Business · Chapter 06
Red flags that trigger endless requests
High-risk or unclear cases get escalated to Enhanced Due Diligence - more questions, more requests, longer timelines. Every trigger on this list is fixable before you apply, without changing what your business does.
~4 min
The issue
High-risk or unclear cases get escalated to Enhanced Due Diligence: more questions, more document requests, longer timelines. Public case reports and industry commentary on neobank and fintech onboarding point to the same recurring triggers.
Why institutions ask
Every item on this list is fixable before you apply. None of them requires changing what your business actually does - only how clearly and consistently you present it.
Common red flags
Vague, generic business descriptions
"Online marketing," "consulting," "trading," "affiliate," "crypto," or "dropshipping" without further detail doesn't give compliance enough to assess risk. They need what you sell, to whom, where, and how the money moves.
Website / declared-activity mismatch
If the form says "B2B SaaS" but the site shows generic content or a different business entirely, the profile becomes suspect immediately.
Volumes that don't match the documents
Declaring large expected turnover with no evidence of pipeline or track record almost always triggers deep EDD and frequently ends in rejection.
High-risk countries with no explanation
Operating with monitored or sanctioned countries without explaining why - real clients, real suppliers, a real commercial reason - invites blocks or refusal.
No proof of business activity at all
Provider onboarding guidance is explicit: a site, invoices matched to statements, and client/supplier contracts are expected for a declared operating business.
Messy, outdated, or disorganised documents
Old scans, missing pages, unnamed files in a chaotic order slow review, increase errors, and read as a lack of seriousness.
A dormant or brand-new company with no story
A freshly incorporated or inactive company with no explanation of its operating plan, funding, or target clients reads as a potential shell company.
UBO, residence and company jurisdiction that don't line up
Company in country A, UBO in country B, activity in countries C and D isn't illegal by itself - but without a clear narrative, perceived risk climbs fast.
A poorly scoped perceived-high-risk sector
Crypto, gambling, FX/CFD, money remittance and some cross-border ecommerce models sit under extended AML guidance. Entering them without a licence, or without clearly scoping exactly what you do and don't do, tends to end in rejection.
Your actions
If I operate in a perceived high-risk sector, I've scoped exactly what I do and don't do, in writing.
Only relevant for perceived-high-risk sectors - mark it not applicable otherwise.
My website is coherent with my business description, my invoices, and my contracts - no mismatch.
These become trackable items in your checklist once your personalized plan is generated.