When a standard check is not enough and Enhanced Due Diligence is required

The difference between screening, CDD and EDD

The three modes of checking differ not in the length of the report but in the question they answer. Screening is a comparison against lists: is the counterparty on sanctions lists, are they recorded as a public official, have they appeared in notable adverse publications. Such a comparison takes minutes, works from a name and several identifiers, and answers only the question of whether there is an obvious blocking record.

Customer Due Diligence, the standard check, answers the question of who this is. It establishes the legal entity, its registration and status, the composition of participants and directors, the declared activity, and the basic corporate history. At this level the picture is usually complete: the company exists, the owners are clear, the activity is plausible, there are no critical records.

Enhanced Due Diligence answers a third question - what exactly cannot be explained. It is engaged when the standard layer leaves a gap that affects the decision: the ownership chain does not reach individuals, a payment goes through a country unconnected with the business, a party holds a public function, or the scale of the transaction is inconsistent with the known activity. An enhanced check does not repeat the standard one with a larger budget - it builds the missing layers: the origin of funds and wealth, the reality of transactions, independent confirmations, the context of adverse information.

The practical meaning is simple: the mode is chosen by the amount of the unexplained, not by the size of the transaction. A large transaction with a transparent European company may be closed by a standard check, while a small payment to a new intermediary in an unfamiliar jurisdiction may require an enhanced one. An error in either direction costs money: excessive depth where there are no risks wastes time; a standard volume where an enhanced one is needed leaves the decision without a basis.

It is important to understand the source of the rules themselves. The risk-based approach and the requirement to apply enhanced measures where risk is elevated are set out in the FATF Recommendations - an international standard for states and regulated organisations, not a direct obligation of any private company. In the European Union these principles have been translated into direct regulation: Regulation (EU) 2024/1624 describes both standard and enhanced due diligence measures for obliged entities. For a private client checking a counterparty for their own decision, these documents are a methodological reference point, not an automatic legal obligation.

Complex ownership and opaque control

The first and most common trigger is a structure that does not resolve down to natural persons. Multi-tier ownership is in itself lawful and common: holdings, joint ventures, family structures and private equity funds are built precisely this way. The question is not the number of tiers, but whether the chain reaches specific individuals and whether this is confirmed by independent records.

A standard check shows the first layer: who is registered as a shareholder of the target company. If the shareholder is another legal entity, the standard scope ends there. An enhanced check discloses each corporate link in the register of its jurisdiction, calculates indirect shares along each path and aggregates them across parallel branches. The FATF international transparency standard proceeds from the premise that behind every legal entity there is a natural person who ultimately owns or controls it, and requires that such person be identified.

A separate layer is control without ownership. A person may hold no share at all, yet determine decisions through a contract, financing, a power of attorney, a veto right or the appointment of a manager. Such an arrangement is not visible in the register of shareholders and is reconstructed from a combination of indicators: who signs the key documents, who finances the activity, whose representatives recur across different companies of the group.

The practical significance for a decision: if the chain does not close, you enter into a contract with a known party but economically deal with an unknown one. This changes the answer to the questions of who actually bears the obligations and whom to approach in a dispute. An enhanced check here is not obliged to produce a name at any cost - it is obliged to show exactly where the chain breaks and for what reason: a closed register, a nominee holder, a trust without disclosure, or the absence of documents held by the party itself.

Opacity that has arisen recently stands apart. A change of shareholders, re-registration in another jurisdiction or the appearance of a new intermediate link shortly before a transaction is not proof of intent, but it is a circumstance that calls for an explanation from the party itself. A refusal to explain a straightforward corporate operation is more informative than the operation itself.

High-risk countries and sanctions exposure

The second trigger is geography. It operates on two different planes, which are often confused. The first is a country with limited disclosure: the register is closed or fee-based, the composition of shareholders is not published, accounts are not filed. The problem here is methodological: the check physically cannot rely on an official source and is forced to work with the party's own documents and indirect indicators.

