Essential Tools for Proactive Compliance
FATF is mandatory - But what are other reports indicate risk?
Lets take a look

Mastering AML Country Risk: Essential Tools for Proactive Compliance
In the ever-evolving landscape of Anti-Money Laundering (AML) compliance, understanding and effectively managing geographical risk is paramount.
Financial institutions and regulated businesses, particularly law firms, must continually assess the money laundering and terrorist financing risks associated with the countries and jurisdictions where their clients operate or where transactions originate and terminate.
A robust geographical risk assessment isn't just a regulatory checkbox; it's a critical defence against financial crime. But with a world of data out there, how do you pinpoint the most reliable and actionable sources?
Here are essential tools and databases that can empower your firm to master AML country risk and build a truly proactive compliance framework:
Financial Action Task Force (FATF)
The Financial Action Task Force (FATF) is a global body that sets standards to combat money laundering and terrorist financing. It maintains two crucial public lists:
"Black List" (High-Risk Jurisdictions subject to a Call for Action): Countries with severe AML/CFT deficiencies.
"Grey List" (Jurisdictions under Increased Monitoring): Countries actively working with FATF to address AML/CFT weaknesses.
Why these lists are crucial for UK Regulated Law Firms (MLR 2017, Regulation 33(1)):
Under the Money Laundering Regulations 2017, Regulation 33(1)(b), UK law firms are legally obliged to apply Enhanced Due Diligence (EDD) when dealing with individuals or entities from countries on either of these FATF lists. This is a direct regulatory mandate, not just guidance.
Impact of Failing to Update after a FATF Plenary:
FATF updates its lists three times a year. If your firm fails to incorporate these changes into its AML framework:
Direct Regulatory Breach: You could fail to apply mandatory EDD for clients/transactions linked to newly listed countries, directly breaching MLR 2017.
Severe Penalties: This can lead to substantial fines, public sanctions, and even criminal prosecution for the firm and individuals by the regulators.
Increased Risk: Your firm is at higher risk of being used for money laundering or terrorist financing, damaging its reputation and exposing it to illicit funds.
Staying updated with FATF's lists is essential for legal compliance, risk mitigation, and protecting your firm's integrity.
Basel AML Index
The Basel AML Index is an independent ranking that assesses country-specific money laundering and terrorist financing (ML/TF) risks. Specifically, it provides risk scores for countries and jurisdictions based on data from 17 publicly available sources such as the Financial Action Task Force (FATF), Transparency International and the Global Initiative against Transnational Organized Crime.
They have developed a composite score based on five risk factors they feel contribute to a high money laundering risk:
- Quality of AML/CFT/CPF framework
- Corruption and fraud risks
- Financial transparency and standards
- Public transparency and accountability
- Legal and political risks
The information presented on the Basel AML Index website is colourful and graphical, with a tab listing the countries with a colour scale.
The Basel AML Index is maintained by the International Centre for Asset Recovery (ICAR) at the Basel Institute on Governance.
It's an excellent resource for an overview of a country's or regions inherent ML/TF risk, helping you quickly identify jurisdictions that may warrant enhanced due diligence. There are free and paid for subscriptions.
Why it matters for law firms:
The Basel AML Index offers a quick yet valuable screening tool for initial client and matter risk assessments, as well as ongoing monitoring. By drawing from a broad range of sources — including but not limited to FATF — it helps flag high-risk jurisdictions early in the process. This allows firms to make informed decisions about their overall risk appetite and guides the level of due diligence (CDD or EDD) that should be applied.
Impact of not using it:
While not a regulatory requirement, the Basel AML Index draws on diverse and reputable data sources beyond FATF, offering a more holistic view of country-level AML/CFT risks.
Limiting your risk assessment solely to FATF lists can result in an incomplete picture of jurisdictional risk.
Failing to consult wider tools like the Basel Index may lead to:
An incomplete Firm-Wide Risk Assessment (FWRA)
Incorrect client or matter risk categorisation
Application of CDD instead of EDD where enhanced scrutiny is warranted
Lack of documented MLRO approval for high-risk clients
Missed red flags during onboarding or ongoing monitoring
Over time, this may weaken your overall AML framework and could be interpreted by regulators as a failure to apply adequate scrutiny.
The real question:
Is your firm relying solely on the minimum mandatory sources — or is it committed to using available open-source and subscription-based tools to fully understand the inherent geographical risks?
The question is, is your firm just looking at the least mandatory resource or is it willing to look at other open source and budget willing paid subscriptions to fully understand the inherent risk of geographical area.
