Suspicion Is Not Justice: How the FATF Grey List Punishes Entire Nations Without Proof or Mandate

No: a country does not “qualify” to be grey-listed the way a defendant qualifies to be convicted. The Financial Action Task Force (FATF) does not prove that a nation’s people laundered money or financed terrorism. It judges whether a government’s anti-money-laundering and counter-terrorist-financing (AML/CFT) paperwork, supervision, and statistics meet a standard written in Paris. If the paperwork is judged “strategically deficient,” the whole jurisdiction goes on the Jurisdictions under Increased Monitoring list — the grey list.

That list is not a court order. FATF has no investigative police force and no elected global mandate. It was created by the G7 in 1989. Ordinary citizens never voted for it. And yet banks, payment processors, and company-formation agents treat the list as if it were a verdict. The freelancer in Nairobi, the church in Kisumu, and the YouTube creator in Lagos do not get a hearing. They get frozen accounts.

What the FATF grey list actually is — and what it is not

FATF keeps two public lists. The language is bureaucratic on purpose. The effects are not.

FATF itself says it is a “policy-making body,” not a court, and that it “has no investigative authority.” That sentence should stop the conversation. A body that cannot investigate a person is somehow allowed to brand 50 million Kenyans, or 30 million Angolans, as a financial-risk category.

The grey list is not a finding that “this nation is a money-laundering state.” It is a finding that the country’s laws, beneficial-ownership registers, financial-intelligence unit, prosecutions, or statistics do not yet look the way FATF wants them to look. Technical compliance and “effectiveness” scores — not a proven crime by the people who will lose PayPal.

The February 2026 grey list: 23 jurisdictions, one shared sentence

As of the 13 February 2026 plenary, public compilations of FATF’s increased-monitoring statement listed 23 countries and territories. Kuwait and Papua New Guinea were added at that meeting. Nigeria, South Africa, Mozambique, and Burkina Faso had been removed in October 2025 after on-site visits. Kenya was not removed. Kenya has been on the list since February 2024.

Snapshot of the 13 February 2026 increased-monitoring roster: Algeria, Angola, Bolivia, Bulgaria, Burkina Faso, Cameroon, Côte d’Ivoire, DR Congo, Haiti, Kenya, Kuwait, Laos, Lebanon, Monaco, Namibia, Nepal, Papua New Guinea, Senegal, South Sudan, Syria, Venezuela, Vietnam, British Virgin Islands, Yemen. Always verify against the live FATF page; plenaries in June and October can add or remove names.

The pattern is unmistakable: the list is overwhelmingly composed of African, Caribbean, and developing economies. Academic analysis published in Risks (MDPI) found that countries with GDP per capita under $20,000 face grey-listing rates as high as 40%. Poverty itself has become a risk indicator. Meanwhile, the financial architectures of the wealthiest nations — the secrecy structures, the anonymous shell companies, the luxury real-estate laundering documented for years in London, New York, and Dubai — do not produce comparable listings. The suspicion flows downhill.

Who made FATF — and who never voted for it

This is the question that should be asked before any country is told to rewrite its criminal law because Paris is unhappy with a mutual-evaluation score.

FATF was created at the G7 summit in Paris in July 1989. The founding circle was the G7 heads of state, the European Commission, and a handful of other rich-country governments. The original job was drug-money laundering. After 11 September 2001 the mandate was expanded to terrorist financing. The secretariat sits administratively at the OECD in Paris. FATF is not the UN. It is not a treaty organisation with a global parliament. It is a task force that writes “recommendations.”

Those recommendations — the Forty Recommendations, later expanded — are sold as technical standards. They become domestic criminal law, banking rules, charity rules, and company-law rules because IMF programmes, World Bank assessments, correspondent banks, and FATF-style regional bodies treat non-compliance as a threat to a country’s access to the dollar system.

FATF now has about 40 members, including the United States, the United Kingdom, the EU, China, India, and South Africa, plus two regional organisations. Through nine FATF-style regional bodies it claims a network of roughly 200 jurisdictions. That is not democracy. That is a franchise model. The standard is written at the centre. The evaluations are performed on the periphery. The grey list is the enforcement tool.

What “authority” actually means here

• Not a treaty. There is no FATF convention that every listed country ratified after a public debate.
• Not a court. There is no right of the Kenyan freelancer to confront evidence, call witnesses, or appeal a personal finding — because there is no personal finding. There is a country score.
• Not an elected legislature. Plenary delegates are officials. The public is the object of the policy, not the author of it.
• Not optional in practice. A government can theoretically ignore FATF. Its banks cannot ignore the correspondent banks that do listen to FATF.

So when someone asks, “Who gave them the authority to decide which nation belongs on that list?” the honest answer is: they gave it to themselves, the G7 blessed it, and the dollar-clearing system enforces it. That is power. It is not a mandate from the people being listed.

Soft law that behaves like a sanction

FATF’s defenders always say the same sentence: the recommendations are not legally binding. Watch what happens after the sentence.

