We use cookies to enhance your experience and analyse traffic. Privacy Policy

    Skip to main content
    Home
    Programs
    Portal
    Ongoing customer due diligence
    20 December 2025Ongoing CDD

    Ongoing Customer Due Diligence: When and How to Review

    Customer due diligence is not a "set and forget" exercise. Your AML/CTF obligations continue throughout the relationship. This guide explains when and how to conduct ongoing CDD.

    What is ongoing CDD?

    Ongoing customer due diligence means continuously monitoring and reviewing your client relationships after the initial CDD is complete. Under Section 36, you must:

    • Monitor transactions for consistency with client profile
    • Keep customer information up to date
    • Re-verify identity when doubts arise
    • Adjust risk ratings when circumstances change

    Triggers for re-verification

    Event-based triggers

    • Client changes address, name or contact details
    • Client's business structure changes
    • Beneficial ownership changes
    • Unusual or unexpected transaction patterns
    • Client becomes a PEP or associate of a PEP
    • Doubts about previously obtained information

    Time-based triggers

    • High-risk clients: Review at least annually
    • Medium-risk clients: Review every 2-3 years
    • Low-risk clients: Review every 3-5 years or upon new engagement
    • At the commencement of each new matter/engagement

    What to review

    Annual review checklist

    • Identity verification still valid? Check ID documents have not expired
    • Contact details current? Confirm address, email and phone
    • Beneficial ownership unchanged? Verify no changes to ownership structure
    • PEP status? Re-screen for PEP and sanctions
    • Risk rating appropriate? Has anything changed that affects risk?
    • Transaction patterns normal? Review for unusual activity

    Transaction monitoring

    Under Section 36, you must monitor transactions to ensure they are consistent with:

    • Your knowledge of the client
    • Their business and risk profile
    • Their source of funds

    Proportionate monitoring

    The level of monitoring should match the risk. A high-risk client with complex transactions needs more scrutiny than a low-risk client with simple, predictable transactions.

    Documentation

    Record all ongoing CDD activities:

    • When reviews were conducted
    • What was reviewed
    • Any changes identified
    • Actions taken (updated records, adjusted risk rating etc.)
    • Who conducted the review

    Key Takeaway

    Ongoing CDD is continuous throughout the client relationship. Review high-risk clients annually, monitor transactions for unusual patterns and re-verify when circumstances change. Document all reviews and actions taken.

    Read our complete Tranche 2 Guide

    Key dates, affected sectors, obligations and how to prepare

    Disclaimer: This article is general information only. It is not legal, financial or compliance advice. HeadStart Docs™ provides free compliance documents, not legal services.

    We do not guarantee the accuracy of information provided. Obligations may apply depending on your designated services. Always confirm your specific requirements with a qualified adviser.

    Need a lawyer to review your AML/CTF program? HeadStart Counsel offers fixed-fee tailoring from $1,800+GST. Separate entity and engagement.