When Politics Shapes the Risk List: The FATF Optics Problem

There's a question that doesn't get asked enough in compliance circles: What happens when the lists we rely on are shaped by geopolitics?

It's an uncomfortable question. Our risk frameworks are built on the assumption that bodies like the Financial Action Task Force (FATF) operate as neutral arbiters of AML standards — technical experts calling it as they see it. Grey list means elevated risk. Clean list means you're good.

But a recent University of Oxford study, reported by the International Consortium of Investigative Journalists, offers a story that should give every compliance professional pause.

Dubai: The Numbers vs. The List

In 2022, FATF placed the UAE on its "grey list" — countries under increased monitoring for anti-money laundering deficiencies. That decision reflected genuine concerns. Dubai had become, according to the Oxford research, the lynchpin of illegal gold smuggling from East and Central Africa, handling an estimated 95% of that illicit trade. Sanctioned individuals like Angola's Isabel dos Santos and South Africa's Gupta brothers had found safe harbour there. African capital flight — $88 billion leaving the continent every year according to UN figures — was increasingly landing in Dubai real estate, which had surged fourfold in investment from African buyers between 2013 and 2018.

In other words: the grey listing was grounded in a lot of smoke, and quite a bit of fire.

Then, in 2024, Dubai was removed.

What changed? Politico reported that a group of European nations that had originally supported the grey listing began lobbying for removal — a shift that coincided neatly with European governments seeking Gulf energy support in the wake of Russia's invasion of Ukraine.

The underlying risk dynamics? Still there. The geopolitical calculus? Changed. The list? Updated accordingly.

This Isn't a Dubai Problem. It's a Structural One.

It would be easy to make this about the UAE specifically. But that's not really the lesson.

The Oxford study's broader conclusion is more unsettling: reforms to curb illicit financial flows "need to be truly global." Because "if they are not, tightening up in some jurisdictions merely shifts business away to other more permissive jurisdictions."

We've seen exactly that. As Western offshore havens tightened up after the 2008 financial crisis, the money didn't disappear — it moved east. Dubai, Singapore, and Hong Kong have all actively courted African elites with tax incentives, light regulation, and financial secrecy. According to the study, they've become "the fastest growing and most significant transnational connections for Africa."

This isn't a new offshore system competing with the old one. It's the same system, expanded and diversified. Western blue-chip firms still play central roles in Asian offshore markets. The networks are completely interwoven.

FATF assessments, by design, operate country by country — measuring whether a jurisdiction has laws on the books and systems in place. They're less equipped to assess whether those systems are actually working, or whether a jurisdiction that has technically ticked the right boxes still functions, in practice, as a laundromat for illicit wealth.

What This Means for Your Risk Framework

If the grey list can change shape because of an energy deal, then list-based screening — while necessary — cannot be the whole story. Here's how to think about it:

Don't treat clean as safe. A jurisdiction's removal from a grey list tells you that FATF is satisfied with its legislative framework. It doesn't tell you that your specific counterparty's funds are clean. The underlying red flags — complex ownership structures, beneficial ownership opacity, unexplained wealth — don't disappear when a country comes off a list. Your CDD process needs to look through the structure, not just at the jurisdiction.

Follow the typology, not just the flag. Dubai's role in commodity-based money laundering — particularly gold — is well-documented and structural. It won't change because of a grey list removal. If you're handling counterparties involved in extractive industries with African connections, that risk profile hasn't changed. Update your risk appetite accordingly.

Ask who benefits from beneficial ownership opacity. Singapore and Hong Kong have also grown significantly as offshore hubs for African capital. Both offer low regulation and asset protection that make them attractive for the same reasons Dubai does. The Oxford study notes that many Chinese firms operating in Africa's extractive industries rely on opaque corporate arrangements in Hong Kong. If your counterparty chain runs through any of these centres, the questions are the same regardless of the FATF list: who ultimately owns this? Where did the money come from? Does the business purpose make sense?

Build qualitative context into your programme. A risk-based approach was always supposed to mean just that — based on risk, not just on lists. When geopolitics shapes the lists, the risk-based methodology becomes even more important. That means reading research like the Oxford study, tracking FATF's own mutual evaluation reports (which often tell a more nuanced story than the grey list itself), and training your team to think about typologies and red flags, not just jurisdictional status.

The Bigger Picture

Africa is losing $88 billion a year to capital flight. That money doesn't vanish — it ends up somewhere, structured through corporate arrangements designed to make it hard to trace. The compliance systems meant to address this are genuinely important. But when those systems are themselves subject to geopolitical pressure, the compliance professional can't afford to be passive.

The Oxford study's author put it plainly: "There is certainly no lack of supply to meet the demand, and no reason to believe that hiding money abroad has become more difficult."

That's the honest state of play. The lists are a tool — a useful one, but a limited one. The job of the compliance team is to understand what those lists can and cannot tell you, and to build a programme that works in the gap.

Anqa Compliance provides affordable, accessible compliance tools built for institutions operating in Africa, South Asia, and Southeast Asia. If you'd like to talk about how to strengthen your risk-based approach, get in touch.