What Is FATF? A Complete Guide for Businesses in the UAE and Kuwait
What Is FATF? A Complete Guide for Businesses in the UAE and Kuwait
What Does FATF Stand For?
FATF stands for the Financial Action Task Force. In French it is called Groupe d’action financière (GAFI), which is why you will occasionally see that acronym in international regulatory documents alongside FATF.
It is an intergovernmental body, meaning it is composed of member countries and jurisdictions working together under a shared framework rather than being controlled by any single government or private organization.
When and Why Was FATF Created?
FATF was established in 1989 at the G7 Summit in Paris. The original concern was specific: drug trafficking profits were flooding into the global banking system, and no coordinated international mechanism existed to stop it.
The founding logic was simple but powerful. Criminal networks only survive because they can move, hide, and spend the money they make. Disrupt their access to the financial system and you disrupt the enterprise itself.
The mandate has grown significantly since 1989:
| Year | Development |
|---|---|
| 1989 | FATF founded, focused exclusively on money laundering |
| 1990 | First 40 Recommendations published |
| 2001 | Mandate expanded to include counter-terrorist financing (CFT) after 9/11 |
| 2003 | 40 Recommendations revised and strengthened |
| 2012 | Third pillar added: counter-proliferation financing (CPF) |
| 2019 | Guidance on virtual assets and VASPs published |
| 2022 | UAE added to the Grey List |
| 2024 | UAE exits Grey List |
| 2026 | Kuwait added to the Grey List |
What Are the Three Pillars FATF Works On?
| Pillar | What It Means | Real-World Example |
|---|---|---|
| Anti-Money Laundering (AML) | Preventing criminals from disguising illegal funds as legitimate money | A drug trafficker buying real estate to clean cash |
| Counter-Terrorist Financing (CFT) | Stopping funds from reaching terrorist individuals or groups | Small transfers routed through shell accounts to fund an attack |
| Counter-Proliferation Financing (CPF) | Blocking financing for weapons of mass destruction programmes | Front companies procuring materials for a nuclear programme |
Where Is FATF Based and Who Are Its Members?
FATF is headquartered in Paris, France, and operates within the OECD building. It is led by a rotating Presidency held by a member country for a two-year term.
As of 2026, FATF has:
- 40 member jurisdictions including the USA, UK, EU, China, India, Saudi Arabia, and the UAE
- 2 regional organisations as members (the Gulf Co-operation Council and the European Commission)
- Over 200 jurisdictions committed to FATF standards through a global network of FATF-Style Regional Bodies (FSRBs)
Kuwait and the UAE are both members of MENAFATF, the Middle East and North Africa Financial Action Task Force, which is the FATF-Style Regional Body covering the Gulf region.
What Does FATF Actually Do?
FATF does four core things:
- Sets the Global Standards: FATF publishes the 40 Recommendations, which are the internationally accepted standards for AML, CFT, and CPF. These are not legally binding treaties, but virtually every country in the world has adopted them into national law because failing to do so results in isolation from the global financial system.
- Evaluates Countries FATF: and its regional bodies conduct Mutual Evaluation Reviews (MERs) of member countries. These are deep, independent assessments of how well a country has implemented the 40 Recommendations in both law and practice.
- Maintains the Grey List and Black List: Based on MER findings and follow-up monitoring, FATF identifies countries with strategic deficiencies and places them under increased monitoring. More on this below.
- Produces Guidance and Typologies: FATF regularly publishes guidance documents on specific risks, such as virtual assets, real estate, professional money laundering, and trade-based money laundering, to help countries and businesses understand emerging threats.
What Are the FATF 40 Recommendations?
The 40 Recommendations are the rulebook of global financial crime prevention. They cover every major area of AML/CFT/CPF compliance:
| Category | Recommendations Cover |
|---|---|
| AML/CFT Policies and Coordination | National risk assessments, inter-agency cooperation |
| Money Laundering and Confiscation | Criminalisation of ML, asset seizure powers |
| Terrorist and Proliferation Financing | CFT laws, targeted financial sanctions |
| Preventive Measures | CDD, EDD, PEPs, correspondent banking, wire transfers |
| Transparency and Beneficial Ownership | Company registers, trust ownership disclosure |
| Powers and Responsibilities of Authorities | FIU functions, law enforcement powers |
| International Cooperation | Mutual legal assistance, extradition |
Every regulated business in the UAE and Kuwait, whether a bank, exchange house, law firm, real estate broker, or crypto platform, operates under national laws built directly on these 40 Recommendations. For businesses seeking compliance monitoring software in Dubai, understanding these foundations is essential to choosing a platform that genuinely maps to regulatory obligations rather than just ticking boxes.
