FATF Grey List Changes October 2026: DRC, Monaco, Bulgaria, and Côte d’Ivoire Removed
Executive Summary:
- Added: None
- Removed: DRC, Monaco, Bulgaria, and Côte d’Ivoire
- Grey list total: 18
- UK impact: since 30 June 2026, grey-listing no longer triggers mandatory EDD under the MLRs, so the four removals change your country risk assessment rather than your mandatory EDD population
FATF grey list changes at the October 2026 Plenary
The FATF Plenary concluded on 30 October 2026 in Paris, the first chaired by UK President Giles Thomson. It added no jurisdictions to the list of jurisdictions under increased monitoring and removed DRC, Monaco, Bulgaria, and Côte d’Ivoire, which completed their action plans.
All four completed their action plans within the agreed timeframe, and on-site visits confirmed the reforms are being implemented.
The latest FATF grey list as of 30 October 2026
1. Angola
2. Bolivia
3. Bosnia and Herzegovina
4. Cameroon
5. Haiti
6. Iraq
7. Kenya
8. Kuwait
9. Lao People’s Democratic Republic
10. Lebanon
11. Nepal
12. Papua New Guinea
13. South Sudan
14. Syria
15. Venezuela
16. Vietnam
17. Virgin Islands (UK)
18. Yemen
FATF blacklist as of 30 October 2026
- Iran and DPRK: the FATF calls on members to apply countermeasures.
- Myanmar: the FATF calls for enhanced due diligence proportionate to the risk, without disrupting humanitarian aid or remittance flows.
Why the change matters in the UK: the 2026 MLR amendments
The Money Laundering and Terrorist Financing (Amendment) Regulations 2026, in force since 30 June 2026, changed how the FATF lists apply in the UK. Mandatory enhanced due diligence under regulation 33(1)(b) of the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLRs) now applies only where a party is established in an FATF call-for-action country. Countries on the increased monitoring (grey) list are a geographical risk factor that firms must weigh, not an automatic EDD trigger.
The practical consequence is direct:
- Call-for-action countries: Iran, DPRK and Myanmar remain listed, so mandatory EDD under regulation 33(1)(b) continues for business relationships and relevant transactions involving persons established there.
- Grey list removals: DRC, Monaco, Bulgaria, and Côte d’Ivoire leave the grey list. Because grey-listing no longer triggers mandatory EDD, review how much weight these countries carry in your country risk methodology rather than switching controls off.
- Supervisors: the FCA, HMRC and professional body supervisors will expect firm-wide risk assessments and policies to reflect the change promptly.
Immediate actions for relevant persons
Update AML, CTF and CPF policies and procedures
Make sure your country risk policy separates mandatory EDD (call-for-action countries) from risk-assessed geographical exposure (including grey-listed countries), and record the effective date of any change.
Reassess country risk exposure
Update the geographic risk factor in your firm-wide risk assessment under regulation 18.
Apply the regulation 33(3A) EDD measures
For relationships involving FATF call-for-action countries, obtain additional information on the customer and beneficial owner, the intended nature of the relationship, source of funds and source of wealth, and the reasons for transactions; obtain senior management approval; and increase monitoring.
Enhance ongoing monitoring
Update screening and transaction monitoring so new links to listed countries are caught.
Train and inform staff
Make sure front-line staff know the list has changed and how to escalate.
A UK-led FATF Presidency
Giles Thomson took over as FATF President on 1 July 2026 for a two-year term. The UK Presidency’s priorities, fraud (including scam compounds), the risk-based approach and supervision, and information sharing, are likely to shape UK supervisory messaging over the next two years.
FAQs on the FATF grey list update, October 2026
Which countries were added to the FATF grey list in October 2026?
None. No countries were added to the FATF grey list at the Plenary that concluded on 30 October 2026.
Which countries were removed?
DRC, Monaco, Bulgaria, and Côte d’Ivoire were removed after completing their action plans and passing on-site visits.
Is the FATF grey list the same as the UK’s mandatory EDD country list?
No. Since 30 June 2026, mandatory EDD under regulation 33 applies only to FATF call-for-action countries. Grey-listed countries remain a geographical risk factor, and EDD still applies wherever your risk assessment identifies high risk.
Does grey-listing trigger mandatory EDD in the UK?
Not since 30 June 2026. Mandatory EDD applies to call-for-action countries from the date the FATF publishes its updated list; grey-listed countries are weighed in your risk assessment.
How often does the FATF update the grey list?
After each of its three Plenaries a year. The next is 22–26 February 2027.
Speak with our AML experts
We help relevant persons update country risk controls, EDD procedures and firm-wide risk assessments after every FATF update.