FATF Grey List 2026: Impact on Company Formation & Banking

_Last updated: April 2026_

If you're evaluating where to form a company, you've probably come across references to the "FATF grey list" — usually in the context of banking difficulties or payment processor rejections. The problem is that "FATF grey list" gets confused with two other lists that have different criteria and different practical consequences.

This article explains what the FATF grey list actually is, what it means for banking and company formation in practice, how it differs from the EU's AML high-risk list and the EU's tax haven blacklist, and which jurisdictions are currently on each as of April 2026. By the end, you'll have a clear framework for assessing any jurisdiction before you commit to a formation.

Note: This article covers regulatory status as of April 2026. FATF updates its lists three times per year (February, June, October). Always verify the current status of any jurisdiction at fatf-gafi.org before making a formation decision.

What is the FATF grey list?

The Financial Action Task Force (FATF) is an intergovernmental body founded in 1989 that sets international standards for anti-money laundering (AML) and counter-terrorism financing (CFT). Its 39 members include the G7 nations, the EU, and most major financial centres. When FATF speaks, banks listen — because FATF recommendations are incorporated into the domestic law of member states and enforced by national regulators.

FATF maintains two public lists of jurisdictions with inadequate AML/CFT frameworks:

The grey list — "Jurisdictions under Increased Monitoring" — identifies countries that have agreed with FATF that they have strategic deficiencies and are actively working to address them under a time-bound action plan. Grey list status is not a permanent designation. It signals that a country is being watched and has made a political commitment to reform.

The black list — "High-Risk Jurisdictions Subject to a Call for Action" — is a harder designation reserved for jurisdictions that have failed to address deficiencies and where FATF calls on its members to apply countermeasures. As of February 2026, three jurisdictions are on the black list: North Korea, Iran, and Myanmar. Myanmar is under enhanced scrutiny, with FATF warning that countermeasures may follow if no progress is made by June 2026.

The distinction matters practically. Grey list status creates friction; black list status creates near-total isolation from the international financial system.

The current FATF grey list: April 2026

As of the February 2026 FATF plenary meeting in Mexico City, 23 jurisdictions are under increased monitoring. Two countries — Kuwait and Papua New Guinea — were added at that meeting. No jurisdictions were removed.

The 23 jurisdictions currently on the FATF grey list are:

• Algeria
• Angola
• Bolivia
• Bulgaria
• Cameroon
• Côte d'Ivoire
• Democratic Republic of Congo
• Haiti
• Kenya
• Kuwait _(added February 2026)_
• Laos
• Lebanon
• Monaco
• Namibia
• Nepal
• Papua New Guinea _(added February 2026)_
• Senegal
• South Sudan
• Syria
• Venezuela
• Vietnam
• British Virgin Islands (BVI)
• Yemen

Notable recent removals: South Africa, Nigeria, Mozambique, and Burkina Faso were all removed at the October 2025 plenary after demonstrating sufficient progress on their action plans. The BVI was added at an earlier plenary — a significant development given its role as a major offshore incorporation jurisdiction.

Why Bulgaria and Monaco? Both are EU or Europe-adjacent jurisdictions that surprised many observers when greylisted. Bulgaria was added in October 2023 due to gaps in prosecuting money laundering and beneficial ownership enforcement. Monaco was added in June 2024 over concerns about supervision of its financial sector and real estate gatekeepers. Both countries are working through action plans.

Three lists that are commonly confused

The FATF grey list is frequently conflated with two other lists that have different origins, different criteria, and different practical consequences. Understanding all three is essential before choosing a jurisdiction.

These lists use different criteria and a jurisdiction can be on one, two, or all three — or none.

The EU AML high-risk list (January 2026 update)

The European Commission updated its AML high-risk third countries list effective 29 January 2026, following the FATF June and October 2025 plenaries. The updated list added Bolivia, Russia, and the British Virgin Islands, while removing Burkina Faso, Mali, Mozambique, Nigeria, South Africa, and Tanzania. The total number of high-risk jurisdictions on the EU list dropped from 41 to 35. Russia was newly added — a notable departure from the prior EU list, which had not included Russia despite ongoing FATF concerns.

The EU tax haven blacklist (February 2026 update)

The EU Council updated its list of non-cooperative jurisdictions for tax purposes on 17 February 2026. This list is entirely separate from the AML lists. Its criteria are about tax transparency and information exchange, not money laundering. As of February 2026, ten jurisdictions are on the EU tax haven blacklist (Annex I): American Samoa, Anguilla, Guam, Palau, Panama, Russia, Turks and Caicos Islands, United States Virgin Islands, Vanuatu, and Vietnam.

