FinCEN issued a statement informing U.S. financial institutions that the Financial Action Task Force (FATF), an intergovernmental body that establishes international standards for anti-money laundering, has updated its lists of jurisdictions with strategic AML/CFT/CPF deficiencies. FinCEN is asking U.S. financial institutions to consider the FATF's stance toward these jurisdictions when reviewing their obligations and risk-based policies, procedures, and practices.
The FATF has removed Nicaragua and Pakistan from its list of Jurisdictions under "Increased Monitoring" and added the Democratic Republic of the Congo, Mozambique, and Tanzania.
High Risk Jurisdictions Subject to a Call for Action
The FATF added Burma to its list of "High-Risk Jurisdictions Subject to a Call for Action" and called for enhanced due diligence, not countermeasures. It also noted that "when applying enhanced due diligence measures, countries should ensure that flows of funds for humanitarian assistance, legitimate NPO activity and remittances are not disrupted." Iran and the Democratic People's Republic of Korea (DPRK) remain on the list of High-Risk Jurisdictions Subject to a Call for Action and are still subject to the FATF's countermeasures.
As part of the FATF's listing and monitoring process to ensure compliance with its international standards, the FATF issued two statements: (1) Jurisdictions under Increased Monitoring, which publicly identifies jurisdictions with strategic deficiencies in their AML/CFT/CPF regimes that have committed to, or are actively working with, the FATF to address those deficiencies in accordance with an agreed upon timeline and; (2) High-Risk Jurisdictions Subject to a Call for Action, which publicly identifies jurisdictions with significant strategic deficiencies in their AML/CFT/CPF regimes and calls on all FATF members to apply enhanced due diligence, and, in the most serious cases, apply counter-measures to protect the international financial system from the money laundering, terrorist financing, and proliferation financing risks emanating from the identified countries.
Jurisdictions Under Increased Monitoring
With respect to the FATF-identified Jurisdictions under Increased Monitoring, U.S. covered financial institutions are reminded of their obligations to comply with the due diligence obligations for foreign financial institutions (FFI) under 31 CFR § 1010.610(a) in addition to their general obligations under 31 U.S.C. § 5318(h) and its implementing regulations. As required under 31 CFR § 1010.610(a), covered financial institutions should ensure that their due diligence programs, which address correspondent accounts maintained for FFIs, include appropriate, specific, risk-based, and, where necessary, enhanced policies, procedures, and controls that are reasonably designed to detect and report known or suspected money laundering activity conducted through or involving any correspondent account established, maintained, administered, or managed in the United States. Furthermore, money services businesses (MSBs) have parallel requirements with respect to foreign agents or foreign counterparties, as described in FinCEN Interpretive Release 2004-1, which clarifies that the AML program regulation requires MSBs to establish adequate and appropriate policies, procedures, and controls commensurate with the risk of money laundering and the financing of terrorism posed by their relationship with foreign agents or foreign counterparties. Additional information on these parallel requirements (covering both domestic and foreign agents and foreign counterparts) may be found in FinCEN's Guidance on Existing AML Program Rule Compliance Obligations for MSB Principals with Respect to Agent Monitoring. Such reasonable steps should not, however, put into question a financial institution's ability to maintain or otherwise continue appropriate relationships with customers or other financial institutions, and should not be used as the basis to engage in wholesale or indiscriminate de-risking of any class of customers or financial institutions. Financial institutions should also refer to previous interagency guidance on providing services to foreign embassies, consulates, and missions.
Additional High-Risk Jurisdictions Subject to a Call for Action
With respect to the FATF-identified High-Risk Jurisdictions Subject to a Call for Action, the FATF added Burma to this category and urged jurisdictions to apply enhanced due diligence proportionate to the risks. U.S. financial institutions should continue to consult existing FinCEN and OFAC guidance on engaging in financial transactions with Burma.
In the case of DPRK and Iran, the FATF-identified High-Risk Jurisdictions Subject to a Call for Action, specifically, counter-measures, financial institutions must comply with the extensive U.S. restrictions and prohibitions against opening or maintaining any correspondent accounts, directly or indirectly, for North Korean or Iranian financial institutions. Existing U.S. sanctions and FinCEN regulations already prohibit any such correspondent account relationships.
The Government of Iran and Iranian financial institutions remain persons whose property and interests in property are blocked under E.O. 13599 and section 560.211 of the Iranian Transactions and Sanctions Regulations (ITSR). U.S. financial institutions and other U.S. persons continue to be broadly prohibited under the ITSR from engaging in transactions or dealings with Iran, the Government of Iran, and Iranian financial institutions, including opening or maintaining correspondent accounts for Iranian financial institutions. These sanctions impose obligations on U.S. persons that go beyond the relevant FATF recommendations. In addition to OFAC-administered sanctions, on October 25, 2019, FinCEN found Iran to be a Jurisdiction of Primary Money Laundering Concern and issued a final rule, pursuant to Section 311 of the USA PATRIOT Act, imposing the fifth special measure available under Section 311. This rule prohibits U.S. financial institutions from opening or maintaining correspondent accounts for, or on behalf of, an Iranian financial institution, and the use of foreign financial institutions' correspondent accounts at covered United States financial institutions to process transactions involving Iranian financial institutions (31 CFR § 1010.661).
For jurisdictions removed from the FATF listing and monitoring process, U.S. financial institutions should take the FATF's decisions and the reasons behind the delisting into consideration when assessing risk, consistent with financial institutions' obligations under 31 CFR § 1010.610(a) and 31 CFR § 1010.210.
If a financial institution knows, suspects, or has reason to suspect that a transaction involves funds derived from illegal activity or that a customer has otherwise engaged in activities indicative of money laundering, terrorist financing, or other violation of federal law or regulation, the financial institution must file a Suspicious Activity Report.