Understanding the FATF: A Guide for Private Sector Stakeholders

Part 3: Consequences of FATF Listings and Lessons Learned

📅 May 13, 2026

In Part 1 of this series, we described the FATF’s 40 Recommendations and their direct implications for financial institutions, designated non-financial businesses and professions (DNFBPs), and virtual asset service providers (VASPs). In Part 2, we walked through the mutual evaluation process—the technical compliance and effectiveness assessments that form the basis of FATF ratings—and explained how jurisdictions with strategic deficiencies are referred to the FATF’s International Co-operation Review Group (ICRG) and, if insufficient progress is made, placed on the Grey List or Black List.

This final installment examines what those listings actually mean in practice: the consequences for listed jurisdictions, for their trading and financial partners, and for the broader international financial system. We also draw out the lessons learned from jurisdictions that have successfully exited the Grey List, using the United Arab Emirates (UAE) as a detailed case study.

For compliance and risk professionals at financial institutions, DNFBPs, and VASPs, understanding these consequences is not merely an academic exercise. FATF listing status directly shapes the legal and regulatory obligations, supervisory expectations, and risk management decisions your institution faces every day.

Consequences for Listed Jurisdictions

Reputational Damage and Investor Confidence

Grey- or black-listing triggers immediate and visible reputational consequences. FATF listings are public, widely monitored by international banks, rating agencies, institutional investors, and multilateral bodies, and prominently flagged in country risk assessments across the private sector. A listing signals to the global financial community that a jurisdiction’s AML/CFT/CPF framework has strategic deficiencies—and that illicit funds moving through it may not be adequately identified, investigated, or prosecuted.

For jurisdictions that position themselves as regional financial hubs or trade gateways, this signal is particularly damaging. The reputational effects can be difficult to reverse even after substantive reforms are underway, because market perceptions often lag behind regulatory reality.

Correspondent Banking Pressure and De-Risking

One of the most immediate and concrete consequences of grey-listing is the pressure it places on correspondent banking relationships. Correspondent banking—the arrangements through which banks in different jurisdictions settle cross-border transactions on each other’s behalf—is the operational backbone of international payments and trade finance. When a jurisdiction is grey-listed, foreign banks maintaining correspondent relationships with financial institutions in that jurisdiction face heightened regulatory scrutiny from their own supervisors, who expect demonstrably risk-based decisions about which counterparties they serve.

Many correspondent banks respond by de-risking: restricting the range of services they offer, demanding more extensive documentation, increasing fees, or terminating relationships altogether. The practical consequences for businesses and individuals in grey-listed jurisdictions can be significant—cross-border payments become slower, more expensive, and in some cases unavailable. Trade finance, which depends on smooth correspondent relationships, is particularly vulnerable.

For smaller financial institutions in grey-listed jurisdictions, the risk of losing correspondent relationships entirely is real. Once a correspondent bank exits, finding a replacement can be difficult, and the institution may find itself unable to process international transactions at all. For jurisdictions that depend heavily on remittances—incoming transfers from diaspora communities abroad—this can translate into higher costs and reduced access to funds for ordinary households.

Foreign Direct Investment and Capital Flows

FATF listing status is now routinely incorporated into the country risk assessments that institutional investors, private equity firms, multinational corporations, and development finance institutions use to inform capital allocation decisions. A grey-listing signals governance and regulatory weaknesses that raise the risk profile of a jurisdiction as a destination for foreign direct investment (FDI).

The investment impact is not uniform across sectors. Financial services, real estate, professional services, and export-oriented industries that depend on trade finance or cross-border payments tend to be most exposed. Domestic-facing sectors with limited international connectivity are less immediately affected, though the cumulative drag on overall economic activity compounds over time.

Multilateral Lending and Development Finance

The International Monetary Fund (IMF) and multilateral development banks factor institutional quality, governance, and AML/CFT/CPF performance into their assessments of member countries. A FATF grey-listing is not an automatic trigger for specific lending restrictions, but it can influence the terms and conditionality of IMF programs, the appetite of development institutions for new lending commitments, and the scrutiny applied to existing programs. For lower-income jurisdictions with limited access to private capital markets, these effects can have outsized significance.

Rising Compliance Costs Across the Private Sector

Grey-listed jurisdictions typically experience a surge in AML/CFT/CPF-related compliance costs, both within government agencies and across the private sector. Financial institutions, DNFBPs, and VASPs in listed jurisdictions face heightened supervisory scrutiny, more frequent examinations, more extensive reporting obligations, and enhanced due diligence requirements on their counterparties. Supervisors under pressure to demonstrate effectiveness—often a key condition of avoiding further escalation—tend to intensify examination and enforcement activity.

