14 November 2025
FATF ¦ R.8 Non-Profit Organisations
Recommendation 8: Protecting Non-Profit Organisations from Terrorist Financing Abuse
Recommendation 8 of the FATF Standards focuses on preventing the misuse of non-profit organisations (NPOs) for terrorist financing. Rather than defining every organisation that operates on a not-for-profit basis, the FATF uses a functional definition: NPOs are legal persons, arrangements or organisations that primarily raise or disburse funds for charitable, religious, cultural, educational, social, fraternal or similar “good works”. The purpose of Recommendation 8 is to make sure these entities are not exploited to raise or move funds, provide logistical support, recruit for terrorist causes, or mask diversion of legitimate funds to terrorist ends, while preserving their ability to carry out legitimate humanitarian and social missions.
Core principles and balanced approach
The interpretive note lays out several core principles that should guide national responses. Measures must be focused, proportionate and risk-based: they should address identified threats without imposing blanket rules that would hamper legitimate activity. Flexibility is important so responses can evolve as threats change. The FATF emphasises that protecting NPOs is not simply a law-enforcement task; it is essential to maintain public trust, donor confidence and the integrity of the sector. States should aim to prevent and, when appropriate, prosecute abuse, but must do so in ways that respect the rule of law and minimise harm to innocent beneficiaries.
Risk identification and tailored measures
Recommendation 8 requires countries to identify which organisations fall within the FATF’s NPO definition and to conduct a risk assessment of those entities to understand how terrorist financing risks manifest in that jurisdiction. Risk assessments should use relevant, reliable information and may be done in different formats; they should also be periodically reviewed. Where risks are low, outreach and awareness-raising may be sufficient; where risks are higher, targeted measures are required. Crucially, NPOs are not to be treated as typical reporting entities under anti-money laundering/customer due diligence frameworks, and measures that go beyond the FATF definition or are disproportionate to assessed risks are discouraged.
Operational pillars for an effective national response
The interpretive note describes four complementary elements that form an effective approach to protecting NPOs:
Sustained outreach and capacity building
States should promote accountability, integrity and public confidence in NPO governance. Outreach and education for NPOs and donors should explain the vulnerabilities to terrorist financing and practical safeguards. Authorities should work with the sector to develop best practices and encourage the use of regulated financial and payment channels where feasible, while recognising constraints in certain jurisdictions.
Focused, proportionate oversight and monitoring
Oversight should be risk-based, avoiding one-size-fits-all regulation. Authorities must be able to demonstrate that measures are targeted and proportionate, and where internal controls, self-regulation or existing legal requirements already mitigate risk, additional burdens may be unnecessary. Appropriate authorities should monitor compliance and be able to apply effective, proportionate and dissuasive sanctions when violations occur.
Effective information gathering and investigation
Cooperation and information-sharing among regulators, tax authorities, financial intelligence units, law enforcement, intelligence services and accrediting bodies are essential. States should have the investigative capacity to examine NPOs suspected of exploitation or support for terrorism and to access relevant financial and programmatic information during investigations. Mechanisms should exist to ensure timely sharing of suspicions so preventative or investigative action can be taken.
International cooperation
Given the cross-border nature of many NPOs and terrorist networks, countries must be able to respond to international requests for information about NPOs of concern, with clear points of contact and procedures consistent with FATF standards on international cooperation.
Resourcing and implementation
Recommendation 8 explicitly requires states to provide adequate financial, human and technical resources to the authorities responsible for oversight, monitoring and investigation of NPOs. Effective implementation depends on sustained investment in capacity: regulatory bodies need funding and staffing; FIUs and law enforcement require analytical and investigative tools; and outreach programmes demand resources to engage the sector meaningfully.
Safeguards and proportionality
The FATF stresses that measures must respect international law, including human rights, refugee and humanitarian law. Actions taken against NPOs suspected of terrorist financing should prioritise halting illicit activity but also aim to minimise collateral harm to legitimate beneficiaries and organisations. Sanctions may range from freezing accounts and removing trustees to fines, de-registration or de-licensing, and can be pursued alongside civil or criminal proceedings where appropriate.
Practical implications for practitioners and NPOs
For regulators and policymakers, Recommendation 8 means developing clear, evidence-based mapping of the NPO sector, conducting periodic risk assessments, establishing targeted oversight and ensuring investigative and international cooperation mechanisms are in place. For NPOs, the guidance underlines the value of transparent governance, robust internal controls, documented policies on fundraising and disbursement, and the preferential use of regulated financial channels. Donors and financial institutions benefit from the increased accountability and public confidence that result from proportionate, risk-based measures.
Conclusion
Recommendation 8 seeks to protect both security and the humanitarian mission of the non-profit sector. Its risk-based, proportionate framework is designed to close vulnerabilities without undermining legitimate activity. Effective implementation requires collaboration between authorities, NPOs, donors and financial institutions, backed by adequate resources and strong information-sharing and investigative capabilities. When applied thoughtfully, these standards help ensure that NPOs continue to deliver critical services while being shielded from terrorist financing abuse.
