HomeUnderstanding FATF Grey List and Blacklist Countries: What Businesses and Banks Need to Know in 2026
Imagine a fintech start-up whose banking partner suddenly freezes transactions in the middle of an investment round: the start-up’s home country has just been placed on the FATF grey list, and the bank cannot complete enhanced due diligence within the deal timeline. Scenarios like this show why FATF listings matter to businesses, not only to governments.
The Financial Action Task Force (FATF) grey list and blacklist are administrative designations identifying countries with strategic deficiencies in anti-money laundering (AML) and counter-terrorist financing (CFT) regimes. Three countries sit on the blacklist as of June 2026—Democratic People’s Republic of Korea (DPRK), Iran, and Myanmar—while 22 jurisdictions face increased monitoring on the grey list. What makes this distinction critical: blacklist status triggers mandatory counter-measures from financial institutions worldwide, including prohibitions on correspondent banking and trade finance. Grey-list placement requires enhanced due diligence but doesn’t shut down transactions outright—yet creates enough friction that deals commonly collapse within weeks.
FATF Grey List – officially termed “Jurisdictions under Increased Monitoring,” this designation applies to countries that have committed to resolve identified strategic deficiencies in their AML/CFT frameworks within agreed timelines, as assessed under the FATF’s International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation (the FATF Standards).
FATF Blacklist – formally called “High-Risk Jurisdictions subject to a Call for Action,” this category includes countries with such severe and persistent AML/CFT failures that FATF member states are obligated to apply counter-measures, including restrictions on financial transactions and prohibitions on establishing branches or subsidiaries of financial institutions from blacklisted jurisdictions.
Key Takeaways
- Three countries are on the FATF blacklist as of June 2026: DPRK, Iran, and Myanmar. FATF calls on jurisdictions to apply enhanced due diligence and, in the most serious cases, counter-measures, while stressing that legitimate humanitarian flows should not be disrupted.
- Twenty-two jurisdictions are grey-listed. Kuwait and Papua New Guinea joined in February 2026.
- Enhanced Due Diligence (EDD) under FATF Recommendation 19 means banks must obtain senior management sign-off for any new accounts or transactions tied to grey-list jurisdictions.
- Removal from the grey list requires completing a time-bound action plan, demonstrating sustained implementation through prosecutions, and passing an on-site FATF assessment visit. Many countries miss initial deadlines, extending grey-list stays by years.
What Is the FATF and Why Do Grey Lists and Blacklists Matter?
The Financial Action Task Force is an intergovernmental organisation established in 1989 by the G7 countries to develop policies combating money laundering, terrorist financing, and proliferation financing. FATF sets international standards—the FATF Recommendations—that more than 200 jurisdictions have committed to implement. The grey list and blacklist are not legal instruments governed by treaties or courts. They’re administrative findings published three times yearly (February, June, October) based on mutual evaluation reports and ongoing monitoring by FATF’s regional style bodies.
Why they matter: when a country lands on either list, automatic compliance obligations ripple through the global banking system. Every financial institution in FATF member states must adjust risk models, transaction monitoring rules, and customer acceptance policies within weeks. Practically, this means delayed payments, frozen accounts, rejected wire transfers, and—as in the example above—collapsed financing arrangements. Insurance underwriters recalculate political risk premiums.
How do FATF lists affect international banks and financial institutions?
International banks operate under enforcement risk if they fail to apply required measures. For grey-listed countries, banks must conduct Enhanced Due Diligence under FATF Recommendation 19: obtain senior management approval for new business relationships, enhance ongoing transaction monitoring, and develop reasonable understanding of wealth sources. Blacklisted countries trigger stronger counter-measures—typically terminating correspondent banking relationships, prohibiting subsidiaries or branches, and in some cases ceasing all financial services to entities domiciled there. The cost of non-compliance is substantial. Regulatory sanctions from UK, US, and EU authorities have ranged from millions in fines to revocation of banking licences.
What’s the Difference Between the FATF Grey List and Blacklist?
Grey-list countries have recognised deficiencies and committed to action plans with specific deadlines. Blacklist countries either refuse cooperation or face such severe failures that immediate protective measures are necessary. Operationally, grey-listed jurisdictions retain normal access to international financial markets—but with enhanced scrutiny that makes routine transactions take weeks instead of days. Blacklisted jurisdictions face mandatory counter-measures that result in de facto financial isolation: no correspondent banking, restricted SWIFT messaging, and prohibitions on cross-border capital movements except humanitarian exceptions.
