High-Risk Customer

Overview

A high-risk customer classification indicates that the relationship requires stronger controls than the organization’s standard baseline. Factors may include complex ownership, high-risk jurisdictions, unusual activity, politically exposed status, opaque source of funds, or sensitive products.

High risk does not mean confirmed wrongdoing and should not automatically produce rejection unless law, sanctions, or risk appetite requires it. Ratings can become inaccurate when data are incomplete, factors overlap, or customer circumstances change.

Organizations should document the methodology, obtain enhanced evidence, apply appropriate approval and monitoring, review the rating regularly, and control overrides. Customers need fair handling and a path to correct inaccurate information where applicable. Senior approval should state conditions for continuing the relationship.

For High-Risk Customer, repeated renewal is a signal that the underlying design needs correction.

High-Risk Customer is a measurable uncertainty or exposure that presents elevated exposure based on identity, ownership, geography, products, behavior, transactions, or other defined risk factors. High-risk classification calls for proportionate enhanced controls and review, not an unsupported conclusion that the customer is fraudulent or unlawful.

For High-Risk Customer, the assessment should evaluate a measurable uncertainty or exposure that presents elevated exposure based on identity, ownership, geography, products, behavior, transactions, or other defined risk factors. The assessment record should separate observed evidence supporting a measurable uncertainty or exposure that presents elevated exposure based on identity, ownership, geography, products, behavior, transactions, or other defined risk factors from assumptions, state the time horizon and existing controls, and identify who owns any remaining exposure. Monitoring should test whether the conditions described in a measurable uncertainty or exposure that presents elevated exposure based on identity, ownership, geography, products, behavior, transactions, or other defined risk factors have changed enough to require a new rating, treatment, or approval.