FATF Shows How Financial Rules Can Shape Security Outcomes

Modern security is no longer protected only by soldiers, borders, intelligence agencies and weapons. It is also protected by banks, auditors, customs officers, regulators, compliance systems, beneficial-ownership registers, suspicious-transaction reports and international financial standards. That is the quiet power of the Financial Action Task Force. FATF does not command an army, conduct raids or prosecute terrorists, yet its decisions can influence how banks treat a country, how investors assess risk, how governments rewrite laws and how terror-financing networks are disrupted.

The central idea is simple: violence, organised crime and proliferation require money. Terrorist groups need funds to recruit, travel, communicate, procure weapons, support operatives and maintain propaganda networks. Drug cartels, cybercriminals, corrupt officials and sanctions evaders also depend on financial channels. Follow the money, and parts of the security threat become visible.

FATF was built around that logic. It identifies weaknesses in national systems for combating money laundering, terrorist financing and proliferation financing, and it publicly monitors jurisdictions that fail to meet required standards. A country placed under increased monitoring does not merely suffer diplomatic embarrassment. Banks may increase scrutiny, investors may become cautious, lenders may demand more information and regulators may face pressure to act. That is why financial governance has become part of national security.

FATF Is a Security Institution Working Through Financial Rules

FATF was established in 1989 primarily to combat money laundering. After the September 11 attacks, terrorist financing became a central part of its mandate, while proliferation financing later gained greater importance. This evolution reflects a wider change in how governments understand security. Illicit finance is no longer merely a criminal-justice problem. Money can support terrorist organisations, drug trafficking, political corruption, sanctions evasion, weapons procurement, cybercrime and organised criminal networks.

The weakness of one jurisdiction can therefore create vulnerability far beyond its borders. Criminal networks exploit gaps between countries, moving money through shell companies, informal channels, poorly supervised banks, trade transactions or virtual assets. FATF attempts to reduce those gaps by establishing common standards and assessing whether countries actually implement them.

Its importance comes from the fact that modern economies depend on access to the international financial system. A government may be willing to ignore domestic regulatory weaknesses for years, but international scrutiny can make those weaknesses economically expensive.

The Grey List Uses Reputation as Leverage

FATF’s grey list, formally described as jurisdictions under increased monitoring, is often misunderstood. Grey-listing does not mean a country has been declared criminal. It means FATF has identified strategic deficiencies in its anti-money laundering, counter-terrorist financing or counter-proliferation financing framework and the government has agreed to address them.

As of 13 February 2026, the source draft lists Algeria, Angola, Bolivia, Bulgaria, Cameroon, Côte d’Ivoire, the Democratic Republic of the Congo, Haiti, Kenya, Kuwait, Lao PDR, Lebanon, Monaco, Namibia, Nepal, Papua New Guinea, South Sudan, Syria, Venezuela, Vietnam, the Virgin Islands (UK) and Yemen among jurisdictions under increased monitoring. Kuwait and Papua New Guinea were added at the February 2026 plenary.

The grey list works mainly through reputational pressure. International banks may apply additional due diligence, investors may become more cautious and domestic regulators may face pressure to correct weaknesses. A designation made through an international review process can therefore influence the cost and ease of doing business with a country.

This is what makes FATF unusual. It often does not need direct sanctions to create consequences. Public identification itself can alter behaviour.

The Black List Shows the Hard Edge of Financial Security

FATF’s high-risk jurisdictions subject to a call for action represent the most serious category. According to the draft, as of February 2026 the Democratic People’s Republic of Korea, Iran and Myanmar were treated as high-risk jurisdictions, with FATF calling for countermeasures for DPRK and Iran and enhanced due diligence for Myanmar.

The significance is practical. Financial institutions may treat transactions associated with such jurisdictions as substantially higher risk. Correspondent banking relationships can face restrictions, transactions can receive greater scrutiny and commercial actors may decide that the compliance burden is too high.