These costs are not distributed evenly. Larger institutions with dedicated compliance functions can absorb them more readily; smaller financial institutions, law firms, real estate agencies, accountants, and other DNFBPs often lack the resources to respond easily to significantly elevated compliance demands. Some find that the cost and complexity of maintaining certain client relationships—or operating in certain product lines—makes them commercially unviable, leading to further financial exclusion.

Consequences for Non-Listed Jurisdictions and the International Financial System

Grey-Listing Is Never Only a Local Problem

The consequences of a FATF listing do not stop at the listed jurisdiction’s borders. In an interconnected global financial system, strategic deficiencies in one jurisdiction create vulnerabilities for every jurisdiction connected to it. A listed country with weak beneficial ownership transparency, inadequate supervision of DNFBPs, or limited capacity to investigate and prosecute financial crime effectively becomes a node of elevated risk in the international network—one that sophisticated criminal actors and sanctions evaders are likely to exploit.

This means that financial institutions in non-listed jurisdictions maintaining business relationships with counterparties in grey-listed jurisdictions absorb elevated risk exposure. Their supervisors expect them to manage that risk actively, through enhanced due diligence, transaction monitoring, and ongoing assessment of the risk profile of those relationships. The aggregate cost to the international financial system—in compliance spending, transaction friction, and diverted supervisory resources—is substantial and falls partly on institutions that have no presence in the listed jurisdiction at all.

Implications for Financial institutions, DNFBPs, and VASPs Operating Across Borders

For compliance and risk professionals, the practical implications are direct. FATF Recommendation 19 requires that financial institutions, DNFBPs, and VASPs apply enhanced due diligence and take special precautions when dealing with clients from, and engaging in transactions with, higher-risk countries. Most jurisdictions have implemented R19 through their domestic AML/CFT/CPF regulations, which in many cases explicitly reference FATF listing status as a trigger for enhanced scrutiny.

Importantly, the FATF’s expectation—and that of most national supervisors—is that institutions apply R19 in a risk-based and nuanced way. Being listed doesn’t mean that every transaction involving a grey-listed jurisdiction presents the same level of risk. The underlying bases for a listing matter: a jurisdiction grey-listed primarily for weaknesses in its real estate sector or its DNFBP supervision presents a different risk profile from one listed for inadequate investigation and prosecution of money laundering across the financial sector. Compliance professionals should review the relevant FATF public statement and, where warranted, the underlying Mutual Evaluation Report (MER), to understand the specific deficiencies driving a listing and calibrate their enhanced due diligence measures accordingly.

The same logic applies to non-listed jurisdictions. A jurisdiction that has not been grey-listed may still have significant weaknesses documented in its MER that are relevant to your institution’s risk assessment. Conversely, a newly grey-listed jurisdiction may have already made substantial progress on the specific deficiencies most relevant to your business. FATF listing status is a useful signal, but it is not a substitute for substantive risk assessment.

The Black List: A Qualitatively Different Level of Severity

As described in Part 2, the Black List—formally, the “High-Risk Jurisdictions Subject to a Call for Action”—represents a qualitatively different level of severity from the Grey List. Countries on the Black List (currently Iran, North Korea, and Myanmar) are characterized by strategic deficiencies that present ongoing and serious risks to the international financial system, combined with a failure to make adequate progress in addressing them.

For financial institutions, DNFBPs, and VASPs, the Black List carries near-categorical implications. Most national AML/CFT/CPF regulatory frameworks require the application of enhanced due diligence—and in the most serious cases, countermeasures—with respect to Black-Listed jurisdictions. In practice, this means that maintaining business relationships or processing transactions involving these jurisdictions is restricted or prohibited outright under the domestic laws of most FATF member jurisdictions. The compliance risk associated with any exposure to Black-Listed jurisdictions is severe, and most reputable international financial institutions maintain no business relationships in those markets at all.

The existence of the Black List also shapes behavior around the Grey List. Jurisdictions aware of the risk of escalation from grey to black have a strong incentive to engage constructively with the FATF’s remediation process rather than ignore or contest it. The two-tier listing architecture functions as a graduated enforcement mechanism, with consequences calibrated to compel reform.

The Risk of Financial Exclusion

A less-discussed but important systemic consequence of FATF listings is their potential to deepen financial exclusion. When financial institutions in grey-listed jurisdictions lose correspondent relationships, or face compliance costs that make serving certain client segments commercially unviable, the populations most affected are often the most economically vulnerable: micro-enterprises, informal businesses, and lower-income households. When these populations are pushed out of the formal financial system, economic activity migrates to informal and unregulated channels—which, paradoxically, can make illicit flows harder to detect and address.

