Skip to main content
FinCrime Institute
Category: Customer Due Diligence

Enhanced Ongoing Monitoring

Also known as: Enhanced Monitoring, Enhanced Continuous Monitoring
Simply put

Enhanced ongoing monitoring is a more intensive version of the routine checks that regulated businesses carry out on their customers and transactions over time. It generally applies to customers assessed as higher risk, meaning their activity is reviewed more closely and more frequently than for standard customers. The aim is to help detect unusual or potentially suspicious activity, though it does not by itself prove any wrongdoing.

Formal definition

Enhanced ongoing monitoring refers to the application of more frequent and more rigorous continuous review of customer data, transactions, and associated activity than the standard baseline, typically triggered where a customer or relationship is assessed as higher risk. As reflected in HMRC's Economic Crime Supervision Handbook (ECSH33375), where enhanced ongoing monitoring is required, obliged entities are generally expected to conduct it more regularly than for cases subject to standard or simplified customer due diligence. It operates as a risk-based measure intended to assess risk and detect suspicious activity, and is commonly associated with enhanced due diligence (EDD) for higher-risk relationships. This is an operational and regulatory control designed to detect, deter, and manage financial crime risk rather than a guarantee of prevention; specific triggers, frequency, and intensity depend on the entity's risk assessment and applicable jurisdictional requirements, which should be confirmed against the relevant regulations.

Why it matters

Higher-risk customer relationships can present a greater likelihood of exposure to money laundering, terrorist financing, or other financial crime, and a single point-in-time check at onboarding is rarely sufficient to keep pace with how a relationship evolves. Enhanced ongoing monitoring exists to close that gap by subjecting higher-risk customers to more frequent and more rigorous review of their data, transactions, and associated activity than standard customers receive. It is a core expression of the risk-based approach: resources are concentrated where risk is assessed to be greatest, rather than applied uniformly across an entire customer base.

For supervised firms, the intensity and regularity of monitoring is also a matter of regulatory scrutiny. HMRC's Economic Crime Supervision Handbook (ECSH33375), for example, prompts supervisors to ask whether, where enhanced ongoing monitoring is required, it has been carried out more regularly than would apply under standard or simplified customer due diligence. This makes enhanced ongoing monitoring not only an operational safeguard but also a point on which firms may be expected to demonstrate that their practice matches the risk they have identified.

It is important to be clear about what enhanced ongoing monitoring does and does not achieve. It is designed to help detect, deter, and manage financial crime risk and to surface unusual or potentially suspicious activity for further assessment. It does not by itself prove wrongdoing, and no monitoring regime can guarantee that financial crime will be prevented. Its value lies in improving the chances that emerging risks are identified in time to be assessed and, where appropriate, escalated.

Who it's relevant to

AML compliance officers and MLROs
Those responsible for designing and overseeing an AML programme need to define when enhanced ongoing monitoring is triggered, how frequently higher-risk relationships are reviewed, and how this differs from standard and simplified due diligence cases. They should be prepared to demonstrate to supervisors that the intensity and regularity of monitoring is proportionate to assessed risk, consistent with expectations reflected in guidance such as HMRC's Economic Crime Supervision Handbook.
Financial intelligence and monitoring analysts
Analysts who conduct day-to-day review of customer data and transactions apply enhanced ongoing monitoring in practice, examining higher-risk relationships more closely and more often to identify unusual or potentially suspicious activity. Their role is to assess and escalate for further review; identifying such activity does not, on its own, establish wrongdoing.
Onboarding and EDD teams
Because enhanced ongoing monitoring is commonly associated with enhanced due diligence for higher-risk relationships, teams that classify customer risk and perform EDD at onboarding directly determine which relationships move into the enhanced monitoring population, and should ensure risk assessments are documented and kept current.
Supervised firms and their risk and audit functions
Regulated businesses subject to AML supervision, along with their risk and internal audit functions, need to ensure enhanced ongoing monitoring is embedded, evidenced, and performed more regularly for higher-risk cases. Supervisors may test whether required enhanced monitoring has actually been carried out, so firms should confirm applicable requirements against the regulations governing their sector and jurisdiction.

Inside Enhanced Ongoing Monitoring

Heightened Transaction Scrutiny
A more frequent and granular review of transactional activity than applied under standard ongoing monitoring, typically directed at customers, products, or relationships assessed as higher risk. This generally involves tighter alert thresholds, closer examination of transaction patterns, and more probing analysis of activity against the customer's expected profile.
More Frequent Relationship Review
Periodic reassessment of the customer relationship at shorter intervals than for standard-risk customers, used to confirm that the risk rating, expected activity profile, and supporting information remain accurate and current. The exact cadence is set by the obliged entity's risk-based approach rather than by a single universal rule.
Source of Funds and Source of Wealth Corroboration
Ongoing efforts to keep understanding of a customer's source of funds and source of wealth current where the relationship warrants it, particularly for PEPs and other higher-risk categories. This is an element of enhanced due diligence applied continuously rather than solely at onboarding.
Refreshed and Updated CDD Information
Keeping customer due diligence data, including identification, beneficial ownership, and purpose-and-intended-nature information, up to date so that monitoring is measured against accurate reference data. Enhanced ongoing monitoring generally requires more proactive and frequent refreshes than standard monitoring.
Risk-Based Trigger and Escalation Framework
Defined triggers, such as material changes in behaviour, adverse media, sanctions or PEP status changes, or unusual transactions, that prompt review and, where appropriate, escalation to compliance or the reporting officer for consideration of internal reporting or a SAR/STR.
Scope and Applicability Boundaries
The determination of which customers, products, delivery channels, or jurisdictions attract enhanced ongoing monitoring versus standard monitoring, generally driven by the entity's risk assessment and the risk-based approach reflected in the FATF Recommendations and transposed regimes such as the EU AML Directives, the UK Money Laundering Regulations, and US BSA/FinCEN rules. Exact triggers and expectations vary by jurisdiction and should be confirmed against applicable regulation.