Julia Morse’s research in The Bankers’ Blacklist describes the model with uncomfortable clarity: the public list makes private banks move money and services away from listed countries. Domestic elites then pressure their own governments to copy FATF’s rules. The “recommendation” becomes a statute because the alternative is being cut out of correspondent banking.

That is why people in grey-listed countries suddenly cannot open a UK company through a high-street formation agent, or find their long-running PayPal account limited “for their protection.” No Act of Parliament needed to say “Kenyans are forbidden.” The risk matrix is enough. Formation agents, ACSPs, and payment firms apply enhanced due diligence — or they simply refuse the file. The legal story is “we are managing risk.” The lived story is a lock on the door.

If judgment is based on suspicion, justice is already dead

Imagine your neighbour has not robbed you. You suspect he might. You call the police. They arrest him, freeze his salary, and tell the whole street he is “under increased monitoring” until his household paperwork looks better. That is not policing. That is a smear with a procedure manual.

The grey list works on that logic at nation scale. FATF does not have to prove that a Kenyan graphic designer moved terrorist funds. It has to be unsatisfied with Kenya’s beneficial-ownership regime, or the number of money-laundering prosecutions, or the supervision of designated non-financial businesses. “Strategic deficiencies” is a phrase that sounds like evidence. It is a grading rubric.

Risk-based regulation has a legitimate core: banks should know their customers, and states should be able to follow criminal money. The grey list jumps from that core to a collective sentence. It treats a weak register in the capital as if it were a confession by the village.

Once you accept suspicion of a system as enough to punish a population, you have left the rule of law. You are in the rule of lists.

A few people sin. The nation pays.

Every country has corrupt officials. Every country has criminals. The United States has enormous money-laundering through real estate, shell companies, and trade. The United Kingdom spent years as a preferred destination for dirty capital through London’s company and property markets. Those facts did not put the American public or the British public on a grey list that froze their PayPal.

When FATF looks at a developing country, the unit of analysis is the jurisdiction. When a politically exposed person in that country steals, the unit of punishment becomes the freelancer who has never met him. That is the moral fraud at the centre of the list.

This is not a plea to ignore crime. It is a demand that the response look like law. Law names defendants. Lists name nationalities.

People in already-excluded economies feel this most sharply. A country that is barely plugged into correspondent banking is then told it is a money-laundering threat. The accusation and the isolation feed each other. You cut a society out of the formal system, then treat the informal workarounds as evidence of guilt.

Kenya: a grey list, then the PayPal freeze

Kenya was added to the grey list in February 2024. The FATF action plan talked about beneficial ownership, supervision, investigations, and terrorist-financing risks. Two years later, at the February 2026 plenary, Kenya was still there. Nigeria and South Africa had been taken off in October 2025. The Kenyan designer with a decade-old PayPal account did not get a plenary.

What happened on the ground is the part FATF’s PDFs do not print. Freelancers, agencies, and small exporters reported long-running PayPal accounts limited or frozen. Accounts that had received ordinary client payments for years. No accusation of terrorism. No court. A compliance wave, timed to a country risk rating, hitting people who do not sit in Treasury and do not write the Proceeds of Crime Act.

This is why the grey list is not a polite peer-review exercise. It is a switch that turns millions of ordinary economic lives into enhanced-due-diligence files. If you need a US payment stack that is not tied to a grey-listed personal account, the practical path many non-residents use is a real US company plus a real EIN — not a fake American identity. That path is documented in our guide on how to create a US PayPal account as a non-US resident.

The bias is in the design, not only in the mood

FATF will say the methodology is the same for everyone. Look at the map anyway.

Western financial centres wrote the standard. They have armies of compliance officers, software vendors, and consultants who sell “FATF-ready” reforms. A small African financial-intelligence unit is scored against the same template. Failure is then treated as moral failure rather than a capacity gap. Analysts noted this as far back as the old “non-cooperative countries” era: some listed places were not refusing to cooperate so much as lacking the infrastructure to satisfy a rich-country checklist.

Meanwhile, countries that have been repeatedly accused — in journalism and in policy debates — of letting terror finance or kleptocratic money move through their banks have spent long stretches off the grey list, or have been listed briefly and then celebrated out. The UAE was grey-listed in 2022 and removed in 2024. Turkey was listed and removed. The United States and the United Kingdom, whose company registries and property markets have been magnets for illicit wealth, sit in the plenary that grades everyone else.

Monaco and the British Virgin Islands on the same list as South Sudan and Haiti should tell you the rubric can touch rich jurisdictions. It should also tell you the consequences are not the same. A BVI service provider hires more lawyers. A Haitian or Kenyan freelancer loses the month’s rent.

They take the longer road. The road still goes through the church door.

FATF did not print “close the churches” on a communiqué. It printed Recommendation 8. Originally a special recommendation on non-profit organisations after 2001, Rec 8 told countries to protect the NPO sector from terrorist abuse. In the hands of nervous governments and even more nervous banks, “protect” became “suspect the whole sector.”

