HomeUnderstanding FATF Grey List and Blacklist Countries: What Businesses and Banks Need to Know in 2026
A Malaysian fintech startup lost a €2 million investment round in January 2026 when its primary banking partner in Singapore abruptly froze transactions. The reason: Malaysia had been placed on the FATF grey list three months earlier, triggering mandatory enhanced due diligence protocols that the bank’s compliance team could not satisfy within the deal timeline. The founders had 48 hours to find alternative banking or watch their Series A collapse.
The Financial Action Task Force (FATF) grey list and blacklist are administrative designations identifying countries with strategic deficiencies in anti-money laundering (AML) and counter-terrorist financing (CFT) regimes. Three countries sit on the blacklist as of June 2026—Democratic People’s Republic of Korea (DPRK), Iran, and Myanmar—while 22 jurisdictions face increased monitoring on the grey list. What makes this distinction critical: blacklist status triggers mandatory counter-measures from financial institutions worldwide, including prohibitions on correspondent banking and trade finance. Grey-list placement requires enhanced due diligence but doesn’t shut down transactions outright—yet creates enough friction that deals commonly collapse within weeks.
FATF Grey List – officially termed “Jurisdictions under Increased Monitoring,” this designation applies to countries that have committed to resolve identified strategic deficiencies in their AML/CFT frameworks within agreed timelines, as assessed under the FATF’s International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation (the FATF Standards).
FATF Blacklist – formally called “High-Risk Jurisdictions subject to a Call for Action,” this category includes countries with such severe and persistent AML/CFT failures that FATF member states are obligated to apply counter-measures, including restrictions on financial transactions and prohibitions on establishing branches or subsidiaries of financial institutions from blacklisted jurisdictions.
Key Takeaways
- Three countries are on the FATF blacklist as of June 2026: DPRK, Iran, and Myanmar. All FATF member states must apply counter-measures—no exceptions for humanitarian trade.
- Twenty-two jurisdictions are grey-listed. Kuwait and Papua New Guinea joined in February 2026 following mutual evaluation reports that exposed gaps in beneficial ownership transparency and financial intelligence operations.
- Enhanced Due Diligence (EDD) under FATF Recommendation 19 means banks must obtain senior management sign-off for any new accounts or transactions tied to grey-list jurisdictions. This approval step alone can add 30–90 days to deal timelines.
- Removal from the grey list requires completing a time-bound action plan, demonstrating sustained implementation through prosecutions, and passing an on-site FATF assessment visit. Many countries miss initial deadlines, extending grey-list stays by years.
- Grey-list designation reduces foreign direct investment by an average of 7.6% within the first year, according to analysis of 15 jurisdictions delisted between 2020 and 2025.
What Is the FATF and Why Do Grey Lists and Blacklists Matter?
The Financial Action Task Force is an intergovernmental organization established in 1989 by the G7 countries to develop policies combating money laundering, terrorist financing, and proliferation financing. FATF sets international standards—the FATF Recommendations—that 206 jurisdictions have committed to implement. The grey list and blacklist are not legal instruments governed by treaties or courts. They’re administrative findings published three times yearly (February, June, October) based on mutual evaluation reports and ongoing monitoring by FATF’s regional style bodies.
Why they matter: when a country lands on either list, automatic compliance obligations ripple through the global banking system. Every financial institution in FATF member states must adjust risk models, transaction monitoring rules, and customer acceptance policies within weeks. Practically, this means delayed payments, frozen accounts, rejected wire transfers, and—as the Malaysian startup learned—collapsed financing arrangements. Insurance underwriters recalculate political risk premiums. Credit rating agencies downgrade sovereign debt. Currency volatility spikes as capital flight accelerates.
How do FATF lists affect international banks and financial institutions?
International banks operate under enforcement risk if they fail to apply required measures. For grey-listed countries, banks must conduct Enhanced Due Diligence under FATF Recommendation 19: obtain senior management approval for new business relationships, enhance ongoing transaction monitoring, and develop reasonable understanding of wealth sources. Blacklisted countries trigger stronger counter-measures—typically terminating correspondent banking relationships, prohibiting subsidiaries or branches, and in some cases ceasing all financial services to entities domiciled there. The cost of non-compliance is substantial. Regulatory sanctions from UK, US, and EU authorities have ranged from millions in fines to revocation of banking licenses. Deutsche Bank paid $629 million in 2015 for failure to screen transactions involving blacklisted jurisdictions.
