Africa AFR

This cycle baseline sanctions architecture assessment for the African bloc opens with a structural correction rather than a new designation. The continent cannot be assigned a single FATF status: as of the 19 June 2026 Plenary, six African states remain under increased monitoring, namely Angola, Cameroon, Cote d Ivoire, the Democratic Republic of Congo, Kenya and South Sudan, while eight jurisdictions exited within an eighteen month window, most recently Algeria and Namibia in June 2026, following the October 2025 delisting of Burkina Faso, Mozambique, Nigeria and South Africa and the June 2025 delisting of Mali and Tanzania. This delisting wave represents genuine technical compliance improvement across a majority of assessed action plans. Held against it, architecture over incident analysis requires attention to a distinct and worsening evasion architecture operating independently of grey list status: Wagner Group and Africa Corps personnel continue trading security services to juntas in Mali, the Central African Republic and Sudan in exchange for gold and mining concessions, structured through opaque front companies, generating hard currency revenue that funds Russian operations while evading OFAC, EU and OFSI designations. The exit of Mali from FATF monitoring illustrates the gap directly: technical compliance delisting and entrenched foreign paramilitary financing architecture are proceeding on wholly independent tracks, and state dependency on the Wagner security guarantees forecloses meaningful domestic enforcement leverage against the underlying network.

The listing mechanics of the European Union compound this divergence. Delegated Regulation (EU) 2026/83, effective 4 December 2025, removed Burkina Faso, Mali, Mozambique, Nigeria, South Africa and Tanzania from the EU high risk third country list while adding Bolivia and the British Virgin Islands, a delisting action lagging the underlying FATF plenary outcomes by one to two quarters, illustrating a broader regime divergence pattern between the FATF and EU listing tracks. The June 2025 EU update similarly added Algeria, Angola, Cote d Ivoire, Kenya, Laos, Lebanon, Monaco, Namibia, Nepal and Venezuela while removing Barbados, Gibraltar, Jamaica, Panama, Philippines, Senegal, Uganda and the United Arab Emirates. The EU listing for Kenya, notably, has both preceded and outlasted its continued FATF grey list status through June 2026, a clear instance of the two regimes independent designation logic producing materially different jurisdictional treatment for the same country at the same time.

A second, geographically distinct sanctions evasion architecture operates in Southern Africa. Gold trading entities operating inside the Eswatini special economic zone function as a low scrutiny conversion point, moving regional gold, smuggled from Zimbabwe and elsewhere, onward to Dubai gold markets and thereby providing the sanctioned Zimbabwe regime with continued hard currency access. This is not an unsupervised gap in the conventional sense: the Eswatini Financial Intelligence Unit had already flagged commercially inexplicable large transactions connected to the special economic zone gold trade, a supervisory flag rather than a concluded enforcement action. The distinction between supervisory awareness and enforcement follow through is itself a data point on enforcement capacity versus political choice in a small, trade dependent jurisdiction functioning as an enabler node within a larger evasion network.

Designation activity continued on the Sudan track in parallel: OFAC designated Gebreil Ibrahim Mohamed and the Al Baraa Bin Malik Brigade under the Sudan sanctions programme on 12 September 2025, part of a continuing escalation of Sudan related designations amid ongoing civil war financing concerns. Taken together, the African sanctions architecture picture this cycle is one of measurable technical compliance progress at the multilateral listing level, running in parallel with, rather than resolving, at least two entrenched regional evasion architectures that survive changes in formal grey list status.

Outlook

The next scheduled review point for the six jurisdictions still under FATF increased monitoring is the October 2026 Plenary, with Cote d Ivoire and Cameroon assessed as having substantially completed their action plans pending on site verification. The incoming UK FATF Presidency, running July 2026 to June 2028, elevates fraud and scam compound risk as a strategic priority with cross relevance to the sanctions architecture picture insofar as designation and fraud typology work increasingly intersect. At the EU level, as the AML Regulation becomes directly applicable and the Anti Money Laundering Authority assumes supervisory functions from 2027, the legal basis for the EU high risk third country list is expected to migrate away from the current delegated act mechanism, with assessed but uncertain implications for how African jurisdictions will be treated under enhanced due diligence once the new framework applies. The persistence of the Wagner and Africa Corps architecture in Mali, the Central African Republic and Sudan, insulated by junta security dependency, is assessed as unlikely to be materially affected by further FATF delisting activity absent a change in the underlying security guarantee relationship. A bloc wide FATF characterisation for Africa remains analytically imprecise and per state divergence should anchor severity judgements going forward.

