Skip to main content
FinCrime Institute
Category: International Bodies and Standards

FATF Standards

Also known as: FATF Recommendations, The FATF Recommendations, FATF 40 Recommendations
Simply put

The FATF Standards are a set of internationally recognized measures that countries are encouraged to put in place to combat money laundering, terrorist financing, and the financing of weapons proliferation. They are developed and promoted by the Financial Action Task Force (FATF) and serve as a common framework that governments and financial institutions look to when designing their own rules. They are standards rather than laws in themselves, so their effect depends on how individual countries implement them.

Formal definition

The FATF Standards, principally embodied in the FATF Recommendations, constitute a comprehensive and consistent framework of measures that jurisdictions are expected to implement to combat money laundering, terrorist financing, and proliferation financing. As international standards rather than binding law, they do not have direct legal effect; their force derives from national transposition into domestic legislation and regulation and from the mutual evaluation process assessing both technical compliance and effectiveness. The FATF develops, reviews, and promotes these standards, which form the reference framework against which countries' anti-financial-crime regimes are measured. Practitioners should note that the specific obligations applying to obliged entities flow from the implementing national law in a given jurisdiction rather than from the Recommendations directly, and implementation may diverge across regimes.

Why it matters

The FATF Standards matter because they provide the common reference framework that underpins much of the world's anti-money laundering, counter-terrorist-financing, and counter-proliferation-financing architecture. Because they are standards rather than binding law, they do not by themselves impose obligations on financial institutions or other obliged entities; their practical effect comes from how individual jurisdictions transpose them into domestic legislation and regulation. This distinction is critical for practitioners: an institution's actual legal duties flow from the national law that implements the Standards in the relevant jurisdiction, and those implementations may diverge in scope, thresholds, and detail even where they share a common origin.

For compliance professionals, understanding the Standards helps explain why AML/CFT regimes across different countries share broadly similar features while differing in specifics. The Standards are also the benchmark against which jurisdictions are assessed, covering both technical compliance (whether the necessary laws and rules exist) and effectiveness (whether they achieve results in practice). This assessment dimension gives the Standards influence well beyond their non-binding character, as countries generally seek to demonstrate alignment with the shared objectives of tackling money laundering, terrorist financing, and proliferation financing.

Because the FATF develops, reviews, and periodically revises the Standards, practitioners should treat them as an evolving framework rather than a fixed text, and should always confirm the specific requirements applicable to their operations against the implementing national law in each relevant jurisdiction rather than assuming a single global rule applies.

Who it's relevant to

Compliance officers and MLROs
Compliance professionals use the FATF Standards to understand the framework underpinning their national AML/CFT obligations and to anticipate how requirements may evolve. However, they should design and calibrate their programs against the implementing law in each jurisdiction where they operate, since the Standards themselves are not the source of binding duties and implementations may diverge.
Policy makers and regulators
National authorities look to the FATF Standards as the reference framework when designing, updating, and assessing their AML/CFT regimes. They are responsible for transposing the Recommendations into domestic legislation and regulation, and their regimes may be measured against the Standards for both technical compliance and effectiveness.
Financial institutions and other obliged entities
While the Standards shape the broad expectations that apply across the sector, the specific obligations for obliged entities flow from national implementing law rather than from the Recommendations directly. Institutions operating across borders should be alert to differences in how jurisdictions have implemented the Standards.
Financial intelligence analysts and investigators
Analysts and investigators benefit from understanding the Standards as the shared framework informing the AML/CFT measures they work within, helping them interpret cross-border cooperation and the common objectives of tackling money laundering, terrorist financing, and proliferation financing across different regimes.
Legal and risk professionals
Legal and risk advisers reference the Standards to contextualize national requirements and to advise on jurisdictional divergence, while grounding specific legal analysis in the applicable domestic law rather than in the non-binding Recommendations themselves.

Inside FATF Standards

FATF Recommendations
The core set of standards issued by the Financial Action Task Force covering anti-money laundering, counter-terrorist financing, and counter-proliferation financing. They are international standards, not binding law in themselves; they take legal effect only when transposed into a jurisdiction's domestic legislation and regulation.
Interpretive Notes
Supplementary guidance that clarifies how individual Recommendations should be understood and applied. They form part of the standards and are used to interpret the sometimes high-level wording of the Recommendations themselves.
Risk-Based Approach
A foundational principle running through the standards, under which countries and obliged entities are expected to identify, assess, and understand their money laundering and terrorist financing risks and apply mitigating measures proportionate to those risks. It is a framework for managing risk, not a guarantee that financial crime is prevented.
Customer Due Diligence Expectations
Standards addressing identification and verification of customers and beneficial owners, ongoing monitoring, and the application of enhanced measures in higher-risk situations. These are expressed as expectations for national frameworks rather than a single uniform rule applied identically across jurisdictions.
Mutual Evaluation Process
A peer-review mechanism through which FATF and FATF-style regional bodies assess a country's technical compliance with the standards and the effectiveness of its regime. Findings are published in mutual evaluation reports.
Public Identification of Jurisdictions
Processes through which FATF publicly identifies jurisdictions with strategic deficiencies, which may inform how other countries and obliged entities calibrate their risk-based measures toward those jurisdictions.

Common questions

Answers to the questions practitioners most commonly ask about FATF Standards.

