What is the FATF black list?

The Financial Action Task Force 'Call for Action' list — currently North Korea, Iran and Myanmar — names jurisdictions with severe anti-money-laundering and counter-terrorism-financing deficiencies. Financial institutions worldwide are expected to apply enhanced due diligence or, in some cases, refuse the relationship entirely.

What is the FATF grey list?

Officially 'Jurisdictions under Increased Monitoring' — countries that have committed to fix strategic AML/CTF deficiencies and are being actively monitored. As of June 2026 this includes (among others) Nigeria, Vietnam, South Africa, Philippines, Croatia, Bulgaria, Lebanon, Syria and Venezuela.

How often is the list updated?

FATF reviews the lists at each plenary meeting — three times a year (typically February, June and October). Countries can be added, removed or have their status changed at any plenary.

Does dealing with a grey-list country mean I'm dealing with a scammer?

No — grey-listed countries are still open for legitimate business. But the underlying AML weaknesses make them more attractive bases for fraud rings, so the country itself is a risk factor that should be combined with other checks before sending money or sharing ID.

How does Scam AI use the FATF lists?

When you investigate a company, Scam AI checks its stated base country against the live FATF lists. Black-list countries trigger an immediate 1/10 score. Grey-list countries apply a 2-point penalty to the final score and surface a clear warning in your results.

Where can I read the official FATF lists?

FATF publishes both lists at fatf-gafi.org/en/countries/black-and-grey-lists.html — updated after every plenary. We link directly to that page in every Scam AI report that flags a country.

FREE REAL-TIME VERIFICATION · GLOBAL SEARCH · OFFICIAL OPEN DATA SOURCES

FATF High-Risk Countries — 2026 Black & Grey Lists

The FATF publishes two country-risk lists used by every major bank and regulator. Here's who is on them right now, what it means, and how to factor it into your own checks.

Key Takeaways

Black list (Call for Action): North Korea, Iran, Myanmar — enhanced due diligence is mandatory worldwide.
Grey list (Increased Monitoring): 27 countries as of June 2026, including Nigeria, Vietnam, South Africa, Philippines, Croatia and Bulgaria.
Lists are updated three times a year at each FATF plenary.
Grey-listed ≠ scam, but the AML weakness raises the base rate of fraud.
Scam AI applies the lists automatically: black = instant 1/10, grey = 2-point penalty.

Who's on the FATF black list?

As of the June 2026 plenary the 'High-Risk Jurisdictions subject to a Call for Action' list contains three countries: the Democratic People's Republic of Korea, Iran, and Myanmar. Banks and regulated firms across the EU, US, UK and most other G20 economies are required to apply enhanced due diligence — and in the DPRK and Iran cases, often refuse the relationship altogether.

Who's on the FATF grey list?

The current 'Jurisdictions under Increased Monitoring' list (June 2026) includes:

Algeria, Angola, Bulgaria, Burkina Faso, Cameroon, Côte d'Ivoire, Croatia, DRC, Haiti, Kenya, Lao PDR, Lebanon, Mali, Monaco, Mozambique, Namibia, Nepal, Nigeria, Philippines, Senegal, South Africa, South Sudan, Syria, Tanzania, Venezuela, Vietnam, Yemen.

These countries have committed to a fixed action plan with FATF and are being actively monitored. Removal is possible — Cayman Islands, UAE, Gibraltar and others have been removed in recent years after completing their plans.

Why country risk matters for scam detection

Scammers gravitate to jurisdictions with weak supervision because beneficial-owner concealment is easier, regulator-warning lists are sparse, and asset recovery is nearly impossible. A company that claims a grey-listed base country isn't necessarily fraudulent — but you should expect to see more independent evidence (real address, real reviews, real registry record) before sending money.

How Scam AI weights country risk

Black list — final score is capped at 1/10, equivalent to a Google Safe Browsing malware hit.
Grey list — −2 point penalty applied to the final score, and a clear warning is surfaced alongside the result.
Not listed — no penalty; country risk is treated as neutral.

Run a free check now

Scam AI cross-references regulator blacklists, business registries, WHOIS history and global fraud reports — in real time, free, no signup.

Verify a Website

Frequently Asked Questions

What is the FATF black list?: The Financial Action Task Force 'Call for Action' list — currently North Korea, Iran and Myanmar — names jurisdictions with severe anti-money-laundering and counter-terrorism-financing deficiencies. Financial institutions worldwide are expected to apply enhanced due diligence or, in some cases, refuse the relationship entirely.
What is the FATF grey list?: Officially 'Jurisdictions under Increased Monitoring' — countries that have committed to fix strategic AML/CTF deficiencies and are being actively monitored. As of June 2026 this includes (among others) Nigeria, Vietnam, South Africa, Philippines, Croatia, Bulgaria, Lebanon, Syria and Venezuela.
How often is the list updated?: FATF reviews the lists at each plenary meeting — three times a year (typically February, June and October). Countries can be added, removed or have their status changed at any plenary.
Does dealing with a grey-list country mean I'm dealing with a scammer?: No — grey-listed countries are still open for legitimate business. But the underlying AML weaknesses make them more attractive bases for fraud rings, so the country itself is a risk factor that should be combined with other checks before sending money or sharing ID.
How does Scam AI use the FATF lists?: When you investigate a company, Scam AI checks its stated base country against the live FATF lists. Black-list countries trigger an immediate 1/10 score. Grey-list countries apply a 2-point penalty to the final score and surface a clear warning in your results.
Where can I read the official FATF lists?: FATF publishes both lists at fatf-gafi.org/en/countries/black-and-grey-lists.html — updated after every plenary. We link directly to that page in every Scam AI report that flags a country.