Panama: a case study in how these lists diverge

Panama illustrates why treating these lists as interchangeable is a costly mistake.

FATF grey list: Panama was removed in October 2023 after completing its action plan on AML/CFT reforms.

EU AML high-risk list: Panama was removed in July 2025, roughly two years after the FATF removal. The EU legislative process for updating its list runs on a separate schedule and requires a full delegated regulation process.

EU tax haven blacklist: Panama remains on the list as of February 2026, classified as non-cooperative for tax purposes.

What this means in practice: a company formed in Panama today faces minimal AML-related banking friction from a FATF perspective, moderate friction with some EU-regulated banks that still flag Panama on the basis of historical risk assessment or the tax haven status, and potential withholding tax consequences when receiving payments from EU counterparties in some member states.

The picture is better than it was in 2022, when Panama was on all three lists simultaneously. But it is not clean. Anyone advising you that Panama is "fully rehabilitated" is missing the tax haven blacklist status.

What grey list status means for banking in practice

This is where regulatory status translates into operational reality. The consequences range from inconvenient to prohibitive depending on the jurisdiction and the bank.

Enhanced Due Diligence requirements

Under FATF Recommendation 19, financial institutions in FATF member countries are required to apply Enhanced Due Diligence (EDD) to business relationships and transactions involving persons or entities established in grey-listed jurisdictions. EDD means more documentation, longer onboarding timelines, ongoing monitoring, and requests for source-of-funds evidence that go beyond standard KYC.

For a company formed in a grey-listed jurisdiction, this typically means:

• Longer onboarding timelines at banks — weeks rather than days
• Requests for detailed business activity descriptions, customer lists, and transaction explanations
• Higher likelihood of compliance review holds on incoming or outgoing transfers
• More frequent periodic reviews of the account relationship

Correspondent banking restrictions

EDD is a legal minimum. Many banks apply stricter standards than required. Correspondent banking — the system by which banks in different countries facilitate international transfers — is the most sensitive point.

Large correspondent banks (primarily US, UK, and EU institutions) have increasingly reduced their correspondent relationships with banks in grey-listed jurisdictions to manage their own regulatory exposure. A grey-listed jurisdiction's local bank may technically be compliant, but if its correspondent relationships have thinned, your company's ability to receive international wire transfers becomes unreliable.

This is the practical reason why grey list status matters beyond paperwork: it affects whether your company can reliably receive payments from international clients.

Payment processors

Stripe, PayPal, Wise, and similar payment processors operate their own risk frameworks. These are not identical to FATF grey list status, but grey list designation increases the probability of onboarding friction or outright rejection. BVI companies, for example, face systematic rejection from Stripe regardless of the beneficial owner's nationality — the jurisdiction itself triggers a risk flag. Vietnam's presence on both the FATF grey list and the EU tax haven blacklist makes Vietnamese-incorporated companies difficult to bank internationally, even for legitimate businesses.

EU-specific consequences

EU-regulated credit institutions, investment firms, and other obliged entities are required under the EU's AML directives to apply enhanced measures to transactions connected to countries on the EU AML high-risk list. This is a legal obligation, not a discretionary call. Some EU banks go beyond the legal minimum and apply de-risking policies — declining to maintain accounts for companies with connections to grey-listed jurisdictions regardless of the specific transaction risk.

What to check before forming a company in any jurisdiction

Before committing to a jurisdiction, verify its status on all three lists — not just the FATF grey list. Here is a practical pre-formation checklist:

1. FATF grey list status

Check the current list at fatf-gafi.org. Remember that lists update three times a year. A jurisdiction can be added or removed between the time you read this and the time you form your company.

2. EU AML high-risk third countries

Check the European Commission's current delegated regulation. This matters even if you are not based in the EU — many international banks are EU-regulated or have EU-regulated correspondent relationships.

3. EU non-cooperative tax jurisdictions

Check the EU Council's current Annex I list. This affects withholding taxes on payments from EU counterparties and the availability of EU funding for structures connected to the jurisdiction.

4. Practical banking access

Regulatory status is a starting point, not the full answer. Research which banks in the jurisdiction offer accounts to non-resident companies, whether those banks have stable correspondent banking relationships, and whether payment processors you need to use (Stripe, PayPal, Wise) support the jurisdiction.

