Skip to main content
FinCrime Institute
Category: International Bodies and Standards

FATF Recommendation 8

Also known as: R.8, Recommendation 8, R.8/INR.8, FATF R.8
Simply put

FATF Recommendation 8 is one of the standards issued by the Financial Action Task Force (FATF) that focuses on protecting non-profit organisations (NPOs) from being misused for terrorist financing. It calls on countries to take measures to reduce this risk without unnecessarily disrupting legitimate charitable activity. As a FATF standard, it sets an expectation for countries to follow rather than being a directly binding law.

Formal definition

Recommendation 8, together with its Interpretive Note (collectively R.8/INR.8), forms part of the FATF Recommendations, which are international standards rather than binding legislation. Following revisions agreed by the FATF, R.8 aims to require countries to protect NPOs from potential terrorist financing (TF) abuse through the effective implementation of risk-based measures, meaning that mitigation should be targeted and proportionate to identified TF risk within the NPO sector. The evidence indicates the standard has been subject to public consultation and revision, and the revised R.8 and its Interpretive Note direct countries to safeguard NPOs from TF abuse; practitioners should confirm the current text of R.8/INR.8 and any national transposition measures, as the precise obligations depend on how individual jurisdictions implement the standard.

Why it matters

Non-profit organisations occupy a distinctive position in the fight against terrorist financing. They move funds across borders, often into higher-risk or conflict-affected regions, and depend on public trust to carry out charitable, humanitarian, religious, and social work. FATF Recommendation 8 matters because it addresses the concern that a subset of NPOs could be misused to raise, move, or disburse funds for terrorist purposes, while simultaneously recognising that heavy-handed or blanket measures can suppress legitimate charitable activity, financial inclusion, and civil society. The balance the standard seeks to strike, targeted, risk-based mitigation rather than sweeping restriction, is central to why it is closely watched by both compliance professionals and the NPO sector itself.

Because R.8 is a FATF standard rather than directly binding law, its practical significance flows from how individual countries transpose it into national frameworks and from how they are assessed against it in FATF mutual evaluations. The standard has been the subject of public consultation and revision, reflecting sustained debate about how to protect NPOs from terrorist financing abuse without imposing disproportionate burdens. For obliged entities that bank, service, or partner with NPOs, and for the organisations themselves, the way a jurisdiction implements R.8 can shape due diligence expectations, account access, and reporting relationships.

The revised R.8 and its Interpretive Note direct countries to safeguard NPOs from terrorist financing abuse through effective implementation of risk-based measures. Practitioners should note that this is a measure to mitigate and manage identified risk within the NPO sector, not a guarantee that abuse can be eliminated, and that the presence of an NPO in a higher-risk category does not itself indicate wrongdoing. Because the precise obligations depend on national transposition, the operational impact varies by jurisdiction.

Who it's relevant to

AML/CFT policymakers and regulators
National authorities responsible for counter-terrorist-financing frameworks use R.8/INR.8 as the reference point for designing risk-based measures to protect the NPO sector. They must translate the standard into proportionate national rules and are assessed against it in FATF mutual evaluations, so the precise obligations they set will vary by jurisdiction.
Non-profit organisations
Charities, humanitarian bodies, and other NPOs are the focus of the standard. R.8 seeks to reduce the risk of their misuse for terrorist financing while aiming not to unnecessarily disrupt legitimate charitable activity. How this affects an individual organisation depends on the risk-based approach adopted in its jurisdiction, and being in scope of R.8-related measures does not imply any wrongdoing.
Compliance officers at financial institutions
Institutions that provide banking or payment services to NPOs need to understand how their jurisdiction implements R.8 when calibrating due diligence and ongoing monitoring for NPO customers. The risk-based, proportionate intent of the standard is relevant when assessing whether measures applied to charitable clients are appropriately targeted rather than blanket restrictions.
Policy and civil society advocates
Because R.8 has been the subject of public consultation and revision, organisations engaged in shaping AML/CFT policy and defending civil society space follow it closely to ensure that measures to counter terrorist financing abuse remain proportionate and do not unduly constrain legitimate non-profit work.

Inside R.8

Non-Profit Organisation (NPO) Focus
Recommendation 8 addresses the potential misuse of non-profit organisations for terrorist financing purposes. It is one of the FATF Recommendations specifically concerned with terrorist financing rather than money laundering, and it targets the NPO sector as a category identified as potentially vulnerable to abuse.
Risk-Based Approach
The Recommendation calls on countries to review the adequacy of laws and regulations relating to NPOs and to apply focused, proportionate measures to those NPOs identified as being at risk of terrorist financing abuse. It does not envisage subjecting the entire NPO sector to uniform or blanket controls, and FATF has revised the Recommendation to emphasise proportionality and to discourage overbroad restrictions on legitimate charitable activity.
Standard, Not Binding Law
As with all FATF Recommendations, Recommendation 8 is an international standard rather than directly binding law. Its requirements take legal effect only through implementation in national frameworks, and the precise measures, definitions, and thresholds vary by jurisdiction.
Outreach, Supervision and Oversight
The Recommendation generally contemplates a combination of outreach to the NPO sector to raise awareness of terrorist financing risks, targeted supervision or monitoring of at-risk NPOs, and mechanisms to investigate and gather information where abuse is suspected. The specific supervisory arrangements depend on how each country transposes the standard.
Proportionality and Legitimate Activity Safeguards
Revised guidance under this Recommendation stresses that measures should not disrupt or discourage legitimate charitable work, and that controls should be calibrated to identified risk rather than applied indiscriminately across all NPOs.