What Is a Mutual Evaluation Report (MER)?
A Mutual Evaluation Report is FATF’s formal assessment of a country’s AML/CFT/CPF system. It evaluates two dimensions:
Technical Compliance: Has the country passed the right laws and regulations? Do the rules on paper match the 40 Recommendations?
Effectiveness: Are those laws actually working? Are criminals being prosecuted? Are suspicious transactions being reported? Is the financial system genuinely protected?
A country can have technically sound laws and still fail on effectiveness if those laws are not being applied in practice. This distinction is critical, and it is exactly why Kuwait was greylisted in February 2026 despite having made significant technical progress following its 2024 MER.
What Is the FATF Grey List?
The Grey List, formally called “Jurisdictions Under Increased Monitoring,” is a public list of countries that have agreed to work with FATF to fix identified weaknesses in their AML/CFT/CPF systems within an agreed timeframe.
Being on the Grey List means:
- The country has strategic deficiencies that pose a risk to the global financial system
- The country has committed to an agreed action plan with specific milestones
- FATF will monitor and report on progress at every Plenary (three times per year)
- International financial institutions are expected to apply Enhanced Due Diligence to transactions and customers connected to that country
Being removed from the Grey List requires on-site verification by FATF that the action plan has been fully and effectively implemented.
Grey List vs Black List
| List | Formal Name | What It Means | Current Members (2026) |
|---|---|---|---|
| Grey List | Jurisdictions Under Increased Monitoring | Strategic deficiencies exist; country is cooperating with FATF | 22 jurisdictions including Kuwait |
| Black List | High-Risk Jurisdictions Subject to a Call for Action | Serious deficiencies; FATF calls on all countries to apply countermeasures | North Korea, Iran, Myanmar |
Kuwait and the FATF Grey List: The Full Story
Kuwait's First Greylisting (2012 to 2015)
Kuwait was first placed on the FATF Grey List in 2012. At that time the deficiencies related to gaps in its AML/CFT legal framework, weak suspicious transaction reporting, and limited international cooperation. Kuwait addressed the required action items and was removed from the list in February 2015.
The 2024 Mutual Evaluation Report
In June 2024, FATF adopted Kuwait’s latest Mutual Evaluation Report. The findings were mixed. Kuwait had made meaningful technical progress, including adopting a new national AML/CFT/CPF strategy and updating key legislation. However, the effectiveness of the system was found to be significantly lacking.
Kuwait Added to the Grey List: February 2026
At the February 2026 Plenary in Mexico City, FATF formally placed Kuwait back on the Grey List. The specific deficiencies identified were:
- A consistently low understanding of terrorist financing risks among relevant authorities
- Prosecution focused on simple money laundering cases with a significant lack of complex case investigations
- Insufficient outreach to real estate agents and Dealers in Precious Metals and Stones on suspicious transaction reporting
- Beneficial ownership registry data that is not consistently accurate, complete, or updated
- Low volume of investigations tied to cross-border currency movements and bearer negotiable instruments
Kuwait's Agreed Action Plan
To exit the Grey List, Kuwait must demonstrate verified progress on:
| Action Item | What Is Required |
|---|---|
| STR reporting in DNFBPs | Sector-specific outreach to real estate and precious metals dealers including distribution of ML/TF indicators |
| Beneficial ownership accuracy | Registry data must be accurate, complete, and current; sanctions applied for non-compliance |
| Complex ML prosecutions | Increase investigations and prosecutions involving cross-border currency movements and complex predicate offences |
| TF risk understanding | Demonstrate that relevant authorities have an adequate and calibrated understanding of terrorist financing risks |
Kuwait will remain on the Grey List until FATF conducts an on-site visit and verifies that each item has been fully and effectively addressed.
The UAE and FATF: From Grey List to Global Standard
The UAE's Greylisting in 2022
The UAE was placed on the FATF Grey List in March 2022. The listing reflected concerns about gaps in its AML/CFT/CPF framework across several sectors including real estate, gold trading, corporate service providers, and virtual assets.
