EU High-Risk Third Countries List Updated (2026)

01 Apr EU High-Risk Third Countries List Updated (2026)

On 29 January 2026, the European Commission announced a significant update to the EU high-risk third countries list, a critical component of the bloc’s anti-money laundering (AML) and counter-terrorist financing (CFT) framework.

This updated list identifies jurisdictions with strategic deficiencies in their AML/CFT regimes, requiring heightened scrutiny from financial institutions and regulated entities across the European Union.

The move reflects the EU’s continued alignment with global standards set by the Financial Action Task Force (FATF), reinforcing international cooperation in the fight against financial crime.

Countries Added to the EU High-Risk List

The latest update sees three jurisdictions added due to concerns over weaknesses in their AML/CFT controls:

• Bolivia
• British Virgin Islands
• Russia

These additions indicate increased regulatory scrutiny and signal to financial institutions that transactions involving these countries carry elevated risk.

Countries Removed from the List

In a notable development, several countries have been removed following improvements in their AML/CFT frameworks:

• Burkina Faso
• Mali
• Mozambique
• Nigeria
• South Africa
• Tanzania

Their removal reflects progress in strengthening regulatory frameworks, increased cooperation with international bodies, and improved enforcement mechanisms.

Why the EU High-Risk List Matters for AML Compliance

The EU high-risk third countries list 2026 is more than a regulatory update—it directly impacts how firms manage financial crime risk.

Under EU AML directives, businesses must apply enhanced due diligence (EDD) measures when dealing with customers, transactions, or beneficial owners linked to listed jurisdictions. This includes:

• Conducting deeper customer identity verification
• Understanding the source of funds and wealth
• Applying increased transaction monitoring
• Escalating risk approvals internally

Failure to comply can lead to significant regulatory penalties, reputational damage, and operational risk exposure.

Alignment with FATF: A Global Perspective

The EU’s updated list closely mirrors assessments from the Financial Action Task Force, ensuring consistency with global AML/CFT standards.

This alignment is crucial because:

• It reduces regulatory fragmentation across jurisdictions
• Helps multinational firms streamline compliance frameworks
• Reinforces global cooperation against money laundering and terrorist financing

For compliance teams, this means that FATF updates and EU regulations must be monitored together, not in isolation.

Practical Impact on Financial Institutions

For banks, fintechs, and other obliged entities, these changes require immediate action:

Risk Assessment Updates – Customer risk scoring models must be updated to reflect newly listed and delisted countries.

Policy and Procedure Adjustments – Internal AML policies should be revised to ensure alignment with the latest EU requirements.

Customer Portfolio Reviews – Existing relationships linked to newly listed countries (e.g., Russia or British Virgin Islands) may require reassessment and additional controls.

Training and Awareness – Staff must be trained to understand the implications of these updates and apply appropriate due diligence measures.

Strategic Takeaways for Compliance Professionals

The 2026 update to the EU high-risk third countries list reinforces a key message: AML compliance is dynamic, not static.

As financial crime threats evolve, organisations must:

• Stay continuously informed on regulatory updates
• Integrate global AML intelligence into their frameworks
• Invest in ongoing staff training and awareness
• Leverage technology for real-time risk monitoring

Staying Ahead of AML Risk in 2026

The latest update from the European Commission underscores the importance of proactive compliance and global coordination.

Whether a country is added or removed, the implications are immediate and far-reaching for financial institutions operating in or with the EU.

In today’s complex regulatory landscape, staying compliant is no longer just about meeting requirements, it’s about protecting the integrity of the financial system and maintaining trust in global markets.