The Global Regulatory Framework: FATF and Standard-Setters

Introduction

AML/CFT is not just local law — it's a coordinated global system. Countries align their rules to shared international standards so that criminals can't simply move to a weaker jurisdiction. The heart of this system is the FATF and its 40 Recommendations.

FATF — The Financial Action Task Force

FATF is an intergovernmental body founded in 1989 that sets global standards for combating money laundering, terrorist financing, and proliferation financing. Its members now span most major economies, and it also works with regional bodies (such as FATF-style regional bodies like MONEYVAL in Europe).

The 40 Recommendations

FATF's core output is the 40 Recommendations — forty guidance lines covering the full AML/CFT framework. They're not legally binding by themselves, but countries that want to participate in the global financial system adopt them into national law. FATF also issues Interpretive Notes and Best Practices.

The Recommendations cover topics like:

• Risk assessment and national coordination
• Criminalization of money laundering and terrorist financing
• Confiscation and provisional measures
• Customer due diligence and record-keeping
• Reporting of suspicious transactions
• Regulation and supervision of obliged entities
• International cooperation

How FATF Influence Works

   FATF 40 Recommendations
        |
        v
   Countries pass national laws
        |
        v
   National regulators supervise
        |
        v
   Obliged entities comply

FATF also evaluates countries through mutual evaluations — peer reviews of how well a country implements the Recommendations. Poor results can put a country on the FATF "grey list" (jurisdictions under increased monitoring) or "black list" (high-risk jurisdictions), affecting its access to global finance.

Key Multilateral Standards

While FATF sets the AML/CFT money-laundering standard, other bodies cover related areas:

• UN Security Council — mandatory sanctions and targeted financial measures, made binding on all members
• Wolfsberg Group — a private body of global banks aligning financial-crime risk management standards
• Basel Committee on Banking Supervision — focuses on prudential banking, including related risk

National Frameworks in Brief

Regions turn FATF standards into enforceable law:

• United States — Bank Secrecy Act (BSA, 1970), strengthened by the USA PATRIOT Act (2001), and updated by the Anti-Money Laundering Act of 2020 (part of the NDAA). Oversight by FinCEN; sanctions by OFAC and export controls by BIS.
• European Union — a series of AML Directives (4AMLD, 5AMLD, 6AMLD), now moving to a directly applicable EU AML Regulation (AMLR) and a new EU AML Authority (AMLA).
• United Kingdom — Proceeds of Crime Act 2002 (POCA), the Money Laundering Regulations, and the Sanctions and Anti-Money Laundering Act 2018 (SAML).
• Many other jurisdictions (Singapore, Japan, Switzerland, etc.) mirror FATF with their own regulators.

The Risk-Based Approach

A central philosophy of the FATF framework is the risk-based approach: resources and scrutiny should be proportionate to the actual money-laundering/terrorist-financing risk. High-risk customers and activities get more checks; genuinely low-risk ones can get less. This is why CDD levels (SDD/CDD/EDD) exist.

Real-World Example

The EU adopts a new AML Regulation. A bank in Poland updates its onboarding KYC process for the higher UBO transparency thresholds, and a crypto exchange applies new EDD rules for high-risk customers — all because the FATF-set framework moved, and EU law translated it into enforceable duties.

Summary

• FATF sets the global standard via the 40 Recommendations
• Countries turn them into national law, supervised by regulators
• UN Security Council provides mandatory sanctions
• Regional bodies (EU, and national regimes in US, UK, etc.) implement and enforce
• The risk-based approach drives how much scrutiny each customer gets

Next Lesson

Now let's get practical and understand the crime itself — how money laundering works in its three stages.