Initial and Simplified Customer Due Diligence

Evolving CDD Landscape

Customer due diligence (CDD) has long anchored anti-money laundering efforts, requiring financial institutions to identify and verify clients to curb illicit flows. Initial CDD focuses on upfront assessments when onboarding, while simplified CDD applies lighter scrutiny to low-risk scenarios, such as dealings with regulated entities or public companies. Recent U.S. Treasury actions have thrust these practices into the spotlight, prompting a reevaluation of how firms balance rigor with efficiency.

On February 13, 2026, the Financial Crimes Enforcement Network (FinCEN) issued an order granting exceptive relief from redundant beneficial ownership verifications for legal entity customers at each new account opening. This change, affecting banks, brokers, and mutual funds, responds to industry complaints about duplicative processes that inflated costs without commensurate risk reduction. Institutions now verify owners only at initial onboarding, upon reliability doubts, or per risk-based protocols, potentially trimming operational expenses by streamlining workflows.

The reform arrives amid broader regulatory momentum. In Europe, the Anti-Money Laundering Authority (AMLA) released draft regulatory technical standards in February 2026, clarifying CDD applications across obliged entities to foster proportionality. Australia's 2025 amendments decoupled simplified measures from rigid frameworks, allowing more flexible low-risk assessments starting July 2026. These updates reflect a post-pandemic push for agile compliance, influenced by digital finance growth and geopolitical instabilities that reshape risk profiles.

Impacts ripple across sectors. Smaller banks, previously bogged down by repetitive checks, gain breathing room to focus on high-risk clients like politically exposed persons or crypto firms. Larger institutions report potential savings in the tens of millions annually, redirecting resources to advanced monitoring tools. However, inaction carries steep penalties: FinCEN fines for CDD lapses reached $48.5 million in one 2025 case, underscoring enforcement vigor.

Non-obvious tensions emerge in implementation. While simplified CDD eases burdens for low-risk clients—such as EEA-regulated firms or listed companies—it risks underestimating evolving threats, like shell entities in high-risk jurisdictions added to FATF watchlists in November 2025. Stakeholders debate trade-offs: regulators prioritize efficiency to bolster financial inclusion, but critics warn of diluted safeguards in an era of sophisticated laundering via digital assets. Surprising data from 2025 shows that 30% of CDD failures stemmed from over-reliance on initial checks without ongoing updates, highlighting the need for integrated risk views.