You must conduct CDD in the following circumstances:
When you establish a business relationship with a new client for a captured activity.
A client seeks to conduct an occasional transaction or occasional activity through you.
In relation to an existing client, and according to the level of risk involved:
There has been a material change in the nature or purpose of the business relationship; and
you consider that you have insufficient information about the client.
As soon as practicable after you become aware that an existing account is anonymous.