FATF Grey List Update October 2026: DRC, Monaco, Bulgaria, and Côte d’Ivoire Removed

Executive Summary: 

  • Added: None
  • Removed: DRC, Monaco, Bulgaria, and Côte d’Ivoire
  • Grey list total: 18 jurisdictions as of 30 October 2026
  • Blacklist: No change
  • For Singapore firms: update country risk ratings, CDD triggers and monitoring rules now

FATF grey list: October 2026 changes

The FATF’s October 2026 Plenary, held in Paris from 28 to 30 October during FATF Week (26 to 30 October), placed no new jurisdictions under increased monitoring and removed DRC, Monaco, Bulgaria, and Côte d’Ivoire after they completed their action plans. It was the first Plenary under the UK Presidency of Giles Thomson.

All four completed their action plans within the agreed timeframe, and on-site visits confirmed the reforms are being implemented.

FATF grey list as of 30 October 2026

  1. Angola
  2. Bolivia
  3. Bosnia and Herzegovina
  4. Cameroon
  5. Haiti
  6. Iraq
  7. Kenya
  8. Kuwait
  9. Lao People’s Democratic Republic

10. Lebanon
11. Nepal
12. Papua New Guinea
13. South Sudan
14. Syria
15. Venezuela
16. Vietnam
17. Virgin Islands (UK)
18. Yemen

FATF blacklist as of 30 October 2026

  • Iran and DPRK: the FATF calls on members to apply countermeasures.
  • Myanmar: the FATF calls for enhanced due diligence proportionate to the risk, without disrupting humanitarian aid or remittance flows.

What the update means under Singapore's AML/CFT framework

Singapore is an FATF member, and its regulators expect firms to respond to each FATF public statement. The update matters across sectors:

  • MAS-regulated financial institutions: MAS Notices (for example, MAS Notice 626 for banks) require enhanced CDD for customers and transactions presenting higher risk, including where the FATF has called for it. MAS typically circulates the FATF statements after each Plenary.
  • Corporate service providers: ACRA-registered CSPs, now regulated under the Corporate Service Providers Act 2024, must reflect higher-risk jurisdictions in their customer risk assessments.
  • Precious stones and metals dealers: dealers regulated under the PSPM Act 2019 should review cross-border customers and suppliers linked to listed jurisdictions.
  • Real estate agents and developers: CEA and URA guidance expects country risk to feed into CDD on buyers and sellers.
  • Suspicious transaction reporting: grey-listing does not create a reporting duty, but where suspicion arises, file an STR with the Suspicious Transaction Reporting Office (STRO) through SONAR.

Actions regulated entities in Singapore should take

1. Refresh your ML/TF/PF risk assessment

Update the geographic risk factor in your enterprise-wide risk assessment to reflect the removal of DRC, Monaco, Bulgaria, and Côte d’Ivoire.

2. Update AML/CFT/CPF policies and procedures

Amend your high-risk country list and date-stamp the change so the audit trail shows when controls were updated.

3. Apply enhanced due diligence where risk warrants

Re-rate customers, beneficial owners and counterparties connected to the delisted countries and review whether enhanced CDD is still justified, rather than removing it automatically. For links to jurisdictions that remain listed, obtain source of funds and source of wealth where the rating requires it.

4. Tune ongoing monitoring

Update screening lists and transaction monitoring scenarios so payments to, from or through listed jurisdictions are flagged for review.

5. Train staff

Brief relationship managers and onboarding teams on the changes and on how to escalate concerns to the compliance officer.

Singapore and the FATF

Singapore has been an FATF member since 1992 and will host the October 2028 FATF Plenary. Keeping pace with each list update is part of what supervisors look for in inspections.

FAQs on the FATF grey list update, October 2026

1. Which countries were added to the FATF grey list in October 2026?

None. No countries were added to the FATF grey list at the Plenary that concluded on 30 October 2026.

2. Which countries were removed?

DRC, Monaco, Bulgaria, and Côte d’Ivoire were removed after completing their action plans and passing on-site visits.

3. How many jurisdictions are on the FATF grey list?

There are 18 jurisdictions on the FATF grey list as of 30 October 2026.

4. Do Singapore firms have to stop dealing with grey-listed countries?

No. MAS expects a risk-based response: higher risk ratings and enhanced CDD where warranted, not blanket refusal.

5. Where do Singapore firms report suspicious transactions?

To the Suspicious Transaction Reporting Office (STRO), part of the Singapore Police Force’s Commercial Affairs Department, via SONAR.

Let AML Singapore guide you through the October 2026 FATF update

We update your risk assessment, policies and CDD procedures so your controls match the latest FATF lists.