Enhanced due diligence on a crypto exchange: not KYC and not SoF

Enhanced due diligence (EDD) on a crypto exchange is an extra risk-review layer, not another selfie and not a synonym for Source of Funds. KYC confirms identity; SoF explains a specific amount; EDD more often reconciles profile, turnover, and origin until the reviewer closes the file. For file composition, see documents for a crypto exchange AML check. If the account is already on hold, see exchange account unfreezing.
EDD, KYC, and SoF are three different layers
KYC answers whether you are who you claim to be. A passport, a selfie, sometimes proof of address. That is account onboarding, not a review of every large transfer. A failed identity check and a risk hold after a deposit are different queues even on the same platform.
Source of Funds (SoF) answers where this amount or deposit came from. Source of Wealth (SoW) asks how wealth was built overall. Exchanges often mix the wording in one letter; confusing the layers is costly: a stack of KYC files does not close an amount table. The chain from source to transfer to balance is covered in what exchanges ask for Source of Funds.
EDD is a risk-based layer on top of standard identification. FATF standards for virtual assets expect providers to intensify measures where risk is higher: a mismatch between profile and turnover, a higher-risk jurisdiction, a complex source, or PEP indicators. It is not an accusation and not a special penalty tariff; it is a request to explain the economic purpose of the activity. For why holds happen, see what AML means in crypto.
When enhanced review typically starts
Common triggers in practice, without treating someone else's "$X per day" figure as official policy of a named exchange: a sharp rise in turnover versus the declared profile; a large withdrawal after a short history; P2P or OTC with no paper trail; contact with higher-risk services on-chain; a mismatch between KYC country, device, and funding channel; a follow-up after an incomplete reply.
FATF publishes lists of jurisdictions subject to a call for enhanced measures or increased monitoring. Being tied to such a jurisdiction does not mean an automatic ban for every user, but it raises the chance of a manual review. Use current FATF statements and the wording of your request, not year-old chat screenshots.
| Layer | Reviewer's question | What is usually not enough |
|---|---|---|
| KYC | Who are you | A selfie that does not match the profile |
| SoF | Where this amount came from | A balance screenshot with no TxID |
| EDD | Does the profile match the turnover | "I invest" with no document chain |
Checklist before you answer an EDD request
- Read the request literally: additional information, origin of funds, proof of address, source of wealth. Each item should map to a file or a table row.
- Match major amounts to dates, TxIDs, and a primary document; describe gaps briefly.
- Confirm that the name and address match KYC; do not attach someone else's statements.
- Add one short note on the economic purpose of the turnover, without a novel and without a Telegram template.
- Submit one package through the official channel; save the case number and date.
Do not present this list as a Bybit or Binance rulebook. Public help articles describe "additional information" in general terms, and your ticket may narrow the set to two items. The attachment frame is in documents for a crypto exchange AML check. If the hold already blocks withdrawals, keep exchange account unfreezing and a success-fee assessment in view. A "two to eight weeks" figure from someone else's thread is not a platform norm.
Circular requests and what not to do
- Do not resubmit the same archive without addressing the reviewer's comment.
- Do not open a second account while EDD is open.
- Do not change location through a VPN or submit someone else's proof of address.
- Do not put a seed phrase or 2FA codes in the folder "to speed things up".
A follow-up request often means the amount, period, or beneficiary link is still open, not that "the exchange always loops forever". Close the gap instead of multiplying tickets. Forged files and control evasion usually raise risk rather than speed up a decision. The outcome is not guaranteed and depends on platform policy and the quality of the package.
Risks and limitations
- EDD, KYC, and SoF wording in exchange emails is often mixed; follow the current request rather than a generic checklist.
- A complete document package does not guarantee that a restriction will be lifted or reviewed within a set time.
- FATF higher-risk jurisdiction lists and internal platform thresholds change.
- Files that belong to someone else, are forged, or are irrelevant, and bypasses via VPN or a second account, worsen the risk assessment.
- This article describes typical review practice; it is not legal advice and not an official rulebook of a named exchange.