DPRK illustrates the connection between financial rules and strategic security particularly clearly. FATF has linked concerns over illicit financial activity to proliferation financing and the procurement networks supporting weapons programmes. Iran’s case has involved concerns over incomplete action-plan commitments relating to terrorist and proliferation financing, while Myanmar has faced continuing scrutiny over deficiencies in its system.

Financial isolation is not equivalent to military action, but it can limit the channels through which states and non-state actors obtain money, technology and international financial access.

Terrorism Cannot Operate Without Financial Networks

Terrorist violence is highly visible; terrorist financing usually is not. The money may move through donations, cash couriers, informal transfer systems, charities, extortion, trade transactions, front companies, digital wallets or cryptocurrency platforms. The amounts involved may also be surprisingly small.

This creates a difficult detection problem. Banks and regulators cannot focus only on very large transactions. They need to identify relationships, unusual behaviour, transaction patterns and networks. A relatively inexpensive attack can still require travel, accommodation, communications, weapons, logistical support and propaganda.

FATF standards therefore push countries toward stronger customer due diligence, suspicious-transaction reporting, financial intelligence units, beneficial-ownership transparency, targeted financial sanctions and cross-border information sharing.

These systems may appear technical, but their purpose is strategic. If a state cannot trace illicit money, it cannot fully disrupt the networks that depend on it.

Pakistan Shows Why FATF Matters to India

For India, FATF is not an abstract financial body. It has become part of national-security diplomacy. Pakistan’s earlier presence on the FATF grey list became closely connected to India’s concerns over cross-border terrorism and terror financing.

Pakistan was removed from the grey list in 2022. The source draft notes that in May 2025 India intended to push for renewed FATF scrutiny of Pakistan following a deadly attack in Kashmir, while Pakistan denied involvement.

The broader strategic argument is that terrorism cannot be addressed only through military and diplomatic tools. Groups need financial support, facilitators, charities, handlers and commercial channels. If those networks remain financially functional, organisations can survive formal bans and leadership losses.

At the same time, FATF’s credibility depends on evidence. If countries use the institution merely as an extension of geopolitical rivalry, its standards will lose authority. India has a strong interest in a FATF system that is tough on terrorism financing but remains technically credible and consistently applied.

India’s Own FATF Evaluation Shows Both Strength and Remaining Gaps

India itself is subject to FATF scrutiny. The source draft notes that the 2024 FATF-APG-EAG assessment found India had achieved a high level of technical compliance and was producing good results in several areas, including risk understanding, beneficial-ownership information and asset deprivation. It also notes that India was placed in the regular follow-up category, with the next reporting requirement in 2027.

This strengthens India’s financial reputation because good FATF assessments can support investor confidence and reinforce perceptions of financial-system integrity. But the evaluation was not a declaration that every weakness had disappeared.

The draft highlights concerns around the speed of money-laundering and terrorist-financing prosecutions, the need for stronger supervision of some non-financial sectors and the importance of a more risk-based approach toward non-profit organisations.

That is an important distinction. Passing laws is only the first stage. The real test is whether investigations conclude, assets are confiscated, prosecutions succeed and sanctions create deterrence.

The Non-Profit Sector Requires a Careful Balance

One of the most sensitive areas of counter-terror financing is the non-profit sector. Charities and community organisations can theoretically be exploited to conceal transfers or support illicit networks, but aggressive regulation can also harm legitimate humanitarian, educational and social work.

The problem is therefore not whether non-profits should be regulated. It is how.

If governments apply controls too weakly, terrorist financiers may exploit gaps. If they apply them too broadly, humanitarian organisations and civil society may face unnecessary restrictions. FATF itself has increasingly emphasised the need to avoid unintended consequences, including disruption to legitimate non-profit activity and humanitarian assistance.

The source draft notes that FATF’s February 2026 grey-list statement explicitly said that legitimate humanitarian assistance, non-profit activity and remittances should not be disrupted or discouraged.

