A Seven-Year Client’s Ownership Structure Changed 14 Months Ago. The New Majority Owner Holds a Senior Role at a State-Owned Enterprise in a FATF Grey List Country. The Relationship Manager Didn’t Flag It. The Account Has Been Operating Normally. What Are the EDD Obligations Now?

Quick Answer

When a periodic account review identifies that a long-standing client’s ownership changed 14 months ago and the new majority owner has PEP-adjacent exposure that was never flagged — does the EDD obligation restart, and what happens to the gap period?

Yes — the EDD obligation restarts from the point of discovery, and the 14-month gap period requires retroactive review. Under AML/CFT ongoing monitoring obligations, a material ownership change that creates a PEP or PEP-adjacent exposure should have triggered enhanced due diligence at the time of the change. The failure to do so means the institution has been operating a relationship with elevated risk for 14 months without the required due diligence. Current obligations include: immediately escalating to senior management; conducting a retroactive enhanced review of the 14 months of transaction activity; performing the source of wealth and source of funds assessment that should have been completed at the time of the change; and determining whether a Suspicious Activity Report is required based on what the retroactive review finds. The relationship manager’s failure to flag the change is a separate process failure that requires its own examination.

The Situation

During a routine annual account review, a senior AML analyst at a commercial bank is reviewing the file for Coastal Industrial Holdings, a corporate client with a seven-year relationship and approximately $8.2 million in annual trade and commercial banking activity. The relationship has been clean — no suspicious activity, no compliance flags, consistently documented as standard risk.

The analyst pulls the current corporate structure to verify beneficial ownership. Something has changed. A private equity firm that previously held a 60% stake sold its position approximately 14 months ago. The new majority shareholder — holding 58% — is an individual named Dmitri Volkov. Running Volkov through the screening system returns a significant result: Volkov holds a senior executive position at a state-owned energy enterprise in a country currently on the FATF grey list. He is classified as a PEP-adjacent individual — not a traditional government official PEP but within the enhanced scrutiny category for state-owned enterprise senior executives under the bank’s risk-based framework.

The analyst checks the relationship manager’s file notes. There is no documentation of the ownership change. No EDD was initiated. No risk reclassification occurred. The account was renewed 9 months ago on a standard basis without the ownership change reflected. For 14 months, the bank has been operating this relationship without knowing who the majority owner is.

Choice AInitiate EDD prospectively going forward — update the account risk classification to elevated, request source of wealth documentation, and document the discovery. Don’t retroactively review the 14 months of past activity — the relationship was clean during that period, and there’s no indication of suspicious activity. Focus on getting the EDD right for the future.

Choice BImmediately escalate to the BSA/AML officer and senior management — documenting the ownership change, the 14-month gap, the Volkov PEP-adjacent classification, and the relationship manager’s failure to flag the change. Initiate a retroactive review of 14 months of transaction activity under the EDD framework. Complete source of wealth and source of funds assessment. Determine whether a Suspicious Activity Report is required based on the retroactive review findings. Suspend any new credit or facility approvals pending EDD completion.

Choice CContact the relationship manager first — get their explanation for why the ownership change wasn’t flagged before taking any formal action. There may be a documentation gap rather than a compliance failure — the relationship manager may have known about the change and assessed Volkov as not requiring EDD under their judgment. Understand the full picture before escalating.

The Right Call

Choice B — Immediately escalate, initiate retroactive review, and determine SAR obligation before any other action.

Choice A’s prospective-only approach leaves a 14-month EDD gap in the regulatory record — which, if discovered during an examination, is evidence of an ongoing monitoring failure rather than a remediated one. The retroactive review is required to determine whether any transaction activity during the gap period warrants a SAR filing. Skipping it creates the exact risk that ongoing monitoring is designed to prevent: a period of elevated-risk relationship operation that goes unexamined. Choice C prioritizes getting the relationship manager’s explanation before taking formal action, which is reasonable for many situations but wrong here. The analyst has already identified a clear ongoing monitoring failure. The relationship manager’s explanation doesn’t change the obligation to escalate and conduct retroactive review; it may inform how the process failure is addressed afterward. Talking to the relationship manager before escalating inverts the required sequence.

A clean 14-month record is not the same as a clean 14-month retroactive review.