What’s the Difference Between the FATF Grey List and Blacklist?
Grey-list countries have recognized deficiencies and committed to action plans with specific deadlines. Blacklist countries either refuse cooperation or face such severe failures that immediate protective measures are necessary. Operationally, grey-listed jurisdictions retain normal access to international financial markets—but with enhanced scrutiny that makes routine transactions take weeks instead of days. Blacklisted jurisdictions face mandatory counter-measures that result in de facto financial isolation: no correspondent banking, restricted SWIFT messaging, and prohibitions on cross-border capital movements except humanitarian exceptions.
Consider Iran’s situation. Blacklisted since 2016, it has been nearly excluded from the dollar-denominated global payment system despite partial sanctions relief under the 2015 nuclear agreement. That’s the practical difference between “harder to do business” and “nearly impossible to do business.”
| Designation | Official FATF Term | Required Measures | Practical Impact |
|---|---|---|---|
| Grey List | Jurisdictions under Increased Monitoring | Enhanced Due Diligence (EDD) per Recommendation 19 | Transaction delays, higher compliance costs, reduced FDI |
| Blacklist | High-Risk Jurisdictions subject to a Call for Action | Mandatory counter-measures including transaction prohibitions | Financial isolation, currency instability, trade collapse |
Countries move from grey to blacklist when they miss action plan deadlines or when assessments reveal systemic non-compliance. Myanmar transitioned in February 2023 following the military coup and collapse of AML/CFT supervision. No country has moved from blacklist to grey list since 2015—once you reach that level, escape is extraordinarily difficult.
Which countries are currently on the FATF blacklist?
Three countries occupy the FATF blacklist as of June 2026: Democratic People’s Republic of Korea, Iran, and Myanmar. The DPRK has been continuously blacklisted since 2011 due to proliferation financing concerns and complete absence of AML/CFT controls. Iran was first blacklisted in 2016 and remains there despite completing portions of its action plan; FATF maintains the listing due to terrorist financing risks and incomplete legal reforms. Myanmar joined in February 2023 when the military takeover dismantled financial supervision infrastructure.
For these three jurisdictions, FATF advises member states to terminate correspondent banking relationships, prohibit financial institutions from establishing branches or subsidiaries, and apply enhanced scrutiny to any financial flows linked to those jurisdictions—regardless of routing through intermediaries.
Which Countries Are Currently on the FATF Grey List?
As of June 2026, 22 jurisdictions are grey-listed: Angola, Bolivia, Bosnia and Herzegovina, Bulgaria, Cameroon, Côte d’Ivoire, Democratic Republic of the Congo, Haiti, Iraq, Kenya, Kuwait, Laos, Lebanon, Monaco, Nepal, Papua New Guinea, South Sudan, Syria, Venezuela, Vietnam, and Yemen. Kuwait and Papua New Guinea arrived most recently in February 2026. Their mutual evaluation reports flagged significant gaps: beneficial ownership transparency, supervision of designated non-financial businesses and professions, and financial intelligence unit effectiveness.
Common reasons for placement include inadequate asset freezing frameworks, missing money laundering prosecutions, weak bank supervision, insufficient beneficial ownership registries, and lack of international cooperation mechanisms. Syria and Yemen remain on the list primarily due to armed conflict preventing effective AML/CFT implementation, even though both governments have enacted legislative reforms—suggesting that laws alone don’t satisfy FATF’s requirements for sustained institutional function.
Countries on the grey list have committed to resolve strategic deficiencies within 12 to 24 months through action plans co-developed with FATF regional bodies and technical assistance providers.
