FATF Mutual Evaluation and the Grey/Black List

The FATF Standards and the Evaluation Cycle

The Financial Action Task Force (FATF), established by the G7 at the 1989 Paris Summit, is an inter-governmental body of 40 members (38 jurisdictions plus the European Commission and Gulf Cooperation Council) that sets global standards on anti-money laundering (AML), counter-financing of terrorism (CFT), and counter-proliferation financing (CPF). Its authority derives from the 40 Recommendations (last consolidated revision February 2012, amended most recently in November 2023 to strengthen Recommendation 25 on beneficial ownership of legal arrangements). The Recommendations are not a treaty; they are soft-law standards whose binding force is generated by peer review, market discipline, and downstream incorporation into instruments such as the EU's Sixth Anti-Money Laundering Directive (Directive 2018/1673) and the U.S. Bank Secrecy Act regulations at 31 C.F.R. Chapter X.

Compliance is assessed through the Mutual Evaluation Report (MER), conducted on a roughly 10-year cycle. The current Fourth Round (2014–2025) introduced a dual-track assessment: technical compliance (whether laws and institutions exist on paper, scored Compliant / Largely Compliant / Partially Compliant / Non-Compliant against each of the 40 Recommendations) and effectiveness (whether the system delivers results, scored against 11 Immediate Outcomes as High / Substantial / Moderate / Low). The Fifth Round, launched in 2024, shortens the cycle to six years and places greater weight on risk and effectiveness.

Assessment Mechanics

MERs are conducted by assessor teams drawn from FATF members and the nine FATF-Style Regional Bodies (FSRBs) — including MONEYVAL (Council of Europe), GAFILAT (Latin America), and the Middle East and North Africa FATF (MENAFATF). The process runs roughly 14 months: scoping, on-site visit (typically two weeks), draft report, face-to-face discussion, and plenary adoption. Adopted reports trigger one of three follow-up tracks:

• Regular follow-up for jurisdictions with predominantly Compliant/Largely Compliant ratings and Substantial/High effectiveness.
• Enhanced follow-up for weaker performers, requiring written progress reports at least every 18 months.
• International Co-operation Review Group (ICRG) referral when a jurisdiction is rated Non-Compliant or Partially Compliant on 20+ Recommendations, or Low/Moderate on 9+ Immediate Outcomes, or scores Low on three core Immediate Outcomes (IO.1 risk understanding, IO.2 international cooperation, or IO.11 proliferation financing sanctions).

The ICRG operates four regional Joint Groups (Africa/Middle East, Americas, Asia/Pacific, Europe/Eurasia). A referred jurisdiction enters a one-year observation period, during which it negotiates an action plan with the relevant Joint Group. Failure to make sufficient progress results in public listing at the next plenary (held three times yearly: February, June, October).

The Two Public Documents

FATF issues two public statements after each plenary. The first — formally titled "Jurisdictions under Increased Monitoring" and universally known as the grey list — names countries that have committed to action plans and are working actively with FATF. As of the October 2024 plenary, the list included jurisdictions such as Bulgaria (added October 2023), Croatia (June 2023), Kenya (February 2024), Nigeria (February 2023), South Africa (February 2023), and Vietnam (June 2023). The second document — "High-Risk Jurisdictions Subject to a Call for Action", the black list — currently contains only the Democratic People's Republic of Korea (listed continuously since February 2011 with countermeasures) and Iran (listed June 2016, full countermeasures reactivated February 2020 following Tehran's failure to ratify the Palermo and Terrorist Financing Conventions). Myanmar was added in October 2022 with a call for enhanced due diligence but without full countermeasures.

Cascading Effects Through the Financial System

Neither grey- nor black-listing imposes direct sanctions under FATF's own authority — the body has no enforcement arm. The bite comes through three transmission mechanisms hardwired into the global financial architecture.

First, mandatory Enhanced Due Diligence (EDD). FATF Recommendation 19 requires member jurisdictions to apply EDD to business relationships and transactions involving listed countries. The EU operationalises this through the Commission Delegated Regulation (EU) 2016/1675, which lists "high-risk third countries" largely (though not identically) tracking the FATF lists. EU-supervised banks must apply Article 18a of the Fifth AML Directive measures: additional information on customer and beneficial ownership, senior management approval for transactions, and enhanced ongoing monitoring. The U.S. equivalent operates through FinCEN advisories and Section 311 of the USA PATRIOT Act (31 U.S.C. § 5318A), which permits the Treasury to designate jurisdictions of "primary money laundering concern" — used against North Korea (FinCEN final rule, November 2016) and previously Burma, Nauru, and Ukraine.

Second, IMF and World Bank conditionality. Both institutions incorporate FATF assessments into Article IV consultations and Country Partnership Frameworks. The IMF's 2023 Review of the Fund's AML/CFT Strategy formalised that grey-list status is a material factor in program design and surveillance.

Third, private-sector de-risking. Correspondent banks — concentrated among roughly a dozen global institutions — frequently terminate respondent relationships in listed jurisdictions to avoid downstream enforcement risk under regimes such as the U.S. anti-money-laundering penalties (BSA, 31 U.S.C. § 5322) and the UK Money Laundering Regulations 2017. The IMF's 2017 Working Paper The Withdrawal of Correspondent Banking Relationships documented sharp CBR contraction in grey-listed Caribbean and Pacific jurisdictions.

Quantifying the Cost

An IMF Working Paper (Kida & Paetzold, WP/21/153, May 2021) estimated grey-listing reduces capital inflows by an average of 7.6% of GDP, FDI inflows by 3.0% of GDP, and portfolio inflows by 2.9% of GDP. Sovereign borrowing spreads widen by 200–400 basis points on average. Black-listing produces near-complete severance: Iran's exclusion from SWIFT messaging for designated banks (March 2012, reinstated November 2018) and DPRK's effective expulsion from the dollar-clearing system rest on the FATF designation as legal cover.

Policy Levers and Limitations

For a diplomat managing a grey-listed brief, the operational tasks are concrete: identify the specific action-plan items (published in the FATF plenary outcome statement), sequence legislative drafting against plenary calendars, coordinate with the relevant FSRB assessor team, and pre-position evidence packages on prosecutions and beneficial-ownership registries. The Turkish exit (October 2023, after grey-listing in October 2021) illustrates the template: rapid amendments to Law No. 5549 on Prevention of Laundering Proceeds of Crime and visible prosecution statistics under MASAK supervision.

FATF's principal limitation is selectivity. Critics — including a 2021 Center for Global Development study — note that low-income jurisdictions are disproportionately referred to ICRG, while several FATF members with comparable technical deficiencies have escaped listing. The November 2023 reform package introduced explicit criteria for prioritising least-developed countries' exclusion from referral, addressing — partially — this asymmetry.