The FATF grey list names jurisdictions under increased monitoring that have committed to fixing identified AML and counter-terrorist-financing weaknesses within agreed timeframes. It sits one step below the black list but is still a strong signal to raise your scrutiny.
What is the FATF grey list, in plain English?
The FATF grey list is the warning tier. Officially, it names jurisdictions under increased monitoring: countries that have identified AML and counter-terrorist-financing weaknesses but have committed to fixing them within agreed timeframes and are working with FATF to do so. It sits one step below the black list, which is reserved for serious, unaddressed deficiencies.
The distinction matters. A grey-listed country is not being told to change course through countermeasures; it is being watched while it remediates. But the listing is still an official, public flag that a country's controls are not yet where they should be, and that signal is strong enough to shift how the rest of the world treats financial dealings there.
For a compliance team, grey-list status is a clear cue to raise scrutiny. It feeds directly into country risk models and into the level of enhanced due diligence applied to customers and correspondents exposed to that jurisdiction.
Grey list versus black list
What changes | Grey list | Black list |
Meaning | Increased monitoring. | Call for action. |
Country posture | Committed to fixing weaknesses. | Serious deficiencies, not addressed. |
Expected response | Heightened scrutiny and EDD for exposed relationships. | Enhanced due diligence or countermeasures. |
Severity | A step below the black list. | The most severe list. |
Who is involved?
Who | Their role |
FATF | Places jurisdictions under increased monitoring and tracks their remediation progress. |
Grey-listed jurisdictions | Countries working to fix identified weaknesses under agreed action plans. |
Financial institutions | Factor grey-list status into country risk and apply added scrutiny to exposed customers. |
Risk and screening teams | Update models and watchlists as countries are added to or removed from the list. |
What it looks like in practice
In practice
A bank has a modest book of customers and a correspondent relationship in a country FATF places on the grey list at its latest plenary. The listing does not demand countermeasures, but the risk team treats it as a clear flag.
They raise the country's risk rating in the model, move exposed customers into a higher review tier, and tighten enhanced due diligence on the correspondent relationship. Months later, when the country completes its action plan and is removed, the team eases the treatment. The listing and delisting both drove concrete changes to how the relationships were handled.
Why it matters to operators
Grey-list status is an official, low-ambiguity input to country risk. It tells you, without needing your own investigation, that a jurisdiction's controls have known gaps. Factoring it into risk models and into enhanced due diligence for exposed customers and correspondents keeps your program aligned with a globally recognized assessment.
Because the list changes periodically, the practical discipline is to track the updates. A country going on the list should tighten your treatment of related relationships; a country coming off should ease it. Keeping your screening and risk ratings synced to the current list is what turns the grey list from a headline into an operational control.
Operator notes
- One step below the black list. Grey means increased monitoring, not a call for action, but still raises risk.
- Official, not optional. A grey listing is a formal flag that a country's controls fall short; feed it into your models.
- EDD for exposure. Apply enhanced due diligence to customers and correspondents tied to grey-listed countries.
- Delisting eases treatment. A country coming off should lower its risk rating; do not leave stale scoring in place.
- Track the plenary updates. Additions and removals happen periodically and directly change risk ratings.
Quick questions
What does grey-list status mean?
It means FATF has placed the country under increased monitoring because of identified AML weaknesses, but the country has committed to fixing them within agreed timeframes and is being watched while it does.
How is the grey list different from the black list?
The grey list is for countries under increased monitoring that are committed to remediation. The black list is the more severe call-for-action tier for serious deficiencies that are not being addressed.
Does a grey listing require countermeasures?
No. It calls for heightened scrutiny and enhanced due diligence for exposed relationships, not the countermeasures FATF may urge for black-listed jurisdictions.
How should I handle a grey-listed country?
Raise its rating in your country risk model and apply enhanced due diligence to customers and correspondents exposed to it. Adjust the treatment if the country is later removed from the list.
How often does the grey list change?
FATF reviews it periodically at its plenary meetings, adding countries with new weaknesses and removing those that complete their action plans. Tracking the updates keeps your risk ratings current.
What happens when a country comes off the grey list?
Its risk should ease. You can lower the country's rating and relax the enhanced treatment applied to exposed relationships, provided your program reflects the current FATF position.