FATF (Financial Action Task Force)

What Is the FATF?

The Financial Action Task Force (FATF) is an intergovernmental body that sets international standards for combating money laundering, terrorist financing and the financing of proliferation of weapons of mass destruction. It was established in 1989 at the G7 summit in Paris, and its secretariat is based in Paris.

The FATF does not write laws and has no direct power to fine banks or companies. Instead, it publishes standards, known as the FATF Recommendations, and assesses whether countries have implemented them effectively. Countries then translate the standards into their own legislation and supervisory rules, which is what regulated firms ultimately must follow.

The FATF's reach extends well beyond its own members through a global network of FATF-Style Regional Bodies (FSRBs), which apply the same standards and assessment methodology in their regions. Together, the FATF and the FSRBs cover the large majority of jurisdictions worldwide.

Why the FATF Matters

For compliance teams, the FATF is the source of the vocabulary and structure that most national AML regimes share. Concepts such as the risk-based approach, customer due diligence, politically exposed persons, beneficial ownership and suspicious transaction reporting all appear in the FATF Recommendations before they appear in national law.

The FATF also matters because of its public lists. A country placed under increased monitoring, or subject to a call for action, typically faces more scrutiny from foreign banks, higher compliance costs for its businesses and pressure to reform. Firms use these lists as a key input to country risk scoring.

How the FATF Works

The FATF Recommendations

The Recommendations were first issued in 1990 and have been revised several times, with the most comprehensive revision in 2012, which integrated the earlier special recommendations on terrorist financing. They are accompanied by Interpretive Notes and supported by a large body of guidance papers and typology reports. Some of the Recommendations most relevant to financial institutions are:

• Recommendation 1: assessing risks and applying a risk-based approach
• Recommendations 6 and 7: targeted financial sanctions related to terrorism and terrorist financing, and to proliferation
• Recommendation 10: customer due diligence
• Recommendation 12: politically exposed persons
• Recommendation 13: correspondent banking
• Recommendation 15: new technologies, including virtual assets and virtual asset service providers
• Recommendation 16: wire transfers
• Recommendation 20: reporting of suspicious transactions
• Recommendations 24 and 25: transparency and beneficial ownership of legal persons and legal arrangements

Mutual Evaluations

The FATF and FSRBs assess each member through peer reviews called mutual evaluations. An assessment looks at two dimensions:

1. Technical compliance: whether the country's laws and institutional framework meet each Recommendation.
2. Effectiveness: whether the system actually delivers results, for example whether authorities investigate and prosecute money laundering, whether firms understand their risks and whether beneficial ownership information is available.

Mutual evaluation reports are published and followed by a period of follow-up monitoring. They are a useful source for firms building country risk assessments, because they describe specific weaknesses in a jurisdiction's regime.

Public Lists

After each plenary meeting, the FATF updates two public statements:

• High-risk jurisdictions subject to a call for action, often called the black list, where the FATF calls on members to apply enhanced due diligence and, in the most serious cases, countermeasures.
• Jurisdictions under increased monitoring, often called the grey list, covering countries that have committed to address strategic deficiencies within agreed timeframes.

Because these lists change, firms should check the current version on the FATF website rather than relying on an older copy.

Guidance and Typologies

The FATF publishes risk-based approach guidance for specific sectors, such as banks, money or value transfer services and virtual asset service providers, as well as reports on methods used by criminals, including trade-based money laundering and the misuse of informal value transfer systems. These documents are not binding on firms, but supervisors often refer to them.

Regulatory Relevance for Firms

The FATF standards reach firms through national and regional law. In the EU, the AML Directives, including Directive (EU) 2015/849 (AMLD4), and the AML Regulation (EU) 2024/1624 implement the FATF standards. In the UK, the Money Laundering Regulations 2017 do the same. In the US, the Bank Secrecy Act and FinCEN regulations form the framework that is assessed against the Recommendations. Firms should therefore follow their local rules, but understanding the FATF Recommendations explains why those rules exist and where they are likely to go next.

Common Misunderstandings

• "The FATF regulates my firm." It does not. Your national regulator and laws apply; the FATF shapes them.
• "A grey-listed country is prohibited." Grey listing does not create a prohibition. It signals higher risk that should be reflected in due diligence.
• "FATF guidance is optional, so it can be ignored." Guidance is not binding, but supervisors frequently use it as a benchmark for what reasonable practice looks like.

How on8.ai Helps

Country risk drawn from FATF publications is one input to customer risk; knowing exactly who a customer is and who owns them is another. SmartSanction supports the targeted financial sanctions and PEP elements of the FATF standards by screening people, companies, vessels, crypto wallets and addresses against more than 520 list and registry sources, with an ownership graph for KYB and the reasoning behind each match.

Related Terms

• FATF Grey List
• AML (Anti-Money Laundering)
• CFT (Combating the Financing of Terrorism)
• Risk-Based Approach (RBA)
• Egmont Group
• AMLD4 / AMLD5 / AMLD6