Home/ Insights/ Compliance
Compliance

FATF's Updated Recommendations: What They Mean for Corporate Service Providers

The Financial Action Task Force's revisions to Recommendations 24 and 25 — the cornerstones of beneficial ownership transparency — have reshaped how every jurisdiction regulates CSPs and TCSPs. Understanding the FATF framework is essential for any CSP operating internationally.

FATF's Role in Shaping CSP Regulation

The Financial Action Task Force does not directly regulate corporate service providers. It is an intergovernmental policy body that sets standards — its 40 Recommendations — that member jurisdictions are expected to implement into their national legal and regulatory frameworks. But the FATF's indirect influence on CSPs is enormous: every regulatory change in Jersey, Cayman, BVI, Singapore, and the other major CSP jurisdictions can be traced, directly or indirectly, to FATF pressure through its mutual evaluation process.

When FATF revises a Recommendation, the ripple effect through the global CSP regulatory landscape is predictable and significant. Jurisdictions on scheduled mutual evaluation cycles have strong incentives to implement the revised standard before their evaluation — the consequences of a poor FATF rating (potential greylisting, financial institution correspondent banking pressure, reputational damage) are severe. When FATF revised Recommendations 24 and 25 in 2023, it set in motion a wave of regulatory changes that have been arriving in every major CSP jurisdiction since 2024 and that will continue through 2026 and beyond.

Recommendation 24: Legal Persons — What Changed

Recommendation 24 addresses beneficial ownership transparency for legal persons — companies and other legal entities. The 2023 revision was the most substantial since the original FATF standards were established, and it was driven by concern that the existing framework allowed jurisdictions to rely on company registries without requiring verification of accuracy.

The key changes to R.24 that CSPs need to understand are:

The Verification Imperative

Under the revised R.24, it is no longer sufficient for a jurisdiction to require beneficial ownership information to be held on a register or by the company. The standard now requires that the information be independently verified — either by the competent authority that holds the register, or by an obliged entity (such as a CSP) that is required to collect and verify beneficial ownership as part of its AML obligations and to report this to a central register. This is driving the verification upgrades we are seeing in Jersey (2026), IOM, and other jurisdictions.

The Multiple Mechanisms Approach

The revised R.24 explicitly allows jurisdictions to use a combination of mechanisms to ensure beneficial ownership information is accurate and accessible: central registers, company-held registers, nominee declarations, and obliged entity disclosure. However, the revised standard is clear that these mechanisms must be used in combination in a way that ensures comprehensive, verified coverage — not as alternative options where choosing the weakest mechanism discharges the obligation.

Custodial Responsibility of Registered Agents

The revised R.24 explicitly addresses the role of registered agents and corporate service providers as a mechanism for ensuring beneficial ownership accuracy. Where a CSP acts as registered agent, FATF expects that CSP to have conducted verification of beneficial ownership information, to hold that information, and to make it available to competent authorities on request. This is now the baseline international standard, and jurisdictions that do not implement it face peer review criticism.

Recommendation 25: Legal Arrangements — The Trust Sector Impact

Recommendation 25 addresses legal arrangements — primarily trusts, but also other arrangements such as foundations and fiduciary structures. The 2023 revisions to R.25 significantly strengthened beneficial ownership transparency requirements for trusts and have direct implications for CSPs providing trustee or trust administration services.

The revised R.25 requires that jurisdictions ensure beneficial ownership information for trusts is available to competent authorities. Critically, this applies to trusts governed by the laws of the jurisdiction even if the trust is administered elsewhere. For channel islands trust companies administering international trusts, this means the JFSC or GFSC has expectations about beneficial ownership information being maintained and verifiable regardless of whether the trust assets or settlors are local.

"The revised FATF standards have effectively globalised the beneficial ownership standard. A trust that can demonstrate compliance with its home jurisdiction's requirements but cannot satisfy an overseas competent authority's information request is increasingly exposed to compliance risk."

The Mutual Evaluation Pressure: Jurisdiction by Jurisdiction

The FATF mutual evaluation schedule gives us a roadmap of where regulatory changes are likely to hit next. Jurisdictions approaching their evaluation period have the strongest incentive to implement revised FATF standards:

  • The BVI, Cayman, and Bermuda all had or are approaching mutual evaluations — the economic substance and beneficial ownership changes in these jurisdictions are directly FATF-driven.
  • Singapore's strong 2024 mutual evaluation result was supported by significant AML framework improvements in 2023–2024 that directly addressed FATF concerns about the trust sector.
  • The UAE's removal from the FATF grey list in early 2024 followed an intensive compliance programme — the DIFC and ADGM regulatory updates are part of the ongoing consolidation of those improvements.
The Practical Test: FATF R.16 and the Travel Rule

For CSPs with virtual asset exposure, FATF's Recommendation 16 (the "Travel Rule" — requiring that beneficiary and originator information accompany virtual asset transfers) is increasingly relevant. Jurisdictions implementing the Travel Rule for VASPs create compliance obligations that feed through to CSPs administering VASP entities. Understanding where your jurisdictions stand on Travel Rule implementation is essential.

How CSPs Should Use the FATF Framework

The most effective CSPs use FATF standards as a forward-looking intelligence tool rather than a rear-view mirror. By monitoring FATF's guidance and the mutual evaluation schedules of the jurisdictions they operate in, they can anticipate regulatory changes before they are enacted and prepare their operations accordingly rather than scrambling to comply after the fact.

Specifically, CSPs should:

  • Review FATF's mutual evaluation schedule annually and identify which of their key jurisdictions are approaching evaluation cycles — expect regulatory tightening in those jurisdictions in the 12–24 months before their evaluation.
  • Review FATF guidance notes and typologies reports for the CSP/TCSP sector — FATF regularly publishes typologies that describe how CSPs are misused for money laundering, and these inform what regulators look for in inspections.
  • Use FATF's AML/CFT Evaluations and Assessments as a benchmark for your own internal risk assessment — if FATF identifies a particular sector or structure type as high-risk, your risk assessment should reflect that.
  • Monitor FATF's High-Risk Jurisdictions and the updated Jurisdictions Under Increased Monitoring (grey list) — changes in either list should trigger immediate reassessment of any clients or structures with connections to affected jurisdictions.

The Convergence Direction

The clearest message from the revised FATF Recommendations is one of direction: the global regulatory standard for corporate services is converging toward mandatory, verified beneficial ownership transparency, with CSPs playing a central custodial role. The question is not whether your jurisdictions will implement this standard — they will, as the mutual evaluation pressure is too strong to resist — but whether you are operationally ready to meet the standard when they do.

CSPs that have invested in robust KYC systems, verified UBO databases, and automated beneficial ownership monitoring are well positioned for this convergence. Those still relying on self-certification and manual records are building compliance debt that will become increasingly costly to discharge.