants heightened caution or further investigation before business proceeds.
A customer being identified as a PEP does not, in itself, constitute evidence of wrongdoing. However, it does obligate the business to apply EDD procedures and maintain a higher level of scrutiny. Should EDD reveal that the PEP's financial transactions cannot be adequately explained by their declared source of wealth or funds, that constitutes a meaningful red flag.
The discovery that a customer or entity appears on a sanctions list is a serious matter. In many cases, conducting business with a sanctioned individual or entity is unlawful, and proceeding without resolving the sanctions flag carries significant legal risk.
The existence of significant adverse media — while not constituting legal proof of wrongdoing — is an important indicator that warrants consideration. Adverse media may surface allegations of corruption, fraud, or association with financial crime that have not yet resulted in formal sanction, but that nonetheless represent a reputational and risk management concern.
Suspicious economic or transactional activity — such as transactions that appear to serve no clear legitimate commercial purpose, are structured in a way that suggests an attempt to circumvent reporting thresholds, or involve unusual counterparties or destinations — is one of the most significant EDD red flags and may trigger a reporting obligation to the Financial Intelligence Centre (FIC).
EDD in South Africa: FICA, the RBA, and DPEP and FPEP Obligations
In South Africa, Enhanced Due Diligence obligations are governed by the Financial Intelligence Centre Amendment Act (FICA), administered by the Financial Intelligence Centre (FIC). FICA requires Accountable Institutions to apply EDD in specific circumstances as part of their broader compliance obligations. For a full explanation of which businesses qualify as Accountable Institutions and what obligations that designation carries, refer to our guide: What is an Accountable Institution? FICA Obligations Unpacked.
South Africa applies a Risk-Based Approach (RBA) to its AML/CFT framework, which means that the precise scope and frequency of EDD obligations will vary depending on the risk profile of each Accountable Institution and its customer base. Each AI is required to develop, implement, and maintain a Risk Management and Compliance Programme (RMCP) that defines how it will identify high-risk clients and apply appropriate due diligence measures — including EDD.
A significant terminology update introduced by the December 2022 FICA amendments is worth noting for accuracy. What were previously referred to as Domestic Prominent Influential Persons (DPIPs) and Foreign Prominent Public Officials (FPPOs) are now correctly termed Domestic Politically Exposed Persons (DPEPs) and Foreign Politically Exposed Persons (FPEPs). Accountable Institutions are legally required to identify whether a client, related party, authorised person, or UBO qualifies as a DPEP or FPEP and, if so, to apply the required EDD measures accordingly.
Accountable Institutions are additionally required to report any suspicious transactions to the FIC, including any cash transaction exceeding R49,999 — which triggers a mandatory Cash Threshold Report (CTR).
South Africa was removed from the FATF greylist on 24 October 2025 following the completion of all 22 remediation action items, with the next FATF Mutual Evaluation expected to commence in the first half of 2026. The compliance expectations for EDD and AML/CFT obligations therefore remain under close scrutiny.
Where is EDD Applied? Industry Examples
EDD protocols are applied across a wide range of industries and business contexts. Although the specific checks required will vary, several sectors are particularly prominent in their reliance on EDD.
In the real estate sector, the high-value nature of property transactions makes them attractive vehicles for money laundering. EDD is used to verify the identities of all parties to a transaction, establish the source of funds, and confirm the legitimacy of the deal structure. South African estate agents are designated as Accountable Institutions under FICA and are legally required to conduct EDD where the risk profile of a transaction or client warrants it.
In wealth management and private banking, the significant sums involved and the frequent involvement of PEPs, high-net-worth individuals, and complex corporate structures mean that EDD is a standard feature of the client relationship — not an exception to it.
In the supplier and vendor context, EDD provides a powerful tool for protecting businesses against fraud and ensuring the integrity of supply chain partners. Before committing to a significant business relationship, EDD checks on a prospective partner can reveal red flags — such as a recently incorporated company, a sanctioned director, or adverse media — that would otherwise go undetected.
Enhanced Due Diligence Solutions for South African Businesses
As South Africa's leading provider of world-class EDD, KYC, AML screening, and digital onboarding solutions, ThisIsMe equips businesses with the full suite of tools needed to conduct comprehensive enhanced due diligence — efficiently, accurately, and in full compliance with FICA. From identity verification and biometric liveness detection to PEP and sanctions screening, adverse media checks, and ongoing customer monitoring, ThisIsMe provides everything an Accountable Institution needs to meet its EDD obligations with confidence. To experience our full suite of advanced due diligence services and find out how we can serve your business, contact our team here.
