Risk-basedapproach
Risk-based approach
Risk-based approach — a compliance principle: the depth of the check matches the client risk level rather than being the same for everyone.
- What it is
- The risk-based approach — the depth of the check matches the level of risk
- The essence
- The higher the client’s risk, the more thorough the check
- Not uniformly
- A simple profile — lighter, a complex one — stricter
- Basis
- A key principle of the FATF standards and of all compliance
- How to use it
- Understand why you in particular are checked more or less strictly
In plain words
The risk-based approach is the fundamental principle of modern compliance: the effort and depth of a check must match the level of risk a client or transaction presents. Instead of checking everyone the same way, organisations concentrate resources where the risk is higher and simplify procedures where it is low.
In practice this means that a client with a simple and transparent profile (a clear source of income, a clean reputation, a low-risk jurisdiction) goes through a standard check, while a client with higher risk (PEP status, a complex international structure, a link with a high-risk country, large sums) goes through an enhanced one (EDD). This approach is built into the FATF standards and underlies how banks and citizenship programmes work.
For the client, understanding this principle removes unnecessary emotion: if you are checked more strictly, it is not “nit-picking” or a suspicion of wrongdoing but a consequence of your risk profile. Conversely, a simple profile speeds up the process. The right strategy is to understand your level of risk and prepare accordingly. We assess the client’s risk profile in advance and prepare the file for the depth of check that awaits it.
Where this principle applies
What matters about the risk-based approach
- Risk sets the depth
- Not everyone the same
- Resources where the risk is
- A simple profile
- A standard check
- Faster
- PEP, a complex structure
- Enhanced due diligence (EDD)
- More documents
- FATF standards
- The basis of compliance
- Banks and programmes
How it works
- 01Assessing the client’s risk profile
- 02Determining the risk level
- 03Choosing the depth of the check
- 04A check according to the level of risk
- 05Decision
What you need to know
- The risk-based approach sets the depth of the check by the level of risk
- Clients are not all checked the same way
- Low risk — a standard check; high risk — enhanced (EDD)
- The principle is built into the FATF standards
- A strict check is a consequence of the profile, not a suspicion
Common mistakes
- Taking a strict check as personal suspicion
- Not assessing your real risk profile
- Coming with a file prepared for the wrong depth of check
- Underestimating your higher risk (PEP, structure)
- Expecting the same approach to every client
What this means for a BRIDGES client
We assess your risk profile in advance and prepare the file for the depth of check that awaits you: standard for a simple profile or enhanced for higher risk. That way you understand the logic of the checks and pass them proportionately — the strictness turns out to be a consequence of your profile, not an obstacle.
Frequently asked questions
01 /What is the risk-based approach?
A compliance principle: the depth of the check matches the client’s level of risk. Instead of checking everyone the same way, resources are concentrated where the risk is higher.
02 /Why am I checked more strictly than others?
Because of your risk profile: PEP status, a complex structure, a link with a high-risk jurisdiction or large sums raise the risk. It is not a suspicion but a consequence of the profile.
03 /Who is checked more leniently?
Clients with a simple and transparent profile: a clear source of income, a clean reputation, a low-risk jurisdiction. They pass a standard check faster.
04 /Where did this principle come from?
It is built into the FATF standards and underlies how banks and citizenship programmes work around the world.
05 /How is it connected with EDD?
Enhanced due diligence (EDD) is precisely the response to higher risk under the risk-based approach: the higher the risk, the deeper the check.
06 /How do you prepare properly?
Assess your level of risk honestly and prepare the file for the required depth: enhanced for higher risk, standard for low. We help do this.
See also
Read next
This material has undergone editorial review by BRIDGES.
Want to understand your check?
We will assess your risk profile and prepare the file for the required depth of check — so that it goes proportionately and without surprises.