The Financial Action Task Force launched a targeted review on October 30, 2026 to accelerate countries' implementation of its standards for virtual assets and their service providers. The continuing exercise will produce initial results in June 2027, followed by further findings in October 2027.
The review will concentrate primarily on jurisdictions with materially important virtual asset service provider activity, taking account of their existing assessment status. The October plenary account says objective criteria will guide the exercise. It does not identify countries selected for review.
FATF's launch announcement says regular country assessments, known as mutual evaluations, and their follow-up remain the main assessment mechanisms. The additional process brings targeted scrutiny, monitoring and faster reporting, intended to push jurisdictions to correct weaknesses sooner.
Technical support accompanies closer scrutiny
FATF plans to work with the jurisdictions concerned through continuing engagement and training. It has also asked donors and technical assistance providers to prioritise countries struggling to implement Recommendation 15, the standard covering virtual asset risks.
The policy direction was set out in the April 17 ministerial declaration. Ministers called for faster implementation across borders and accountability through peer review. They backed responsible financial innovation and a risk-based approach. The declaration called for resources to be directed towards shared priorities and for unnecessary compliance costs to be avoided, particularly in low-risk sectors. It also sought to reduce exclusion from financial services.
The October decision is about applying existing standards. It does not announce a new version of Recommendation 15 or set a single licensing deadline for every country and provider. The published timetable concerns FATF's review results, rather than a universal commencement date for domestic rules.
The plenary dealt separately with its list of jurisdictions under increased monitoring, known as the grey list. The targeted crypto review is not itself a decision to add a country to that list.
What the existing standard requires
Under Recommendation 15 and its interpretive note, countries should assess virtual asset risks and require service providers to be licensed or registered. Their anti-money-laundering and counter-terrorist-financing controls must be supervised in practice. These are the requirements against which implementation is examined.
Providers themselves should assess their exposure to money laundering, terrorist financing and proliferation financing, and take effective steps to address those risks.
The minimum licensing or registration connection for a corporate provider is the jurisdiction where it is created. For an individual provider, it is the place of business. Countries can also require registration from providers serving their customers or operating from their territory.
Authorities should prevent criminals and their associates from controlling or managing providers, identify businesses operating without the required authorisation and apply sanctions. Supervisors should be able to inspect providers, demand information and restrict, suspend or withdraw licences or registrations where applicable. Sanctions should cover directors and senior managers.
A separate registration system need not be imposed on financial institutions already authorised to perform these activities and subject to the full applicable FATF obligations.
For domestic context, Dalimss News has explained India's FIU-IND compliance framework, including the customer checks that crypto platforms apply. That earlier coverage concerns India's own requirements, separate from FATF's newly announced review process.
July survey shows remaining gaps
FATF's update released on July 16 records 91 of 109 responding jurisdictions, or 83%, as having passed Travel Rule legislation in its 2026 survey. The 2025 comparison was 85 of 117 respondents. The denominators differ, so this is not a fixed-country comparison.
The Travel Rule concerns collecting, retaining and securely transmitting information about a transfer's sender and recipient. Passing legislation is one stage; the July report also calls for practical supervision and enforcement. These are historical survey findings, not measurements taken after the October launch.
On decentralised finance, or DeFi, 44 of 142 respondents said their risk-mitigation measures applied to such arrangements. Only four reported imposing licensing or registration requirements, and two reported licensing or registering arrangements.
The report says cross-border activity and the absence of formal legal structures make it hard to establish which arrangements fall within regulation. Supervisors also face shortages of technical expertise to analyse them.
The July recommendations distinguish the work still needed: jurisdictions without a framework should prioritise risk assessments and legal provisions, while those that have begun implementation should concentrate on supervisory activity.
Dalimss News's earlier report on FINTRAC's compliance checks and information demands provides a separate national example of supervision in practice. FATF's next published review results will allow a fresh assessment of implementation progress in 2027.