The second plane is sanctions and regulatory exposure. FATF maintains public lists of jurisdictions under increased monitoring and of jurisdictions to which it calls for enhanced attention measures. The European Union publishes its own sanctions instruments and consolidated resources for checking restrictive measures. These are different mechanisms with different legal consequences, and they must not be conflated: inclusion of a country in the FATF monitoring list does not equal sanctions, and EU sanctions are addressed to specific persons and sectors, not to all companies of a country.

The practical significance depends on who is carrying out the check. For a bank or other obliged entity in the EU, the requirements for enhanced measures when dealing with high-risk third countries are set out directly in regulation. For a private company assessing a supplier, the same indicator means something else: an increased likelihood that a payment will not go through, that the bank will request explanations, or that the relationship will have to be terminated at an inconvenient moment. What needs to be checked is not "the country in general" but the specific connection: where the party is registered, where the money comes from, where the contract is physically performed, who in the chain has a relationship to the restrictions.

Sanctions screening requires separate care. A name match is not an identity match. Identical surnames, different transliterations, exact namesakes and incomplete identifiers produce false matches regularly. Before a match is treated as established, the date of birth, nationality, role and organisation are verified, and only the combination of identifiers supports a conclusion. Checked separately are not only the persons directly listed, but also the structures they own or control - it is precisely this layer that a superficial screening most often misses.

Finally, geography changes over time. Lists are updated, countries exit monitoring and re-enter it, sanctions regimes are extended and eased. A check records the position as at a specific date, and for long-term relationships this means the need for repeated screening rather than a one-off report.

PEP, source of funds and source of wealth

A politically exposed person is an individual entrusted with prominent public functions, along with their close relatives and associates. FATF treats dealings with such persons as higher-risk situations and expects additional measures: establishing the source of funds and the source of wealth, senior management approval of the relationship, and enhanced ongoing monitoring.

The key point that is constantly lost: PEP status is not an accusation and does not indicate unlawful conduct. It is a statistical category of elevated risk associated with the possibility of abuse of office, not a conclusion about a specific individual. Automatically refusing to work with any PEP is not caution but an abandonment of the risk-based approach, and in a number of jurisdictions this practice is directly criticised by regulators as excessive.

Two concepts that must not be confused. Source of funds is the origin of the specific money involved in the transaction: proceeds from the sale of an asset, dividends, a loan, revenue under a contract. Source of wealth is the origin of the entire accumulated capital: how the person came to own what they own in the first place. The first question is confirmed by documents relating to the specific transaction, the second by biography, corporate history and the logic of accumulation over time. An answer to one does not substitute for an answer to the other.

Practical significance: if a public function is identified, the question is not whether to refuse, but whether the money is explainable and whether the transaction is proportionate to the known history. A discrepancy between the scale of the transaction and identifiable sources of income is precisely the circumstance that requires explanation. The explanation may be entirely ordinary: an inheritance, the sale of a business, a long entrepreneurial history. The problem arises not when wealth is large, but when nothing supports it.

A separate layer is close associates. Relatives and business partners of a public figure fall into the same category of heightened attention, and it is most often through them that transactions pass which the PEP does not want to carry out personally. This layer is checked using open and official sources and does not turn into the collection of information about private life without lawful grounds.

An unusual payment or intermediary

The fourth trigger relates not to a party but to the transaction itself. It is activated when the structure of the deal is not explained by its economics: payment goes to a country connected neither to any of the parties nor to the place of performance; an intermediary with no clear function appears in the chain; settlements are split without commercial reason; prepayment is requested to the account of a third party; the currency, route or timing changes at the last moment.

Each of these features has lawful explanations. A company may use a treasury centre in another country, pay through a subsidiary, or work with an agent for objective reasons of market access. Enhanced Due Diligence here therefore begins not with suspicion but with a simple question: what economic function does this element of the structure perform, and is it supported by documents - a contract, an invoice, logistics, correspondence agreeing the terms.

The intermediary deserves separate attention, because it is most often the weak link. Its own history and owners are checked, along with the reality of its activity, whether it has the resources for the stated function, and its connections with other participants in the deal. An intermediary registered recently, with no employees and a mass-registration address, in a transaction of substantial value is not proof of a scheme, but a circumstance that must be explained by the party that brought it in.

