FATF ¦ R.8 Non-Prof­it Or­ga­ni­sa­tions

FATF ¦ R.8 Non-Prof­it Or­ga­ni­sa­tions

Recommendation 8: Protecting Non-Profit Organisations from Terrorist Financing Abuse

Recommendation 8 of the FATF Standards focuses on preventing the misuse of non-profit organisations (NPOs) for terrorist financing. Rather than defining every organisation that operates on a not-for-profit basis, the FATF uses a functional definition: NPOs are legal persons, arrangements or organisations that primarily raise or disburse funds for charitable, religious, cultural, educational, social, fraternal or similar “good works”. The purpose of Recommendation 8 is to make sure these entities are not exploited to raise or move funds, provide logistical support, recruit for terrorist causes, or mask diversion of legitimate funds to terrorist ends, while preserving their ability to carry out legitimate humanitarian and social missions.

Core principles and balanced approach

The interpretive note lays out several core principles that should guide national responses. Measures must be focused, proportionate and risk-based: they should address identified threats without imposing blanket rules that would hamper legitimate activity. Flexibility is important so responses can evolve as threats change. The FATF emphasises that protecting NPOs is not simply a law-enforcement task; it is essential to maintain public trust, donor confidence and the integrity of the sector. States should aim to prevent and, when appropriate, prosecute abuse, but must do so in ways that respect the rule of law and minimise harm to innocent beneficiaries.

Risk identification and tailored measures

Recommendation 8 requires countries to identify which organisations fall within the FATF’s NPO definition and to conduct a risk assessment of those entities to understand how terrorist financing risks manifest in that jurisdiction. Risk assessments should use relevant, reliable information and may be done in different formats; they should also be periodically reviewed. Where risks are low, outreach and awareness-raising may be sufficient; where risks are higher, targeted measures are required. Crucially, NPOs are not to be treated as typical reporting entities under anti-money laundering/customer due diligence frameworks, and measures that go beyond the FATF definition or are disproportionate to assessed risks are discouraged.

Bastian Schwind-Wagner
Bastian Schwind-Wagner

"Recommendation 8 balances the imperative to prevent terrorist financing with the need to protect legitimate NPO activity. A risk-based, proportionate approach ensures measures target real vulnerabilities without creating unnecessary burdens.

Effective implementation depends on collaboration, information-sharing and adequate resourcing of oversight bodies. Transparent governance and the use of regulated financial channels strengthen trust among donors, financial institutions and the public."

Operational pillars for an effective national response

The interpretive note describes four complementary elements that form an effective approach to protecting NPOs:

Sustained outreach and capacity building

States should promote accountability, integrity and public confidence in NPO governance. Outreach and education for NPOs and donors should explain the vulnerabilities to terrorist financing and practical safeguards. Authorities should work with the sector to develop best practices and encourage the use of regulated financial and payment channels where feasible, while recognising constraints in certain jurisdictions.

Focused, proportionate oversight and monitoring

Oversight should be risk-based, avoiding one-size-fits-all regulation. Authorities must be able to demonstrate that measures are targeted and proportionate, and where internal controls, self-regulation or existing legal requirements already mitigate risk, additional burdens may be unnecessary. Appropriate authorities should monitor compliance and be able to apply effective, proportionate and dissuasive sanctions when violations occur.

Effective information gathering and investigation

Cooperation and information-sharing among regulators, tax authorities, financial intelligence units, law enforcement, intelligence services and accrediting bodies are essential. States should have the investigative capacity to examine NPOs suspected of exploitation or support for terrorism and to access relevant financial and programmatic information during investigations. Mechanisms should exist to ensure timely sharing of suspicions so preventative or investigative action can be taken.

International cooperation

Given the cross-border nature of many NPOs and terrorist networks, countries must be able to respond to international requests for information about NPOs of concern, with clear points of contact and procedures consistent with FATF standards on international cooperation.

Resourcing and implementation

Recommendation 8 explicitly requires states to provide adequate financial, human and technical resources to the authorities responsible for oversight, monitoring and investigation of NPOs. Effective implementation depends on sustained investment in capacity: regulatory bodies need funding and staffing; FIUs and law enforcement require analytical and investigative tools; and outreach programmes demand resources to engage the sector meaningfully.

Safeguards and proportionality

The FATF stresses that measures must respect international law, including human rights, refugee and humanitarian law. Actions taken against NPOs suspected of terrorist financing should prioritise halting illicit activity but also aim to minimise collateral harm to legitimate beneficiaries and organisations. Sanctions may range from freezing accounts and removing trustees to fines, de-registration or de-licensing, and can be pursued alongside civil or criminal proceedings where appropriate.

Practical implications for practitioners and NPOs

For regulators and policymakers, Recommendation 8 means developing clear, evidence-based mapping of the NPO sector, conducting periodic risk assessments, establishing targeted oversight and ensuring investigative and international cooperation mechanisms are in place. For NPOs, the guidance underlines the value of transparent governance, robust internal controls, documented policies on fundraising and disbursement, and the preferential use of regulated financial channels. Donors and financial institutions benefit from the increased accountability and public confidence that result from proportionate, risk-based measures.

