FATF to Review Crypto AML Controls in High-Activity Jurisdictions

The Financial Action Task Force plans to examine crypto oversight in jurisdictions where virtual asset service providers have significant activity. The review is intended to focus attention on gaps in how countries apply global anti-money laundering standards to the crypto sector. It adds a targeted layer of scrutiny, while the FATF’s regular assessments and follow-up procedures remain its main tools for measuring compliance.

That distinction matters. A focused review can direct attention to places where crypto activity is substantial, but it doesn’t replace the broader process through which the FATF assesses countries against its standards. The announcement describes an additional examination, not a new global rulebook. Its value will depend on what the review measures and whether the results lead to follow-up on deficiencies.

A closer look at crypto oversight

Announced Friday, the review will take jurisdictions’ existing assessment status into account. The FATF hasn’t disclosed which jurisdictions it will examine or how many are in scope. Cointelegraph said it contacted the watchdog for details but had received no response by publication.

That leaves important questions open. The announcement, as reported, doesn’t specify how the FATF will define significant activity, what evidence it will seek, or how the review will relate to assessments already underway. Those details will shape how readers interpret the findings: a review focused on formal laws may tell a different story from one that examines supervision and enforcement in practice.

Here’s the thing: anti-money laundering standards only provide a framework. Each jurisdiction still has to put that framework into effect through its own laws, supervision and enforcement. A country can have rules on the books while leaving gaps in how providers are identified, monitored or held to those rules. The distance between policy and practice is the issue this review appears designed to examine.

Findings will arrive in 2027

The FATF expects to publish initial findings in June 2027, followed by further results in October. It plans subsequent monitoring and faster reporting to track whether jurisdictions address identified deficiencies. That schedule points to a process with more than one stage: findings first, then continued attention to whether the problems identified are addressed.

The timing also means the initial report won’t settle the question by itself. A finding can identify a weakness, but it doesn’t show whether the relevant jurisdiction has corrected it. Subsequent monitoring could provide that next piece of the record. Faster reporting may make progress—or a lack of progress—visible sooner, though the announcement doesn’t say what form that reporting will take.

The review follows a July FATF report that found 83% of surveyed jurisdictions had adopted legislation implementing the crypto Travel Rule. Yet enforcement remained uneven: 55 of the 91 jurisdictions with such laws had taken no supervisory or enforcement action over compliance.

Those figures point to a clear divide between adopting legislation and applying it. The 83% figure describes jurisdictions with laws in place; it doesn’t establish that providers are consistently complying or that authorities are checking. The finding that 55 jurisdictions had taken no action is more revealing about the implementation problem. A rule without active oversight may establish an obligation on paper, but it gives readers little evidence about how consistently that obligation is being enforced.

Cross-border supervision remains a test

The report also pointed to difficulties identifying unlicensed crypto businesses and overseeing providers based overseas that serve local customers. The Travel Rule requires crypto service providers to share information about the sender and recipient of transfers.

These are practical problems for any system built around national oversight of services that can operate across borders. Authorities may need to identify which businesses are serving customers in their jurisdiction, determine whether those businesses are licensed, and establish how compliance can be supervised when a provider is based elsewhere. The source report doesn’t describe how each jurisdiction handles those tasks, so the scale of the problem in any individual country remains unclear.

(And this is the part most people overlook.) A Travel Rule requirement depends on more than its presence in legislation. It also depends on whether providers can be identified and whether supervisors check that the required information is being shared. The legal text is only one link in that chain.

Unlicensed businesses complicate the picture further. If authorities can’t identify which providers are operating in a market, oversight may miss activity that falls outside licensing systems. Overseas providers add another layer: local customers may use a service whose base of operations sits in another jurisdiction. The report identifies these as difficulties; it doesn’t claim they have one simple fix.

What the review could show

My read is that the review’s practical test will be whether jurisdictions turn formal rules into active supervision, particularly where providers operate across borders. This is more significant than it looks: the gap between passing a law and enforcing it is precisely where a compliance framework can lose force. If you’re working in this space, the distinction matters because a jurisdiction’s published rules won’t tell the whole story about how providers are monitored.

The 2027 findings should show where that gap remains widest, although the available details don’t yet say how the FATF will rank or compare jurisdictions. The later results and monitoring may matter just as much as the initial findings, since they can indicate whether identified deficiencies prompt action. The numbers here are underwhelming as a measure of real-world compliance: widespread adoption of legislation sits alongside many jurisdictions that had taken no supervisory or enforcement action.

And yet, the review is only as informative as the information it publishes. Readers will need to see which jurisdictions were examined, what standards were applied and how the FATF describes progress after the initial reports. Until those details emerge, the clearest evidence remains the July report’s contrast between legal adoption and limited enforcement action. A test of implementation. Not just intent.

Related: FATF urges faster crypto AML enforcement as stablecoin crime increases