Financial Action Task Force FATF
The Financial Action Task Force (FATF) is the intergovernmental body that sets international standards for combating money laundering and terrorist financing, known as the FATF Recommendations. It assesses how countries apply them through mutual evaluations and publicly identifies jurisdictions with strategic deficiencies. EU anti-money laundering law is written to take particular account of its standards.
What is the FATF and what does it do?
The Financial Action Task Force is an intergovernmental body. It does not regulate businesses. Its work is to agree what a country's defences against money laundering and terrorist financing should look like, and then to check whether countries have built them.
It does three things. It writes the international standards, known as the FATF Recommendations. It assesses countries against those standards through mutual evaluations. It also publishes statements that name jurisdictions with strategic deficiencies in their regimes.
EU law names the FATF directly. The recitals to the Anti-Money Laundering Regulation describe the standards as the International Standards on Combating Money Laundering and the Financing of Terrorism and Proliferation, adopted by the FATF in February 2012 and amended since. The regulation calls them the revised FATF Recommendations.
How do the FATF Recommendations reach a firm in the EU?
They reach a firm through EU and national law, not directly. The Recommendations are addressed to countries. A law firm or an accounting practice in the EU answers to EU and national law and to its national supervisor. From 10 July 2027 the EU law in question is the AMLR.
The link between the two is written into the recitals. Both the AMLR and Directive (EU) 2024/1640 say that EU measures should be compatible with action taken at international level, and at least as stringent. They add that Union action should continue to take particular account of the FATF Recommendations, and that EU legal acts should be aligned with them where appropriate.
The recitals also point to specific rules that follow the standards. The five-year period for keeping customer due diligence information and transaction records is explained by reference to the revised FATF Recommendations. The extension of the rules to crypto-asset service providers and the transparency rules for discretionary trusts are each explained by reference to FATF standards.
What is a FATF mutual evaluation and why would a firm read one?
A mutual evaluation is a peer assessment of one country's anti-money laundering system, published as a report. A firm would read one to judge the risk attached to a country where a client lives, is established or sends money from.
The AMLR treats these reports as a credible source. When a firm draws up its business-wide risk assessment, Article 10 tells it to take into account relevant information published by international standard setters. The recitals name FATF mutual evaluation reports as one source that AMLA's guidelines on this assessment could include.
The annexes use them to sort countries by risk. Annex II lists as a lower-risk factor a third country whose requirements, on the basis of credible sources such as mutual evaluations, are consistent with the revised FATF Recommendations and effectively implemented. Annex III lists as a higher-risk factor a third country identified by such sources as not having effective systems.
Further reading
How do the FATF lists relate to the EU's high-risk third countries?
The FATF's public statements are the starting point for the EU's own lists, but the lists are separate. An obliged entity in the EU is bound by the EU lists. Under the AMLR, which applies from 10 July 2027, the Commission adopts them as delegated acts under Articles 29 to 31.
The recitals to the AMLR describe two FATF statuses. Countries subject to a call for action present significant strategic deficiencies of a persistent nature. Countries subject to increased monitoring have compliance weaknesses that they have committed to address. The AMLR builds a category on each, and adds a third for threats that the first two cannot mitigate. The table shows what the Commission takes into account for each category. The measures a firm must then apply are set out under enhanced due diligence.
| Category in the AMLR | Article | What the Commission takes into account |
|---|---|---|
| High-risk third countries | 29 | Calls for enhanced due diligence and countermeasures by international standard setters |
| Third countries with compliance weaknesses | 30 | Information on jurisdictions under increased monitoring, as a baseline |
| Third countries posing a specific and serious threat | 31 | Evaluations and reports by international standard setters. The recitals describe these as countries the FATF has not publicly identified |
FATF status also counts on its own. Annex III lists as a higher-risk factor any third country subject to increased monitoring, or otherwise identified by the FATF for compliance weaknesses. Because Article 10 requires a firm to take the Annex III factors into account, that status counts in its risk assessment even where no EU act names the country.
Both sets of lists change. Check the current FATF statements and the current Commission acts on the date of the assessment.
Further reading
Related questions
Is the European Union a member of the FATF?
The European Commission is. Article 95(4) of Regulation (EU) 2024/1620 refers to the Commission's membership of the Financial Action Task Force. It gives AMLA the task of assisting the Commission there, as part of representing the Union's interests in international fora.
Are the FATF Recommendations legally binding on a firm?
Not by themselves. They are standards agreed between governments. A firm's legal duties come from the law that applies to it. In the EU that is the AMLR from 10 July 2027, together with national law.
References
Regulation (EU) 2024/1624 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing (AMLR), recitals and Articles 10, 29, 30, 31 and 90, Annexes II and III. European Union, 2024. eur-lex.europa.eu/eli/reg/2024/1624/oj
Directive (EU) 2024/1640 on the mechanisms to be put in place by the Member States for the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, recitals. European Union, 2024. eur-lex.europa.eu/eli/dir/2024/1640/oj
Regulation (EU) 2024/1620 establishing the Authority for Anti-Money Laundering and Countering the Financing of Terrorism, Article 95. European Union, 2024. eur-lex.europa.eu/eli/reg/2024/1620/oj
The FATF Recommendations, mutual evaluation reports and public statements. Financial Action Task Force. fatf-gafi.org
This article describes the FATF at a general level and quotes how Regulation (EU) 2024/1624, Directive (EU) 2024/1640 and Regulation (EU) 2024/1620 refer to it. It does not list the countries the FATF or the Commission currently identify. It is not legal advice.
All glossary terms