You already know how jurisdiction risk actually arrives. Not as a reasoned letter, but as an exchange suspending withdrawals for a whole country overnight, or a compliance desk closing an account on the strength of a country code rather than anything the account holder did. That instinct, which treats anti-money-laundering (AML) standing as a gating fact rather than a footnote, is the right one to bring to a citizenship decision, and it wants a yes or a no: is the jurisdiction clean? Vanuatu's answer is neither, and anyone who hands you a clean answer is handing you a sales document. The Financial Action Task Force (FATF), the intergovernmental body that sets the global anti-money-laundering standard, ended its monitoring of Vanuatu in June 2018 and has not restored it. The European Union, working from a different instrument with different criteria, has kept Vanuatu on its list of high-risk third countries without a break since 2016, and left that listing in place through its December 2025 update. Both are true at once. Citizenship by investment (CBI), a legal pathway by which a sovereign nation grants citizenship in exchange for a government-approved contribution, does not suspend that arithmetic; it inherits it. So here is the split, and what it does and does not change once you own the document.
What the FATF said, and what it did not
The FATF does not license banks or freeze assets. It writes the recommendations national AML regimes are measured against, and publishes lists of jurisdictions whose regimes it considers deficient. In February 2016 it placed Vanuatu on what is now called the grey list with an eight-item action plan: criminalising money laundering and terrorist financing, confiscation procedures, freezing terrorist assets and implementing United Nations sanctions, a fully operational financial intelligence unit, preventive measures including wire transfers, transparency for the financial sector and for legal persons, supervision across the whole sector including trust and company service providers, and channels for international cooperation. That is a punch list, not a vague reprimand.
At its joint plenary in June 2018 the FATF removed Vanuatu from that process, and the wording matters more than the headline. The FATF found that Vanuatu had established the legal and regulatory framework to meet the commitments in its action plan: a finding about a framework and a specific list of tasks, not a certificate that the system works in practice. Oversight passed to the Asia/Pacific Group on Money Laundering, the regional body Vanuatu helped found in 1997, whose follow-up report of September 2018 considered twenty-eight recommendations, upgraded twenty-seven of them, and left Recommendation 19 at partially compliant. That report does not analyse effectiveness, and it kept Vanuatu in enhanced follow-up because the underlying evaluation had found low effectiveness across all eleven of the FATF's immediate outcomes. Vanuatu has remained in enhanced follow-up since, with no further report published; its next mutual evaluation is scheduled for adoption in 2027.
What can be said flatly is an absence claim, which is the strongest form available here: Vanuatu appears on neither the FATF grey list nor the black list published after the most recent plenary in June 2026, and has been on neither since 2018. That is a real fact and worth having. It is not the same fact as clean.
The EU list is a different instrument doing a different job
The European Union maintains its own list of high-risk third countries with strategic AML deficiencies, and it is not a copy of the FATF's. It was created by Commission Delegated Regulation (EU) 2016/1675, which supplements the Union's anti-money-laundering directive, and it does one thing in law: it triggers an obligation. Vanuatu was named in the original annex, applicable from 23 September 2016, and no amending act has removed it since. Vanuatu was not added in retaliation for anything after 2018; it has simply never come off.
The legal effect sits in Article 18a of the directive. Where a business relationship or transaction involves a listed country, EU obliged entities, meaning banks, payment institutions, notaries, lawyers, trust and company service providers, estate agents, and virtual-currency exchange and custodian-wallet providers, must apply enhanced due diligence: a heightened, mandatory version of customer checks. That means additional information on the customer and the beneficial owner, on the source of funds and the source of wealth, and on the reasons for the transactions, plus senior management approval to open or continue the relationship and enhanced ongoing monitoring. None of it is discretionary; it is the floor. Article 18a(2) then requires Member States to layer at least one further mitigating measure on top, and the options it names include systematic reporting of transactions and, at the far end, limiting business relationships with persons and entities from a listed country. That upper end is a Member State choice, not an automatic consequence, but it is in the instrument and should not be waved away.
The list is amended by delegated act, which the Commission adopts and which the European Parliament and the Council can object to within a scrutiny window before it takes effect. The most recent cycle left Vanuatu untouched: Delegated Regulations (EU) 2026/46 and (EU) 2026/83, both of December 2025, in force from 29 January 2026, added Bolivia, the British Virgin Islands, and Russia and removed six countries. Vanuatu was not the subject of any of it. As at July 2026, the listing has run continuously for nearly a decade.
Why a listing outlives a clearance
The obvious question is how a country cleared by the global standard-setter stays listed by one of that standard-setter's largest members. The answer is structural rather than conspiratorial. The directive requires the Commission only to take FATF assessments into account, not to follow them; a FATF listing is presumed to indicate risk, but the Commission runs an autonomous assessment of the legal framework and its effective application and reaches its own conclusion. Divergence is built into the design.
