FATF Update October 2026: Latest Grey List and Blacklist Changes
Ready to Defeat Your AML Compliance Obstacles?
Citadel365 Brings Revolution with Secure Solutions to AML Compliance Problems
On October 30th, 2026, the Financial Action Task Force (FATF) concluded its latest plenary session and released its updated assessment of jurisdictions under increased monitoring, commonly known as the FATF Grey List, alongside its latest position on high-risk jurisdictions subject to a call for action, commonly known as the FATF Black List.
The latest update reflects jurisdictions’ ongoing efforts to address strategic deficiencies in their anti-money laundering (AML), counter-terrorist financing (CFT), and counter-proliferation financing (CPF) frameworks.
As part of the October 2026 review, Bulgaria, Monaco, Côte d’Ivoire, and the Democratic Republic of Congo were removed from the FATF’s Grey List following progress in addressing their identified deficiencies.
Key FATF Grey List changes Announced Following the October 2026 Plenary
FATF regularly reviews jurisdictions under increased monitoring based on their progress in addressing strategic deficiencies identified in their AML/CFT/CPF frameworks.
The October 2026 updates include key notable changes:
Countries Removed from the FATF Grey List
The following jurisdictions were removed from the FATF Grey List following demonstrated progress in addressing their identified strategic deficiencies.
- Bulgaria
- Cote d’Ivoire
- Democratic Republic of Congo
- Monaco
Removal from the FATF Grey List reflects the jurisdiction’s progress in implementing the measures agreed with FATF and strengthening the effectiveness of its AML/CFT framework.
FATF Black List: October 2026 Update
The FATF Black List refers to High-Risk Jurisdictions Subject to a Call for Action. These jurisdictions have significant strategic deficiencies in their AML/CFT/CPF frameworks.
Following its October 2026 Plenary, FATF has retained the existing list of High-Risk Jurisdictions Subject to a Call for Action, with no countries added or removed. The list continues to comprise three jurisdictions:
- Democratic Republic of Korea (North Korea)
- Iran
- Myanmar
Key Compliance Actions for Regulated Entities Following the FATF Update
The latest FATF Grey List and Black List serve as an important reminder for regulated entities to regularly review jurisdictional risks and ensure their AML/CFT framework remains aligned with evolving risks.
The key measures that regulated entities should consider following the October 2026 FATF update:
- Conduct an enterprise-wide risk assessment to identify and assess ML/TF risks associated with affected jurisdictions.
- Review and update jurisdictional risk ratings within customer and transaction risk assessment frameworks.
- Assess the need for enhanced due diligence (EDD) for customers, counterparties, and transactions associated with high-risk jurisdictions.
- Review AML/CFT policies, procedures, and internal controls to ensure they reflect the latest FATF developments.
- Enhanced screening and monitoring controls for activities involving jurisdictions subject to increased monitoring or a call for action.
- Provide relevant staff training on FATF Grey List and Black List changes and their compliance implications.
FATF Identifies Jurisdictions Requiring Increased Monitoring as of 30th October 2026, including
- Angola
- Bolivia
- Bosnia and Herzegovina
- Cameroon
- Haiti
- Iraq
- Kenya
- Kuwait
- Laos
- Lebanon
- Nepal
- Papua New Guinea
- South Sudan
- Syria
- Venezuela
- Vietnam
- Virgin Islands (UK)
- Yemen
Stay Ahead of Evolving ML/TF Risks
Citadel365 helps strengthen your AML/CFT framework with intelligent compliance solutions
Frequently Asked Question
Bulgaria, Côte d’Ivoire, Democratic Republic of Congo, and Monaco were removed from the FATF Grey List following demonstrated progress in addressing identified deficiencies.
No countries were added to the FATF Grey List during the October 2026 Plenary.
Yes, businesses should review geographic and customer risk assessments and update them where the FATF changes affect their risk profile.
Businesses should review affected customers and transactions, reassess risks, and apply appropriate due diligence and monitoring measures.
Arjun is the Co-founder and CEO of Citadel365, where he leads the company’s vision across technology, business, and regulations. He brings over a decade of experience in building and scaling technology ventures. Arjun holds a B.Tech. in Information Technology and a Master’s in Management, supported by his certification as a Financial Crime Specialist, an uncommon combination that allows him to balance innovation with regulatory requirements.
Having advised leading banks and financial institutions on digital solutions and compliance technology, Citadel365 continues to grow with an ambition