The FATF Recommendations

The 40 Commandments of FATF.

Forty rules written for the whole world in 1990 and recut ever since. Each one here in a single plain sentence — the way you would explain it to a new colleague.

40
Recommendation 1 A · Policies & coordination

Assessing risks and applying a risk-based approach

Countries and firms identify and understand their money-laundering, terrorist-financing and proliferation-financing risks — and put their resources where the risk is highest.

▶ REG-LEAKS short — coming
Recommendation 2 A · Policies & coordination

National cooperation and coordination

Policy makers, the FIU, supervisors, police and prosecutors work together under national AML/CFT policies, compatible with data-protection rules.

▶ REG-LEAKS short — coming
Recommendation 3 B · Money laundering & confiscation

Money laundering offence

Money laundering is a crime, covering the widest possible range of predicate offences.

▶ REG-LEAKS short — coming
Recommendation 4 B · Money laundering & confiscation

Confiscation and provisional measures

Authorities can identify, freeze, seize and confiscate criminal proceeds and the instruments of crime — where possible, even without a criminal conviction.

▶ REG-LEAKS short — coming
Recommendation 5 C · Terrorist financing & proliferation

Terrorist financing offence

Financing terrorist acts, terrorist organisations and individual terrorists is a crime — even without a link to a specific attack.

▶ REG-LEAKS short — coming
Recommendation 6 C · Terrorist financing & proliferation

Targeted financial sanctions — terrorism

The assets of persons designated by the UN in relation to terrorism are frozen without delay, and no funds may be made available to them.

▶ REG-LEAKS short — coming
Recommendation 7 C · Terrorist financing & proliferation

Targeted financial sanctions — proliferation

The same freezing obligations apply to persons designated in relation to weapons of mass destruction.

▶ REG-LEAKS short — coming
Recommendation 8 C · Terrorist financing & proliferation

Non-profit organisations

Protect non-profit organisations from terrorist-financing abuse with focused, risk-based measures that do not disrupt legitimate charity.

▶ REG-LEAKS short — coming
Recommendation 9 D · Preventive measures

Financial institution secrecy laws

Banking and professional secrecy must not stand in the way of the AML/CFT measures.

▶ REG-LEAKS short — coming
Recommendation 10 D · Preventive measures

Customer due diligence

Identify and verify customers and beneficial owners, understand the purpose of the relationship and monitor it. No anonymous accounts.

▶ REG-LEAKS short — coming
Recommendation 11 D · Preventive measures

Record keeping

Keep due-diligence records and transaction data for at least five years, and make them available to the authorities swiftly.

▶ REG-LEAKS short — coming
Recommendation 12 D · Preventive measures

Politically exposed persons

Apply enhanced measures to PEPs, their family members and close associates: senior approval, source of wealth and funds, enhanced monitoring.

▶ REG-LEAKS short — coming
Recommendation 13 D · Preventive measures

Correspondent banking

Assess the respondent institution and its controls, obtain senior approval — and never deal with shell banks.

▶ REG-LEAKS short — coming
Recommendation 14 D · Preventive measures

Money or value transfer services

Money and value transfer services, hawala included, are licensed or registered and supervised — and so are their agents.

▶ REG-LEAKS short — coming
Recommendation 15 D · Preventive measures

New technologies

Assess the risks of new products and technologies before launch, and license and supervise virtual asset service providers.

▶ REG-LEAKS short — coming
Recommendation 16 D · Preventive measures

Payment transparency

Payments carry accurate originator and beneficiary information along the whole chain — including virtual-asset transfers, the 'travel rule'.

▶ REG-LEAKS short — coming
Recommendation 17 D · Preventive measures

Reliance on third parties

A firm may rely on the due diligence of another regulated entity, but it remains responsible for the result.

▶ REG-LEAKS short — coming
Recommendation 18 D · Preventive measures

Internal controls, foreign branches and subsidiaries

Group-wide AML/CFT programmes: compliance management, employee screening, training and independent audit.

▶ REG-LEAKS short — coming
Recommendation 19 D · Preventive measures

Higher-risk countries

Apply enhanced due diligence to relationships with high-risk jurisdictions, and countermeasures when the FATF calls for them.

▶ REG-LEAKS short — coming
Recommendation 20 D · Preventive measures

Reporting of suspicious transactions

Report promptly to the FIU when you suspect that funds are the proceeds of crime or linked to terrorist financing.