Two details are on the record. The EU keeps Vanuatu under a heading describing countries that have given a high-level political commitment and agreed an action plan with the FATF, a description that has not matched Vanuatu's status since 2018. And no amending regulation contains a recital explaining why Vanuatu is retained; the recitals discuss only the countries added or removed in each cycle. The mismatch is documented, and so is one episode that cuts the other way. The Commission's own draft delegated act of 13 February 2019 would have delisted Vanuatu, recording that its analysis had concluded Vanuatu did not, at that stage, have strategic deficiencies in its AML/CFT regime. The Council rejected that act in its entirety on 7 March 2019, on the ground that it had not been established through a transparent and resilient process respecting the affected countries’ right to be heard, and because the act fell, Delegated Regulation (EU) 2016/1675 was never repealed and replaced, so Vanuatu stayed on. Since then no reasoning has been published, and this piece will not invent one.
What the VFIU actually screens for
Institutional standing is one layer. The file-level screen is another, and it is the layer you can influence. Every Vanuatu application is screened by the Vanuatu Financial Intelligence Unit (VFIU), the country's anti-money-laundering authority, before the Vanuatu Citizenship Commission (VCC), the body that grants citizenship, decides anything. The VFIU runs enhanced due diligence in the same sense the EU directive uses the term: identity verification, criminal-record and sanctions checks, coordination with the INTERPOL National Central Bureau, adverse-media screening, third-party verification of identity and wealth, and, for a Bitcoiner, verification of the on-chain source-of-funds trail. An INTERPOL hit can stop a file cold. The unit reports in roughly a week and issues an acceptance in principle, nested inside the thirty-to-sixty-day government processing window. It is the $5,000 due diligence and VFIU screening line inside the published $145,000 all-in ledger for a single applicant, and it is not the Vanuatu Financial Services Commission, which supervises the corporate framework rather than applicants.
Map that against the FATF's own recommendations and the correspondence is close: customer due diligence with enhanced measures for higher-risk cases, source of funds and source of wealth, sanctions screening, beneficial-ownership transparency, and international cooperation. The joint FATF and OECD report of 22 November 2023 on the misuse of citizenship and residency by investment programmes is the authoritative statement on this category, and it is not flattering: it finds that such programmes carry significant risks of money laundering, fraud, and other misuse, and must be administered in a risk-sensitive way, with multi-layered due diligence and specific attention to source of funds and wider wealth. Vanuatu is not a case study in it; it appears once, in a footnote citing the International Monetary Fund on correspondent-banking reputational risk. That is a genuine point in Vanuatu's favour and it is not an acquittal. The one adverse primary finding naming Vanuatu directly is older: the 2015 mutual evaluation recorded reported corruption including fraudulent sale of passports and citizenship by officials. It predates the Development Support Programme, in force from 1 January 2017. It should be dated whenever it is cited, and it should be cited.
The honest status is not clean and not flagged. It is cleared by the FATF and listed by the EU at the same time, and the practical consequence lands on your documentation, not on your citizenship.
What the split means for your file
Here is the unflattering part, without softening. If you hold a Vanuatu passport and walk into an EU-facing institution, the enhanced due diligence described above is mandatory for that institution. It is not a judgement about you, and it is not negotiable by charm or a good introduction. You will be asked for source of funds and source of wealth in writing, and for documentation of a standard most retail customers never encounter. Onboarding will take longer, escalate further, and fail more often than it would on a passport from an unlisted jurisdiction. Anyone who tells you a second passport shortens that conversation has the direction of travel backwards.
The correspondent-banking layer is thinner still, for reasons largely unrelated to any list. The Pacific lost roughly 60% of its correspondent banking relationships between 2011 and 2022, on World Bank figures drawn from data published by the Bank for International Settlements, in a study commissioned by the Pacific Islands Forum Secretariat; Vanuatu’s own decline was 65.1%. That is a structural regional problem rather than a verdict on the citizenship programme, treated at length in banking a Vanuatu passport. The design fact that matters here is that the file itself does not travel that rail: the government contribution and the professional fees settle in BTC, Lightning, or USDT through BitSettle after compliance clearance. That routes around one bottleneck. It does not route around your own bank at home.
One honesty point belongs here rather than in a footnote. Vanuatu participates in the Common Reporting Standard (CRS), the OECD framework for automatic exchange of financial-account information, so an account held anywhere typically reports to your declared country of tax residence, whatever passport you present. The listing changes none of that. What changes your outcome at a compliance desk is your documentation, and that part you control. A Vanuatu passport does not clean a file; a documented source of funds does, as the source-of-funds reconstruction and the standing source-of-funds page set out.
