Higher-review workflows

Enhanced customer due diligence workflows

Enhanced CDD involves additional, risk-targeted measures. It is not a universal document list, and the controls used should be proportionate, effective and appropriate to the risk and circumstances.

Last reviewed: · Editorial owner: Onboard Australia

General editorial information. Onboard is a domain portfolio and does not provide AML/CTF software or advice.

01

When additional controls matter

AUSTRAC identifies specific circumstances in which enhanced CDD applies, including high customer ML/TF risk and other defined situations. This guide does not reproduce a definitive trigger list; teams should use the current official guidance and their policies.

02

Target the identified risk

Additional information or verification should respond to the reason for enhanced review. Complex ownership, a change in risk, unusual activity or a relevant PEP context can require different investigation and evidence.

03

Review and approval workflow

Technology may support case assignment, evidence requests, screening results, internal notes, approvals and an audit trail. It should also make unresolved issues visible and prevent a superficial “complete” status.

  • Reason for enhanced review
  • Additional information requested
  • Verification and screening outcomes
  • Reviewer and approval history
  • Decision, controls and next-review status
04

Ongoing and repeatable controls

Enhanced measures may be relevant during initial CDD, ongoing CDD or both. Workflow configuration should support review over time where the risk and the reporting entity’s obligations require it.

Illustrative workflow

A controlled path, not a compliance template.

Illustrative workflow only — not a compliance template. The required process depends on the reporting entity, designated service, customer and risk.

01

Record the reason

Identify the circumstance and customer risk driving enhanced review.

02

Select targeted measures

Apply controls that address the specific risk rather than a generic bundle.

03

Investigate

Collect, verify and assess the additional information needed.

04

Approve or escalate

Route the case under the reporting entity’s policies and responsibilities.

05

Set the next review

Preserve evidence and any ongoing control or monitoring decision.

Questions

Important distinctions.

Primary sources

Regulatory statements are linked to current AUSTRAC guidance. Provider facts on the market page link to each provider’s official website.