A Period of Intensive Reform
Between 2022 and 2024, the UAE undertook one of the most comprehensive and rapid compliance reform programmes in FATF history:
- New AML/CFT federal legislation and Cabinet Resolutions
- Establishment of VARA as a dedicated virtual asset regulator
- Strengthening of the UAE Financial Intelligence Unit and go AML platform
- Significant increase in STR filings, ML investigations, and prosecutions
- Crackdown on unlicensed money service businesses
- Enhanced supervision of DNFBPs across real estate, gold, and legal services
During this period, the demand for reliable compliance monitoring software in Dubai grew sharply, as regulated entities raced to demonstrate that their internal controls were not just documented but genuinely operational and auditable.
The UAE Exits the Grey List: February 2024
In February 2024, FATF removed the UAE from the Grey List following a successful on-site assessment confirming that the agreed action plan had been fully implemented and was producing results. This was a landmark moment for the UAE’s positioning as a global financial and business hub.
The Ongoing Obligation
Exiting the Grey List does not mean compliance work is finished. UAE-regulated entities are legally required to continuously update their AML/CFT/CPF programmes in line with FATF updates. Kuwait’s greylisting in February 2026 is a direct trigger for UAE businesses to apply Enhanced Due Diligence to all Kuwait-linked customers and transactions.
What Does FATF Mean for Businesses in the UAE and Kuwait?
Whether you run a bank, a real estate firm, a law practice, an exchange house, or a crypto platform, FATF’s standards translate into real day-to-day compliance obligations:
| FATF Requirement | What Your Business Must Do |
|---|---|
| Customer Due Diligence (CDD) | Verify every customer's identity and understand the nature of the relationship |
| Enhanced Due Diligence (EDD) | Apply deeper scrutiny to high-risk customers, PEPs, and customers from greylisted countries like Kuwait |
| Beneficial Ownership | Identify and verify the real human beings who ultimately own or control a legal entity |
| Suspicious Transaction Reporting | File STRs with the national FIU (goAML in UAE) when transactions cannot be explained |
| Record Keeping | Maintain customer and transaction records for a minimum period (five years in UAE, eight years for VASPs) |
| Risk Assessment | Conduct and regularly update a documented assessment of the ML/TF/PF risks your business faces |
| Screening | Screen customers, counterparties, and transactions against sanctions lists, PEP databases, and adverse media |
| Training | Ensure all relevant staff understand their AML/CFT obligations |
Meeting these obligations manually across hundreds or thousands of customers is neither practical nor defensible to a regulator. This is why investing in purpose-built compliance monitoring software in Dubai is no longer a luxury for growing businesses. It is a baseline operational requirement.
How First Compliance Solution Helps Businesses in the UAE and Kuwait
Understanding FATF is step one. Building a compliance programme that actually meets every obligation, day after day, across hundreds or thousands of customers and transactions, is a different challenge entirely. That is where First Compliance Solution comes in.
First Compliance Solution is a full-spectrum AML/CFT compliance platform built by experts in law, compliance, and financial crime. It is designed specifically for the regulatory environment in the UAE and the broader Gulf region, and it maps directly to every FATF-driven obligation that regulated businesses face.
What the Platform Covers
For UAE Businesses
Following Kuwait’s greylisting in February 2026, UAE entities must immediately apply Enhanced Due Diligence to Kuwait-linked customers. First Compliance automates this process. When a customer’s risk profile changes because of a Grey List update, the system flags the account, triggers an EDD workflow, and documents every step for regulatory audit purposes. As the most trusted compliance monitoring software in Dubai, First Compliance Solution ensures that no Grey List update ever catches your business unprepared.
For Kuwait Businesses
Kuwait’s greylisting means local financial institutions and DNFBPs face intensified supervisory scrutiny. Building a defensible, documented, and effective AML/CFT programme is now an urgent priority. First Compliance Solution provides the infrastructure to do exactly that, whether your organisation is a bank, exchange house, real estate firm, or legal practice.