5. Direction of travel

A jurisdiction on the grey list with a clear, progressing action plan is meaningfully different from one that has been stagnant. FATF publishes follow-up reports that indicate progress. A jurisdiction heading toward removal is a different risk profile than one that was just added.

Our guide on how to choose the right jurisdiction for your company formation covers the full framework for evaluating jurisdictions beyond AML status — including substance requirements, tax treatment, and banking access.

Who this is NOT for

This article is not useful for you if:

You're forming a company purely in your home country for domestic operations. FATF grey list status matters primarily for cross-border banking and international transactions. A company formed and operating entirely within one jurisdiction is largely unaffected by its FATF classification.

You're looking for a way to form a company in a grey-listed jurisdiction and avoid the EDD requirements. There is no legitimate path around EDD for grey-listed jurisdictions. Banks are legally required to apply it. Any formation agent or advisor suggesting otherwise is a liability, not an asset.

You need a compliance opinion, not a research guide. If your specific situation involves existing structures connected to grey-listed jurisdictions, you need a qualified AML compliance advisor — not an article. This guide explains the framework; it does not assess your specific risk profile.

You're forming a company in a jurisdiction with no international banking needs. Some founders form companies in grey-listed jurisdictions because they have local reasons (customer base, contracts, regulatory requirements) and do not need international correspondent banking. The calculus is different in that case, though even domestic banking in grey-listed countries can be affected.

Jurisdictions worth monitoring in 2026

Beyond the current list, several jurisdictions are worth watching for near-term changes:

Bulgaria — EU member state, greylisted since October 2023. EU membership creates political pressure to resolve its action plan quickly, but the deficiencies identified (beneficial ownership enforcement, prosecution of complex financial crime) are structural and take time. Watch the October 2026 plenary.

BVI — Added to the FATF grey list and the EU AML high-risk list. Its greylisting has already caused significant disruption to BVI company banking. Some formation agents are redirecting clients to the Cayman Islands or other Caribbean alternatives. BVI's action plan is in early stages.

Kenya and Vietnam — Both are significant economies where legitimate businesses need international banking access. Both are on the FATF grey list, and Vietnam is also on the EU tax haven blacklist. Both create material banking friction for companies with significant international payment flows.

Kuwait — Newly added in February 2026. The consequences for Kuwait-incorporated entities are still being worked through by regional banks. Expect elevated KYC requirements across the Gulf banking system as institutions adjust to the designation.

Offshore company formation: the broader picture

FATF grey list status is one of several factors that determine whether a jurisdiction is viable for your specific structure. Our guide to offshore company formation options covers the full range of jurisdictions currently available — including which ones have clean AML status, realistic banking access, and appropriate substance requirements for the structure you need.

If your primary concern is banking access — particularly for a non-resident company — the specific requirements vary significantly by jurisdiction and by the bank you're targeting. Our article on opening a business bank account as a non-resident covers the current landscape for non-resident banking, including which jurisdictions have the most reliable correspondent banking infrastructure in 2026.

What this means for your formation decision

The FATF grey list is not a death sentence for a jurisdiction — it is a signal about the compliance overhead you and your bank will face. Some grey-listed jurisdictions (Bulgaria, Monaco) have otherwise strong infrastructure and banking systems; the AML deficiencies are real but narrow. Others (BVI, Yemen, Haiti) represent more significant risk at the practical banking level.

The key takeaway is that grey list status is one input, not the final answer. A jurisdiction can be off all three lists and still have terrible banking access for non-residents. Conversely, a jurisdiction on the FATF grey list with strong local banks, stable correspondent relationships, and a progressing action plan may be workable depending on your needs.

Check all three lists. Assess banking access independently. Evaluate direction of travel. And if the structure you're considering involves any grey-listed jurisdiction, build in realistic timelines and documentation requirements from the start — because the EDD process is not optional.

Professional advice note: The regulatory status of jurisdictions changes frequently. This article reflects publicly available information as of April 2026 and is provided for research and educational purposes only. It does not constitute legal, tax, or compliance advice. If your situation involves existing structures connected to grey-listed jurisdictions, or if you are evaluating a complex cross-border structure, consult a qualified AML compliance advisor or international corporate attorney before proceeding.

The information in this article is for research and educational purposes only. It does not constitute legal or tax advice. Program rules, investment thresholds, and government fees change frequently — always verify current requirements with a licensed advisor before taking action.