▶ REG-LEAKS short — coming
Recommendation 21 D · Preventive measures

Tipping-off and confidentiality

Staff who report in good faith are protected — and must never tell the customer that a report has been filed.

▶ REG-LEAKS short — coming
Recommendation 22 D · Preventive measures

Designated non-financial businesses and professions — due diligence

Casinos, real-estate agents, dealers in precious metals and stones, lawyers, notaries, accountants and company service providers apply due diligence in defined situations.

▶ REG-LEAKS short — coming
Recommendation 23 D · Preventive measures

Designated non-financial businesses and professions — other measures

The same professions report suspicion, maintain internal controls and apply measures for high-risk countries.

▶ REG-LEAKS short — coming
Recommendation 24 E · Transparency & beneficial ownership

Transparency and beneficial ownership of legal persons

Accurate, up-to-date beneficial ownership information on companies is available to the authorities — through a register or an equivalent mechanism.

▶ REG-LEAKS short — coming
Recommendation 25 E · Transparency & beneficial ownership

Transparency and beneficial ownership of legal arrangements

Trustees hold and disclose information on settlors, trustees, protectors, beneficiaries and anyone controlling a trust.

▶ REG-LEAKS short — coming
Recommendation 26 F · Powers of the authorities

Regulation and supervision of financial institutions

Financial institutions are licensed or registered, fit-and-proper tested and supervised on a risk basis.

▶ REG-LEAKS short — coming
Recommendation 27 F · Powers of the authorities

Powers of supervisors

Supervisors can inspect, compel the production of information and impose sanctions.

▶ REG-LEAKS short — coming
Recommendation 28 F · Powers of the authorities

Regulation and supervision of non-financial businesses and professions

Casinos are licensed; the other professions are monitored by a supervisor or a self-regulatory body.

▶ REG-LEAKS short — coming
Recommendation 29 F · Powers of the authorities

Financial intelligence units

An operationally independent national centre receives and analyses reports, and disseminates the results.

▶ REG-LEAKS short — coming
Recommendation 30 F · Powers of the authorities

Responsibilities of law enforcement and investigative authorities

Designated authorities investigate money laundering and terrorist financing, with parallel financial investigations.

▶ REG-LEAKS short — coming
Recommendation 31 F · Powers of the authorities

Powers of law enforcement and investigative authorities

Investigators can obtain records, search, seize, use special techniques and trace assets.

▶ REG-LEAKS short — coming
Recommendation 32 F · Powers of the authorities

Cash couriers

Detect cross-border movements of cash and bearer instruments through declaration or disclosure systems.

▶ REG-LEAKS short — coming
Recommendation 33 F · Powers of the authorities

Statistics

Keep comprehensive statistics on reports, investigations, prosecutions, convictions, confiscation and cooperation.

▶ REG-LEAKS short — coming
Recommendation 34 F · Powers of the authorities

Guidance and feedback

Authorities issue guidance and give feedback so that firms apply the rules and detect suspicion better.

▶ REG-LEAKS short — coming
Recommendation 35 F · Powers of the authorities

Sanctions

Effective, proportionate and dissuasive sanctions — criminal, civil or administrative — for firms and their senior management.

▶ REG-LEAKS short — coming
Recommendation 36 G · International cooperation

International instruments

Ratify and implement the Vienna, Palermo and Merida conventions and the Terrorist Financing Convention.

▶ REG-LEAKS short — coming
Recommendation 37 G · International cooperation

Mutual legal assistance

Provide the widest possible legal assistance in money-laundering and terrorist-financing cases, rapidly and constructively.

▶ REG-LEAKS short — coming
Recommendation 38 G · International cooperation

Mutual legal assistance: freezing and confiscation

Act quickly on foreign requests to identify, freeze, seize and confiscate.

▶ REG-LEAKS short — coming
Recommendation 39 G · International cooperation

Extradition

Extradite for money laundering and terrorist financing without undue delay. No safe havens.

▶ REG-LEAKS short — coming
Recommendation 40 G · International cooperation

Other forms of international cooperation

FIUs, supervisors and police exchange information with their foreign counterparts, spontaneously and on request.

▶ REG-LEAKS short — coming

Plain-language summaries for learning purposes. Only the official FATF text is authoritative: FATF — The FATF Recommendations.