| Compliance Need | First Compliance Solution Module |
|---|---|
| Customer identity verification | E-KYC with real-time face verification |
| Beneficial ownership capture and verification | Onboarding and Due Diligence |
| Risk-based customer scoring | Risk Management |
| Sanctions, PEP, and watchlist screening | Sanction Screening across hundreds of global lists |
| Ongoing transaction monitoring | Transaction Monitoring with real-time alerts |
| STR preparation and goAML filing | Regulatory Reporting |
| Case investigation and documentation | Compliance Case Management |
| Policy and record management | Document Management |
| Management oversight and reporting | Dashboard and Analytics |
| Regulatory deadline and review alerts | Alerts and Notifications |
Why It Matters
FATF assessors evaluate both technical compliance and effectiveness. Having a policy document is not enough. You need to demonstrate that your controls actually work, that suspicious transactions are identified, that EDD is applied correctly, and that your risk assessments reflect your real exposure. First Compliance Solution creates a full audit trail across every function so that when a regulator or assessor asks for evidence, you have it.
For businesses in Kuwait now entering a period of heightened regulatory scrutiny, and for UAE businesses managing the knock-on obligations that come with every FATF Grey List update, deploying the right compliance monitoring software in Dubai is the single most impactful step a compliance team can take.
Visit firstcompliancesolution.com to request a demo and see how the platform can be configured for your sector, whether you are a bank, VASP, real estate firm, or any other regulated entity in the UAE or Kuwait.
Quick Reference: FATF Key Terms Glossary
| Term | Plain English Meaning |
|---|---|
| AML | Anti-Money Laundering |
| CFT | Counter-Terrorist Financing |
| CPF | Counter-Proliferation Financing |
| MER | Mutual Evaluation Report: FATF's country assessment |
| Grey List | Countries under increased FATF monitoring |
| Black List | Countries subject to FATF countermeasures |
| CDD | Customer Due Diligence: verifying who your customer is |
| EDD | Enhanced Due Diligence: deeper checks for higher-risk customers |
| PEP | Politically Exposed Person: officials at higher risk of corruption |
| UBO | Ultimate Beneficial Owner: the real human behind a company |
| STR | Suspicious Transaction Report: a report filed with the FIU |
| FIU | Financial Intelligence Unit: the national body that receives STRs |
| goAML | UAE's FIU platform for submitting STRs |
| DNFBP | Designated Non-Financial Business or Profession (e.g. lawyers, real estate agents, accountants) |
| VASP | Virtual Asset Service Provider (e.g. crypto exchanges) |
| MENAFATF | The regional FATF body covering the Middle East and North Africa |
| Travel Rule | Requirement to pass sender and recipient data with virtual asset transfers |
Summary
FATF is the global organization that sets the rules for fighting money laundering, terrorist financing, and proliferation financing. Its 40 Recommendations form the foundation of AML/CFT law in the UAE, Kuwait, and over 200 jurisdictions worldwide. Countries that fail to implement those rules effectively get placed on the Grey List, which triggers real consequences for their financial sectors and for businesses that deal with them.
Kuwait is on the Grey List as of February 2026. The UAE exited in February 2024 and must maintain the standards that got it off. For businesses operating in both countries, the compliance obligations are concrete, legally binding, and actively supervised.
First Compliance Solution gives you the technology to meet every one of those obligations, from customer onboarding and sanctions screening to transaction monitoring and regulatory reporting, all in one platform built for the Gulf’s regulatory reality.
Trusted Global Compliance Partner
Advanced Screening & Reporting Tools
Scalable Solutions for Growing Businesses
Trusted Global Compliance Partner
Advanced Screening & Reporting Tools
Scalable Solutions for Growing Businesses
First Compliance is a comprehensive compliance and due diligence software platform designed to meet the rigorous standards of global regulations. Developed by a team of experts in law, compliance, and anti-financial crime, our tool leverages advanced technology to streamline investigations and ensure thorough due diligence.
Company
Links
useful links
- AML Screening Solution in Dubai
- Automated Compliance Software in Dubai
- KYC Onboarding Software in Dubai
- Transaction Monitoring Software in Dubai
- AI Transaction Monitoring in Dubai
- AML Compliance Software in Dubai
- KYC Compliance Monitoring in Dubai
- AML Risk Assessment Tool in Dubai
- Enterprise Risk Management Software Solutions in Dubai
- Compliance Monitoring Software in Dubai
- ESG Reporting Platform in Dubai
First Compliance is a comprehensive compliance and due diligence software platform designed to meet the rigorous standards of global regulations. Developed by a team of experts in law, compliance, and anti-financial crime, our tool leverages advanced technology to streamline investigations and ensure thorough due diligence.