This principle matters for India as well. Security policy should target actual risk rather than treating an entire sector as inherently suspicious.

Beneficial Ownership Has Become a Security Question

Beneficial ownership asks a basic but powerful question: who actually controls an asset or company?

The legal owner shown in company records may not be the real person benefiting from it. Shell companies, nominees, trusts and layered offshore structures can hide corrupt officials, sanctions evaders, criminal networks or terror financiers.

This opacity can make law enforcement dramatically harder. If investigators cannot identify the person behind a company or transaction, assets can move while responsibility remains hidden.

Beneficial-ownership transparency is therefore no longer only a tax or corporate-governance issue. It is part of national security. The stronger a country’s financial and corporate systems become, the more important it becomes to know who ultimately controls the money moving through them.

The source draft notes that India’s FATF assessment identified access to beneficial-ownership information as one of the areas where the country had produced good results.

Digital Finance Is Creating a New Illicit-Finance Battlefield

Digital finance has transformed both legitimate commerce and criminal opportunity. Money can now move through payment applications, digital wallets, prepaid instruments, gaming platforms, cryptocurrency exchanges, crowdfunding platforms and decentralised-finance systems.

Many of these technologies improve efficiency and financial inclusion. They can also be exploited by ransomware operators, fraud networks, terror financiers and sanctions evaders.

The source draft notes that FATF’s February 2026 plenary approved new work relating to cyber-enabled fraud and virtual assets, reflecting the growing importance of digital financial crime.

For India, this challenge is especially important because the country has built one of the world’s largest digital-payment ecosystems. The objective cannot be to suppress innovation. It must be to combine scale and convenience with strong monitoring, identity verification and enforcement against abuse.

India’s experience with digital public infrastructure gives it an opportunity to help shape a model in which financial inclusion and financial security reinforce one another.

Trade-Based Money Laundering Remains Difficult to Detect

Illicit money does not always move directly through suspicious bank transfers. It can be disguised inside legitimate-looking trade.

Over-invoicing, under-invoicing, fake shipments, multiple invoicing, commodity-price manipulation and misclassification of goods can all be used to move value between jurisdictions. A transaction involving electronics, textiles, chemicals, precious metals or machinery may appear normal while concealing illicit transfers.

This makes trade-based money laundering particularly difficult because international commerce is enormous. Detecting manipulation requires banks, customs authorities, tax agencies, shipping databases, corporate registries and financial intelligence units to share information.

For a large trading economy such as India, this is strategically significant. Illicit finance cannot be treated as the responsibility of one regulator or one intelligence agency. It requires a whole-of-government approach.

FATF Turns Domestic Regulatory Failure Into International Pressure

One of FATF’s strongest effects is its ability to transform domestic regulatory weaknesses into international credibility problems. A government may ignore ineffective beneficial-ownership systems, weak financial intelligence, poor supervision of real estate or weak prosecution capacity for years. FATF evaluations bring those deficiencies into an international framework.

Mutual evaluations examine both technical compliance and effectiveness. The central question is not merely whether a country has passed a law but whether the system works. Are suspicious transactions analysed? Are criminal assets confiscated? Are terrorist assets frozen? Are supervisors effective? Are sanctions credible? Can authorities identify beneficial owners?

This emphasis is essential because countries can easily produce compliance on paper.

Security outcomes depend on implementation.

The Economic Cost of Grey-Listing Can Be Significant

Grey-listing can increase compliance burdens throughout an economy. Banks may conduct more checks, businesses may face delays, correspondent relationships may become more difficult and foreign investors may demand additional assurances.

The scale of the effect varies. A large, diversified economy may be able to absorb reputational damage more easily than a small or financially fragile state. But countries nevertheless work hard to exit FATF monitoring because the signal itself matters.

The draft notes that removal generally requires a jurisdiction to complete all or nearly all elements of its agreed action plan, followed by an on-site assessment confirming that reforms have been implemented and that political commitment exists.

