Low risk → standard CDD; longer review cycles (24–36 months); standard transaction monitoring thresholds - High risk → Enhanced Due Diligence (EDD); shorter review cycles (6 months); tighter transaction monitoring - The regulatory principle: KYC measures must be proportionate to the money laundering