Following its June 2026 plenary, the FATF has updated its list of jurisdictions under increased monitoring (the “grey list”), adding Bosnia and Herzegovina and Iraq. No changes were made to the list of high-risk jurisdictions subject to a call for action (the “black list”).
For regulated firms, FATF updates should trigger a review of:
• Geographical risk assessments
• Customer risk assessments and risk-rating methodologies
• Business-wide risk assessments
• Enhanced Due Diligence (EDD) requirements
• AML/CFT policies, procedures and controls
Any changes should also be communicated to relevant teams to ensure customer onboarding, monitoring and ongoing due diligence processes remain aligned with current risks.
Staying ahead of FATF developments is essential for maintaining an effective and risk-based compliance framework.
More information can be found here:
https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html
https://www.fatf-gafi.org/en/publications/Fatfgeneral/outcomes-fatf-plenary-june-2026.html