Consider Iran’s situation. Subject to FATF calls for action for many years, it has been nearly excluded from the dollar-denominated global payment system despite partial sanctions relief under the 2015 nuclear agreement. That’s the practical difference between “harder to do business” and “nearly impossible to do business.”
| Designation | Official FATF Term | Required Measures | Practical Impact |
|---|---|---|---|
| Grey List | Jurisdictions under Increased Monitoring | Enhanced Due Diligence (EDD) per Recommendation 19 | Transaction delays, higher compliance costs, reduced FDI |
| Blacklist | High-Risk Jurisdictions subject to a Call for Action | Mandatory counter-measures including transaction prohibitions | Financial isolation, currency instability, trade collapse |
Countries move from grey to blacklist when they miss action plan deadlines or when assessments reveal systemic non-compliance. Myanmar was moved to the call-for-action list in October 2022 after insufficient progress on its action plan. Once a country reaches that level, getting off the list is extremely difficult.
Which countries are currently on the FATF blacklist?
Three countries occupy the FATF blacklist as of June 2026: Democratic People’s Republic of Korea, Iran, and Myanmar. The DPRK has been on the list for many years because of serious proliferation financing concerns. Iran remains listed because of terrorist financing risks and incomplete legal reforms. Myanmar was added in October 2022.
For these three jurisdictions, FATF advises member states to terminate correspondent banking relationships, prohibit financial institutions from establishing branches or subsidiaries, and apply enhanced scrutiny to any financial flows linked to those jurisdictions—regardless of routing through intermediaries.
Which Countries Are Currently on the FATF Grey List?
As of June 2026, 22 jurisdictions are grey-listed: Angola, Bolivia, Bosnia and Herzegovina, Bulgaria, Cameroon, Côte d’Ivoire, Democratic Republic of the Congo, Haiti, Iraq, Kenya, Kuwait, Laos, Lebanon, Monaco, Nepal, Papua New Guinea, South Sudan, Syria, Venezuela, Vietnam, Yemen and the British Virgin Islands. Kuwait and Papua New Guinea arrived most recently in February 2026. The list changes after each FATF plenary (February, June and October), so always check the current version on the FATF website.
Common reasons for placement include inadequate asset freezing frameworks, missing money laundering prosecutions, weak bank supervision, insufficient beneficial ownership registries, and lack of international cooperation mechanisms.
Countries on the grey list have committed to resolve strategic deficiencies within 12 to 24 months through action plans co-developed with FATF regional bodies and technical assistance providers.
How long do countries typically stay on the FATF grey list?
It depends. Countries with narrow technical deficiencies—say, a legal gap in a single FATF Recommendation—can complete action plans and achieve delisting within 12 to 18 months. Countries requiring comprehensive legal reform, institutional capacity building, and demonstrated effectiveness through prosecutions stay listed for 24 to 48 months, sometimes longer.
What Are the Consequences of Being on a FATF Grey List or Blacklist?
Financial consequences begin immediately upon listing. Correspondent banks in FATF member states must recalibrate risk models—in practice, this means reclassifying all customers and transactions linked to the listed jurisdiction as high-risk. This triggers Enhanced Due Diligence reviews for existing accounts, senior management approval requirements for new business relationships, and enhanced transaction monitoring that flags routine payments for manual review. Processing times for international wire transfers can increase significantly as compliance teams investigate source of funds, beneficial ownership, and transaction purpose.
Trade finance collapses almost immediately. Letters of credit from banks in grey-listed countries may be rejected or require much higher collateral. Import-export businesses lose access to receivables financing and supply chain credit.
Foreign direct investment can decline, with capital-intensive sectors such as infrastructure and real estate often most exposed. Domestic investors interpret grey-listing as a governance failure and accelerate capital flight.
Currency instability follows. Grey-listing signals weak governance, prompting domestic elites and foreign portfolio investors to move money offshore. Central banks must defend exchange rates by raising interest rates or depleting foreign reserves.
What happens when a country is added to the FATF blacklist?