Africa sits outside the direct supervisory perimeter of the European Union AML Package; the bloc is not an EEA member state and the obligations of the package do not apply here directly. The directly relevant beneficial ownership signal for African jurisdictions this cycle is domestic and regional: verifiable beneficial ownership register effectiveness data concentrates almost exclusively on Nigeria and South Africa, leaving most GIABA, GABAC and ESAAMLG member states beneficial ownership regimes unassessed at this resolution, a data gap this assessment holds at Possible confidence pending country specific FATF Mutual Evaluation Reports. Even within the two jurisdictions where data does exist, FATF own delisting statements for Nigeria, Mozambique and South Africa continued to cite deficiencies in timely access to accurate beneficial ownership information notwithstanding overall completion of their action plans, meaning beneficial ownership transparency gaps are surfacing as a persistent residual finding even in states judged to have substantively completed FATF mandated reform.

This gap is not merely a reporting artefact. Without country specific Mutual Evaluation Report data for the majority of jurisdictions across the continent, bloc level statements about beneficial ownership register interconnection or effectiveness should be treated as provisional, and downstream users applying enhanced due diligence to African counterparties should anchor their assessment at the individual jurisdiction level rather than inferring continental uniformity from the Nigeria and South Africa data points that currently dominate the evidence base.

The legal profession AML and CFT exposure of Nigeria illustrates a related corporate transparency gap involving a professional gatekeeper category rather than a registry mechanism. Legal practitioners remain outside statutory obligations administered by the Nigerian Special Control Unit against Money Laundering following a 2014 High Court ruling, upheld in the 2023 Abu Arome versus Central Bank of Nigeria decision. This gap is narrower than a prior baseline framing suggested, however: the Nigerian Bar Association 2023 Rules of Professional Conduct introduced an internally administered AML framework covering legal practitioners outside the statutory SCUML regime, narrowing but not closing the supervisory gap, and confidence on the residual size of the gap is accordingly held at Assessed rather than High pending evaluation of the practical effectiveness of the NBA framework.

Globally, the EU AML Package sets the structural direction against which beneficial ownership and corporate transparency reform in enabler and higher risk jurisdictions is increasingly measured, even where, as in Africa, the obligations of the package do not apply directly. The package is properly understood as three distinct instruments rather than a single measure: the AML Regulation, Regulation (EU) 2024/1624, which is directly applicable across EU member states without national transposition; the sixth AML Directive, which each member state transposes into domestic law on its own timeline; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti Money Laundering Authority as a new EU level supervisor. The direct and indirect supervisory perimeter of AMLA is expected to shift EU AML supervision from a purely national authority model toward a hybrid EU level regime as it reaches full operating capacity toward the end of this decade, and the legal basis for the EU high risk third country list, the mechanism through which African jurisdictions cycle on and off enhanced due diligence treatment by EU supervised entities, is itself expected to migrate from the current delegated act mechanism to the AMLR and AMLA framework as that transition completes. For African jurisdictions, this EU level architecture is durable contextual backdrop rather than a directly applicable regime, and this cycle African beneficial ownership signal should be read primarily through the national experience of Nigeria, Mozambique and South Africa rather than through the EU framework.

This asymmetry also means that any future publication of Mutual Evaluation Report findings for GABAC member states such as Cameroon, the Central African Republic or Chad, or for ESAAMLG member states beyond South Africa, would materially change the confidence level attached to continental beneficial ownership claims, and this assessment will revisit its Possible confidence rating as soon as that evidence becomes available.

