Free · kept current
FATF high-risk countries
3 countries are on the FATF list of high-risk jurisdictions subject to a call for action: Iran, Myanmar and North Korea. UK firms must apply enhanced due diligence to anyone established in one of them. 22 more are under increased monitoring, a risk factor to weigh.
Lists as published by HM Treasury on 22 June 2026 (the FATF lists of 19 June 2026). HM Treasury notice · FATF
Call for action: enhanced due diligence required
A business relationship or transaction with anyone established in these countries needs enhanced due diligence and enhanced ongoing monitoring (MLR 2017 regulation 33(1)(b)).
| Country | Also under UK sanctions |
|---|---|
| Iran | Yes |
| Myanmar | Yes |
| North Korea | Yes |
Increased monitoring: a risk factor
Not a legal trigger on its own since 30 June 2026, but a geographical risk factor to weigh (regulation 33(6)(c)).
| Country | Also under UK sanctions |
|---|---|
| Angola | No |
| Bolivia | No |
| Bosnia and Herzegovina | No |
| British Virgin Islands | No |
| Bulgaria | No |
| Cameroon | No |
| Côte d'Ivoire | No |
| Democratic Republic of the Congo | Yes |
| Haiti | Yes |
| Iraq | No |
| Kenya | No |
| Kuwait | No |
| Laos | No |
| Lebanon | No |
| Monaco | No |
| Nepal | No |
| Papua New Guinea | No |
| South Sudan | Yes |
| Syria | Yes |
| Venezuela | Yes |
| Vietnam | No |
| Yemen | Yes |
Check customers from these countries
Certaby flags a customer who lives in a listed country on the transaction and its certificate, and screens them against the UK, UN, EU and US sanctions lists: 99p a person, or £1.39 with PEP and adverse media.
What it means for your firm
- Which countries need enhanced due diligence?
- Since 30 June 2026, a UK firm under the Money Laundering Regulations 2017 must apply enhanced due diligence and enhanced ongoing monitoring to a business relationship or transaction with anyone established in a FATF call for action country (regulation 33(1)(b)): today Iran, Myanmar and North Korea.
- Does nationality count, or only where someone lives?
- Where they are established. For a person that means where they live, not merely where they were born; for a company, where it is incorporated or has its principal place of business (regulation 33(3)). Nationality alone does not trigger the rule, though it can still be a risk factor.
- What about the grey list?
- The FATF list of jurisdictions under increased monitoring (22 countries) no longer triggers enhanced due diligence by itself since 30 June 2026. Firms must still weigh FATF evaluations as a geographical risk factor (regulation 33(6)(c)) and apply enhanced due diligence wherever they judge the risk high.
- How often do the lists change?
- FATF reviews both lists at each plenary, in February, June and October. HM Treasury then publishes an advisory notice; the lists on this page are taken from that notice, with its date.