Enhanced due diligence is not reserved for film-style suspect characters. The triggers are often subtle, and many firms only spot them in hindsight when a supervisor reviews the file. The list below distils ten of the most reliable EDD escalation triggers seen in UK accountancy practice, mapped to the relevant MLR 2017 hooks where applicable.
1. Beneficial ownership obscured behind nominees or layered structures
A UK Ltd owned by a BVI company owned by a Panamanian foundation, with a corporate director and a nominee shareholder, is not automatically suspicious - but it is structurally opaque, and that triggers EDD under any reasonable risk assessment. The firm must understand who actually controls the entity, not just who is named on the register.
2. Registered office at a mass mail-forwarding address
Companies House data shows the same registered office serving thousands of small companies. Sometimes this is a legitimate accountancy or company-formation provider; sometimes it is a shell-company factory. Where the address pattern is suspicious and the client cannot demonstrate a real trading presence elsewhere, escalate.
3. PEP, family member or known close associate
This one is non-discretionary. Regulation 35 of MLR 2017 mandates EDD where the client or beneficial owner is a PEP, family member, or known close associate - domestic or foreign. PEP status also requires senior management approval before establishing or continuing the relationship.
4. High-risk third country exposure
Where the client, beneficial owner, source of funds, or counterparty is established in a country listed under Regulation 33 (the UK's list of high-risk third countries, which broadly mirrors the FATF call-for-action and increased-monitoring lists), EDD is mandatory. Cross-reference the latest list at onboarding - it is updated periodically and firms relying on a 2022 snapshot will miss recent additions.
5. Cash-intensive business with patchy bookkeeping
Hospitality, car washes, nail salons, parking operators - sectors where cash receipts dominate and bookkeeping is often informal. Not inherently criminal, but inherently higher risk of integration of illicit funds, and supervisor guidance flags them. EDD here typically means closer scrutiny of declared turnover against capacity, and a source-of-funds enquiry on capital injections.
6. Mismatch between declared activity and observable financials
The client says they are a small marketing consultancy with two clients; the bank feed shows 80 inbound payments a month from unrelated parties. Or the company files dormant accounts year after year while director loan accounts swell. Any material mismatch between narrative and numbers warrants EDD scrutiny - often this is the strongest single indicator of an underlying issue.
7. Reluctance or refusal to provide standard CDD documentation
A prospective client who is happy to sign the engagement letter but offers excuse after excuse for not providing ID, proof of address, or beneficial-ownership documentation is signalling something. The firm is entitled - and arguably obliged - to decline the engagement where CDD cannot be completed. Where the client eventually provides documents under pressure, the relationship has already moved into EDD territory.
8. Unusual urgency or unusual fee tolerance
Clients who demand same-day onboarding for a complex international structure, or who accept inflated fees without negotiation, are anomalous. Legitimate clients shop around and ask reasonable questions. Excessive urgency, especially around a single transaction, is a classic indicator of an attempt to push the engagement past due-diligence checks.
9. Adverse media hits - credible, recent, relevant
Continuous adverse-media screening through a tool like OpenSanctions catches news coverage tying the client or its beneficial owners to fraud, regulatory action, or organised crime. Not every hit warrants EDD - the source must be credible, the coverage recent and relevant, and the subject correctly identified - but a credible hit on a beneficial owner should always escalate.
10. Triggered ongoing-monitoring events post-onboarding
A change of beneficial ownership, an unexplained injection of capital, a sudden pivot to a new line of business in a higher-risk sector, a series of round-sum transactions that do not match the business profile. Each of these should trigger a CDD refresh, and many will warrant escalation to EDD on review. The Accupe Compliance Radar flags these events against the client profile so the MLRO sees them in one view rather than across staff emails.
How to operationalise the list
Print the ten triggers, embed them in the onboarding checklist, and include them in the annual AML training. Build them into the practice management system as risk-flag checkboxes against the client profile so any team member can see which triggers are live on a given client. Review the list of triggered clients at every MLRO meeting.
A red flag does not by itself mean the relationship is criminal. It means the firm owes itself a closer look, recorded in the file, before continuing. EDD is a defence, not an accusation.
Closing
Supervisors rarely fault firms for over-escalating to EDD - they regularly fault firms for missing the obvious triggers. When in doubt, escalate, document, and review. The cost of an additional 30 minutes on a high-risk file is trivial against the cost of a supervisor finding or, worse, an enforcement action.