The account appeared clean during the 14-month gap because nobody was looking at it through the right lens. Transaction monitoring alerts that would be assessed differently for a PEP-adjacent client may have been cleared at standard-risk thresholds. Transactions that would have triggered source of funds inquiries under an EDD monitoring profile were never reviewed that way. “The account was clean” describes the absence of flags under standard monitoring — not the absence of activity that would have been flagged under enhanced monitoring. The retroactive review applies the correct monitoring standard to the historical activity.

The relationship manager’s failure to flag the change is both a training failure and a potential conduct issue — and they need to be treated separately.

The relationship manager may have been unaware that an ownership change triggers a compliance notification obligation — in which case, the failure is a training gap. Or they may have known about the obligation and assessed Volkov’s SOE role as not rising to PEP-adjacent status — in which case the failure is a judgment error. Or they may have known about the obligation, recognized the Volkov classification, and made a deliberate decision not to flag it to preserve the relationship, in which case the failure is a conduct issue requiring its own investigation. The retroactive review of the account is the AML response. The review of why the change wasn’t flagged is a separate HR and compliance culture investigation that should run in parallel, not as a precondition to the AML response.

The SAR determination depends on what the retroactive review finds — and that determination cannot be made without doing the review.

If the retroactive review identifies transaction activity that would be suspicious under EDD standards — unusual volumes, unexplained international transfers, patterns inconsistent with the known business purpose — a SAR may be required. The failure to file a timely SAR is a separate BSA violation in addition to the ongoing monitoring failure. Neither of these determinations can be made without completing the retroactive review. Moving directly to prospective EDD without retroactive review forecloses the SAR determination before it can be properly assessed.

What ongoing monitoring obligations require financial institutions to track beneficial ownership changes in existing client relationships?

The BSA/FinCEN Customer Due Diligence Rule (31 CFR 1010.230) requires covered financial institutions to maintain and update customer information on a risk-based basis, including beneficial ownership information. Material changes in beneficial ownership that affect the risk profile of a legal-entity customer should trigger a review and, where appropriate, enhanced due diligence. Relationship managers at covered institutions are typically responsible for flagging material ownership changes to compliance when they become aware of them, but the institution’s program controls should not rely solely on relationship manager notification.

What is the SAR filing obligation when an EDD gap is discovered retrospectively?

When a financial institution discovers that enhanced due diligence that should have been conducted on a relationship was not conducted, a retroactive review of the relationship’s transaction history is required. If that review identifies activity that would have been suspicious under the appropriate EDD monitoring standard — even if it was not flagged under standard monitoring — the institution may have an obligation to file an SAR. The 30-day SAR filing window generally runs from the time the institution knows or has reason to know of the suspicious activity; in a retroactive review scenario, it begins when the activity is identified during the review, not at the time of the original transaction.

What controls should financial institutions implement to detect material ownership changes in existing client relationships?

Automated screening of existing clients against beneficial ownership databases and PEP screening lists on a periodic basis — not only at onboarding. Periodic re-certification requirements for legal entity clients to confirm or update their beneficial ownership information. Relationship manager training that specifically identifies material ownership changes as a mandatory compliance notification trigger, with clear consequences for failure to notify. Annual account reviews that include a current beneficial ownership verification step rather than relying on the original onboarding documentation.

How to Use This Scenario in Training

Recommended for AML analysts conducting periodic account reviews, relationship managers with ownership notification responsibilities, BSA/AML officers, and compliance program examiners. Most effective when paired with a review of the institution’s specific ownership change notification procedures — the training moment is most powerful when employees know exactly what they are supposed to do when they learn of an ownership change and can compare that process to what the relationship manager failed to do here. Cross-reference with the PEP beneficial owner scenario for comprehensive PEP EDD training coverage.

This scenario demonstrates the prospective-only bias rationalization from the Decision Readiness Engine™ — “the account was clean, so we just need to get the EDD right going forward” is the reasoning that leaves the retroactive gap unexamined and the SAR determination unmade. Decision-ready AML professionals recognize that a discovered compliance gap requires both retrospective examination and prospective correction — the discovery of the gap is the beginning of the response, not the end.

More AML & PEP Due Diligence Scenarios