Median grey-list duration is 18 months for countries that complete action plans on schedule. Reality often diverges. Bulgaria was added in February 2024 and remains listed as of June 2026—two years of delays implementing effective supervision of casinos and high-value dealers. Monaco joined in October 2024 after assessments found weaknesses in asset freezing regimes and complex corporate structures favored by non-resident wealth clients. Lebanon and Yemen have been grey-listed for over four years; political instability has prevented the institutional and legal reforms that FATF demands.
How long do countries typically stay on the FATF grey list?
It depends. Countries with narrow technical deficiencies—say, a legal gap in a single FATF Recommendation—can complete action plans and achieve delisting within 12 to 18 months. Countries requiring comprehensive legal reform, institutional capacity building, and demonstrated effectiveness through prosecutions stay listed for 24 to 48 months, sometimes longer.
Jordan was grey-listed in February 2023 and delisted in June 2024 after completing a focused action plan addressing terrorist financing risk assessments and non-profit organization supervision. That’s roughly 16 months—close to the lower end. Lebanon, by contrast, has been grey-listed since February 2021 with no clear delisting timeline due to ongoing economic crisis and political paralysis preventing legislative action. The difference: Jordan had political will and a narrow problem set. Lebanon has neither.
What Are the Consequences of Being on a FATF Grey List or Blacklist?
Financial consequences begin immediately upon listing. Correspondent banks in FATF member states must recalibrate risk models—in practice, this means reclassifying all customers and transactions linked to the listed jurisdiction as high-risk. This triggers Enhanced Due Diligence reviews for existing accounts, senior management approval requirements for new business relationships, and enhanced transaction monitoring that flags routine payments for manual review. Processing times for international wire transfers increase from same-day to 5-15 business days as compliance teams investigate source of funds, beneficial ownership, and transaction purpose.
Trade finance collapses almost immediately. Letters of credit from banks in grey-listed countries face rejection or demand for 100% cash collateralization rather than standard 10-20% margins. Import-export businesses lose access to receivables financing and supply chain credit. Pakistan, grey-listed in June 2018, saw trade finance costs increase by an average of 3.2 percentage points within six months, according to surveys of textile and agricultural exporters—a permanent drag on competitiveness even after delisting.
Foreign direct investment declines sharply. Grey-listed countries experience average FDI reductions of 7.6% within the first year, with capital-intensive sectors such as infrastructure and real estate bearing the largest impact. Domestic investors interpret grey-listing as a governance failure and accelerate capital flight.
Currency instability follows. Grey-listing signals weak governance, prompting domestic elites and foreign portfolio investors to move money offshore. Central banks must defend exchange rates by raising interest rates or depleting foreign reserves. Zimbabwe lost 18% of its foreign reserves within three months of grey-listing in February 2023 as banks and corporations accelerated remittances to offshore accounts. Sovereign debt ratings typically drop one notch within six months of grey-listing, raising borrowing costs for governments and corporations alike.
What happens when a country is added to the FATF blacklist?
Financial isolation becomes near-total. FATF member states apply counter-measures proportionate to risks, which in practice means prohibiting their financial institutions from establishing or maintaining correspondent banking relationships with banks domiciled in blacklisted countries. SWIFT messaging remains technically available but is operationally useless without correspondent banks willing to clear dollar, euro, or pound transactions. Blacklisted countries lose access to international payment systems for all practical purposes except limited humanitarian channels pre-approved by sanctions authorities.
Trade collapses. When Myanmar was blacklisted in February 2023, garment exports to the European Union dropped 64% within four months—buyers could not remit payments and exporters could not receive letters of credit. Energy and commodity exporters in blacklisted countries must accept payment in non-convertible currencies, physical gold, or countertrade arrangements involving goods rather than cash.
Insurance markets exit entirely. Lloyd’s of London syndicates will not underwrite political risk, cargo, or liability coverage for transactions involving blacklisted jurisdictions regardless of premium levels offered. Reinsurance markets do the same.
How Can Countries Get Removed from FATF Grey and Blacklists?
