Due Diligence Consulting & Strategy Services

Client due diligence is the process of understanding who a customer is, why they are using a product or service, and the level of financial crime risk they present. It typically includes identity verification, beneficial ownership review, risk classification, sanctions and watchlist screening, documentation, and ongoing monitoring. A risk-based program applies deeper review where customer, product, transaction, or geographic risks warrant it.

Responsibility ultimately rests with the organization and its designated compliance leadership, often including the BSA officer, chief compliance officer, or equivalent accountable executive. Front-line onboarding teams, operations, and technology functions may perform parts of the process, but leadership must establish policies, oversight, escalation paths, training, and quality assurance. Boards and senior management should understand and oversee material customer-risk decisions.

When a company performs due diligence, it gathers and evaluates information before entering or continuing a business relationship. In financial services, this means validating customer identity, understanding ownership and expected activity, assessing risk, and screening for sanctions or adverse indicators. The goal is to make informed, documented decisions, meet legal and partner expectations, and identify situations requiring enhanced review or escalation.

KYC, or Know Your Customer, is the broader framework for identifying and understanding customers. Customer due diligence, or CDD, is the standard level of verification, risk assessment, and monitoring performed for most relationships. Enhanced due diligence, or EDD, adds deeper investigation for higher-risk customers, such as more detailed source-of-funds information, ownership review, adverse media research, and more frequent monitoring.

Enhanced due diligence should be applied when a customer relationship presents elevated financial crime, sanctions, fraud, or reputational risk. Common triggers include high-risk geographies, complex ownership structures, politically exposed persons, unusual expected activity, higher-risk products, adverse media, or unresolved screening results. Organizations should define clear EDD triggers, approval requirements, documentation standards, and review frequencies within their risk-based program.

Review frequency should follow the customer’s risk rating and any event-driven triggers. Higher-risk relationships generally require more frequent periodic reviews, while lower-risk customers may be refreshed on a longer cycle. Material changes in ownership, business activity, location, transaction behavior, sanctions exposure, or adverse information should trigger prompt reassessment. Written procedures should define review timing, evidence requirements, and escalation responsibilities.

Yes. A program assessment can identify gaps in customer segmentation, risk-rating logic, identity and ownership verification, screening, case documentation, periodic reviews, governance, and quality assurance. Pillars FinCrime Advisory can help redesign workflows and supporting controls around your actual risk profile and operating capacity. The objective is a program that is both defensible under scrutiny and workable for frontline and operations teams.

A strong engagement begins with understanding your business model, customer base, products, jurisdictions, and risk appetite. It may include a gap assessment, policy and procedure design, customer-risk methodology, KYC/KYB workflow improvements, sanctions controls, technology evaluation, governance recommendations, and implementation support. Deliverables should be clear, prioritized, and usable by compliance, operations, leadership, auditors, and bank partners.