HomeCirculars › RBI/2010-11/212

NBFCs: Updated FATF List of High-Risk Jurisdictions for AML/CFT

Live · in forceNo withdrawal recorded as of 20 Jun 2026. Reviewed by Vikram Jain; always verify against the official RBI source below.
Issued by RBI: 22 Sep 2010  ·  Decoded by BankPulse: 20 Jun 2026, 12:46 IST
⏱ ~2 min read
📄 Official RBI source ↗
Quick answerRBI directs NBFCs/RNBCs to factor in AML/CFT risks from Iran, DPRK, and Sao Tome and Principe per FATF's June 2010 statement. Iran requires countermeasures; the other two need risk consideration. Compliance officers must acknowledge receipt to their regional DNBS office.

What changed

FATF updated its list of strategic AML/CFT deficient jurisdictions in June 2010, dividing them into two groups: Iran (subject to countermeasures) and DPRK and Sao Tome and Principe (deficiencies without committed action plans). RBI now requires NBFCs/RNBCs to account for risks from these countries, replacing the earlier April 2010 circular that included a broader set.

What it means for you

NBFCs must enhance due diligence for transactions or relationships involving Iran, DPRK, or Sao Tome and Principe. Iran demands stricter countermeasures like enhanced monitoring or transaction restrictions. For DPRK and Sao Tome and Principe, lenders need to assess and mitigate elevated ML/FT risks. Non-compliance could invite regulatory scrutiny.

What you must do

Who it affects

All Non-Banking Financial Companies (NBFCs), Residuary Non-Banking Companies (RNBCs), Compliance officers and principal officers of NBFCs/RNBCs

Which countries are now flagged by FATF as per this circular?

Iran is subject to countermeasures due to substantial ML/FT risks. Democratic People's Republic of Korea (DPRK) and Sao Tome and Principe have strategic deficiencies without committed action plans as of June 2010.

What actions must NBFCs take for Iran?

NBFCs must apply countermeasures to protect the financial system from ongoing ML/FT risks from Iran, such as enhanced due diligence, transaction monitoring, or restrictions on business relationships.

Do we need to report receipt of this circular?

Yes, the compliance officer or principal officer must submit an acknowledged receipt to the concerned Regional Office of DNBS where the NBFC/RNBC is located.

Track this rule
⏳ How this rule evolved — History Map →Full RBI rulebook crosswalk →
AI-drafted · 3-model AI consensus fact-check · under the editorial review of Vikram Jain · decoded & published by BankPulse · 20 Jun 2026, 12:46 IST
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=6008&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by Vikram Jain. Independent platform, not affiliated with the Reserve Bank of India; never reproduces RBI text verbatim.