Financial isolation becomes near-total. FATF member states apply counter-measures proportionate to risks, which in practice means prohibiting their financial institutions from establishing or maintaining correspondent banking relationships with banks domiciled in blacklisted countries. SWIFT messaging remains technically available but is operationally useless without correspondent banks willing to clear dollar, euro, or pound transactions. Blacklisted countries lose access to international payment systems for all practical purposes except limited humanitarian channels pre-approved by sanctions authorities.
Trade collapses. Buyers may be unable to remit payments, and exporters may be unable to obtain letters of credit. Energy and commodity exporters in blacklisted countries must accept payment in non-convertible currencies, physical gold, or countertrade arrangements involving goods rather than cash.
Insurance becomes very difficult to obtain. Political risk, cargo and liability cover for transactions involving blacklisted jurisdictions may be unavailable.
How Can Countries Get Removed from FATF Grey and Blacklists?
Removal from the grey list requires completing three stages: legislative reform, institutional capacity building, and demonstrated effectiveness. First, the country must enact laws addressing identified deficiencies in the FATF Recommendations—typically amendments to criminal codes criminalising money laundering and terrorist financing, beneficial ownership registries, asset freezing mechanisms, and international cooperation frameworks. Second, the country must establish or strengthen institutions including financial intelligence units, supervisory authorities for banks and designated non-financial businesses, and specialised prosecution units. Third, the country must demonstrate effectiveness through actual prosecutions, asset confiscations, and supervision enforcement actions, not merely enacting laws that remain unenforced.
FATF conducts on-site visits to verify implementation before recommending delisting. These visits involve interviews with prosecutors, judges, financial institution compliance officers, and civil society organisations to assess whether reforms are genuine or cosmetic. The assessment focuses on outcomes: How many money laundering prosecutions have occurred? What is the conviction rate? What asset values have been frozen or confiscated? Are financial institutions actually filing suspicious transaction reports, and are those reports leading to investigations?
Timeline for removal varies based on scope of reforms required. Countries addressing narrow technical gaps complete action plans within 12-18 months. Jurisdictions requiring comprehensive legal overhaul and institutional development remain grey-listed for 24-48 months. No fixed deadline exists; FATF evaluates progress at each plenary meeting (three times annually) and recommends delisting only when satisfied that all action plan items are substantially complete and sustainable.
| Delisting Stage | Requirements | Typical Duration |
|---|---|---|
| Legislative Reform | Enact laws addressing FATF Recommendations gaps | 6-12 months |
| Institutional Capacity | Establish functioning FIU, supervisory authorities, prosecution units | 12-18 months |
| Demonstrated Effectiveness | Achieve prosecutions, asset seizures, supervision enforcement actions | 12-24 months |
| On-Site Assessment | FATF verification visit and plenary review | 3-6 months |
What steps must a country take to be removed from the FATF grey list?
Specific steps are defined in a time-bound action plan agreed between the country and FATF. Typical action items include enacting comprehensive AML/CFT legislation aligned with the FATF Recommendations; establishing a functioning financial intelligence unit with legal authority to receive, analyse, and disseminate suspicious transaction reports; implementing risk-based supervision of banks, money service businesses, and designated non-financial businesses such as casinos, real estate agents, and dealers in precious metals; creating publicly accessible beneficial ownership registries for companies and trusts; demonstrating the ability to freeze terrorist assets without delay following UN Security Council designations; and providing effective mutual legal assistance in money laundering and terrorist financing investigations.
Countries must also demonstrate effectiveness metrics agreed in the action plan. In practice this means showing that the new framework is actually used — through investigations, prosecutions and confiscations — before FATF will consider delisting. The emphasis on outcomes prevents countries from enacting laws without enforcing them.
How Do FATF Listings Affect Your Business and Compliance Obligations?
If your business operates in, trades with, or maintains banking relationships in a grey-listed country, you face immediate compliance obligations regardless of your company’s domicile. Financial institutions serving your business must apply Enhanced Due Diligence, which means your account is flagged for manual review of every transaction. Expect requests for detailed documentation of transaction purpose, source of funds, beneficial ownership charts, and business relationship justification. Payment processing times can increase significantly as compliance teams investigate and obtain approvals.
Due diligence requirements escalate across your supply chain. UK or EU companies importing goods from a grey-listed country will find their bank requires proof that suppliers are not shell companies, documentation of the commercial rationale for transactions, and evidence that goods represent genuine trade rather than trade-based money laundering. For larger transactions, expect supplier business registration documents, tax identification numbers, site visit reports, and shipping documentation evidencing actual movement of goods rather than fictitious invoicing.