The FATF has increasingly emphasized risk-based approaches that are designed to avoid the blanket de-risking that exacerbates financial exclusion, and its guidance makes clear that across-the-board termination of correspondent relationships is not the appropriate response to grey-listing. In practice, however, many institutions—particularly those managing exposure across large numbers of jurisdictions—find it easier and less risky to exit grey-listed markets than to implement the nuanced, relationship-level risk assessments that a genuinely risk-based approach requires. Regulators and international bodies continue to grapple with this tension.

Lessons Learned from Grey List Exits

A significant number of jurisdictions have been grey-listed and subsequently removed after demonstrating credible, sustained reform. Looking across these cases, a consistent set of lessons emerges.

Political Will Is the Essential Ingredient

The single most important factor in successful grey list exits is genuine political will at the highest levels of government. AML/CFT/CPF reform is not primarily a technical compliance exercise. Investigating and prosecuting financial crime—particularly complex, high-value cases—often requires pursuing individuals and entities with political or commercial connections. Reforming beneficial ownership frameworks means creating transparency that powerful interests may resist. Strengthening supervisory enforcement means imposing penalties on institutions and individuals that may push back. None of this happens at scale without sustained commitment from senior political leadership.

Jurisdictions that treated grey-listing primarily as a reputational management challenge—something to be communicated around rather than addressed substantively—consistently struggled to make meaningful progress. Those that treated it as a genuine governance reform agenda, with clear accountability structures and measurable milestones, were far more likely to achieve timely exits.

Whole-of-Government Coordination Is Essential

Successful grey list exits consistently involve coordinated action across the entire government, not just the financial regulator or the financial intelligence unit (FIU). Effective AML/CFT/CPF frameworks span criminal law, financial supervision, company formation and beneficial ownership registration, customs and trade controls, real estate regulation, oversight of professional service providers and non-profit organizations, and cross-border law enforcement and judicial cooperation. A reform effort that strengthens financial supervision but leaves company registration opaque, or that passes new laws without building prosecutorial capacity to enforce them, will not satisfy the FATF’s effectiveness requirements.

Jurisdictions that established dedicated high-level interagency coordination mechanisms—bringing together finance ministries, central banks, law enforcement agencies, prosecutorial services, FIUs, and sector regulators under a unified reform mandate—moved faster and more coherently than those that left reform to individual agencies to manage in isolation.

Demonstrating Effectiveness, Not Just Technical Compliance

As described in Part 2, the FATF’s evaluation framework places equal weight on technical compliance and effectiveness. A jurisdiction that passes new AML/CFT/CPF laws but cannot demonstrate that they are being actively applied—through investigations, prosecutions, asset confiscations, and regulatory enforcement actions—will not achieve a grey list exit regardless of how strong its legal framework looks on paper.

The effectiveness requirement is often the harder part. Technical compliance is largely a legislative and regulatory drafting exercise; effectiveness requires law enforcement, prosecutorial, supervisory, and judicial institutions to actually perform. Jurisdictions that successfully exited the Grey List consistently invested in building the operational capacity—staffing, training, case management systems, interagency data sharing—needed to translate a strong legal framework into measurable outcomes.

International Technical Assistance Accelerates Reform

Many jurisdictions that successfully exited the Grey List made active use of international technical assistance—from the IMF, the World Bank, the Egmont Group of Financial Intelligence Units, FATF-Style Regional Bodies, and bilateral partners. This assistance provided expertise that domestic institutions often lacked, helped jurisdictions benchmark their frameworks and operational practices against international standards, and lent credibility to reform efforts in the eyes of the FATF and the international community.

Jurisdictions that engaged openly and constructively with the FATF’s ICRG process—treating it as a collaborative reform dialogue rather than an adversarial proceeding—generally made faster progress than those that approached it defensively.

Case Study: The UAE’s Grey List Exit

Background and Listing

The United Arab Emirates was added to the FATF Grey List in March 2022. The listing reflected concerns that had been developing over time about the gap between the UAE’s position as a global hub for trade, finance, real estate, and professional services and the effectiveness of its AML/CFT/CPF framework. The UAE’s FATF action plan identified specific strategic deficiencies: the need to demonstrate more effective investigation and prosecution of money laundering—including larger and more complex cases—to improve beneficial ownership transparency for legal entities, to strengthen supervision of DNFBPs (particularly real estate agents, lawyers, and accountants), and to improve the seizure and confiscation of criminal proceeds.