Churches, mosques, charities, and mission organisations move money across borders. They collect cash. They send support to people in hard places. That profile is enough for a de-risking algorithm. Account refusals, delayed wires, and “know your donor” demands followed. Independent researchers and the International Center for Not-for-Profit Law documented years of this as “policy laundering”: a security rule written internationally, then used at home to watch and constrict civil society.

FATF’s own 2021 stocktake of unintended consequences admitted the damage: de-risking, financial exclusion, and over-application of measures to non-profits. In 2023 it revised guidance on Recommendation 8 and said not every NPO is high-risk. That revision exists because the first version, as implemented, treated churches and charities as a terrorist-finance channel until proven otherwise.

For believers and for secular builders alike, the practical lesson is ugly and simple. If the formal rails can be shut from Paris, you cannot build a life that has only one switch. Diversified legal entities, transparent books, and less dependence on a single processor are not “clever tricks.” They are how you keep feeding a family and a congregation when a list moves.

The Economic Cost of a Suspicion: The public pays a macroeconomic fine for a paperwork grade

IMF economists Mizuho Kida and Simon Paetzold, in a 2021 working paper, estimated that grey-listing is associated with a decline in capital inflows of about 7.6 percent of GDP on average. That is not a slap on a ministry’s wrist. That is investment, borrowing, and confidence leaving the country — which means jobs, imports, and currency pressure for people who did not write the deficient statute.

World Bank and IMF work on correspondent-banking “de-risking” showed the other channel: foreign banks close relationships with local banks because the compliance cost of a grey-listed corridor is not worth the fee income. Remittances get slower and more expensive. Trade finance shrinks. The already-excluded become more excluded. FATF then points at informal value transfer and calls it a risk. The arsonist has arrived to discuss fire safety.

The system is self-fulfilling: list a poor country, starve it of capital, and then point at the resulting informality as justification for the listing. That is not regulation. That is a poverty trap with a compliance department.

A global machine that catches almost none of the money

If this architecture actually confiscated the proceeds of crime, the democratic-deficit argument would still stand — but the utilitarian argument would have something to say. It does not.

Ronald F. Pol’s 2020 paper in Policy Design and Practice called global AML “the world’s least effective policy experiment.” His estimate: less than 1% of criminal proceeds are seized, while the cost of the system is orders of magnitude larger. UNODC has long put criminal proceeds in the range of 2–5% of global GDP. The confiscation numbers never remotely match.

FATF’s own mutual evaluations keep showing the same split: countries can score well on “technical compliance” (laws on the books) and poorly on “effectiveness” (actual cases, actual assets). The grey list still leans on that machinery. It exports a model that is expensive, exclusionary, and bad at its stated job — then punishes countries that cannot afford a convincing performance of it.

What people in grey-listed countries actually do

You can hate the list and still have invoices to send. The honest options are narrow. The dishonest ones get accounts killed.

1. Separate the person from the business — legally

A personal PayPal in a grey-listed country is a flagged corridor. A disclosed company in the US or UK, with a real registered agent, a real EIN or Companies House file, and a real beneficial owner, is a different risk object. It is still reviewed. It is not the same as a personal account that happens to live on a list.

Non-residents can generally form a US LLC without citizenship, an SSN, or setting foot in America. The requirements, state choice, and EIN path are in How to Form an LLC for Non-US Residents. If you are comparing agents, start with the best LLC formation services for non-US residents.

2. Use the company for the work that actually needs it

Creators who need AdSense or a cleaner payout story often put the channel in the company, not in a personal name that keeps tripping country filters. See how to create an LLC for a YouTube channel and Google AdSense and, if you run more than one property, how to open multiple AdSense accounts without turning the structure into a ban magnet.

3. Pay yourself like an owner, not like a ghost

Once the entity exists, the money still has to reach you without looking like layering. Owner’s draws, payroll, and tax treatment are a separate discipline: how to pay yourself as an LLC.

4. Reduce single-point-of-failure banking

The grey list is a reminder that a processor can close you for a reason that has nothing to do with your invoices. Building personal liquidity and not living inside one platform is the longer project — the one we unpack in how to become your own bank.

What would justice look like instead of a list?

It would look like the thing FATF keeps saying it cannot do, and then approximating with a blunt instrument: go after the guilty.

• Name the person, the company, the wallet, the official. If there is proof, prosecute. Mutual legal assistance already exists for that.
• Stop converting capacity gaps into moral verdicts. A thin financial-intelligence unit is a development problem. It is not a reason to freeze a tutor’s PayPal.
• Make banks prove a customer-level risk before they close an entire nationality corridor. “Grey-listed country” is not a customer due-diligence file.
• Put Recommendation 8 back in its box. Churches and charities are not terrorist-finance utilities. Targeted cases, not sector-wide suspicion.
• Publish the democratic deficit out loud. If G7 governments want this power, they should have to defend it in their own parliaments as what it is: extraterritorial economic coercion by list.

Until that happens, the grey list will keep doing what it was built to do. It will not catch the sophisticated launderer who already has London lawyers. It will catch the nation that cannot staff a beneficial-ownership office, and then it will catch the church secretary and the freelancer as collateral.

Frequently asked questions