Correct Answer: C
According to the AML Directive of the EU, obliged entities, such as banks and other financial institutions, are required to apply enhanced vigilance in business relationships and transactions involving high-risk third countries, which are those identified by the Commission as having strategic deficiencies in their anti-money laundering and countering the financing of terrorism regimes1. The types of enhanced vigilance requirements are basically extra checks and control measures which are defined in article 18a of the Directive1. However, these requirements are not exhaustive, and obliged entities should also implement additional mitigating measures that are complementary to the enhanced customer due diligence procedures, in accordance with a risk based approach1. This means that obliged entities should assess the level of risk posed by each customer, product, service, transaction, or delivery channel, and apply appropriate measures to mitigate those risks2. The additional mitigating measures may include, for example, obtaining additional information on the customer and the beneficial owner, applying additional elements of enhanced monitoring, increasing the frequency and intensity of transaction testing, or requiring the first payment to be carried out through an account in the customer's name with a bank subject to similar customer due diligence standards1.
1: Directive (EU) 2018/843 of the European Parliament and of the Council of 30 May 2018 amending Directive (EU) 2015/849 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, and amending Directives 2009/138/EC and 2013/36/EU (Text with EEA relevance)
2: Guidance on Risk Factors, EBA, 2021
Reference: https://www.nortonrosefulbright.com/en/knowledge/publications/8f84c163/the-eus-fifth-anti- money-laundering-directive-a-regulatory-compliance-perspective