Initial customer due diligence

Customer due diligence and client onboarding

AUSTRAC describes CDD as understanding customers before providing designated services and throughout the business relationship, using identification, verification and monitoring.

Last reviewed: · Editorial owner: Onboard Australia

General editorial information. Onboard is a domain portfolio and does not provide AML/CTF software or advice.

01

What initial CDD is for

Initial CDD is concerned with establishing the customer and specified related persons, understanding the relationship or transaction, identifying customer ML/TF risk and collecting and verifying information appropriate to that risk.

02

Customer and relationship information

The path depends on the customer type. Individuals, companies, trusts and other arrangements can require different information, including representatives and beneficial owners where applicable.

  • Customer identity
  • People acting for or connected to the customer
  • Authority to act
  • Purpose and nature of the relationship
  • Customer-risk information
03

Evidence and decisions

An onboarding system can collect information, connect to verification services and record review outcomes. The reporting entity still needs policies defining what it collects and verifies, when it escalates and how it establishes required matters.

04

CDD continues after onboarding

Initial CDD is part of a wider lifecycle. Ongoing monitoring, updated information and enhanced measures may become relevant according to the applicable obligations and customer risk.

Illustrative workflow

A controlled path, not a compliance template.

Illustrative workflow only — not a compliance template. The required process depends on the reporting entity, designated service, customer and risk.

01

Collect

Capture customer and relationship information appropriate to the customer type.

02

Assess

Identify the customer’s ML/TF risk under the reporting entity’s approach.

03

Verify

Use reliable and independent data appropriate to the circumstances and risk.

04

Resolve

Investigate mismatches, exceptions and higher-review cases.

05

Record

Keep the information and reasoning needed to evidence the decision.

Questions

Important distinctions.

Primary sources

Regulatory statements are linked to current AUSTRAC guidance. Provider facts on the market page link to each provider’s official website.