Insurance costs rise or coverage becomes unavailable. Political risk insurance premiums for investments in grey-listed countries can rise, and trade credit insurance—which protects exporters against buyer non-payment—may become unavailable or much more restrictive. For businesses with substantial exposure to grey-listed markets, this means either accepting uninsured risk or exiting the market entirely.
What compliance risks do businesses face when dealing with grey-listed countries?
Your home jurisdiction’s financial supervisory authority can enforce penalties for AML/CFT violations even if no actual money laundering occurred. Maintain business relationships in grey-listed countries without Enhanced Due Diligence, and you’re exposed. In the UK, breaches of the Money Laundering Regulations 2017 can lead to civil penalties and criminal prosecution; US and EU regulators have comparable enforcement powers.
Reputational damage cuts deeper than fines. Public disclosure of AML/CFT violations—even settlements without admission of wrongdoing—triggers customer exodus, banking relationship termination, and exclusion from public procurement tenders. For regulated sectors (finance, pharmaceuticals, defence), violations can mean licence revocation regardless of penalties paid. One enforcement action can take years to recover from.
⚠️ Time is critical — every day matters
Get a free case assessment
Our team specialises in cases with an international element. We review applicable treaties, assess risks, and prepare an action plan.
🔒 Confidential · Response within 24h · No obligation
Frequently Asked Questions
What does it mean if a country is on the FATF grey list?
A country on the FATF grey list has strategic deficiencies in its anti-money laundering and counter-terrorist financing systems but has committed to an action plan with specific deadlines to address those deficiencies. Financial institutions worldwide must apply Enhanced Due Diligence to transactions involving that country—meaning additional documentation requirements, senior management approval, and enhanced monitoring. That said, the country remains under FATF monitoring until it completes the action plan and demonstrates effectiveness through prosecutions and enforcement actions. Timelines vary: some countries clear their action plans in 18 months, others remain listed for five years or longer.
Are FATF grey list countries safe for business?
Grey-list countries remain legally open for business. Operationally? That’s a different story. International wire transfers face delays of 5–15 business days (meaning cash flow forecasting becomes unreliable), trade finance costs rise by 2–4 percentage points, and letters of credit require higher collateral. Foreign direct investment typically declines 7–6% within the first year of listing due to increased compliance costs and banking relationship difficulties. You can operate in grey-listed countries, but expect higher costs, longer transaction times, and substantial documentation burdens to satisfy Enhanced Due Diligence requirements.
How often are FATF lists updated?
FATF publishes updated grey lists and blacklists three times annually following plenary meetings held in February, June, and October. Countries can be added or removed at any plenary meeting based on completion of action plans, mutual evaluation reports, or significant deterioration in AML/CFT controls. Urgent additions happen outside the regular schedule if a country experiences sudden collapse of financial supervision or government takeover by entities linked to terrorist financing—Myanmar’s February 2023 addition is the most recent example. If you operate internationally, calendar these meetings.
Can sanctions be imposed on individuals or businesses in grey-listed countries?
FATF listings don’t impose sanctions on individuals or businesses; they impose compliance obligations on financial institutions. Here’s the catch: businesses domiciled in grey-listed countries face practical sanctions-equivalent effects. Banks refuse to open accounts. Existing accounts get frozen pending Enhanced Due Diligence reviews. Correspondent banks terminate wire transfer services. These effects result from compliance decisions by individual banks, not legal prohibitions. You can challenge account closures through national banking ombudsmen, but success rates are low because banks have wide discretion in customer acceptance decisions based on risk assessments.
What’s the difference between FATF and OFAC sanctions?
FATF listings are administrative risk assessments that impose compliance obligations; OFAC sanctions are legally binding prohibitions under US law that carry criminal and civil penalties for violations. FATF grey-listing requires Enhanced Due Diligence but does not prohibit transactions. OFAC sanctions prohibit specified transactions entirely and freeze assets of designated individuals and entities. The Philippines from 2000–2003 was FATF grey-listed but not subject to OFAC sanctions. Russia since 2022 faces comprehensive OFAC sanctions without being FATF grey-listed or blacklisted. The lists don’t move together.
