By
August 24, 2026
What Is Enhanced Due Diligence (EDD) for a UK Company?
Enhanced Due Diligence (EDD) is a higher level of customer due diligence carried out when a UK company, its owners, its transactions or a business relationship presents a higher risk of money laundering or terrorist financing.
For a UK limited company, EDD may arise when opening a business bank account, payment account or other regulated financial service, or later if the provider identifies circumstances requiring additional checks.
EDD goes beyond standard KYC. It can involve more detailed identity checks, ownership verification, source-of-funds evidence, source-of-wealth information and closer monitoring of transactions.
Standard Customer Due Diligence (CDD) is used to identify and verify customers and understand the purpose and intended nature of a business relationship.
Enhanced Due Diligence involves taking additional measures where the risk is higher.
Under the UK's Money Laundering Regulations, regulated businesses must apply enhanced customer due diligence and enhanced ongoing monitoring in specified higher-risk situations. UK government guidance on money laundering responsibilities
KYC and EDD are related, but they are not the same.
KYC (Know Your Customer) generally involves identifying and verifying the customer and relevant individuals.
For a UK company, this may include:
EDD goes further when additional risk factors are identified.
The provider may require more detailed evidence and conduct additional checks before approving or continuing the relationship.
EDD can be required in circumstances identified under the Money Laundering Regulations or where a regulated provider assesses the relationship as presenting a higher risk.
Factors that may lead to additional scrutiny can include:
Not every company with one of these characteristics will automatically be rejected or treated identically. EDD is generally part of a risk-based approach.
No.
A UK limited company can legally have directors who live outside the UK.
Having an overseas director does not automatically mean the company requires enhanced due diligence.
However, geographic risk is one factor a provider can consider when assessing the overall relationship.
The provider may consider the director's country of residence together with factors such as the company's ownership, business activities, customers, suppliers and expected transactions.
The exact process varies depending on the provider and the reason EDD is required.
A UK company may be asked to provide additional information about:
The provider may also carry out additional independent checks.
Depending on the circumstances, additional documents could include:
There is no universal EDD document checklist because the evidence required depends on the particular risks identified.
Source of funds explains where particular money involved in a transaction or business relationship originated.
For example:
Customer contract → Invoice → Customer payment → UK company account
or:
Director's savings → Director funding → UK company account
A provider may request documents establishing this financial trail.
Simply showing which bank account the money came from may not always establish its underlying source.
Source of wealth explains how an individual accumulated their overall wealth.
For example, a beneficial owner's wealth might have been generated through:
In relevant higher-risk situations, a provider may require evidence supporting the source of wealth as part of enhanced due diligence.
A Politically Exposed Person (PEP) is someone entrusted with a prominent public function, with the relevant rules also covering certain family members and known close associates.
PEP relationships can require enhanced measures because of the potential risks associated with corruption and misuse of public office.
A person being classified as a PEP does not mean they have committed a crime or are suspected of wrongdoing.
International business does not automatically mean EDD is required.
However, providers may consider geographic exposure when assessing risk.
A UK company might be asked about:
For example:
UK company → US customers → EUR suppliers → Asian manufacturer
may require a more detailed explanation than a company operating solely within one domestic market, depending on the circumstances.
UK AML rules contain specific requirements relating to higher-risk jurisdictions, while regulated businesses also conduct broader geographic risk assessments.
The relevant lists and requirements can change, so businesses should use current official guidance rather than relying on an old list of countries.
Where higher-risk geographic exposure exists, additional due diligence may be required.
A large transaction does not automatically mean EDD is required.
However, transaction size can form part of a provider's risk assessment, particularly if the transaction is:
For example, if a newly incorporated company expecting £20,000 in monthly turnover suddenly receives £500,000, the provider may request further information about the transaction.
EDD is not necessarily limited to account opening.
Where enhanced measures are required, a provider may also conduct enhanced ongoing monitoring.
This could involve closer review of:
The aim is to ensure that activity remains consistent with the provider's understanding of the customer and its risk profile.
No.
Being subject to EDD does not automatically mean that an application will be declined.
It means the provider requires additional information or checks before it can decide whether to establish or continue the relationship.
Possible outcomes include:
EDD completed → Account approved
Additional information requested → Further review → Account approved
or
Provider cannot satisfy its requirements → Application declined
The final decision depends on the circumstances and the provider's legal obligations, eligibility requirements and risk appetite.
There is no standard timeframe.
EDD will generally take longer than straightforward automated KYC because additional information may need to be collected and reviewed.
Delays can occur when:
Providing complete information promptly can reduce avoidable delays.
Yes.
A provider may identify new risk factors during an existing business relationship.
For example, additional checks could arise after:
KYC and AML checks therefore do not necessarily end once a business account has been approved.
If your company is asked for enhanced due diligence, organise your information before submitting it.
Useful documentation may include:
Most importantly, make sure the information is accurate, consistent and supported by genuine documents.
The provider may not always give a detailed explanation.
Additional due diligence can result from the provider's risk assessment, legal obligations or a combination of factors.
Being asked for more information does not by itself indicate that the company has done anything wrong.
EDD means Enhanced Due Diligence. It involves additional verification and monitoring where a business relationship presents higher money-laundering or terrorist-financing risk.
No. Standard KYC establishes and verifies information about the customer. EDD involves additional measures in higher-risk circumstances.
No. Overseas residency can be relevant to geographic risk, but it does not automatically mean enhanced due diligence is required.
No. EDD is a risk-management and regulatory process and does not itself mean that a company or its owners are suspected of criminal activity.
Yes. Source-of-wealth information can be required as part of enhanced due diligence in relevant circumstances.
Yes. Providers conduct ongoing monitoring and may perform additional due diligence when the company's circumstances or risk profile changes.
Enhanced Due Diligence (EDD) is an additional level of KYC and AML checking applied when a UK company or business relationship presents higher financial-crime risks.
It can involve more detailed checks covering:
Ownership → Directors → Beneficial owners → Business activities → Countries → Transactions → Source of funds → Source of wealth
EDD does not automatically mean a UK company will be rejected for a business account. It means the provider needs additional information or verification before it can satisfy its compliance requirements and make a decision.
UK companies can make the process easier by maintaining a clear ownership structure, accurate company information, genuine supporting documents and a transparent financial trail for significant funds and transactions.