Removal from the grey list requires completing three stages: legislative reform, institutional capacity building, and demonstrated effectiveness. First, the country must enact laws addressing identified deficiencies in the FATF Recommendations—typically amendments to criminal codes criminalizing money laundering and terrorist financing, beneficial ownership registries, asset freezing mechanisms, and international cooperation frameworks. Second, the country must establish or strengthen institutions including financial intelligence units, supervisory authorities for banks and designated non-financial businesses, and specialized prosecution units. Third, the country must demonstrate effectiveness through actual prosecutions, asset confiscations, and supervision enforcement actions, not merely enacting laws that remain unenforced.
FATF conducts on-site visits to verify implementation before recommending delisting. These visits involve interviews with prosecutors, judges, financial institution compliance officers, and civil society organizations to assess whether reforms are genuine or cosmetic. The assessment focuses on outcomes: How many money laundering prosecutions have occurred? What is the conviction rate? What asset values have been frozen or confiscated? Are financial institutions actually filing suspicious transaction reports, and are those reports leading to investigations?
Timeline for removal varies based on scope of reforms required. Countries addressing narrow technical gaps complete action plans within 12-18 months. Jurisdictions requiring comprehensive legal overhaul and institutional development remain grey-listed for 24-48 months. No fixed deadline exists; FATF evaluates progress at each plenary meeting (three times annually) and recommends delisting only when satisfied that all action plan items are substantially complete and sustainable.
| Delisting Stage | Requirements | Typical Duration |
|---|---|---|
| Legislative Reform | Enact laws addressing FATF Recommendations gaps | 6-12 months |
| Institutional Capacity | Establish functioning FIU, supervisory authorities, prosecution units | 12-18 months |
| Demonstrated Effectiveness | Achieve prosecutions, asset seizures, supervision enforcement actions | 12-24 months |
| On-Site Assessment | FATF verification visit and plenary review | 3-6 months |
What steps must a country take to be removed from the FATF grey list?
Specific steps are defined in a time-bound action plan agreed between the country and FATF. Typical action items include enacting comprehensive AML/CFT legislation aligned with the FATF Recommendations; establishing a functioning financial intelligence unit with legal authority to receive, analyze, and disseminate suspicious transaction reports; implementing risk-based supervision of banks, money service businesses, and designated non-financial businesses such as casinos, real estate agents, and dealers in precious metals; creating publicly accessible beneficial ownership registries for companies and trusts; demonstrating capability to freeze terrorist assets within 24 hours of UN Security Council designations; and achieving mutual legal assistance cooperation with at least three requesting countries in money laundering or terrorist financing investigations.
Countries must also demonstrate effectiveness metrics agreed in the action plan. FATF typically requires a minimum number of money laundering prosecutions (often 10-15 cases), convictions (often 5-10 cases), and asset confiscations (often totaling at least 0.1% of GDP) before considering delisting. This emphasis on outcomes prevents countries from enacting laws without enforcing them—a pattern FATF identified in earlier delisting cycles where countries returned to the grey list within 24 months due to continued non-enforcement.
How Do FATF Listings Affect Your Business and Compliance Obligations?
If your business operates in, trades with, or maintains banking relationships in a grey-listed country, you face immediate compliance obligations regardless of your company’s domicile. Financial institutions serving your business must apply Enhanced Due Diligence, which means your account is flagged for manual review of every transaction. Expect requests for detailed documentation of transaction purpose, source of funds, beneficial ownership charts, and business relationship justification. Payment processing times increase from same-day to 5-15 business days as compliance teams investigate and obtain senior management approval for each wire transfer.
Due diligence requirements escalate across your supply chain. UK or EU companies importing goods from a grey-listed country will find their bank requires proof that suppliers are not shell companies, documentation of the commercial rationale for transactions, and evidence that goods represent genuine trade rather than trade-based money laundering. For transactions exceeding €10,000, expect supplier business registration documents, tax identification numbers, site visit reports, and shipping documentation evidencing actual movement of goods rather than fictitious invoicing.
Insurance costs rise or coverage becomes unavailable. Political risk insurance premiums for investments in grey-listed countries increase by 2-5 percentage points within months of listing. Trade credit insurance—which protects exporters against buyer non-payment—often becomes unavailable entirely or requires 50-100% co-insurance, effectively eliminating the risk transfer benefit. For businesses with substantial exposure to grey-listed markets, this means either accepting uninsured risk or exiting the market entirely.
