FATF (Financial Action Task Force)

FATF, the Financial Action Task Force, is the intergovernmental body (see its official overview of what it does) that sets the global standards underpinning anti-money laundering and counter-terrorist financing rules. It doesn't write national law itself, but its recommendations shape how regulators around the world approach AML (Anti-Money Laundering) requirements, which is why a change at FATF level tends to ripple down into local compliance obligations within a year or two.

What FATF Actually Does

Founded in 1989, FATF develops policy recommendations, evaluates how well member countries implement them, and maintains lists of jurisdictions with strategic deficiencies in their AML and counter-terrorist financing frameworks. Those evaluations carry weight: a country flagged on FATF's grey or black list can see banks treat its transactions with extra caution, sometimes amounting to de-risking entire corridors.

Why Payment Businesses Track FATF Closely

For a payment provider operating across borders, FATF guidance is often the earliest signal of where regulatory expectations are heading. Recommendations on virtual assets, beneficial ownership transparency and correspondent banking have all shown up in FATF papers well before they became binding law in individual markets, which gives compliance teams a useful head start if they're paying attention.

The 40 Recommendations, in Practical Terms

FATF's core standard is a set of 40 recommendations covering everything from customer due diligence and record-keeping to how countries should regulate money or value transfer services. They read like policy text, but in practice they translate directly into the KYC (Know Your Customer) checks, transaction monitoring rules and reporting obligations that payment platforms build into their onboarding and monitoring stacks.

Grey Lists, Black Lists and What They Mean for Merchants

A jurisdiction on FATF's increased-monitoring list, commonly called the grey list, isn't necessarily unsafe to do business with, but it typically means enhanced due diligence is expected. The black list, reserved for the highest-risk jurisdictions, is far more restrictive and can effectively cut off access to mainstream banking and payment rails for entities based there.

Keeping Up as the Rules Shift

FATF revisits its standards periodically, and recent cycles have focused heavily on crypto assets, payment transparency and beneficial ownership. A compliance function that treats FATF updates as background reading rather than an operational input risks building onboarding flows around rules that are already a step behind where regulators are heading next.

Where This Connects to Everyday Payment Operations

FATF feels abstract until it shows up as a specific onboarding question, a transaction monitoring rule, or a country risk score inside a merchant's compliance dashboard. Payment providers working across several jurisdictions often build FATF-aligned checks directly into onboarding so that country-level risk is assessed automatically rather than left to case-by-case judgement calls.

FATF and the Businesses That Feel It Most

Payment providers, money service businesses and crypto exchanges tend to feel FATF's influence more directly than a typical retailer, since their licensing and supervision are often built explicitly around FATF-aligned standards. A FATF plenary statement is frequently the first indicator of a rule change that shows up in their own regulator's requirements within a year or two.

Why Ignoring FATF Guidance Rarely Pays Off

Some businesses treat FATF recommendations as non-binding suggestions worth deprioritising until local law catches up. That tends to backfire, since banking partners often apply FATF-aligned expectations informally well before a domestic regulator formalises them, leaving a slow-moving business with harder-to-maintain banking relationships than expected.