Are the FATF Recommendations legally binding on financial institutions?
No. The FATF Recommendations are international standards, not binding law in themselves. They set out what FATF considers effective measures to combat money laundering, terrorist financing, and proliferation financing, but they take legal effect only when individual jurisdictions transpose them into national legislation, regulation, or enforceable rules. An obliged entity's actual obligations therefore flow from the applicable domestic instruments, such as the EU AML Directives or AML Regulation, the US Bank Secrecy Act and FinCEN rules, or the UK Money Laundering Regulations and Proceeds of Crime Act, rather than directly from the FATF text. Because transposition varies, the precise requirements should always be confirmed against the law of the relevant jurisdiction.
Does FATF membership or its standards mean AML requirements are the same across all countries?
No. FATF sets a common set of standards, but it does not create a single uniform global rule that applies identically everywhere. Jurisdictions implement the Recommendations through their own legal frameworks, and they may differ in scope, thresholds, the range of obliged entities covered, and specific procedural requirements. Some countries may also go beyond the standards or implement them differently based on national risk assessments. As a result, a control or definition that satisfies one regime may not fully satisfy another, and cross-border programs generally need to account for these divergences rather than assuming equivalence.
How should a compliance team use the FATF Standards when the applicable law is the local AML regime?
In practice, the FATF Standards are typically used as an interpretive and benchmarking reference rather than as a direct source of obligation. Compliance teams generally build their programs around the binding domestic instruments that transpose the standards, while using the FATF Recommendations and related guidance to understand the intent behind requirements, inform risk-based decisions, and anticipate regulatory expectations. Where local law is silent or ambiguous, the standards can help frame reasonable practice, but the enforceable requirement remains the applicable national law, which should be the primary point of reference.
What is the practical significance of a country appearing on a FATF-related list for an obliged entity?
FATF publicly identifies jurisdictions with strategic deficiencies in their AML/CFT frameworks, and these designations can influence the risk-based approach an obliged entity applies. In many jurisdictions, transposing law or regulator guidance requires enhanced due diligence or heightened scrutiny for business relationships or transactions connected to certain high-risk jurisdictions, and national lists may draw on FATF's identifications. However, the specific obligations triggered depend on the applicable domestic regime, and a jurisdiction's listing status is a risk factor to be assessed rather than an automatic prohibition. Firms should confirm the exact requirements and any relevant lists against their governing law.
How do the FATF Standards relate to a firm's risk-based approach?
The FATF Standards promote a risk-based approach as a core organizing principle, under which obliged entities identify, assess, and understand their money laundering and terrorist financing risks and apply measures proportionate to those risks. In practice this generally means allocating more resources and applying more intensive measures where risk is higher, and simplified measures where permitted and risk is lower. It is important to treat these as measures to detect, deter, and mitigate risk rather than guarantees of prevention. The precise expectations for risk assessment and the permissible use of simplified or enhanced measures are set by the applicable national regime.
Do the FATF Standards prescribe exactly how to conduct customer due diligence?
The FATF Standards describe expected outcomes and components of customer due diligence at a principles level, such as identifying and verifying customers, understanding the purpose of the relationship, identifying beneficial ownership, and conducting ongoing monitoring, but they generally leave operational detail to national implementation. The specific verification methods, documentation, thresholds, and the circumstances requiring enhanced due diligence are typically defined by the applicable domestic law and regulator guidance, which can differ between regimes. Firms should design CDD procedures against the requirements of their governing jurisdiction while using the standards to understand the underlying expectations.

Common misconceptions

The FATF Recommendations are legally binding international law that obliged entities must follow directly.
The FATF Recommendations are international standards, not binding law. They create obligations for regulated firms only once a jurisdiction transposes them into domestic legislation and regulation, and the precise requirements can diverge between regimes.
Because they are global standards, the FATF Recommendations mean AML rules are the same in every country.
The standards set a common baseline, but implementation varies by jurisdiction. Thresholds, scope of obliged entities, and specific due diligence requirements differ depending on how each country transposes and applies the standards, so practitioners should confirm the applicable local rules.
Following the FATF Recommendations guarantees that money laundering and terrorist financing will be prevented.
The standards, and in particular the risk-based approach, are designed to help detect, deter, and mitigate risk. They do not eliminate financial crime risk or guarantee prevention, and compliance with the standards is not a substitute for effective, risk-proportionate controls.

Best practices

Treat the FATF Recommendations as a baseline reference and always map them to the specific domestic legislation and regulation that applies to your firm, since obligations arise from transposed national law rather than the standards themselves.
Read the Interpretive Notes alongside the Recommendations to understand how high-level wording is intended to be applied, rather than relying on the Recommendations in isolation.
Build and document a risk-based approach that identifies, assesses, and mitigates money laundering and terrorist financing risks proportionately, and frame controls as measures to manage risk rather than as guarantees of prevention.
Use FATF mutual evaluation reports and public identification of jurisdictions with strategic deficiencies as inputs to your risk assessment and country-risk calibration, while confirming current status against up-to-date sources.
Where the standards leave scope for national discretion, verify the exact thresholds, in-scope obliged entities, and due diligence requirements against the applicable regulation before operationalizing them.
Distinguish clearly in policies and training between what the FATF standards recommend and what local law legally requires, so staff understand the actual source and force of each obligation.