Understanding Enhanced Due Diligence (EDD) for RAK ICC Companies

Enhanced Due Diligence (EDD) is the deeper layer of client verification that RAK ICC — and every UAE Designated Non-Financial Business or Profession (DNFBP) — must carry out when a customer presents a higher money-laundering or terrorist-financing risk. If you have set up, or act as the registered agent for, a RAK ICC company, EDD is the process behind those requests for a source-of-wealth statement, a business plan or an EDD confirmation letter. This guide explains, in plain English, when EDD applies, exactly which documents are involved, and how to keep your Enhanced Due Diligence and AML compliance on the right side of Federal Decree-Law No. 20 of 2018 and its implementing Cabinet Decision No. 10 of 2019.

Key terms at a glance

What is Enhanced Due Diligence (EDD) and when is it required?

Enhanced Due Diligence is a stricter set of verification measures applied on top of standard Customer Due Diligence (CDD) when a client is assessed as higher-risk. RAK ICC follows a risk-based approach to Know Your Customer and Due Diligence, in line with the UAE National Risk Assessment and federal AML/CFT legislation. Every client goes through baseline KYC at incorporation; EDD is triggered only when that screening reveals a high-risk factor.

In practice, EDD is not a one-off gate at set-up. RAK ICC operates continuous monitoring and screening controls, so a company can be asked for EDD documents at incorporation, at renewal, or at any point in between if new information emerges. At renewal, RAK ICC revisits each case and either seeks confirmation that the information already held remains valid and accurate, or requests updated documents. For registered agents, understanding this early keeps client onboarding smooth and protects your standing as a compliant DNFBP. If you are still forming the entity, our team handles the KYC pack as part of RAK ICC company formation.

What standard KYC documents does RAK ICC request at incorporation?

Before any EDD is considered, RAK ICC performs initial KYC and Due Diligence at incorporation. The document set differs depending on whether each director or shareholder is a natural person or a corporate entity. The table below summarises the standard requirements (which are not exhaustive — RAK ICC may request more).

Getting this pack right the first time matters: incomplete or inconsistent KYC is the most common reason a straightforward incorporation stalls, and it can be the very thing that pushes a case into an EDD review.

Which risk factors trigger Enhanced Due Diligence?

EDD is triggered when initial KYC shows that a client falls under a high-risk factor. Risk varies case by case, but the common triggers RAK ICC looks for are associations with any of the following.

RAK ICC does not publish its full risk criteria, but much of the underlying information is public: FATF and national high-risk-country lists, FATF guidance on the risk-based approach for corporate service providers, and adverse-media searches. Where a high-risk factor is present, RAK ICC will contact the agent to better understand the client and their business, and will ask the agent to perform Enhanced Due Diligence.

What additional documents does Enhanced Due Diligence require?

Where EDD applies, RAK ICC may request a range of additional documents on top of standard KYC. The exact list depends on the risk profile, but the core EDD documents are a source-of-wealth statement, a business plan, address proof, a valid UAE visa (if any), a source-of-funds explanation, and an EDD confirmation letter. The table maps common scenarios to what is typically requested.

What is the difference between source of wealth and source of funds?

Source of wealth (SoW) and source of funds (SoF) are often confused, and failing to distinguish them is a classic EDD weakness. Source of wealth is how a client built their total wealth over time — the activities that generated or contributed to the accumulation of their funds and assets. Source of funds is the origin of the specific money used in a particular transaction or activity. Regulators expect you to evidence both, and to verify them in proportion to risk.

Where a client's wealth ties back to a trading company, the evidence should confirm it came from profits generated by legitimate business and commercial activity. Independently prepared audited financial statements are among the strongest corroboration for a high-risk file.

How is source of wealth established and verified?

Establishing source of wealth follows three steps: (1) obtain information on the client's net worth, (2) establish where that net worth came from, and (3) verify the information on a risk-sensitive basis. You are not expected to pin down an exact figure or corroborate every asset — you should cover the sources that make up the major part of the client's wealth and resolve any red flags.

The depth of verification scales with risk. For high-risk clients, seek reliable, independent evidence — copies of trust deeds, audited accounts, or confirmation from a regulated professional such as a lawyer or accountant. For lower-risk clients, public information, open sources and official documents provided by the client may be sufficient. A client's refusal to voluntarily disclose how much wealth they control can itself be a red flag.

