Home › Knowledge Hub › Customer Due Diligence (CDD)

Customer Due Diligence (CDD) Explained – Beginner Guide

Customer Due Diligence (CDD) is one of the core pillars of KYC and AML compliance. Every bank, fintech, and financial institution must perform CDD before onboarding and during the customer relationship.

This beginner-friendly guide explains what CDD is, why it matters, the types of due diligence, the steps involved, documentation, how it differs from EDD, and worked examples.

What Is Customer Due Diligence?

Customer Due Diligence (CDD) is the process of collecting and verifying information about a customer to assess their risk level before providing financial services.

CDD is applied to every customer — individuals, corporates, and beneficial owners.

CDD ensures:

• The customer is who they claim to be
• The customer is not involved in financial crime
• The customer does not appear on sanctions lists
• The customer does not present a high AML risk

Why Is CDD Important?

• Prevents identity fraud
• Detects money laundering risks early
• Ensures compliance with global AML laws
• Supports risk-based monitoring
• Protects institutions from penalties

Types of CDD

• SDD – Simplified Due Diligence: For low-risk customers
• CDD – Standard Due Diligence: For normal customers
• EDD – Enhanced Due Diligence: For high-risk customers

CDD Steps

1. Collect customer information (KYC documents)
2. Verify identity (ID, address, photo ID checks)
3. Screen for PEP, sanctions, and adverse media
4. Understand customer purpose & business relationship
5. Identify UBOs (for corporates)
6. Assign a risk rating (low/medium/high)
7. Record-keeping & documentation
8. Ongoing monitoring during the relationship

Documents Needed for CDD

• Government-issued ID
• Address proof
• Selfie / liveness check (fintech/KYC-remote)
• Business registration documents (for corporates)
• UBO identification documents
• Basic SoF (if large first transaction)

CDD vs EDD – What’s the Difference?

When Is CDD Required?

• New customer onboarding
• Periodic review
• Triggered event (change in name, address, business)
• Large or unusual transactions
• When risk level changes

CDD Red Flags

• Customer reluctant to provide documents
• Inconsistent information across documents
• Multiple identities or name variations
• Large unexplained first deposit
• Negative news present
• PEP status detected
• Links to sanctions or high-risk jurisdictions

Simple CDD Examples (Beginner Friendly)

Example 1 – New individual customer

Customer submits passport + utility bill + employment information → CDD completed.

Example 2 – Small business opening account

Business registration + ownership documents + proof of address → CDD completed after beneficial owner identification.

Example 3 – Customer with minor adverse media

Old civil dispute found → risk adjusted slightly → standard CDD with monitoring.

Frequently Asked Questions (FAQ)

Is CDD mandatory?

Yes — CDD is legally required for all regulated institutions.

Is CDD the same as KYC?

No. KYC is identity verification; CDD includes risk assessment and screening.

Does every customer go through CDD?

Yes — all customers undergo basic CDD. High-risk customers undergo EDD.

Do corporates also undergo CDD?

Yes — including UBO verification, business understanding, and ownership assessments.