Transparency International – Corruption Perceptions Index (CPI)
Transparency International sets out their mission on their home page as '...to stop corruption and promote transparency, accountability and integrity at all levels and across all sectors of society'.
Transparency International is an independent, non-governmental, not-for-profit organisation, that works with like-minded partners across the world to end the injustice of corruption.
They state that '...Corruption happens in the shadows, often with the help of professional enablers such as bankers, lawyers, accountants and real estate agents, opaque financial systems and anonymous shell companies that allow corruption schemes to flourish and the corrupt to launder and hide their illicit wealth.'
Corruption can be both a source of illicit funds and a means to launder those funds, making it a significant area of concern for anti-money laundering efforts.
Corruption is a significant enabler of money laundering.
Transparency International state that to fight corruption, we have to embrace transparency. They state, 'Transparency is all about knowing who, why, what, how and how much. It means shedding light on formal and informal rules, plans, processes and actions. Transparency helps us, the public, hold all power to account for the common good.'
The Corruption Perceptions Index (CPI), published by Transparency International, is a global ranking tool of countries around the world on the basis of how corrupt their public sector is perceived. It uses data from 13 data sources which are independent from Transparency International to produce their Index. The CPI does not measure activities such as Tax Fraud, Money Laundering, financial secrecy or illicit flows of money. It serves as a powerful proxy for understanding environments where illicit financial activity may flourish.
A high score on the CPI (means less perceived corruption) can be a positive indicator, while a low score suggests a higher risk environment where illicit funds might more easily flow, impacting could your client and transaction risk assessments.
Why it matters for Law Firms:
Corruption often lies at the heart of money laundering. For law firms subject to the UK’s Money Laundering Regulations 2017, assessing the Source of Funds and Source of Wealth is central to client due diligence — especially when enhanced due diligence (EDD) is required.
Using the CPI as part of your jurisdictional risk toolkit helps you:
Identify clients or transactions connected to high-corruption environments
Inform your Firm-Wide Risk Assessment (FWRA) and individual matter assessments
Apply appropriate levels of due diligence, including escalation to MLROs where required
Support a risk-based, defensible approach in the event of regulatory scrutiny
Impact of not using:
Failing to incorporate the CPI or similar tools into your geographic risk assessment could result in:
Inadequate scrutiny of clients from high-risk jurisdictions
Missed red flags linked to bribery or public corruption
Incorrect application of standard due diligence (CDD) instead of EDD
Reputational damage if the firm is linked to proceeds of corruption
Regulatory breaches or enforcement action under MLR 2017
Potential criminal liability for staff who unwittingly facilitate illicit flows
Know Your Country AML Database
Specialised databases like Know Your Country AML Database compile vast amounts of AML-related information on various jurisdictions. These often include details on a country's AML legislation, regulatory bodies, enforcement actions, and specific risk factors.
They gather and collate information from wide and authoritative sources such as: CIA Factbook, FATF, FBI, Global Initiative, OECD, HM Treasury, IMF, The Egmont Group, Transparency International, US State Department, UN, World Bank, and Regulatory Authorities world wide.
The consider the information and provide reports from summaries to granular insights that complement broader indices, offering practical details for your risk assessments.
They provide free executive summaries or paid services, which offer more detailed reports.
For law firms subject to the Money Laundering Regulations 2017, having accurate, up-to-date jurisdictional information is essential for making informed decisions around Client Due Diligence (CDD), Enhanced Due Diligence (EDD), and Firm-Wide Risk Assessments (FWRA).
The Know Your Country AML Database offers:
✅ Granular intelligence – Insight into local AML laws, regulatory gaps, and specific red-flag behaviours
✅ Jurisdictional risk context – Beyond FATF lists, helping refine the firm’s overall risk-based approach
✅ Support for defensible decisions – Backed by open-source and international data, ideal for documenting the basis of risk decisions
✅ Practical support for MLROs – Quickly access country-specific threats that influence onboarding and matter-level risk
By using this database, firms can move beyond generic checklists to adopt a data-driven, proportionate, and contextualised approach to AML compliance.
⚠️ Outdated information – Publicly available data on government sites may be fragmented or lagging
⚠️ Incomplete CDD or EDD – Without local context, due diligence may fail to address actual risks
⚠️ Weaknesses in FWRA – Inadequate country risk insight may be seen as a failure to follow a robust, risk-based approach
⚠️ Regulatory scrutiny – If something goes wrong, the firm may struggle to justify its geographic risk decisions
CIA World Factbook
While not solely an AML tool, the CIA World Factbook is an invaluable resource for understanding a country's political, economic, social, and geographic landscape.