Common questions

Answers to the questions practitioners most commonly ask about R.8.

Does FATF Recommendation 8 mean all non-profit organisations are high-risk and must be subjected to enhanced scrutiny?
No. This is a common misconception. Recommendation 8 does not treat the non-profit sector as inherently or uniformly high-risk, and the FATF has revised its interpretive guidance specifically to counter the over-broad application that led some jurisdictions to impose blanket restrictions. The Recommendation calls for a targeted, risk-based approach: countries are expected to identify the subset of organisations that fall within the FATF definition of an NPO and that are at risk of terrorist financing abuse, rather than applying uniform measures across the entire sector. Measures should be proportionate and should not disrupt or discourage legitimate non-profit activity. As with any FATF standard, the specifics of how this is applied depend on each jurisdiction's domestic implementation.
Is Recommendation 8 a binding law that NPOs must comply with directly?
No. The FATF Recommendations are international standards, not binding law in themselves. Recommendation 8 is addressed to countries, setting out what national authorities should do to protect NPOs from potential terrorist financing abuse. Any concrete legal obligation on a non-profit arises only from the domestic laws and regulations a jurisdiction enacts to give effect to the standard, and these vary considerably from one country to another. NPOs should therefore look to their applicable national legislation and supervisory guidance to understand their actual obligations, and confirm details against those instruments.
How should a country identify which NPOs fall within the scope of Recommendation 8?
The FATF approach centres on the functional definition of an NPO and on a risk assessment of the sector. Authorities are generally expected to review the features, activities, and characteristics of organisations to determine which ones fall within the FATF definition and which face a risk of terrorist financing abuse. The intended outcome is that oversight is focused on the at-risk subset rather than the whole sector. Because the definition and the outcome of any sectoral risk assessment depend on national implementation, the precise scoping criteria should be confirmed against the relevant domestic framework and supervisory guidance.
What kinds of measures might authorities apply to NPOs identified as at risk?
Measures are intended to be proportionate to the identified risk and typically focus on outreach, supervision or monitoring, transparency around governance and finances, and the ability to investigate and gather information where abuse is suspected. The emphasis in current FATF guidance is on measures that mitigate identified risks without unduly burdening or deterring legitimate charitable work. Because the standard is implemented through domestic law, the specific tools available to authorities and the corresponding expectations placed on NPOs vary by jurisdiction and should be verified against local requirements.
How does Recommendation 8 relate to a financial institution's own AML/CFT obligations when dealing with NPO customers?
Recommendation 8 is directed primarily at how countries protect the non-profit sector, rather than being a customer due diligence standard for financial institutions. A financial institution's obligations toward NPO customers generally flow from the customer due diligence and risk-based requirements in its jurisdiction's AML/CFT framework. In practice this means an NPO customer should be assessed on its individual risk profile rather than being automatically categorised as high-risk on the basis of its non-profit status. The applicable due diligence expectations should be determined by reference to the institution's domestic regulatory requirements.
Should NPO status alone trigger enhanced due diligence or account restrictions?
Not automatically. Treating NPO status by itself as a trigger for enhanced due diligence or de-risking runs counter to the risk-based, proportionate approach that current FATF guidance encourages. The appropriate level of due diligence generally depends on the specific risk factors associated with a given organisation and its activities, assessed under the applicable domestic framework. Any decision to apply enhanced measures or to restrict services should be grounded in an individualised risk assessment rather than in a blanket assumption, and firms should confirm their approach against relevant regulatory and supervisory expectations.

Common misconceptions

Recommendation 8 requires all non-profit organisations to be subject to the same intensive AML/CFT controls.
The Recommendation is built around a risk-based, targeted approach. It generally calls for focused measures directed at NPOs identified as being at risk of terrorist financing abuse, and FATF has emphasised proportionality to avoid overbroad restrictions on legitimate charities. Blanket application across the whole sector is not the intended outcome.
Recommendation 8 is a binding legal requirement that applies uniformly worldwide.
FATF Recommendations are international standards, not directly binding law. Recommendation 8 takes effect only through each jurisdiction's national implementation, and the specific obligations, definitions of NPO, and supervisory measures may differ significantly between regimes. Exact requirements should be confirmed against the applicable national framework.
Recommendation 8 concerns money laundering through charities.
Recommendation 8 is primarily focused on the potential misuse of NPOs for terrorist financing, which is conceptually distinct from money laundering. While the two areas can overlap in practice, the Recommendation's scope centres on terrorist financing risk in the NPO sector.

Best practices

Base any oversight of NPOs on an assessment of terrorist financing risk, applying focused measures to organisations identified as at risk rather than imposing uniform controls across the entire sector.
Confirm the specific national implementation of Recommendation 8 in the relevant jurisdiction, since the definition of NPO, applicable obligations, and supervisory arrangements are set through domestic law rather than by the standard itself.
Calibrate controls proportionately to avoid disrupting or discouraging legitimate charitable activity, consistent with FATF's revised emphasis on proportionality.
Combine sector outreach and awareness-raising with targeted supervision or monitoring, so that at-risk NPOs understand terrorist financing vulnerabilities and appropriate mitigations.
Treat measures under Recommendation 8 as tools to detect, deter, and mitigate terrorist financing risk in the NPO sector, not as guarantees that abuse will be prevented.
Distinguish clearly between terrorist financing risk (the focus of this Recommendation) and money laundering risk when designing and documenting NPO-related controls.