Introduction to Customer Due Diligence (CDD)

Introduction:

One of the important Regulatory Compliance requirements of Anti-Money Laundering Frameworks is the performance of activities which is known as Customer Due Diligence. Before onboarding, the customers are unknown to the company or business because of the non-verification of identification information of the prospective customer. 

Due diligence is a process that is performed, to assess the possible risk of Money Laundering or Terrorist Financing (ML/TF), associated with the prospective customer.

Due diligence enables organizations to avoid onboarding criminals such as money launderers or terrorists and associated people or organizations. Without performing due diligence, the organizations carry the risk of dealing with customers who may be money launderers, terrorists, or other criminals.  

In the past, various organizations, especially banks have been significantly penalized by the regulatory authorities, due to the weak Customer Due Diligence (CDD) and Know Your Customer (KYC) processes implemented by them to onboard the customers, resulting in the occurrence of Money Laundering incidents.

Due to the involvement of higher levels of money laundering and terrorist financing risks in financial institutions, the regulatory authorities of different countries have adopted the Anti Money Laundering and Know Your Customer Frameworks. 

To avoid money laundering and terrorist financing activities, the organizations are required to implement robust due diligence processes, which must be followed before and after the onboarding of the customers.  

The information discussed in this post is not specific to any country and its regulatory requirements, however, the purpose is to discuss the concepts of Customer Due Diligence.     

Table of Contents:

1.    Customer Due Diligence Information

2.    Which Organizations Must Perform Customer Due Diligence

3.    Performing Initial Customer Due Diligence

4.    Risk-Based Approach (RBA)

5.    High-Risk Customers     

6.    Ongoing CDD 

Introduction to Customer Due Diligence CDD

Customer Due Diligence Information: 

Customer Due Diligence (CDD) is the means of obtaining the personal identification number of the prospective customer such as National ID Card number, Passport number, Tax Information, etc. 

In the case of Businesses or Corporates, more information is obtained before onboarding such as business details, constituent documents, Business or Corporate Tax numbers, Registered Business address and website, etc. 

Which Organizations Must Perform Customer Due Diligence:

As per AML/CFT Regulatory Compliance requirements, customer due diligence is one of the important requirements of Anti Money Laundering Regulations worldwide. CDD is performed by Financial Institutions and related entities, such as Money Service Businesses, MSBs, Remittance Businesses, Payment Gateway providers, Insurance companies, real estate agents, etc.  

Financial institutions perform CDD measures to identify and verify prospective customers. CDD process helps in understanding the customer's needs and assessing whether the customer poses any money laundering or terrorist financing risk to the financial institution or not. 

Performing Initial Customer Due Diligence:

During the initial CDD process, the financial institution assesses the background and identity of customers by using data from independent and reliable sources. 

In the initial CDD process, the customer is identified. Identification of customers means that the information is obtained from the customer and verified. 

As part of the identification and verification of the prospective customers, the organizations are required to identify the true beneficial owner (where applicable).

The customer's source of income and purpose of account opening is assessed, which helps in the creation of a Customer Risk Profile (CRP).  

CRP is used later to monitor the activities and transactions of the customers and it serves as a reference point whenever the records of the customers are checked either by the Compliance team or the Regulatory Authorities. 

Risk-Based Approach (RBA):

AML/CFT regulations require the adoption and performance of the Risk-Based Approach (RBA) of CDD. The RBA is a proactive method used to assess and evaluate risks posed by the customers and to ensure that activities are relevant to data acquired from the customer. 

RBA requires financial institutions to perform due diligence according to the risk profile of the customer, which means the higher the risks the higher will be the initial scrutiny of the information of the customer and ongoing monitoring of the activities and transactions.


Other GRC Articles


02 Use of Data Analytics by Compliance Function

 

High-Risk Customers:

High-risk customers are those customers who belong to the high-risk jurisdictions or countries or are politically exposed persons (PEPs).

Some other types of organizations are also classified as high risk depending on the local AML/CFT regulations of the country. 

Some organizations such as Not For Profit organizations and Charitable Institutions are considered high risk because of the increased risk of money laundering and terrorist financing.

High-risk organizations, such as NGOs, NPOs, charitable organizations, casinos, etc. are more prone to money laundering because money launderers use these high-risk category organizations, to park their black or illegal money, and convert it into white. 

Criminals also use these organizations to transfer their illegal money from one location to another or from one person to another.

Think of a Charitable organization, that is run on the donations provided by the people. Criminals or Money Launderers may hide their illegal money by providing donations to the Charitable organization and through collusion, the criminals or money launderers may offer money to the senior management of the Charitable organization, for transfer of such donations to another criminal or use in some specified manner.

     

Read the Article on Introduction to Compliance Risk Assessment


Ongoing CDD:

CDD is also required to be performed on an ongoing basis after onboarding the customers. The Ongoing CDD process helps the financial institutions to know that the transactions and activities of the customers are relevant to the initial information provided by the customers on the basis of which the risk profile was created. 

Ongoing CDD is specifically performed for high-risk customers, because of the increased chances of involvement or use of high-risk customers for money laundering or terrorist financing purposes. 

Compliance functions in order to perform ongoing due diligence of its customers, use data analytics techniques to gather the information of the customers, and use them in a meaningful manner. 

Any significant changes identified in the behavior or transactions of the customers, the Financial Institutions, update the risk profiles of these customers after appropriate investigations and taking necessary responses from the respective customers. 

Check Our Specialized GRC Courses and upgrade your knowledge

Newsletters and eBook

Name

Email *

Message *

Popular GRC Posts

Introduction to Compliance Risk Assessment

What Is Regulatory Compliance

Performing KYC/CDD at Different Stages of Customer Lifecycle

Who Is Your Customer? Know Your Customer (KYC)