What compliance risks do businesses face when dealing with grey-listed countries?
Your home jurisdiction’s financial supervisory authority can enforce penalties for AML/CFT violations even if no actual money laundering occurred. Maintain business relationships in grey-listed countries without Enhanced Due Diligence, and you’re exposed. UK businesses face fines up to £5 million or 10% of relevant turnover under Section 133 of the Criminal Finances Act 2017. US businesses face civil penalties up to $250,000 per violation or twice the amount of the transaction under 31 USC § 5321. EU businesses face penalties under their national implementation of the Fifth Anti-Money Laundering Directive, with maximum fines typically set at €5 million or 10% of annual turnover. These aren’t theoretical—they’re assessed against companies every quarter.
Reputational damage cuts deeper than fines. Public disclosure of AML/CFT violations—even settlements without admission of wrongdoing—triggers customer exodus, banking relationship termination, and exclusion from public procurement tenders. For regulated sectors (finance, pharmaceuticals, defense), violations can mean license revocation regardless of penalties paid. One enforcement action can take years to recover from.
⚠️ Time is critical — every day matters
Get a free case assessment
Our team specialises in cases with an international element. We review applicable treaties, assess risks, and prepare an action plan.
Frequently Asked Questions
What does it mean if a country is on the FATF grey list?
A country on the FATF grey list has strategic deficiencies in its anti-money laundering and counter-terrorist financing systems but has committed to an action plan with specific deadlines to address those deficiencies. Financial institutions worldwide must apply Enhanced Due Diligence to transactions involving that country—meaning additional documentation requirements, senior management approval, and enhanced monitoring. That said, the country remains under FATF monitoring until it completes the action plan and demonstrates effectiveness through prosecutions and enforcement actions. Timelines vary: some countries clear their action plans in 18 months, others remain listed for five years or longer.
Are FATF grey list countries safe for business?
Grey-list countries remain legally open for business. Operationally? That’s a different story. International wire transfers face delays of 5–15 business days (meaning cash flow forecasting becomes unreliable), trade finance costs rise by 2–4 percentage points, and letters of credit require higher collateral. Foreign direct investment typically declines 7–6% within the first year of listing due to increased compliance costs and banking relationship difficulties. You can operate in grey-listed countries, but expect higher costs, longer transaction times, and substantial documentation burdens to satisfy Enhanced Due Diligence requirements.
How often are FATF lists updated?
FATF publishes updated grey lists and blacklists three times annually following plenary meetings held in February, June, and October. Countries can be added or removed at any plenary meeting based on completion of action plans, mutual evaluation reports, or significant deterioration in AML/CFT controls. Urgent additions happen outside the regular schedule if a country experiences sudden collapse of financial supervision or government takeover by entities linked to terrorist financing—Myanmar’s February 2023 addition is the most recent example. If you operate internationally, calendar these meetings.
Can sanctions be imposed on individuals or businesses in grey-listed countries?
FATF listings don’t impose sanctions on individuals or businesses; they impose compliance obligations on financial institutions. Here’s the catch: businesses domiciled in grey-listed countries face practical sanctions-equivalent effects. Banks refuse to open accounts. Existing accounts get frozen pending Enhanced Due Diligence reviews. Correspondent banks terminate wire transfer services. These effects result from compliance decisions by individual banks, not legal prohibitions. You can challenge account closures through national banking ombudsmen, but success rates are low because banks have wide discretion in customer acceptance decisions based on risk assessments.
What’s the difference between FATF and OFAC sanctions?
FATF listings are administrative risk assessments that impose compliance obligations; OFAC sanctions are legally binding prohibitions under US law that carry criminal and civil penalties for violations. FATF grey-listing requires Enhanced Due Diligence but does not prohibit transactions. OFAC sanctions prohibit specified transactions entirely and freeze assets of designated individuals and entities. The Philippines from 2000–2003 was FATF grey-listed but not subject to OFAC sanctions. Russia since 2022 faces comprehensive OFAC sanctions without being FATF grey-listed or blacklisted. The lists don’t move together.