Outlook

The residual beneficial ownership access deficiencies cited in the delisting statements for Nigeria, Mozambique and South Africa are likely to remain the most concrete near term beneficial ownership transparency signal for the bloc, given the absence of comparable published data for other GIABA, GABAC and ESAAMLG member states. The practical effectiveness of the 2023 self regulatory framework of the Nigerian Bar Association has not yet been evaluated and represents a specific near term evidence gap this assessment flags for future cycles. At the EU level, the AMLR, sixth AML Directive and AMLA transition remains the structural development to track for its eventual effect on how African jurisdictions are treated under enhanced due diligence, though the precise migration timeline for the high risk third country methodology remains provisional and is held at Assessed confidence.

Two enabler jurisdiction dynamics stand out this cycle, one African and one adjacent to Africa within its own conflict finance chain. The Eswatini special economic zone functions structurally as an enabler jurisdiction for a Southern African gold based sanctions evasion network: gold trading entities operating inside the zone provide a low scrutiny conversion point through which regional gold is moved onward to Dubai gold markets, giving the sanctioned Zimbabwe regime continued access to hard currency. The flagging by the Eswatini Financial Intelligence Unit of commercially inexplicable large transactions connected to the special economic zone gold trade demonstrates that domestic supervisory capacity exists and has been exercised at the flagging stage; the analytically significant fact is that this flag has not yet translated into a concluded enforcement outcome, a pattern this assessment reads as illustrating the enabler jurisdiction filter distinction between enforcement capacity and enforcement choice in a small, trade dependent jurisdiction whose special economic zone model was designed to attract exactly the kind of low friction commercial activity that the gold trade has exploited.

A second enabler jurisdiction dynamic operates outside Africa but is structurally central to an African conflict finance chain: reported resistance by Luxembourg to EU listing action against Traxys, its own national commodities trader, despite Global Witness evidence of conflict coltan purchases from the Democratic Republic of Congo. This illustrates that enabler jurisdiction political choice constraints operate even inside the sanctions architecture of the EU itself, where the commercial interest of a member state can reportedly limit collective EU enforcement action against a firm implicated in a documented conflict mineral laundering route. This finding is a single reported account rather than an independently substantiated enforcement outcome this cycle, and is held accordingly at lower evidentiary weight than the Eswatini and Wagner findings, but it raises a legitimate state capture adjacent question about whether EU member states apply the sanctions and high risk architecture of the bloc consistently when a domestic commercial interest is implicated.

On the regional capacity building side, the GIABA project on trade based financial crimes, flagged at the November 2025 FATF GIABA Joint Experts Meeting, is underway and expected to shape regional typology guidance for West African DNFBP and trade finance supervision by around November 2026. This represents the constructive counterpart to the enabler jurisdiction findings above: regional capacity building is proceeding, but its completion timeline sits well behind the active exploitation of enabler gaps documented in Eswatini and, reportedly, Luxembourg this cycle.

The legal profession AML exemption gap in Nigeria also bears an enabler jurisdiction reading: legal practitioners function as a professional facilitator category rated medium high risk in the National Risk Assessment of Nigeria, remaining outside statutory AML and CFT obligations following the 2014 court ruling upheld in 2023, notwithstanding the 2023 self regulatory Rules of Professional Conduct of the Nigerian Bar Association, which narrows but does not close the facilitator oversight gap for this specific professional category.

Read together, these enabler jurisdiction findings span a spectrum from a small trade dependent state with limited enforcement capacity, Eswatini, to a G7 adjacent EU member state with the enforcement capacity but, reportedly, insufficient political will, Luxembourg, illustrating that the capacity versus choice distinction at the core of the enabler jurisdiction filter applies across very different jurisdiction profiles and cannot be inferred from the overall institutional strength of a jurisdiction alone.

Outlook

The GIABA trade based financial crimes typology project, expected to complete around November 2026, is the principal near term development to track for its effect on regional DNFBP and trade finance supervisory expectations across West Africa. Whether the reported resistance of Luxembourg to EU listing action against Traxys develops into an independently substantiated finding, or resolves without further EU action, will be a meaningful test of whether intra EU political constraints can durably shield an implicated national trader from the sanctions architecture of the bloc itself. The practical effectiveness of the self regulatory framework of the Nigerian Bar Association for legal practitioners remains unevaluated and is a specific gap this assessment will revisit as evidence becomes available.

