FATF Opens Targeted AML Review of Major Crypto Jurisdictions

The Financial Action Task Force has launched a targeted review of jurisdictions with significant cryptocurrency activity, aiming to close gaps in how global anti-money laundering standards are actually enforced — not just written into law.

The review will concentrate on jurisdictions with materially important virtual asset service provider activity, taking each country's existing regulatory assessment status into account. The FATF has not named the jurisdictions selected. The scale of the task is clear, though. Countries including the United States, the United Kingdom, Singapore and the United Arab Emirates collectively account for approximately 97% of the global virtual asset market.

Why is the FATF shifting its approach?

The move follows a blunt finding in the watchdog's July 2026 report: 83% of surveyed jurisdictions had adopted crypto Travel Rule legislation, but 55 of the 91 jurisdictions with such laws on the books had yet to take any supervisory or enforcement action.

That gap is the story. Laws exist. Enforcement doesn't. The targeted review marks a deliberate shift toward scrutinising whether countries actually supervise and enforce their crypto regulations, rather than simply checking whether they have adopted the required legislation.

For context, the Travel Rule requires crypto service providers to collect and share information about the originators and beneficiaries of transactions. It is the FATF's core mechanism for pulling virtual asset activity into the same anti-money laundering framework that governs traditional finance.

Adoption has moved faster than supervision. A law without an examiner behind it is, in practice, a suggestion, and the FATF's own numbers now quantify exactly how large that supervision deficit is across more than half of the jurisdictions that have legislated.

What does this change for VASPs and regulators?

For virtual asset service providers operating in large markets, the review signals that paperwork compliance will no longer satisfy assessors. Jurisdictions under scrutiny will face pressure to demonstrate live supervisory activity — inspections, licensing enforcement and sanctions against non-compliant firms — before the FATF's reporting deadlines arrive.

The stakes are institutional. FATF assessments feed into mutual evaluation reports, and poor ratings can translate into correspondents and institutions dialing back exposure to flagged jurisdictions. For countries that house major crypto hubs, a weak enforcement record now carries reputational and commercial consequences that reach well beyond the AML file.

There is also a broader enforcement climate at work. The IMF, for instance, has reportedly been pressing Kenya to enforce the crypto Travel Rule to curb money laundering and terrorism financing — a signal that international bodies are converging on the same message: legislation without supervision does not count.

When will the results land?

Initial findings from the targeted review are expected in June 2027, with further results scheduled for October 2027.

That timeline gives reviewed jurisdictions roughly a year and a half to show measurable supervisory action — licensing regimes that function, enforcement cases that exist, and Travel Rule obligations that providers actually meet in practice rather than on paper.

For firms, the practical read is straightforward. Compliance programs built to satisfy the letter of local law may still fall short if the jurisdiction itself cannot demonstrate enforcement. The review window closes in October 2027, and by then the FATF intends to know which major crypto markets are policing their providers — and which are merely legislating them.