This is important because it reduces the value of purely cosmetic legal changes. Governments need to demonstrate sustainable reform.

FATF Also Changes Behaviour Before a Country Is Listed

The influence of FATF reaches beyond countries already on public monitoring lists. Governments know when mutual evaluations are approaching. Regulators prepare. Legislatures amend laws. Banks strengthen due diligence. Financial intelligence units improve coordination. Beneficial-ownership systems may be upgraded.

The possibility of reputational damage therefore creates incentives before any listing occurs.

This preventive effect may be among FATF’s most important forms of power. Stronger financial intelligence can expose networks before an attack. Better corporate transparency can reveal criminal assets before they disappear. More effective virtual-asset supervision can make laundering more difficult.

The best security outcome is often the event that never occurs because the financial network was disrupted earlier.

Politicisation Is FATF’s Biggest Institutional Risk

The more powerful FATF becomes, the stronger the temptation for governments to use it strategically against rivals. States may push for greater scrutiny of opponents while seeking softer treatment for allies.

If this perception becomes widespread, FATF’s credibility will decline.

The organisation therefore depends on consistent standards, transparent methodology and evidence-based evaluation. Countries must believe that deficiencies are assessed because they create real financial risk, not because they belong to the wrong geopolitical camp.

This is particularly relevant for India. New Delhi benefits when credible FATF processes expose terror-financing vulnerabilities, but it also benefits from an institution whose findings carry broad international legitimacy.

A technically credible FATF is more useful to India than a politicised one.

Financial Inclusion Must Not Become a Casualty of Compliance

Another risk is excessive de-risking. Banks faced with high compliance costs may sometimes find it easier to stop serving entire categories of customers or countries rather than assessing individual risk.

That can hurt migrant workers, small businesses, charities and remittance channels. It can also produce the opposite of the intended result: people excluded from formal banking may turn toward cash or informal systems that are harder for authorities to monitor.

The source draft notes that FATF standards call for a risk-based approach rather than indiscriminate de-risking.

This balance is especially important for developing countries. Financial inclusion and anti-money laundering policy should reinforce one another. Digital identity, transparent payments and proportionate risk monitoring can make financial systems both more inclusive and more secure.

Proliferation Financing Extends FATF Into Strategic Security

FATF increasingly addresses not only money laundering and terrorism but also proliferation financing: the movement of funds or assets supporting weapons of mass destruction programmes.

DPRK remains the clearest example. Procurement networks for missile or nuclear programmes need front companies, brokers, shipping arrangements, financial institutions and access to components. Disrupting those channels can make proliferation more difficult.

This shows how far financial governance has moved into traditional security territory. A weapons programme depends not only on engineers and materials but also on payment systems and financial access.

In a world of nuclear risk, missile technology, dual-use components and sanctions evasion, proliferation financing will remain an increasingly important part of international security policy.

FATF Matters to the Global South Too

Some developing countries view FATF as another expensive compliance regime shaped largely by advanced economies. That criticism cannot be dismissed. Poorer states may lack regulatory capacity, correspondent banking may decline, humanitarian flows can become more difficult and compliance requirements may impose disproportionate costs.

But weak financial integrity also harms developing countries severely. Corruption drains public revenue. Drug trafficking destabilises communities. Illegal mining finances criminal networks. Human trafficking exploits vulnerable people. Capital flight removes money needed for development.

The real challenge is therefore not whether FATF standards should exist but how they should be applied. Fragile and low-capacity states need technical assistance alongside scrutiny. Humanitarian systems need safeguards. Standards should be proportionate, but financial opacity cannot be treated as harmless simply because enforcement is difficult.

For the Global South, financial integrity is also a development issue.

India Can Use FATF Diplomacy More Strategically

India should treat FATF as a major component of both security and economic diplomacy. It has a direct interest in stronger international action against terrorist financing, especially networks linked to cross-border violence, proxy groups and front organisations.

