What Is the FATF Grey List?
The Financial Action Task Force (FATF) is an intergovernmental body that sets global standards for combating money laundering, terrorist financing, and proliferation financing. When FATF determines that a country has significant strategic deficiencies in its anti-money laundering and counter-terrorist financing (AML/CFT) framework, it places that country on its list of Jurisdictions under Increased Monitoring — commonly known as the grey list.
Being grey-listed does not mean a country is a rogue state or a financial pariah. It means FATF has identified specific, documented gaps in the country's AML/CFT system and has agreed with the country on an action plan to address those gaps within a defined timeframe. Countries that fail to make sufficient progress are escalated to the black list (Jurisdictions subject to a Call for Action), which carries far more severe international consequences.
Grey-listing has real economic consequences. Correspondent banks in other jurisdictions increase their due diligence requirements for transactions involving grey-listed countries, which raises the cost of international trade finance, cross-border payments, and foreign investment. South African exporters, importers, and financial institutions have all experienced increased scrutiny and higher compliance costs since October 2023.
Why Was South Africa Grey-Listed?
South Africa was placed on the FATF grey list at the FATF Plenary in October 2023. FATF identified eight strategic deficiencies in South Africa's AML/CFT framework:
- Inadequate understanding of ML/TF risks — South Africa's national risk assessment did not adequately capture the full range of money laundering and terrorist financing risks facing the country.
- Insufficient supervision of accountable institutions — Sector supervisors (FSCA, PA, PPRA, IRBA, LSSA) were not consistently applying risk-based supervision to the institutions under their oversight.
- Inadequate enforcement actions — The FIC and sector supervisors were not imposing sufficient sanctions for FICA non-compliance to act as an effective deterrent.
- Weak beneficial ownership transparency — South Africa's systems for identifying and verifying the beneficial owners of legal entities were inadequate, making it easy to use shell companies for money laundering.
- Insufficient prosecution of money laundering — The National Prosecuting Authority was not bringing sufficient ML prosecutions, particularly for complex, high-value cases.
- Inadequate asset recovery — South Africa was not effectively confiscating the proceeds of crime.
- Weak terrorist financing controls — South Africa's framework for identifying and disrupting terrorist financing was underdeveloped.
- Insufficient proliferation financing controls — South Africa's financial sector was not adequately screening for proliferation financing risks.
For accountable institutions, the most directly relevant deficiencies are numbers 2, 3, and 4 — inadequate supervision, insufficient enforcement, and weak beneficial ownership transparency. These are the areas where the FIC has focused its increased enforcement activity since October 2023.
South Africa's FATF Action Plan
As a condition of grey-listing, South Africa committed to an action plan with specific deliverables and deadlines. The action plan covers all eight deficiencies and requires South Africa to demonstrate measurable progress at each FATF Plenary review. The key deliverables relevant to accountable institutions are:
| Deliverable | What It Requires | Who Is Affected |
|---|---|---|
| Increased FIC enforcement | Demonstrable increase in administrative sanctions and compliance undertakings issued by the FIC | All FICA accountable institutions |
| Beneficial ownership register | All companies must file beneficial ownership information with CIPC (Companies Act amendment) | All companies and close corporations |
| Risk-based supervision | Sector supervisors must demonstrate risk-based inspection programmes with documented outcomes | Banks, insurers, estate agents, accountants, lawyers, fintechs, crypto |
| Increased ML prosecutions | NPA must demonstrate increased prosecution of ML offences, including standalone ML cases | Indirect — affects risk environment for all institutions |
| CASP regulation | Crypto asset service providers must be licensed and supervised by the FSCA | All crypto exchanges and digital asset businesses |
The July 2026 Exit Deadline
South Africa's target date to exit the FATF grey list is July 2026, when FATF will conduct a formal review of South Africa's progress against its action plan. If FATF determines that South Africa has made sufficient progress on all eight deficiencies, it will remove South Africa from the grey list at its October 2026 Plenary.
The July 2026 deadline is not a hard legal deadline for individual accountable institutions — it is a national-level target. However, it has direct practical consequences for compliance officers and accountable institutions because:
- The FIC has publicly committed to demonstrating increased enforcement activity before the July 2026 review. This means more inspections, more sanctions, and faster publication of enforcement actions in the period leading up to July 2026.
