NewsSEALSQ takes a majority stake in Wecan Group — a CHF 5M investment to accelerate our AI Compliance Co-Pilot.
Wecan
Back to blog
Regulation9 min read· September 10, 2026

Monaco's FATF On-Site Visit Will Not Read Your Policies. It Will Sample Your Files.

In June 2026 the FATF found Monaco had substantially completed its action plan and triggered an on-site assessment. That visit tests something different from everything the Principality has been graded on so far: not whether the rules exist, but whether they work — file by sampled file.

by Wecan

Monaco has spent two years being graded on texts. That phase is over, and the phase that replaces it is harder.

At its plenary of 15–19 June 2026, the FATF adopted the Principality's fourth progress report and made an initial determination that Monaco has substantially completed the action plan set in June 2024. It did not delist. It triggered an on-site assessment, for which no date has yet been announced, and Monaco remained on the list of jurisdictions under increased monitoring alongside twenty-one others.

That distinction matters more than the headlines suggested. Laws, ordinances, registers and supervisory resourcing can be legislated into existence on a timetable. An on-site assessment asks a different question — whether the reforms have become embedded, sustained practice — and it answers that question by looking at what institutions actually do. For a Monaco bank or a CCAF-licensed management company, the visit is not an abstraction happening to the government. It is a sampling exercise that will reach your files.

1. Where the Principality actually stands

The sequence, precisely, because most commentary blurs it.

MONEYVAL published its fifth-round mutual evaluation of Monaco on 23 January 2023. Monaco was added to the FATF list of jurisdictions under increased monitoring in June 2024, with an agreed action plan. Reform followed quickly: by December 2024, technical compliance was assessed as satisfactory against 39 of the 40 Recommendations, and at the joint session of June 2025 the progress was rated largely addressed — an unusually favourable trajectory for a listed jurisdiction.

Then June 2026: fourth progress report adopted, action plan substantially completed, on-site assessment warranted. Delisting comes after that visit, not before, and only if the visit finds implementation sustained.

The gap between "technically compliant" and "effective" is the whole of the remaining distance. Monaco has closed the first. The second is closed by institutions, not by legislators.

2. What an on-site assessment actually examines

Technical compliance asks whether a rule exists and matches the standard. Effectiveness asks whether the intended outcome is being achieved in practice. The assessors arriving in Monaco will be testing the second, and their method is uncomfortable in a specific way: they meet supervisors, they meet institutions, and they look at cases.

Three things follow for a Monegasque institution.

They sample. Not your AML policy, which is almost certainly compliant by now — your files. The question is not whether one excellent dossier exists but whether the standard is uniform across the book, between officers, over time.

They test the chain, not the step. A beneficial owner correctly recorded but never re-verified after a change of ownership. A screening alert closed without a written rationale. A risk rating set at onboarding and untouched for four years. Each of these is a compliant step inside a broken chain, and effectiveness assessment is built to find exactly that.

They test supervision by testing the supervised. The AMSF's own effectiveness is judged partly by what its supervised entities look like when opened. Your file quality is an input to the Principality's grade, which is an unusual position to be in and worth stating plainly to a board.

3. Where paper compliance shows first

On the evidence of comparable assessments elsewhere, three areas separate institutions that pass a sample from those that generate findings.

The beneficial-ownership register, and what you did with it. Monaco maintains a Register of Beneficial Owners annexed to the trade register, and the AMSF has had to remind companies of the declaration obligation. For a bank, the register is a source, not an answer: the question an assessor asks is whether you verified the declared owner independently, what you did when the register and your own analysis disagreed, and whether you noticed when the underlying structure changed.

Enhanced due diligence where the client base makes it routine. Monaco's client base carries a structurally high proportion of politically exposed persons, cross-border wealth and real-estate-linked activity. Enhanced due diligence is therefore not an exception here; it is the normal case. Assessors look for whether EDD produced a documented, senior-signed judgement — or whether it produced a checkbox and a longer form.

Consistency between officers. The finding that recurs everywhere, and the one nobody can fix in the fortnight before a visit. Where every relationship manager keeps their own structure and their own idea of what is worth writing down, a sample of six files reveals six standards. Individually defensible; collectively, a systemic weakness.

4. The listing is costing you now, whatever happens next

Delisting will come when it comes. In the meantime, the listing has practical costs that fall on institutions rather than on the government.