The practical significance for the client is direct and financial. An unusual payment structure is the most common reason for a bank to stop a transfer and request supporting documents. Checking the logic of settlements before signing is cheaper than explaining it to the bank after the money has left and become stuck. A separate risk is the inability to recover the funds: if payment has gone to a third party that is not a party to the contract, the legal position in a dispute deteriorates sharply.

Verification of the payment structure is carried out on the basis of documents provided by the party itself and on open information about the participants. Access to banking information on the movement of funds is possible only by lawful means - through the party itself, through the bank within its own procedures, or through a court. No check gives or should give access to third-party accounts.

Adverse events and contradictions

The fifth trigger is negative information: court disputes, publications about conflicts, claims from regulators, complaints from counterparties, traces of past bankruptcies. Working with this layer requires the greatest discipline, because this is where fact and allegation are most easily confused.

The distinction is as follows. A court decision that has entered into force is a confirmed fact with a documentary basis. A claim filed with a court is a confirmed fact of filing, but not confirmation of the circumstances set out in it. A media publication is a fact of publication, not a fact of the event described. A social media post or a review on a platform is an allegation by an unidentified author. All four types of information often look equally convincing in a search and carry entirely different weight.

The method of working with negative information is simple: look for the primary source. If a publication refers to a court decision, the decision itself is located. If it refers to a statement by a regulator, its official communication is located. If no primary source is found and ten websites repeat the same text, this is one publication multiplied by aggregators, not ten independent confirmations. The difference is fundamental: the number of mentions does not substitute for the independence of sources.

A separate category is contradictions within the information about the party itself. The stated turnover does not agree with the financial statements; the stated experience is not confirmed by the corporate history; the website describes manufacturing while the company is registered as a trading company; one set of owners is named in negotiations while the register shows another. A contradiction does not mean deception - it can have dull explanations such as an outdated website or a reorganisation. But every material contradiction requires an answer, and the nature of the answer is informative in itself.

Practical significance: an enhanced check does not compile a list of compromising material but produces a list of circumstances that may affect the decision, with the status of each indicated. The client needs not a set of links but an answer to the question of what among the findings is confirmed by documents, what is an allegation by a party, and what remains unverifiable.

Additional documents and independent confirmations

An enhanced check differs from a standard one not only in the number of questions but also in the requirement for confirmation. The standard level is satisfied by a single official source: a register extract confirms the composition of participants, and that is sufficient. The enhanced level requires that a material conclusion rest on at least two independent sources, or on a document plus an independent observation.

Independence is the key word, and it is often illusory. A register extract and a company presentation restating that extract are one source, not two. A publication and an aggregator that copied it are also one. Genuine independence means that the sources are not connected by origin: an official register and a contract from a third party, financial statements and data from a corporate counterparty, a public procurement record and court material.

Additional documents are requested from the party itself and usually include constitutional documents and the latest amendments, documents on the ownership structure and beneficial owners, financial statements or tax confirmations for an agreed period, documents on the specific transaction, confirmation of the source of funds for large amounts, and licences and permits if the activity requires them. The request is always proportionate: collecting everything "just in case" is bad practice, and when personal data is involved it is also a legal problem.

Handling the documents received is a separate matter. Visual analysis of a file does not confirm authenticity: only the issuing authority or an official register can genuinely verify a document. An analyst may see inconsistencies between fields, odd dates, logical contradictions between documents - and is obliged to describe them as observations, not as a conclusion of forgery. A statement of forgery is a conclusion for an expert and a court, not for an analyst.

Practical significance: an enhanced check often ends not with a finished answer but with a precise list of documents that must be requested from the party in order to close a specific gap. This is not a sign of weak work - on the contrary, it is a result that can be negotiated with: it turns vague concern into a specific demand for disclosure.

Decision: accept, accept with conditions, stop

An enhanced check is pointless if it ends with an indefinite "there are risks". A useful result comes down to three decision options, each of which rests on specific grounds.