Recognised examples of source of wealth include earned income (through employment or otherwise), investment proceeds, the sale of property, ownership of a business (from legitimate profits), and inheritance or gifts. These can be evidenced through a combination of publicly available property, land, asset and company registers, past transactions, documents confirming salary, tax returns and bank statements, and confirmation from regulated professionals who know the client.

Record-keeping is central: document the questions you asked, the answers the client gave, and retain copies of any supporting material. Records should let an independent reviewer understand the source of wealth and how it was acquired. Sound bookkeeping and record-keeping makes this straightforward at renewal.

How does Enhanced Due Diligence apply to Politically Exposed Persons (PEPs)?

PEPs attract the highest level of EDD. UAE legislation (Cabinet Decision No. 10 of 2019, Article 15) requires additional measures for politically exposed relationships, including establishing source of funds and applying continuous monitoring. In practice, RAK ICC will typically request both source-of-wealth and source-of-funds evidence for a PEP or a PEP associate.

Importantly, appearing on a screening list as a PEP does not automatically make someone a PEP for these purposes — RAK ICC may come back to the agent for clarification. Where a person is confirmed as a PEP, expect requests to verify source of wealth and source of funds, and to keep the relationship under ongoing review for the life of the company. Internet and reputable open-source searches, evidence of title, audited documents and salary or tax records all help build a defensible PEP file.

How are sanctions and high-risk country links handled?

Where a client is linked to a sanctioned country, EDD focuses on confirming identity and residence and screening for exposure. RAK ICC typically requests address-proof verification, a valid UAE visa (if any), and a completed sanctions questionnaire. All entities are subject to ongoing screening against external compliance software and internal lists, so sanctions checks are not a one-time event.

For registered agents, the practical takeaway is to verify residence documents carefully, keep the sanctions questionnaire on file, and re-screen when circumstances change. If a genuine sanctions match arises, standard onboarding stops and the matter must be escalated internally before proceeding.

How is adverse media treated during Enhanced Due Diligence?

Adverse media does not automatically make a client high-risk — particularly where the allegations are not from a credible source. RAK ICC may come back to the agent to verify the allegations, obtain a Police Clearance Letter, request an updated report, or ask for copies of court-judgment documents on any criminal matters. The aim is to establish whether the finding is material and, if so, whether it can be resolved.

When you encounter adverse media on a client, document what you found, assess the credibility of the source, and gather the specific evidence RAK ICC requests. Keeping a clear, dated record of how each finding was investigated is exactly what an independent reviewer will expect to see.

How should you respond to a RAK ICC EDD request?

When RAK ICC asks for EDD, a structured response keeps the case moving and demonstrates a genuine risk-based approach. Follow these steps.

1. Acknowledge and scope the request — confirm which documents are needed and any timeline, and map them to the risk factor identified.
2. Gather source-of-wealth evidence — establish net worth, where it came from, and independent corroboration proportionate to risk.
3. Prepare the business plan — on company letterhead, covering the opportunity, execution, company overview and financials.
4. Complete screening documents — sanctions questionnaire, address-proof verification and a valid UAE visa where relevant.
5. Submit the EDD confirmation letter — and, for PEPs, the source-of-funds evidence.
6. Record and monitor — retain the questions, answers and supporting material, and keep the relationship under ongoing review.

The difference between a file that clears quickly and one that drags out usually comes down to practice, not paperwork volume:

What are your goAML reporting obligations as a DNFBP?

As a Designated Non-Financial Business or Profession, a RAK ICC registered agent has a legal duty to report suspicion. If you suspect a company or associated individual may be involved in money laundering, terrorist financing or other crimes, you must report your suspicion to the relevant authorities. The UAE Central Bank's Financial Intelligence Unit operates the goAML platform for filing Suspicious Transaction Reports (STRs) and Suspicious Activity Reports (SARs).

This obligation sits alongside your AML/CFT policy and cannot be waived by client confidentiality — reporting a suspicion is a legal requirement, not a breach of duty to the client. A complete AML framework — a written policy, an appointed MLRO, goAML registration and ongoing monitoring — is what keeps you compliant. Our AML policy and goAML support covers registration, policies, risk assessment and MLRO support for DNFBPs from AED 349.