Initial and Simplified Customer Due Diligence

CDD Regulatory Shift

Financial institutions have long grappled with the Customer Due Diligence (CDD) Rule, implemented in 2016 to combat money laundering by requiring identification of beneficial owners of legal entities. The rule mandated verification not just at initial onboarding but for every new account, creating redundant processes that industry groups criticized as burdensome. On February 13, 2026, the U.S. Treasury's Financial Crimes Enforcement Network (FinCEN) issued an order granting exceptive relief, allowing banks, mutual funds, and other covered entities to limit these checks to initial account openings and situations where ownership information's reliability is questioned.

This adjustment stems from broader efforts to modernize the Bank Secrecy Act framework, influenced by the Corporate Transparency Act's beneficial ownership registry. It aims to foster a risk-based approach, where institutions focus resources on high-threat scenarios rather than routine repetitions. Affected parties include over 10,000 U.S. banks and broker-dealers, potentially saving millions in annual compliance expenses. However, smaller institutions without advanced monitoring systems may struggle to implement the required ongoing due diligence, risking gaps in detection.

Concrete stakes are high: deadlines for policy updates are immediate, with no grace period specified in the order. Costs of inaction include penalties from recent cases, like the $150 million fine levied on Deutsche Bank in 2020 for CDD lapses, adjusted for inflation and current scrutiny. Risks extend to reputational damage, as associations with illicit funds can erode investor confidence and trigger shareholder lawsuits. In 2025 alone, global AML fines topped $8 billion, underscoring the financial peril.

Non-obvious angles include the tension between deregulation and security. While the relief aligns with the Trump administration's burden-reduction agenda, critics argue it could embolden criminals exploiting simplified processes. Data from FATF evaluations shows countries with lax ongoing monitoring face higher illicit flow estimates, up to 3% of GDP. Trade-offs pit efficiency against thoroughness: automated tools like AI-driven risk profiling offer solutions but raise privacy concerns and implementation disparities between large and community banks. Surprising pushback comes from within the industry, where some executives fear the change shifts liability onto internal risk assessments, potentially increasing litigation exposure if breaches occur.