Accept - where the circumstances that prompted the enhanced check have been explained and confirmed. The complex structure has been disclosed down to individuals, the origin of funds is documented, the intermediary has an understandable function, negative information has been checked and turned out to be either unconfirmed or immaterial for this transaction. Importantly, a decision to accept is also a result of the work: it records the grounds on which the risk was found acceptable, and protects the decision if questions arise later.

Accept with conditions - the most frequent and the most practical outcome. The relationship is possible, but its construction changes: disclosure of beneficial owners is secured by a separate representation in the contract, payment is made only to the party's own account, advance payment is limited, security is introduced, warranties and a right of termination on specified events are added, and a frequency for repeat checks is set. It is this outcome that distinguishes a risk-based approach from a mechanical one: the transaction is not cancelled but restructured around a known risk.

Stop - where the gap cannot be closed and is critical: the party refuses to explain the structure or the origin of funds, key information is supported by nothing other than its own word, or sanctions exposure has been found that makes the transaction legally impossible. A separate strong signal is a refusal to answer clear questions: it is more informative than any finding, because it shows how the party will behave if problems arise.

Practical significance for the reader: do not demand a verdict of "reliable or not" from a check. Demand a list of circumstances with their status, an assessment of what could not be confirmed, and options for conditions under which the risk becomes manageable. The decision remains yours, but it should be taken on clear grounds rather than on a general impression.

What a professional process looks like

The procedure is the same for a simple and for a complex situation - what changes is the set of layers included and the depth of each.

1. 01

   Identifying the decision and the applicable law

   What decision the check is needed for, the status of the party carrying it out and which jurisdictions are involved. This determines which requirements are mandatory and which serve as a methodological reference point.

2. 02

   Standard layer

   Registration, status, participants and officers, declared activity, basic corporate history from official sources.

3. 03

   Assessment of triggers

   We check whether at least one Enhanced Due Diligence trigger has been activated and record exactly what gap it creates for the specific decision.

4. 04

   Adding further layers

   Each activated trigger brings in its own layer: structure, geography, PEP and source of funds, the design of the transaction, adverse information.

5. 05

   Independent confirmation

   Every material conclusion is verified against a second source unrelated in origin to the first. If there is no second source, the status of the conclusion is downgraded.

6. 06

   Requesting documents from the party

   A proportionate list of documents is drawn up to close the remaining gaps, stating which question each document closes.

7. 07

   Weighing

   Each circumstance is assigned a status: confirmed fact, reasoned conclusion, working hypothesis, or not capable of confirmation.

8. 08

   Decision options

   Three options are set out - proceed, proceed on conditions, or stop - with the grounds and a list of what remains unknown.

The procedure does not change with the size of the transaction. What changes is the set of layers included: if no triggers are activated, the work ends at the standard layer, and that is also a result.

What the client receives as a result

The material must be usable for the decision and for a conversation with a bank, a lawyer or a partner.

1. 01

   List of activated triggers

   Which circumstances required Enhanced Due Diligence and what gap each of them created.

2. 02

   Ownership and control structure

   The chain down to natural persons where it is disclosed, stating the source and level of confirmation for each link.

3. 03

   Sanctions and PEP layer

   The result of resolving matches by identifiers: what has been excluded, what has been confirmed, what remains unresolved.

4. 04

   Source of funds and source of wealth

   What is confirmed by documents for the specific transaction and what is known about the history of capital accumulation.

5. 05

   Design of the transaction

   The economic function of each participant in the payment chain and what part of it is confirmed by documents.

6. 06

   Adverse information with status

   Judgments, claims, publications and allegations are separated, with the primary source given for each item.

7. 07

   List of documents to request

   A specific list of what needs to be obtained from the party in order to close the remaining gaps.

8. 08

   Decision options and limitations

   Proceed, proceed on conditions or stop - with the grounds, and a direct list of what cannot be verified.

Limitations and the lawfulness of methods

Enhanced Due Diligence is carried out by lawful methods: official registers, court and regulatory materials, financial statements, publications, documents provided by the party itself, and information from open sources. Access to closed state systems, banking secrecy and correspondence is not used and is not offered.

