Croatia is on the FATF grey list. What’s next?

Published on

Many of you probably heard of Croatia’s addition to the Financial Action Task Force’s (FATF) Grey List. It has raised concerns for the fintech companies.

First, let’s try to understand the Grey List. FATF has a practice of naming and shaming countries for the deficiencies with their 40 Recommendations. While being on the Grey List does not classify a country as high-risk, and doesn’t mean it is a dead end, it nevertheless indicates that the country included in the grey list has specific deficiencies in their AML framework.

Here is what I suggest you to do:

Read thru the information on the FATF website. If we look at it we see that the country is put on the grey list due to very specific reasons. Let’s look at them closely.

  1. Lack of National Risk assessment
  2. Need for increasing FIU headcount
  3. Better investigation of money laundering
  4. Need to increase in provisional measures (confiscations)
  5. Need to improve detection and investigation of terrorism financing
  6. Poor implementation of sanctions
  7. Poor supervision of non-profit sector

Well, after we broke it down, it doesn’t seem so scary.

So, what do we do next in practical terms? Now we see that among the listed points only â„–7 somewhat applicable to the fintech.

But as many of you are probably aware, the most standard requirement that you are already fulfilling is the sanctions screening of your customer and counterparties. So, that’s basically it.

Here below is the list of the things that I would consider a waste of time and money (as compliance costs money!):

  1. Doing a gap-analysis or risk assessment from scratch (because guidelines says so).
  2. Conducting enhanced due diligence for all your customers from Croatia.
  3. Conducting separate impact/business/country risk assessments.

Now I hope that it is clear and you will be able to take fast and informed decisions, save time and resources.

If you have any comments or concerns – reach out advisory@complianceaspect.com or book a call with us 

Categories: fintech news
fintech compliance fintech news

Navigating MiCAR: Key Steps for CASP Authorisation

The Markets in Crypto Assets Regulation (MiCAR) is reshaping the landscape of EU crypto regulation, with a focus on fostering innovation while ensuring consumer protection. Starting December 30, 2024, crypto asset service providers (CASPs) in the EU must secure authorisation to continue operating across the EU. A transitional period runs until December 29, 2025, for existing virtual asset service providers (VASPs) to operate without a MiCAR licence. CASPs must meet stringent regulatory requirements, including governance, client asset protection, transparency, and anti-money laundering (AML) compliance. Early engagement with regulators is key to successfully navigating the authorisation process. Get in touch for a free consultation and ensure your business is MiCAR-ready!