Conclusion

Recommendation 8 seeks to protect both security and the humanitarian mission of the non-profit sector. Its risk-based, proportionate framework is designed to close vulnerabilities without undermining legitimate activity. Effective implementation requires collaboration between authorities, NPOs, donors and financial institutions, backed by adequate resources and strong information-sharing and investigative capabilities. When applied thoughtfully, these standards help ensure that NPOs continue to deliver critical services while being shielded from terrorist financing abuse.


FATF Ratings Overview
Luxembourg ¦ FATF Effectiveness & Technical Compliance Ratings

Anti-money laundering and counter-terrorist financing measures

Luxembourg Mutual Evaluation Report, September 2023

This assessment was adopted by the FATF at its June 2023 Plenary meeting and summarises the anti-money laundering and counter-terrorist financing (AML/CFT) measures in place in Luxembourg as at the date of the on-site visit: 2-18 November 2022.

Table 1. Effectiveness Ratings

Note: Effectiveness ratings can be either a High- HE, Substantial- SE, Moderate- ME, or Low – LE, level of effectiveness.

IO1 Risk, policy and coordination

Money laundering and terrorist financing risks are identified, assessed and understood, policies are co-operatively developed and, where appropriate, actions co-ordinated domestically to combat money laundering and the financing of terrorism.

Substantial

IO2 International cooperation

International co-operation delivers appropriate information, financial intelligence and evidence, and facilitates action against criminals and their property.

Substantial

IO3 Supervision

Supervisors appropriately supervise, monitor and regulate financial institutions and VASPs for compliance with AML/CFT requirements, and financial institutions and VASPs adequately apply AML/CFT preventive measures, and report suspicious transactions. The actions taken by supervisors, financial institutions and VASPs are commensurate with the risks.

Moderate

IO4 Preventive measures

Supervisors appropriately supervise, monitor and regulate DNFBPs for compliance with AML/CFT requirements, and DNFBPs adequately apply AML/CFT preventive measures commensurate with the risks, and report suspicious transactions.

Moderate

IO5 Legal persons and arrangements

Legal persons and arrangements are prevented from misuse for money laundering or terrorist financing, and information on their beneficial ownership is available to competent authorities without impediments.

Substantial

IO6 Financial intelligence

Financial intelligence and all other relevant information are appropriately used by competent authorities for money laundering and terrorist financing investigations.

Substantial

IO7 ML investigation & prosecution

Money laundering offences and activities are investigated, and offenders are prosecuted and subject to effective, proportionate and dissuasive sanctions.

Moderate

IO8 Confiscation

Asset recovery processes lead to confiscation and permanent deprivation of criminal property and property of corresponding value.

Moderate

IO9 TF investigation & prosecution

Terrorist financing offences and activities are investigated and persons who finance terrorism are prosecuted and subject to effective, proportionate and dissuasive sanctions.

Substantial

IO10 TF preventive measures & financial sanctions

Terrorists, terrorist organisations and terrorist financiers are prevented from raising, moving and using funds.

Moderate

IO11 PF financial sanctions

Persons and entities involved in the proliferation of weapons of mass destruction are prevented from raising, moving and using funds, consistent with the relevant UNSCRs.

Moderate

Table 2. Technical Compliance Ratings

Note: Technical compliance ratings can be either a C – compliant, LC – largely compliant, PC – partially compliant or NC – non compliant.

R.8 Non-profit organisations

PC – partially compliant

R.10 Customer due diligence

C – compliant

R.11 Record-keeping

C – compliant

R.13 Correspondent banking

C – compliant

R.15 New technologies

LC – largely compliant

R.16 Payment transparency

C – compliant

R.19 Higher-risk countries

C – compliant

R.23 DNFBPs: Other measures

C – compliant

R.27 Powers of supervisors

C – compliant

R.32 Cash Couriers

LC – largely compliant

R.33 Statistics

LC – largely compliant

R.34 Guidance and feedback

C – compliant

R.35 Sanctions

LC – largely compliant

R.36 International instruments

LC – largely compliant

R.39 Extradition

C – compliant


The information in this article is of a general nature and is provided for informational purposes only. If you need legal advice for your individual situation, you should seek the advice of a qualified lawyer.
Did you find any mistakes? Would you like to provide feedback? If so, please contact us!
Dive deeper
  • FATF ¦ The FATF Recommendations ¦ Link
  • FATF ¦ Luxembourg’s measures to combat money laundering and terrorist financing ¦ Link
Bastian Schwind-Wagner
Bastian Schwind-Wagner Bastian is a recognized expert in anti-money laundering (AML), countering the financing of terrorism (CFT), compliance, data protection, risk management, and whistleblowing. He has worked for fund management companies for more than 24 years, where he has held senior positions in these areas.