Banking & Financial Services · BSA/AML & Financial Crimes

Customer Due Diligence (CDD) & Enhanced Due Diligence (EDD)

Enhances→Stable

Available Now

Production-ready. Commercial solutions exist and organizations are actively deploying.

Trajectories describe the observable direction of human effort — not a prediction about specific roles, headcount, or individual careers.

What You Do Today

You perform CDD at account opening and periodically thereafter: verifying identity (CIP requirements), assessing risk (customer risk rating based on product, geography, entity type, industry), screening against OFAC/sanctions lists, determining beneficial ownership (for legal entities per the CDD Final Rule), and performing EDD for high-risk customers (PEPs, MSBs, foreign correspondents, cash-intensive businesses). You maintain customer risk profiles and update them based on transactional behavior and KYC refresh cycles.

AI Technologies

ML Dynamic Risk ScoringNLP Document VerificationKnowledge GraphsReal-Time Sanctions Screening

Roles Involved

Who works on this

Chief Compliance OfficerDirector of BSA/AMLBSA/AML AnalystCompliance AnalystData AnalystInternal Auditor

C-SuiteDirectorIndividual ContributorCross-Functional

How It Works

ML customer risk scoring generates dynamic risk ratings that update based on transactional behavior rather than static risk factors alone. A customer risk-rated as medium at account opening whose transaction patterns start resembling high-risk typologies gets flagged for EDD without waiting for the next periodic review. NLP reads and verifies identity documents, beneficial ownership declarations, and corporate formation documents. Knowledge graphs map ownership structures for complex entities to identify ultimate beneficial owners, shell company patterns, and connections to higher-risk entities or geographies. Real-time sanctions screening checks every transaction against OFAC, EU, and UN sanctions lists with fuzzy matching for name variations.

What Changes

Customer risk ratings become dynamic rather than static. Beneficial ownership analysis for complex structures accelerates. Sanctions screening accuracy improves (fewer false positives from name matching). EDD triggers based on actual behavior rather than only risk categorization at onboarding.

What Stays the Same

CDD/EDD decisions require human judgment. The interview with a high-risk customer about their business operations remains human. SAR filing decisions based on CDD/EDD findings remain human. Regulatory expectations for the quality and depth of due diligence remain. Your BSA officer's judgment on risk acceptance remains.

Cross-Industry Concepts

identity verification risk scoring sanctions screening

Evidence & Sources

•FinCEN Suspicious Activity Report filing data
•ACAMS industry survey on investigation timelines

Sources listed are directional references, not formal citations. Verify against primary sources before using in business cases or presentations.

Last reviewed: March 2026

What To Do Next

This section won't tell you what your numbers should be. It will show you how to find them yourself. Every instruction below produces a real, verifiable result in your organization. No benchmarks, no projections — just the steps to build your own evidence.

Establish Your Baseline

Know where you are before you move

Before adopting AI tools for customer due diligence (cdd) & enhanced due diligence (edd), document your current state in bsa/aml & financial crimes.

•

Map your current process: Document how customer due diligence (cdd) & enhanced due diligence (edd) works today — who does what, how long each step takes, and where the bottlenecks are. Use your compliance monitoring platform data to establish a factual baseline.

•

Identify the judgment calls: CDD/EDD decisions require human judgment. The interview with a high-risk customer about their business operations remains human. SAR filing decisions based on CDD/EDD findings remain human. Regulatory expectations for the quality and depth of due diligence remain. Your BSA officer's judgment on risk acceptance remains. — these are the boundaries AI won't cross. Know them before you start.

•

Check your data readiness: AI tools for bsa/aml & financial crimes need clean, accessible data. Check whether your compliance monitoring platform has the historical data, integrations, and quality to support ML Dynamic Risk Scoring tools.

Without a baseline, you can't tell whether AI actually improved customer due diligence (cdd) & enhanced due diligence (edd) or just changed who does it.

Define Your Measures

What to track and how to calculate it

findings per audit cycle

How to calculate

Measure findings per audit cycle for customer due diligence (cdd) & enhanced due diligence (edd) before and after AI adoption. Pull from your compliance monitoring platform.

Why it matters

This is the most direct indicator of whether AI is adding value to bsa/aml & financial crimes.

time to remediate

How to calculate

Track time to remediate using the same methodology you use today. Don't change how you measure just because you changed how you work.

Why it matters

Speed without quality is just faster mistakes. Measure both together.

When to check: Check after 30 days of consistent use, then quarterly.

The commitment: Give new tools at least 30 days before judging. The first week is always awkward.

What NOT to measure: Don't measure AI adoption rate as a goal. Measure outcomes. If the tool helps with customer due diligence (cdd) & enhanced due diligence (edd), people will use it.

Start These Conversations

Who to talk to and what to ask

Chief Compliance Officer

“What's our plan for AI in bsa/aml & financial crimes? Are we piloting, planning, or waiting?”

This tells you whether to experiment quietly or push for formal investment in customer due diligence (cdd) & enhanced due diligence (edd).

your compliance monitoring platform administrator or vendor

“What AI capabilities exist in our current compliance monitoring platform that we're not using? Most platforms are adding AI features faster than teams adopt them.”

The cheapest AI adoption is the features already included in your existing license.

a practitioner in bsa/aml & financial crimes at another organization

“Have you deployed AI for customer due diligence (cdd) & enhanced due diligence (edd)? What worked, what didn't, and what would you do differently?”

Peer experience is more useful than vendor demos. Find someone who has actually done this.