Correspondent banks apply enhanced due diligence to relationships in listed jurisdictions, which lengthens your own onboarding and periodic-review cycles from the other side. Counterparties — including Swiss and EU banks working with Monegasque intermediaries — ask for more, and ask more often. And clients notice: a private client comparing Monaco with Geneva, Luxembourg or Dubai is comparing a listed jurisdiction with unlisted ones, and the burden of explanation falls on the relationship manager.

None of that is fair, and all of it is real. The only lever an individual institution controls is the quality and speed of the evidence it can produce on demand — which happens to be the same lever the on-site assessment will pull.

5. What to fix before the visit

Not policies. Evidence production. Six questions, and the honest answers are usually uncomfortable.

  • If an assessor picked six files at random across three relationship managers, would they look like the work of one institution?
  • For any client, can you show the beneficial owner and the date, source and reasoning behind that determination — including what you did when the register disagreed with your analysis?
  • Can you show that a change in a client's structure triggered a reassessment, rather than being noticed at the next scheduled review?
  • Does every closed screening alert carry a verdict, a written justification, a timestamp and a second pair of eyes?
  • Is your enhanced due diligence on PEPs a documented judgement, or a longer form?
  • Can you produce all of the above without anyone reconstructing anything from memory or from an email thread?

The fortnight before an on-site visit is too late to answer these well. The date has not been announced, which is precisely why the work is worth starting now rather than when it is.

6. Frequently asked questions

Is Monaco off the FATF grey list?

No. At the plenary of 15–19 June 2026 the FATF adopted Monaco's fourth progress report and made an initial determination that the action plan agreed in June 2024 has been substantially completed, warranting an on-site assessment. Monaco remained on the list of jurisdictions under increased monitoring alongside twenty-one other jurisdictions. Removal can only follow a successful on-site visit, for which no date has been announced.

What is the difference between technical compliance and effectiveness?

Technical compliance asks whether a rule exists and matches the international standard; effectiveness asks whether the intended outcome is achieved in practice. Monaco has largely closed the technical gap — by December 2024, compliance was assessed as satisfactory against 39 of the 40 Recommendations. The on-site assessment tests the second question, and it does so by examining what institutions actually do rather than what their manuals say.

Will the assessors look at individual banks and management companies?

Effectiveness assessment reaches supervised institutions, because a supervisor's effectiveness is judged in part by the state of the entities it supervises. In practice that means meetings and case sampling. An institution whose files are inconsistent between officers contributes to a finding it does not control the wording of.

Our AML policy was updated and approved. Is that enough?

It is necessary and it is no longer the test. A compliant policy sitting above inconsistent execution is precisely the pattern effectiveness assessment is designed to detect. The relevant question is not whether the rule is written but whether a sample of files shows it applied uniformly, with decisions that are dated, attributed and justified.

What does the listing cost us while it lasts?

Correspondent banks and foreign counterparties apply enhanced due diligence to relationships in listed jurisdictions, which lengthens onboarding and review cycles from the other side and increases the volume of information requests you must answer. Clients comparing Monaco with unlisted centres also notice. The lever you control is the speed and quality of the evidence you can produce on request.

Where does the beneficial-ownership register fit?

Monaco maintains a Register of Beneficial Owners annexed to the trade register, and declaration is an obligation the AMSF has reminded companies about. For a financial institution the register is a starting point, not a conclusion: assessors will ask how you verified the declared owner independently, what you did when your analysis diverged from the declaration, and whether a change in the structure triggered a reassessment.

7. Where Wecan fits

We are Swiss, and we say so before anything else because it is the relevant fact. Wecan Comply was built with Swiss private banks and the independent managers who work with them — the same bank-and-intermediary architecture Monaco runs, across a border that a good part of Monegasque business already crosses.

What the platform does is the thing an on-site assessment is about to test. A client file is one object: the beneficial-ownership chain rebuilt down to the natural persons with the source of every field, screening of the entity and every related party through the provider you already use, alert closures carrying verdict, justification, timestamp and four-eyes, and structural changes triggering reassessment rather than waiting for the next scheduled review. Two officers handling two comparable clients produce two comparable files, because the process rather than the individual determines the shape.

What it does not do is create effectiveness where the judgement is not being made. Enhanced due diligence on a politically exposed client is human work, and on a Monaco book it is a large share of the work. The point of removing everything around it is to leave your people the time to do that part in a way that survives being sampled.

See Wecan in action. In 30 minutes.

A live walkthrough on real KYC scenarios — no slides, no commitment. Just see if it fits your context.