This information can help you contextualize other AML risk data, identify potential red flags related to instability, economic distress, or specific industries prevalent in a region, all of which can influence ML/TF risk.
Why it matters for Law Firms: A country's political stability, economic health, and prevalent industries (e.g., resource extraction, large cash economies) significantly impact ML/TF risk. The Factbook helps firms develop a holistic understanding of a client's operating environment, informing the "why" behind certain risks and transactions.
Impact of not using: Firms might miss crucial contextual risk factors for clients or transactions originating from unstable or economically challenging regions, leading to an incomplete risk profile and potentially overlooking critical red flags.
U.S. INCSR Reports (International Narcotics Control Strategy Report)
The U.S. INCSR Reports, published annually by the U.S. Department of State, provide detailed assessments of countries' efforts to combat drug trafficking and money laundering. Volume II specifically focuses on money laundering and financial crimes.
These reports offer a comprehensive, government-backed perspective on a country's AML/CFT framework, its effectiveness, and areas of concern.
Why it matters for Law Firms: Especially for firms with international clients or those involved in cross-border transactions, these reports offer a critical perspective from a major global economic power. They can highlight jurisdictions with known deficiencies in AML/CTF controls or significant illicit financial activity, even if not yet on broader high-risk lists.
Impact of not using: Firms may lack insights into significant AML vulnerabilities identified by a leading global authority, potentially engaging in transactions or with clients from jurisdictions that pose an unassessed, heightened risk, especially if there's any U.S. nexus to the transaction.
EU List of Non-Cooperative Jurisdictions for Tax Purposes
While focused on tax, the EU list of non-cooperative jurisdictions for tax purposes (often referred to as the EU tax haven blacklist) is highly relevant to AML.
Jurisdictions on this list are considered non-compliant with international tax good governance standards, which can also indicate weaknesses in their financial transparency and regulatory oversight, increasing ML/TF risks.
Why it matters for Law Firms: Tax evasion is a predicate offence to money laundering. Dealing with clients or structures connected to jurisdictions on this list immediately elevates the ML/TF risk in the firm's own assessment. Law firms providing tax advice, managing client money, or structuring entities need to be acutely aware of this list, as it signals a higher inherent risk requiring increased scrutiny under their general risk-based approach.
EU List of High-Risk Countries
The EU list of High-Risk Countries (officially, "High-Risk Third Countries identified by the European Commission") directly identifies jurisdictions with strategic deficiencies in their AML/CFT regimes that pose a significant threat to the EU's financial system.
Businesses dealing with entities or individuals from these countries are typically required to apply Enhanced Due Diligence (EDD). This is a crucial list for any firm operating within or engaging with the EU.
Why it matters for Law Firms: While the UK's MLR 2017, Regulation 33(1)(b) now specifically references the FATF lists for mandatory EDD, the EU's list still represents a significant, independent assessment of high-risk jurisdictions from a major global bloc. For UK law firms, it serves as crucial intelligence for their own Firm-Wide Risk Assessment (FWRA) and individual client/matter risk assessments. It should inform decisions on whether to apply EDD, even if not directly mandated by the UK's specific regulation. It indicates a clear consensus among a large group of nations that these countries pose a heightened risk.
Sanctions Country Information (UK, OFAC, EU)
Sanctions are a direct and immediate indicator of heightened risk. Regularly consulting sanctions lists and country-specific information from authorities like the UK Office of Financial Sanctions Implementation (OFSI), the U.S.
Office of Foreign Assets Control (OFAC), and the European Union is non-negotiable. These lists identify individuals, entities, and entire jurisdictions subject to financial restrictions, necessitating immediate action and often prohibiting any dealings.
Why it matters for Law Firms: Adhering to sanctions regimes is a strict legal obligation, often with civil and criminal penalties for breaches. Any transaction involving a sanctioned country, entity, or individual is typically prohibited unless specifically licensed. Law firms must screen all relevant parties and jurisdictions against these lists diligently.
Impact of not using: This is arguably the most severe. It is a strict liability offence. Though there is usually a risk based approach to enforcement, Firms risk criminal prosecution, massive fines, imprisonment for individuals, freezing of assets, and catastrophic reputational damage due to direct breaches of sanctions law. Ignorance is no defence.
Final thoughts
By integrating these essential tools into your AML risk assessment methodology, your firm can move beyond generic risk models to develop a truly nuanced, data-driven, and proactive approach to managing geographical AML risk. This could help strengthen your defences against financial crime.
Contact Us
If you would like to have an informal conversation contact us
Disclaimer
This post is not legal or regulatory advice and should not be construed as such.
See our Disclaimer