Common questions

Answers to the questions practitioners most commonly ask about Enhanced Ongoing Monitoring.

Does placing a customer under enhanced ongoing monitoring mean they are suspected of money laundering?
No. Enhanced ongoing monitoring is a risk-management measure applied to relationships assessed as higher risk; it is not a finding of wrongdoing or a determination that the customer is engaged in money laundering or terrorist financing. It is applied on a risk-sensitive basis to detect and scrutinize activity more closely, and its application should not be confused with the outcome of a suspicious activity investigation or the filing of a SAR/STR. Higher-risk classification and the resulting monitoring intensity are compliance judgments about exposure, not conclusions of criminal conduct.
Is enhanced ongoing monitoring the same as enhanced due diligence (EDD)?
They are related but distinct. EDD generally refers to the additional information-gathering, verification, and approval measures applied at onboarding or at review points for higher-risk relationships, while enhanced ongoing monitoring is the continuing, more intensive scrutiny of transactions and the relationship over its lifetime. Enhanced ongoing monitoring is typically one component of an EDD framework rather than a substitute for it. In many jurisdictions the two are addressed together in guidance, but they operate at different points and serve different functions, so treating them as interchangeable can create gaps in a program.
What does enhanced ongoing monitoring involve in practice compared with standard monitoring?
In practice it generally involves greater frequency and depth of review than standard monitoring. This may include more regular periodic reviews of the relationship, closer scrutiny of transactions against expected activity and the customer's risk profile, tighter or additional monitoring scenarios or thresholds, and more detailed record-keeping of the rationale for continuing the relationship. The precise measures are typically determined on a risk-sensitive basis by the obliged entity, and exact expectations should be confirmed against the applicable regulation and supervisory guidance.
How do firms decide which relationships require enhanced ongoing monitoring?
Decisions are generally driven by the firm's risk assessment methodology and risk-classification model, which weigh factors such as customer type, geographic exposure, products and services, and delivery channels. Certain categories, such as those connected to higher-risk jurisdictions or, in many regimes, politically exposed persons, may trigger enhanced measures. The applicable framework, whether derived from the FATF Recommendations as standards or from binding requirements such as the EU AML Directives, the US Bank Secrecy Act and FinCEN rules, or the UK Money Laundering Regulations, should be consulted, as triggers and mandatory categories vary by jurisdiction.
How frequently should periodic reviews be conducted for relationships under enhanced ongoing monitoring?
Review frequency is typically set on a risk-sensitive basis rather than by a single universal interval, with higher-risk relationships generally reviewed more often than standard-risk ones. Firms often define review cycles within their policies and may bring reviews forward when trigger events, such as material changes in behavior, ownership, or risk profile, occur. Because specific timing expectations can differ by regime and supervisor, firms should confirm any mandated or expected intervals against the applicable regulation and their own documented methodology.
How should firms document and evidence enhanced ongoing monitoring to supervisors?
Firms generally maintain records showing why a relationship was classified as higher risk, what enhanced measures were applied, the outcomes of periodic and trigger-based reviews, and the rationale for continuing or exiting the relationship. Clear audit trails linking the risk assessment to the monitoring measures applied help demonstrate a coherent risk-based approach. Documentation should support, but does not by itself establish, any conclusion about customer conduct, and record-keeping expectations should be confirmed against the record-keeping requirements of the applicable regime.

Common misconceptions

Enhanced ongoing monitoring is the same as enhanced due diligence (EDD).
They are related but distinct. EDD is a broader set of intensified due diligence measures often applied at onboarding and during a relationship, whereas enhanced ongoing monitoring specifically refers to the continuous, heightened scrutiny of transactions and the relationship over time. Enhanced ongoing monitoring is typically one component of an EDD framework rather than a synonym for it.
There is a single, universal frequency or standard for how often enhanced ongoing monitoring must occur.
Cadence, thresholds, and specific measures are generally driven by the obliged entity's risk-based approach and vary across jurisdictions and regimes. The FATF Recommendations set standards rather than binding law, and requirements differ under the EU AML framework, the UK Money Laundering Regulations, and US BSA/FinCEN rules. Exact expectations should be confirmed against the applicable regulation.
An alert or unusual pattern detected through enhanced ongoing monitoring establishes that money laundering or wrongdoing has occurred.
Monitoring is a measure to detect, deter, and manage risk, not proof of criminality. An alert or an internal report indicates activity warranting review and possible escalation to a SAR/STR; it does not itself establish that an offence has been committed, and no single control eliminates financial crime risk.

Best practices

Define clearly in policy which customers, products, channels, and jurisdictions trigger enhanced ongoing monitoring versus standard monitoring, tying the distinction directly to the entity's documented risk assessment and risk-based approach.
Calibrate monitoring thresholds, alert scenarios, and review frequencies to the assessed risk level, and periodically test and tune them rather than treating any fixed cadence as universally sufficient.
Keep CDD information, beneficial ownership data, and expected activity profiles refreshed for higher-risk relationships so that monitoring is measured against accurate reference data.
Maintain source of funds and source of wealth understanding on an ongoing basis for PEPs and other higher-risk customers, corroborating information where the relationship warrants it.
Establish documented triggers and escalation paths so that material changes, adverse media, or unusual activity are routed promptly to compliance or the reporting officer for consideration of internal reporting or a SAR/STR.
Record the rationale for monitoring decisions and outcomes, and confirm specific obligations, thresholds, and timing expectations against the applicable regulation in each jurisdiction where the entity operates.