What the listing is not
Precision cuts both ways, and the instrument is narrower than the loose talk around it suggests. It is not a sanctions designation. The regulation contains a list and an entry-into-force clause; there is no asset freeze, no transaction prohibition, and no bar on dealing with Vanuatu persons. EU sanctions are a separate legal instrument entirely. It is not a travel restriction; EU visa policy sits in its own framework, and the December 2024 Schengen revocation was made by the European Parliament and the Council under that framework, finalising a suspension that had already run since 2022, and not by this list. The passport's remaining reach, 87 destinations at rank #57, is set by that separate visa framework and by bilateral arrangements, not by an AML annex. It does not touch the validity of the citizenship, granted under the Citizenship Act, Cap. 112, by the Vanuatu Citizenship Commission. And most importantly: it lists a jurisdiction, not a person. You are not on a list. Your country of citizenship is, and the consequence is a documentation burden, not a designation against you personally.
Equally, nobody should walk away believing Vanuatu is off every European list. It sits separately on the EU's list of non-cooperative jurisdictions for tax purposes, for reasons the Council states plainly and which have nothing to do with money laundering: facilitating offshore structures without real economic substance, and a pending in-depth review on exchange of information on request. The longer supervisory history underneath all of this is in the piece on the VFSC and four decades of offshore finance, and the dated changelog of the programme itself is in the timeline for skeptics.
How to decide with a split record
Strip the rhetoric from both sides and the decision frame is unusually clear. What you buy in Vanuatu is a fast, statutorily grounded citizenship, granted under an act of parliament in force since 1980 and priced by public order, in a jurisdiction whose AML record is split between a standard-setter that stopped monitoring it in 2018 and a major economic bloc that has never taken it off a list. Those facts do not cancel each other. The correct response is not to pick the flattering half but to plan around both: budget more time and more paper for account opening, keep the source-of-funds file audit-ready, and do not build a plan that depends on a European institution treating the document as unremarkable . . . because it will not.
That is the whole trade, without a thumb on the scale. If an unblemished AML record is a hard requirement for you, Vanuatu is not the jurisdiction, and you should hear that before you pay anyone. If you need a lawful, quick, statutorily defined second citizenship and you can carry the documentation burden a split record brings, the programme does that job well, in thirty to sixty days from a complete file. Where the general case becomes your case, with your own wealth history and banking map, is the conversation the advisory team at 21cbi.io exists to have. The lists are public. Whether they are survivable in your situation is a question with your name on it.
Sources & Authorities- FATF grey-listing (February 2016) and delisting (June 2018)
- The Financial Action Task Force listed Vanuatu in February 2016 with an eight-item action plan and ended its monitoring in June 2018, finding that Vanuatu had established the legal and regulatory framework to meet that plan. That finding concerns the framework and the action plan; it is not an assessment of effectiveness.
- Asia/Pacific Group on Money Laundering
- The FATF-style regional body for the Asia-Pacific, founded in 1997, of which Vanuatu is a founding member. Its follow-up report of 5 September 2018 considered twenty-eight recommendations, upgraded twenty-seven of them, left Recommendation 19 at partially compliant, and placed Vanuatu in enhanced follow-up; no further follow-up report has been published, and the next mutual evaluation is scheduled for adoption in 2027.
- Commission Delegated Regulation (EU) 2016/1675
- The instrument creating the EU list of high-risk third countries with strategic AML deficiencies, supplementing the Union anti-money-laundering directive. Vanuatu was named in the original annex, applicable from 23 September 2016, and has never been removed by any amending act; the listing survived the December 2025 update unamended, in force from 29 January 2026.
- Article 18a enhanced due diligence
- The legal consequence of the EU listing. Obliged entities must obtain additional information on the customer and beneficial owner, the source of funds and source of wealth, the reasons for transactions, senior management approval, and enhanced ongoing monitoring. The instrument carries no asset freeze, transaction prohibition, or travel measure, though Article 18a(2) permits Member States to require limitations on business relationships.
- FATF and OECD, Misuse of Citizenship and Residency by Investment Programmes (22 November 2023)
- The authoritative statement on category-level risk in CBI and residency programmes, finding significant risks of money laundering, fraud, and other misuse, and recommending multi-layered due diligence with specific attention to source of funds and wider wealth. Vanuatu is not a case study in the report; it appears once, in a footnote.
- Vanuatu Financial Intelligence Unit (VFIU)
- Screens every citizenship file: identity, criminal-record and sanctions checks, INTERPOL National Central Bureau coordination, adverse media, and the lawful-source test on funds. It reports in roughly a week and issues an acceptance in principle. It screens; the Vanuatu Citizenship Commission grants, and the VFIU is a separate institution from the VFSC.
- EU list of non-cooperative jurisdictions for tax purposes
- A separate instrument maintained by the Council, unrelated to the AML list. Vanuatu is on Annex I on economic-substance grounds and pending an in-depth review on exchange of information on request. Vanuatu also participates in the OECD Common Reporting Standard.
Adam Juchniewicz, CEO, 21 CBI
Port Vila · July 2026