Correspondent Banking Due Diligence: IIBF KYC-AML Exam Guide 2026

When one bank holds an account for another bank, it inherits a stranger's customers without ever meeting them. That is the whole risk of correspondent banking — and it is exactly why correspondent banking due diligence sits at the sharp end of every IIBF KYC, AML and CFT syllabus. In the 2026 exam you are expected to know not just what customer due diligence is, but why a bank-to-bank relationship demands a heavier, enhanced version of it. This guide walks a working banker through the concept, the risk logic, the checklist a compliance officer runs before opening a correspondent (nostro/vostro) account, and the red flags that separate a routine relationship from a laundering channel.

Correspondent banking lets a domestic bank offer its customers cross-border payments, trade settlement and foreign-currency services without a physical presence abroad. The convenience is real; so is the exposure. Because the respondent bank's customers are invisible to the correspondent, money-laundering and terrorist-financing risk is imported wholesale. Regulators — RBI through its Master Direction on KYC, and the FATF through Recommendation 13 — therefore treat these relationships as inherently high-risk and mandate enhanced due diligence rather than ordinary checks.

🏦 What Correspondent Banking Due Diligence Actually Means

A correspondent relationship is a banking arrangement in which one institution (the correspondent) provides deposit, payment or other services to another institution (the respondent). The classic form is the nostro/vostro account pair used to settle international payments. Correspondent banking due diligence is the enhanced, ongoing assessment the correspondent bank performs on the respondent institution before and throughout the relationship.

Unlike opening an account for a retail customer, here the "customer" is itself a regulated entity with its own book of clients. The correspondent cannot see those underlying clients directly, so it must instead satisfy itself that the respondent runs a credible AML/CFT programme. This means gathering information on the respondent's ownership and management, understanding the nature of its business, evaluating the quality of its regulation and supervision in its home jurisdiction, and assessing whether that jurisdiction has been the subject of money-laundering investigations or regulatory action.

The correspondent must also understand the respondent's own KYC and monitoring standards — effectively performing due diligence on the respondent's due diligence. Senior management approval is required before establishing a new correspondent relationship, and the respective AML/CFT responsibilities of each institution should be documented. This layered approach is what the IIBF wants candidates to articulate: correspondent banking is not "KYC for banks" done casually, it is a formal enhanced-due-diligence regime. For the mechanics of nostro/vostro operation and settlement, revise the dedicated chapter on correspondent banking.

🌍 Why Correspondent Relationships Carry Elevated Risk

The core problem is distance. Every layer between the correspondent bank and the ultimate originator of a payment weakens visibility. A single correspondent account can channel thousands of transactions daily on behalf of a respondent's customers whom the correspondent has never identified. If the respondent's controls are weak — or if it deliberately turns a blind eye — the correspondent becomes an unwitting conduit for illicit flows.

💡 Exam Tip: The FATF places correspondent banking under Recommendation 13. Remember the pairing "correspondent banking = enhanced due diligence + senior management sign-off + shell-bank prohibition" — examiners love this three-part answer.

Geography compounds the risk. If the respondent operates in a jurisdiction with weak AML supervision, high corruption, or FATF grey/black-list status, the correspondent inherits that country's risk profile. This is why country risk assessment is inseparable from correspondent due diligence — a technically clean respondent in a high-risk jurisdiction still elevates exposure. The interplay of jurisdiction and laundering is covered thoroughly in the chapter on country risk and money laundering, and the supranational rulebook in international guidelines and standards.

A further hazard is the "nested" or downstream relationship, where the respondent itself provides correspondent services to other banks. The correspondent may then be indirectly serving institutions it has never assessed at all. Similar layering risks appear in trade-based money laundering, where trade documents disguise value transfer across borders — a topic worth revising alongside this one.

📋 The Enhanced Due Diligence Checklist

Before a correspondent account is opened, the compliance function should be able to answer a defined set of questions. The exam frequently frames these as "which of the following is NOT part of correspondent EDD", so knowing the full list matters.

First, gather sufficient information about the respondent to understand fully the nature of its business — ownership, control structure, and beneficial owners. Proper identification of controllers overlaps with beneficial ownership identification, a recurring theme across the KYC-AML paper. Second, determine from public information the reputation of the respondent and the quality of supervision it is subject to, including whether it has faced money-laundering or terrorist-financing investigation. Third, assess the respondent's AML/CFT controls to satisfy the correspondent that they are adequate and effective.

Fourth, obtain approval from senior management before establishing the relationship. Fifth, clearly document the respective responsibilities of each institution. Sixth, where "payable-through accounts" are involved — accounts a respondent's customers can operate directly — the correspondent must be satisfied the respondent has verified those customers and can provide their identification data on request. Screening of the respondent's directors and owners against sanctions lists is also essential; see sanctions screening in banks for how watch-list checks integrate into onboarding. All of this must be refreshed periodically as part of ongoing monitoring, not treated as a one-time gate.

📊 Ordinary CDD vs Correspondent EDD

The cleanest way to lock this in for the exam is a side-by-side comparison of standard customer due diligence and the enhanced regime applied to correspondents.

⚠️ Common Mistake: Candidates write that correspondent banking uses the "same CDD as any customer". It does not — it is always enhanced due diligence, and shell-bank relationships are outright prohibited, not merely discouraged.

🚫 Shell Banks, Nested Accounts and Red Flags

A shell bank is a bank incorporated in a jurisdiction where it has no physical presence and is unaffiliated with a regulated financial group. FATF standards and RBI guidance prohibit banks from entering into, or continuing, correspondent relationships with shell banks, and require them to satisfy themselves that respondents do not permit their accounts to be used by shell banks. This absolute prohibition is a favourite one-mark question.

Red flags in a live correspondent relationship include: transaction volumes or values that are inconsistent with the respondent's stated business; sudden activity through a previously dormant account; payments to or from jurisdictions unrelated to the respondent's customer base; reluctance to provide beneficial-ownership or underlying-customer information; and evidence of nested relationships that were never disclosed at onboarding. Any of these should trigger review and, where warranted, a Suspicious Transaction Report to FIU-India under the PMLA framework. The national statutory architecture — obligations, reporting entities and penalties — is set out in the chapter on legislation at national level.

📌 Remember: Enhanced due diligence is ongoing, not one-off. Even a well-vetted respondent must be re-assessed as its risk profile, ownership or jurisdiction changes.

Because correspondent channels move value across borders at speed, they are also probed by cyber-enabled fraud; bankers preparing broadly should skim computer hacking techniques from the cyber-crime paper to see how technical and financial controls intersect. For a consolidated revision list, the KYC, AML and CFT topic hub gathers every related article in one place.

📚 Official reference: Always verify the latest rules, circulars and thresholds on the Reserve Bank of India (RBI) website before your exam — regulations change and only primary sources are authoritative.

🧠 Practice MCQs: Correspondent Banking Due Diligence

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

✅ Conclusion

Correspondent banking due diligence is where the abstract principles of KYC, AML and CFT meet real cross-border risk. Master the logic — imported customer risk, enhanced checks, senior-management approval, the shell-bank prohibition, and continuous monitoring — and you can answer almost any exam question in this area with confidence. Reinforce it with the linked chapters, then test yourself under exam conditions. Take a free KYC-AML mock test or enrol in the full JAIIB preparation course to lock in your score for 2026.