The reporting entities are required to obtain a lot of information while onboarding a customer as part of the CDD program. Based on the KYC documents, screening, and various risks associated with the customer, the customer’s risk profile is developed. This risk assessment needs to be used as a baseline against the customer’s business activities. Ongoing transactions with customers will throw light on the average value, frequency, nature, location, payment methods, and delivery channels associated with the business activities of the customer. Any business transaction that deviates from the risk rating of the customer requires a fresh risk assessment, suspicious activity report (SAR), or Suspicious Transactions Report (STR) filing with the UAE goAML portal.