A check does not establish guilt and does not characterise conduct as an offence - that is a matter for the courts and the competent authorities. Nor does it confirm the authenticity of documents in place of the issuing body, or replace a legal or tax opinion under the applicable law.

A separate limit concerns personal data. The volume of information about individuals is limited by the purpose of the check and by the applicable law; in the European Union, processing requires a lawful basis, and this limitation applies regardless of whether the information is technically available.

• does not guarantee approval by a bank, a regulator or a partner
• does not confirm the authenticity of a document in place of the issuer
• does not establish guilt and does not replace assessment by a court
• does not provide access to closed databases or banking information
• reflects the state of the sources as at the agreed date
• does not turn the absence of adverse findings into a guarantee of reliability

What to prepare for the initial assessment

No documents or personal data are needed at the first step - an understanding of the situation is enough.

• what decision you are taking: a delivery, an investment, a partnership, a hire, financing
• the name and country of registration of the party, if known
• what exactly gave you pause: the structure, the country, the payment, an intermediary, a publication or a refusal to answer
• which countries are involved in the transaction and where the contract is physically performed
• what information the party has already provided and what it has refused to disclose
• the deadline by which the decision must be made
• who will use the result: you, a lawyer, a bank or the board of directors

There is no need to send bank statements, passport details, contracts or correspondence at the first step. The set of materials is determined after the scope of work has been agreed.

Frequently asked questions

• 01

  Is an ordinary company required to carry out Enhanced Due Diligence?

  A direct obligation to apply enhanced measures is imposed on obliged entities - banks, payment institutions, professional intermediaries and other categories listed in the applicable regulation. For an ordinary company checking a counterparty for its own decision, these rules are a methodological reference point, not law. But the commercial logic is the same: if a gap affects the decision, it is better closed before signing than after.

• 02

  Should a counterparty be rejected if a trigger is met?

• 03

  What is the difference between source of funds and source of wealth?

• 04

  What can be done if the register in the relevant country is closed?

• 05

  Does PEP status mean that a person is implicated in something?

• 06

  How long does an enhanced check take?

• 07

  Can a check be treated as a guarantee?

• 08

  What to do if a party refuses to answer questions?

The depth of a check is determined by the gaps, not by the value of the transaction

Enhanced Due Diligence is not required for everyone and not always. It is triggered when the usual information is not sufficient for a specific decision: the structure does not lead through to individuals, money follows an unusual route, a participant holds a public function, or the information found is contradictory. Each such indicator is a reason to look further, not a reason to refuse.

Good Enhanced Due Diligence ends not with a label of "reliable" or "unreliable", but with three clear options with their grounds and an honest list of what could not be confirmed. It is that list which distinguishes work you can rely on from a document that merely creates a sense of security.

Официальные источники

• FATFFATF Recommendations, February 2025 editionпроверено 06.08.2026

  International standard: risk-based approach, standard and enhanced due diligence measures, handling of politically exposed persons and high-risk jurisdictions.

• EUR-LexRegulation (EU) 2024/1624проверено 06.08.2026

  EU regulation: client due diligence obligations, the content of enhanced measures and the categories of higher risk for obliged entities.

• FATFBeneficial ownershipпроверено 06.08.2026

  Materials on beneficial ownership transparency: why the ultimate natural person behind a legal entity is identified.

• European CommissionOverview of sanctions and related resourcesпроверено 06.08.2026

  Official EU resources on restrictive measures: consolidated lists and guidance on their application.

• European e-Justice PortalBusiness registers - search for a company in the EUпроверено 06.08.2026

  Official access to the corporate registers of EU countries and a description of the scope of disclosure in each jurisdiction.

Связанные материалы

Case

A hidden beneficial owner in an offshore structure

Identifying the person who actually controls a multi-layered structure before a transaction

• 01 /ServiceDue Diligence and counterparty checks→
• 02 /ArticleHow to check a counterparty before a deal→
• 03 /ArticleSigns of a nominee owner in a company structure→
• 04 /ArticleWhat a full Due Diligence on a company should cover→
• 05 /ArticleHow a company's actual beneficial owner is established→