FATF Ratings Overview
Luxembourg ¦ FATF Effectiveness & Technical Compliance Ratings
Anti-money laundering and counter-terrorist financing measures
Luxembourg Mutual Evaluation Report, September 2023
This assessment was adopted by the FATF at its June 2023 Plenary meeting and summarises the anti-money laundering and counter-terrorist financing (AML/CFT) measures in place in Luxembourg as at the date of the on-site visit: 2-18 November 2022.
Table 1. Effectiveness Ratings
Note: Effectiveness ratings can be either a High- HE, Substantial- SE, Moderate- ME, or Low – LE, level of effectiveness.
IO1 Risk, policy and coordination
Money laundering and terrorist financing risks are identified, assessed and understood, policies are co-operatively developed and, where appropriate, actions co-ordinated domestically to combat money laundering and the financing of terrorism.
Substantial
IO2 International cooperation
International co-operation delivers appropriate information, financial intelligence and evidence, and facilitates action against criminals and their property.
Substantial
IO3 Supervision
Supervisors appropriately supervise, monitor and regulate financial institutions and VASPs for compliance with AML/CFT requirements, and financial institutions and VASPs adequately apply AML/CFT preventive measures, and report suspicious transactions. The actions taken by supervisors, financial institutions and VASPs are commensurate with the risks.
Moderate
IO4 Preventive measures
Supervisors appropriately supervise, monitor and regulate DNFBPs for compliance with AML/CFT requirements, and DNFBPs adequately apply AML/CFT preventive measures commensurate with the risks, and report suspicious transactions.
Moderate
IO5 Legal persons and arrangements
Legal persons and arrangements are prevented from misuse for money laundering or terrorist financing, and information on their beneficial ownership is available to competent authorities without impediments.
Substantial
IO6 Financial intelligence
Financial intelligence and all other relevant information are appropriately used by competent authorities for money laundering and terrorist financing investigations.
Substantial
IO7 ML investigation & prosecution
Money laundering offences and activities are investigated, and offenders are prosecuted and subject to effective, proportionate and dissuasive sanctions.
Moderate
IO8 Confiscation
Asset recovery processes lead to confiscation and permanent deprivation of criminal property and property of corresponding value.
Moderate
IO9 TF investigation & prosecution
Terrorist financing offences and activities are investigated and persons who finance terrorism are prosecuted and subject to effective, proportionate and dissuasive sanctions.
Substantial
IO10 TF preventive measures & financial sanctions
Terrorists, terrorist organisations and terrorist financiers are prevented from raising, moving and using funds.
Moderate
IO11 PF financial sanctions
Persons and entities involved in the proliferation of weapons of mass destruction are prevented from raising, moving and using funds, consistent with the relevant UNSCRs.
Moderate
Table 2. Technical Compliance Ratings
Note: Technical compliance ratings can be either a C – compliant, LC – largely compliant, PC – partially compliant or NC – non compliant.
R.1 Assessing Risks and applying a Risk-Based Approach
C – compliant
R.2 National Co-operation and Co-ordination
C – compliant
R.3 Money laundering offence
C – compliant
R.4 Confiscation and provisional measures
LC – largely compliant
R.5 Terrorist financing offence
C – compliant
R.6 Targeted financial sanctions related to terrorism and terrorist financing
LC – largely compliant
R.7 Targeted financial sanctions related to proliferation
LC – largely compliant
R.8 Non-profit organisations
PC – partially compliant
R.9 Financial institution secrecy laws
C – compliant
R.10 Customer due diligence
C – compliant
R.11 Record-keeping
C – compliant
R.12 Politically exposed persons
C – compliant
R.13 Correspondent banking
C – compliant
R.14 Money or value transfer services (MVTS)
C – compliant
R.15 New technologies
LC – largely compliant
R.16 Payment transparency
C – compliant
R.17 Reliance on third parties
C – compliant
R.19 Higher-risk countries
C – compliant
R.20 Reporting of suspicious transactions
C – compliant
R.21 Tipping-off and confidentiality
C – compliant
R.22 DNFBPs: Customer due diligence
C – compliant
R.23 DNFBPs: Other measures
C – compliant
R.24 Transparency and beneficial ownership of legal persons
LC – largely compliant
R.27 Powers of supervisors
C – compliant
R.28 Regulation and supervision of DNFBPs
C – compliant
R.29 Financial intelligence units
C – compliant
R.30 Responsibilities of law enforcement and investigative authorities
LC – largely compliant
R.32 Cash Couriers
LC – largely compliant
R.33 Statistics
LC – largely compliant
R.34 Guidance and feedback
C – compliant
R.35 Sanctions
LC – largely compliant
R.36 International instruments
LC – largely compliant
R.37 Mutual legal assistance
C – compliant
R.38 Mutual legal assistance: freezing and confiscation
C – compliant
R.39 Extradition
C – compliant
R.40 Other forms of international co-operation
LC – largely compliant