For a jurisdiction positioning itself as a world-class international financial center, the listing was a significant reputational and commercial setback—and a direct signal to financial institutions, DNFBPs, and VASPs with UAE exposure that enhanced scrutiny was warranted.

The Response: Mobilization at the Highest Levels

The UAE’s response was notable for both its speed and its scope. Rather than treating the action plan as an administrative compliance checklist to be worked through at a bureaucratic pace, the UAE government mobilized at the highest levels of government. The Executive Office for Anti-Money Laundering and Counter Terrorism Financing (now re-named the National Anti-Money Laundering and Combatting Financing of Terrorism and Proliferation Financing Committee, or NAMLCFPFC)—a dedicated interagency body with senior political backing—was established to coordinate reform across all relevant government entities. This gave the agenda clear ownership, authority to drive action across ministries and agencies that would not normally coordinate so closely, and direct accountability to senior leadership.

The reform effort proceeded along several parallel tracks. Financial intelligence infrastructure was upgraded through enhancements to the goAML platform, improving the quality and volume of suspicious transaction reporting by financial institutions, DNFBPs, and VASPs and enabling the UAE’s FIU to analyze and disseminate intelligence more effectively. Law enforcement and prosecutorial agencies built capacity to investigate and prosecute complex money laundering cases, and the number and complexity of cases pursued increased materially. Beneficial ownership registers were strengthened, and access to ownership information for legal entities was substantially improved. Supervision of DNFBPs—historically a weaker element of the UAE’s framework—was overhauled through new regulatory frameworks and significantly more active supervisory programs targeting real estate, precious metals and stones dealers, professional service providers, and other higher-risk sectors.

Legislative Reform Paired with Enforcement

The UAE also undertook significant legislative reform, updating its AML/CFT laws and regulations to address the technical compliance deficiencies identified in its evaluation. Critically, it paired legislative reform with demonstrated enforcement—implementing sanctions, prosecutions, and asset confiscation actions at a scale and visibility that had not been consistently evident before the listing. This combination of stronger legal frameworks and demonstrated operational effectiveness was central to satisfying the FATF’s dual requirements of technical compliance and effectiveness.

Asset confiscation and seizure—one of the most operationally demanding elements of any AML/CFT/CPF framework, requiring close coordination between law enforcement, prosecutors, and courts—also showed measurable improvement.

Outcome and Implications

In February 2024, FATF announced the UAE’s removal from the Grey List—just two years after listing. This was a notably fast exit; jurisdictions with complex, systemic deficiencies often remain on the Grey List for three to five years or longer. FATF’s announcement recognized that the UAE had strengthened the effectiveness of its AML/CFT/CPF framework across the key areas identified in its action plan and had made significant progress on technical compliance deficiencies.

The UAE’s experience illustrates several of the broader lessons described above. Political will was demonstrated from the outset and sustained throughout. A whole-of-government coordination mechanism provided both authority and accountability. The reform effort was genuinely oriented toward demonstrating effectiveness—not just passing laws—and active engagement with the FATF and international partners was maintained throughout the process.

It also illustrates the catalytic effect that grey-listing can produce. Some of the reforms the UAE implemented under FATF pressure had been discussed or contemplated for years without being acted upon. The listing created the political conditions for action that normal circumstances had not.

A Note on Post-Exit Sustainability

For compliance and risk professionals assessing UAE-related exposure, the exit from the Grey List is a significant and positive development. Removal reflects the FATF’s assessment that the UAE’s AML/CFT/CPF framework has been materially strengthened and is now functioning more effectively. But it does not mean that money laundering and illicit financial activity in the UAE has been eliminated; no major international financial center can make that claim. Sustaining the reforms implemented under grey list pressure—maintaining enforcement momentum, continuing to invest in financial intelligence and supervisory capacity, and keeping regulatory frameworks current—will require ongoing institutional commitment. Compliance professionals should continue to monitor UAE MER updates, FATF public statements, and supervisory guidance as part of their ongoing country risk assessments.

Implications for Private Sector Stakeholders

By way of summary, private sector compliance and risk professionals should draw the following practical conclusions from the dynamics described in this article:

Legal obligations are jurisdiction-specific but FATF-driven. Domestic AML/CFT/CPF regulations in most FATF member jurisdictions translate the grey and black list designations into concrete legal requirements—typically enhanced due diligence for grey-listed jurisdictions and countermeasures for black-listed ones. Know the specific requirements in every jurisdiction where your institution operates, and monitor them for changes when listing status changes.
Listing status is a signal, not a complete risk assessment. The FATF lists identify jurisdictions with strategic deficiencies, but the nature and scope of those deficiencies vary significantly. Compliance professionals should review the underlying FATF public statements and, where warranted, the MERs for listed jurisdictions to understand which specific areas present elevated risk and calibrate their enhanced due diligence measures accordingly. The same applies to non-listed jurisdictions: absence from the lists does not mean absence of risk.
MER findings are relevant beyond listed jurisdictions. For jurisdictions not on the lists, MER ratings and findings remain important inputs to country risk assessments. A jurisdiction with multiple Low or Moderate effectiveness ratings across the key Immediate Outcomes—particularly financial intelligence, investigations and prosecutions, or private sector compliance—presents elevated risk regardless of its listing status.
De-risking must be risk-based, not reflexive. Terminating or restricting relationships with counterparties in grey-listed jurisdictions without a genuine risk assessment is not consistent with a risk-based approach and is discouraged by both the FATF and most national regulators. Institutions should document their risk-based reasoning when applying enhanced due diligence, adjusting risk appetite, or exiting relationships in listed jurisdictions.
Supervisory expectations in listed jurisdictions will intensify. Financial institutions, DNFBPs, and VASPs operating within grey-listed jurisdictions should expect heightened supervisory scrutiny as those jurisdictions implement their action plans. More frequent examinations, more detailed reporting requirements, and more active enforcement are typical features of the reform environment.
Monitor listing changes at each FATF Plenary. FATF Plenary meetings occur three times per year, and listing status can change—jurisdictions can be added to or removed from the Grey List, and in rare cases escalated to the Black List. Country risk ratings and enhanced due diligence triggers should be reviewed and updated following each Plenary.

This concludes IFI’s three-part FATF Guide for Private Sector Stakeholders. We hope this series has provided compliance and risk management professionals with the grounding needed to navigate the FATF standards, mutual evaluation process, and listing consequences with the sophistication those topics demand.

Recorded Webinar

Watch our recorded webinar on the FATF mutual evaluation process—the driving force behind global AML/CFT progress. As nearly 200 jurisdictions are assessed on compliance and effectiveness, this process shapes regulatory expectations, increases supervisory scrutiny, and impacts risk frameworks across financial institutions, DNFBPs, and VASPs.

Our expert panel breaks down how evaluations work, why jurisdictions are grey-listed or black-listed and how they are removed, what to take from Mutual Evaluation Reports, and what to expect from the FATF’s evolving Fifth-Round methodology and future priorities.

View Recording

Recommended Blogs

August Monthly Sanctions and Export Controls Report

September 2, 2026

Explore this month’s Sanctions and Export Controls Update, highlighting IFI’s take on key developments from August 2026.

The Judgment Gap in Market Abuse Compliance

August 25, 2026

While banks may know the set of rules outlined in the EU’s Market Abuse Regulation, exposure sits in the judgment calls related to delayed disclosure, information barriers, and market soundings. Dive into where the risk lies in each area.

A Financial Institution’s Guide to Updated EU Market Abuse Regulation

July 29, 2026

MAR sounds straightforward until a real case tests it. This guide breaks down what the regulation covers, who it applies to, and the disclosure rules, court rulings, and regulatory guidance that shifted the ground under compliance teams in 2026.

Understanding the FATF: A Guide for Private Sector Stakeholders Part 2

April 28, 2026

The FATF’s mutual evaluation process has been the single greatest catalyst for improvements to the global AML/CFT regime in recent years. It’s critical for financial crime compliance and risk management professionals to understand this process and related standards and listings.

Data as a Critical Business and Compliance Asset

April 15, 2026

Data is an increasingly critical asset. It plays a key role in due diligence, identifying and responding against illicit finance, and identifying fraud, as well as for commercial decisions and business success. Explore global data protection and retention requirements in this article.

Understanding the FATF: A Guide for Private Sector Stakeholders

April 8, 2026

The FATF standards, known as the 40 Recommendations, have become more expansive, detailed, and stringent over time, requiring more of both public and private sector institutions.

February 2026 Monthly Sanctions and Export Controls Report

March 3, 2026

Explore this month’s Sanctions and Export Controls Update, highlighting IFI’s take on key developments from February 2026.

Electronic Fund Transfer Consumer Protection

February 5, 2026

The Electronic Fund Transfer Act (EFTA) was established to protect consumers using electronic fund transfers. Explore what is considered in scope and the changes proposed to include crypto.

January 2026 Monthly Sanctions and Export Controls Report

February 3, 2026

There were several major sanctions-related developments in January, most notably the U.S.’s easing of sanctions to facilitate Venezuelan oil sales and the ratcheting up of western sanctions in response to Tehran’s violent crackdown on protestors, among others.

Previous Next