The Democratic Republic of Congo remains the most active conflict finance node in the bloc this cycle, anchored by a well documented three stage laundering architecture. The source is coltan mined in the Rubaya area, controlled by M23 since early 2024 through control of a major transport route and direct control of area mines. The channel runs through Rwandan exporters and refiners, including the Gasabo Gold Refinery, which launder the ore before it is sold onward. The deployment point is the international tantalum supply chain, reached via traders including Luxembourg based Traxys, meaning conflict mined coltan is entering global electronics adjacent supply chains despite an active EU Rwanda critical raw materials partnership explicitly intended to secure clean mineral sourcing. This is a direct illustration of the conflict finance filter source, channel, deployment logic, and demonstrates that a bilateral raw materials partnership does not, on its own, prevent conflict mineral laundering through the export and refining infrastructure of the partner jurisdiction itself.

Enforcement has followed the financing architecture with some specificity. OFAC sanctioned former Rwandan army chief James Kabarebe in February 2025 for orchestrating Rwanda Defence Force support to M23 and managing conflict mineral revenue generation, directly targeting a senior figure in the financing chain rather than only downstream traders. The EU Council listed nine further individuals and one entity, including M23 leadership and the Gasabo Gold Refinery itself, in March 2025, bringing EU autonomous DRC related listings to thirty two individuals and two entities and directly targeting the gold refining node in the laundering architecture. These designations corroborate one another and reflect a genuine multilateral enforcement response to the conflict finance architecture, even as the underlying laundering route, per this cycle evidence, continues operating.

A second, geographically distinct conflict finance channel runs through the Sahel and Lake Chad Basin, where JNIM, ISWAP and Boko Haram linked networks continue financing operations through informal value transfer: cash smuggling, unlicensed hawala type value transfer, cattle rustling and artisanal gold taxation across Mali, Niger, Nigeria, Burkina Faso and Chad. This channel differs structurally from the DRC coltan route in that it does not depend on formal trade or refining infrastructure and is correspondingly harder to interdict through trade documentation based due diligence; its principal vulnerability lies in cross border cash movement and unsupervised money value transfer service activity rather than in a formal supply chain.

The Wagner and Africa Corps gold for security architecture in Mali, the Central African Republic and Sudan constitutes a third conflict finance channel with a distinct structural feature: it is embedded in a state capture dynamic in which the security dependency of the host juntas on the paramilitary network forecloses meaningful domestic enforcement, converting sovereign resource wealth directly into foreign paramilitary financing revenue. This is assessed as a structurally different, and per the standing tracker, worsening conflict finance channel compared with the DRC and Sahel routes, precisely because the state itself is the counterparty facilitating the arrangement rather than merely a jurisdiction with supervisory gaps.

Taken together, these three channels, DRC coltan, Sahel hawala and cash, and Wagner gold for security, represent structurally distinct conflict finance typologies operating in parallel across the continent, and each requires a different due diligence and disruption strategy rather than a single continental conflict finance response.

Outlook

The DRC conflict coltan laundering route into EU tantalum supply chains is assessed as likely to persist absent either a change in the verification mechanisms of the EU Rwanda partnership or further enforcement action against downstream traders such as Traxys, whose home jurisdiction political dynamics are separately tracked under the enabler jurisdiction domain. The escalating conflict trajectory in eastern DRC is expected to continue generating new multilateral designations on a rolling basis, consistent with the pattern already observed across OFAC, EU Council and UK Sudan and DRC related tracks. Sahel jihadist financing via hawala and cash is assessed as structurally durable given weak cross border currency controls and thin GABAC enforcement and typology data relative to GIABA coverage, a coverage gap this assessment flags explicitly rather than inferring improvement. The Wagner and Africa Corps architecture is assessed as unlikely to be materially disrupted absent a shift in the underlying junta security dependency relationship.