- Sector supervisors (FSCA, PA, PPRA, IRBA, LSSA) are under pressure to demonstrate risk-based supervision outcomes. Institutions in supervised sectors should expect more frequent and more rigorous supervisory reviews.
- The CIPC beneficial ownership register requirement is already in force. Companies that have not filed their beneficial ownership information with CIPC are already non-compliant with the Companies Act as amended.
Institutions that are not FICA-compliant by mid-2025 face a materially higher risk of being caught in the FIC's pre-July 2026 enforcement push. The cost of remediation before an inspection is significantly lower than the cost of a sanction after one.
Impact on South African Accountable Institutions
The practical impact of grey-listing on South African accountable institutions falls into three categories:
Increased regulatory scrutiny: The FIC and sector supervisors are conducting more inspections, more frequently, with a higher expectation of documented compliance. Institutions that previously operated with informal or undocumented FICA compliance programmes are at significantly higher risk of receiving administrative sanctions.
Increased correspondent bank due diligence: South African banks and their clients face increased due diligence requirements from correspondent banks in other jurisdictions. This affects the speed and cost of international payments, trade finance, and foreign investment transactions. Some smaller South African banks have reported that certain correspondent banking relationships have been restricted or terminated.
Reputational risk: Grey-listing has increased international awareness of South Africa's AML/CFT challenges. Foreign investors, international business partners, and multinational clients are more likely to conduct enhanced due diligence on South African counterparties. Accountable institutions that can demonstrate robust FICA compliance have a competitive advantage in attracting and retaining international business.
What Accountable Institutions Must Do Now
The grey-listing creates a clear imperative for all South African accountable institutions to review and strengthen their FICA compliance programmes before the July 2026 FATF review. The minimum steps every accountable institution should take are:
- Conduct a FICA compliance gap assessment — compare your current compliance programme against the FIC's inspection framework (RMCP, CDD, beneficial ownership, STR procedures, staff training).
- Update your Risk Management and Compliance Programme (RMCP) — ensure your RMCP is written, board-approved, and tailored to your institution's specific risk profile. Generic or template RMCPs are a red flag for FIC inspectors.
- Verify beneficial ownership for all legal entity clients — identify all beneficial owners at the 5% threshold (FIC PCC 59) and document your verification process.
- File your CIPC beneficial ownership register — if your company has not yet filed its beneficial ownership information with CIPC, do so immediately. This is a separate obligation from FICA CDD.
- Train your staff — ensure all relevant staff have completed FICA training in the last 12 months and that attendance records are maintained.
- Register with the FIC — all accountable institutions must be registered on the FIC's goAML system. Failure to register is itself a sanctionable offence.
Frequently Asked Questions
- When was South Africa grey-listed by FATF?
- South Africa was placed on the FATF grey list (Jurisdictions under Increased Monitoring) at the FATF Plenary in October 2023. The formal announcement was made on 27 October 2023.
- What is the difference between the FATF grey list and the black list?
- The grey list (Jurisdictions under Increased Monitoring) means a country has strategic AML/CFT deficiencies but is actively working to address them. The black list (Jurisdictions subject to a Call for Action) means a country poses a significant risk to the global financial system and requires counter-measures. South Africa is on the grey list, not the black list.
- Will South Africa exit the FATF grey list in 2026?
- South Africa's target is to exit the grey list at the October 2026 FATF Plenary, following a July 2026 review. Whether this is achieved depends on South Africa demonstrating sufficient progress on all eight action plan items. The National Treasury and FIC have both indicated confidence that South Africa will exit on schedule, but this is not guaranteed.
- Does the grey-listing affect my business directly?
- Yes, in two ways. First, the FIC has increased its enforcement activity, so the risk of receiving an administrative sanction for FICA non-compliance is materially higher than before October 2023. Second, if your business has international counterparties, they may be applying enhanced due diligence to South African entities, which can slow down transactions and increase compliance costs.
- What is the CIPC beneficial ownership register and is it mandatory?
- The CIPC beneficial ownership register is a requirement under the Companies Act 71 of 2008 as amended by the General Laws Amendment Act 22 of 2022. All companies and close corporations must file their beneficial ownership information with CIPC. This is a separate obligation from FICA CDD and is already in force. See our dedicated guide: Beneficial Ownership Register — Companies Act.