Domestically, India needs faster conclusions in money-laundering and terrorist-financing cases. Investigations without eventual prosecution and sanction provide limited deterrence. Supervision of real estate, precious metals, accountants, lawyers, company-service providers and other high-risk sectors also needs continued attention.

Digital finance should become another priority. India’s payments infrastructure and fintech ecosystem give it an opportunity to shape a model in which rapid financial innovation operates alongside strong safeguards against fraud and illicit finance.

India can also support smaller developing countries through regulatory training, financial-intelligence cooperation and technical assistance. Such partnerships would allow India to combine counter-terrorism objectives with its wider claim to leadership in the Global South.

Financial Rules Have Become Instruments of Statecraft

FATF belongs to a broader transformation in international politics. Sanctions, asset freezes, correspondent-banking restrictions, export controls, beneficial-ownership rules, investment screening and cryptocurrency regulation are increasingly used as tools of statecraft.

States no longer exercise power only through armies and territorial control. They also exercise it through access to markets, payment systems, capital and financial infrastructure.

This creates opportunity because financial tools can disrupt criminal networks and pressure governments without military action. But it also creates danger. If financial instruments are used too aggressively or selectively, countries may seek alternatives and the international system may fragment.

FATF therefore needs to remain standards-based. Its legitimacy depends on being understood as a guardian of financial integrity rather than simply another instrument of geopolitical power.

Financial Intelligence Is Now Part of the Security State

Traditional security agencies focus on weapons, militants, borders and communications. Financial intelligence can reveal a different side of the same network.

Suspicious-transaction reports, tax records, customs information, corporate registries and banking data can expose relationships between shell companies, charities, facilitators, handlers and operatives. A person who never carries a weapon may still be essential to moving money or protecting assets.

Financial intelligence becomes valuable when it is converted into action. That requires coordination among financial intelligence units, police, prosecutors, customs officials, intelligence agencies and regulators.

A better suspicious-transaction system may expose a network before an attack. Stronger beneficial-ownership information may reveal who controls a front company. A targeted asset freeze may disrupt recruitment or procurement.

This is the point at which financial rules become security outcomes.

FATF Has Clear Limits

FATF is powerful, but financial regulation cannot solve every security problem. Terror networks can rely on cash, extortion or state support. Criminals adapt. Governments may pass laws without enforcing them. Courts may remain weak. Banks may produce large quantities of compliance paperwork without identifying genuine risk.

FATF also cannot resolve the political conflicts that create terrorism, organised crime or sanctions evasion.

Financial standards are therefore necessary but not sufficient.

Their effectiveness depends on whether countries move beyond box-ticking. A system should not be judged solely by how many rules have been enacted or reports have been filed. The meaningful questions are whether illicit finance is detected, whether networks are disrupted, whether assets are recovered and whether offenders are prosecuted.

The Real Lesson of FATF

FATF’s deepest lesson is that the financial system is part of the security system. A bank account can support violence. A shell company can conceal a criminal. A fake invoice can move money across borders. A charity can be misused as a channel. A crypto wallet can hide proceeds. A weak regulator can create an international security gap.

The institution does not operate perfectly. It faces geopolitical pressure, uneven capacity, technological change and legitimate concerns about fairness. But it has changed the behaviour of governments by making financial integrity a matter of international credibility.

For India, FATF sits at the intersection of terrorism, digital finance, economic growth and global reputation. India’s positive 2024 evaluation strengthened its position, but faster prosecutions, stronger supervision of non-financial sectors and continued adaptation to digital finance remain important.

For the wider world, FATF demonstrates that twenty-first-century security will not be protected only at borders, military bases and checkpoints. It will also be protected inside payment systems, compliance departments, corporate registries, customs databases, financial intelligence units and courtrooms.

The future battlefield is not only physical.

It is financial.

And FATF shows that when money becomes harder to hide, terrorism, corruption and illicit power become harder to sustain.