Nigeria anchors this cycle continental crypto integrity picture, and its trajectory is bifurcating in a way that is directly relevant to how the rest of the continent regulatory build out should be read. On the regulatory architecture side, the Nigerian SEC is operationalising virtual asset service provider licensing, custody and disclosure standards under the 2025 Investments and Securities Act, a structural shift from the prior bank level restriction posture of the Central Bank of Nigeria toward a securities regulator led licensing model. This is a genuine architecture over incident development: it represents a change in the supervisory framework itself, not a single enforcement episode, and positions Nigeria as a bellwether for whether formal VASP licensing regimes can be built out elsewhere on the continent.

Set against that build out, the scale of unresolved crypto enabled fraud exposure in Nigeria remains substantial. The CBEX Ponzi scheme collected approximately USD 250 million in victim funds, part of a wider crypto enabled Ponzi and cybercrime ecosystem operating largely through peer to peer channels that sit outside formal exchange infrastructure and are correspondingly harder for a licensing based regime to reach. The Nigerian EFCC has separately charged 53 individuals with cybercrime, cyber terrorism, impersonation and identity theft following a December 2024 raid, seeking forfeiture of approximately USD 222,729 in seized digital assets, a case still proceeding through federal courts with defendants having pleaded not guilty as of reporting, meaning evidentiary certainty on the ultimate outcome of the prosecution is lower than on the underlying facts of the scheme itself. Read together, the SEC licensing pivot and the unresolved retail fraud exposure of Nigeria illustrate a structural lag: formal licensing infrastructure targets registered VASPs, while the CBEX and related Ponzi schemes have largely operated through peer to peer and informal channels that licensing alone may not reach.

Outside Nigeria and South Africa, the continental picture is one of a widening enforcement adoption gap rather than a comparable regulatory build out. Formal VASP registration and supervisory regimes are largely absent continent wide despite high peer to peer crypto adoption and growing cross border stablecoin usage, meaning a supervisory vacuum exists in precisely the high adoption markets where laundering and remittance evasion infrastructure can scale fastest. This gap is assessed as a structural feature of the crypto integrity posture of the continent rather than a temporary lag pending in progress reform, given the absence of documented VASP supervision development for the large majority of African jurisdictions this cycle.

Globally, the direction of travel in digital asset regulation, reflected in instruments such as the Markets in Crypto Assets Regulation of the EU and the FATF virtual asset standards, sets a structural backdrop against which the SEC led pivot in Nigeria can be benchmarked, but these instruments do not apply directly to African VASPs and are not this cycle operative signal for the continent. The operative signal remains the licensing build out in Nigeria, set against its own unresolved fraud exposure, and the near total absence of comparable regulatory infrastructure elsewhere on the continent.

This asymmetry carries a direct compliance operations implication: obliged entities transacting with African VASP counterparties outside Nigeria and South Africa should not infer an equivalent level of supervisory assurance from the licensing progress in Nigeria, given the near total absence of comparable regimes elsewhere on the continent; jurisdiction specific due diligence remains necessary rather than a bloc wide crypto risk assumption.

Outlook

The Nigerian SEC continues operationalising VASP licensing, custody and disclosure standards through 2026, and the incoming FATF UK Presidency prioritisation of fraud and scam compound risk from July 2026 is directly relevant to the large scale Ponzi and crypto scam ecosystem in Nigeria, potentially accelerating international attention to whether licensing infrastructure can reach peer to peer fraud vectors. Whether the licensing build out in Nigeria measurably reduces CBEX scale retail fraud exposure over the coming cycles is the single clearest test case this assessment will track for the crypto integrity trajectory of the continent. Absent comparable VASP supervision development elsewhere, the enforcement adoption gap outside Nigeria and South Africa is assessed as likely to persist and, given continuing growth in cross border stablecoin usage, may widen further.

No material RegTech, AI or ML transaction monitoring, or perpetual KYC development was identified for African jurisdictions this baseline cycle. This is an honest absence rather than an assessed finding of no risk: formal VASP and AML supervisory technology adoption remains nascent outside Nigeria and South Africa, and the underlying regulatory infrastructure that would typically generate compliance technology signal, mature VASP licensing regimes, established transaction monitoring supervisory expectations, or published RegTech procurement activity, is itself still being built out in Nigeria under the 2025 Investments and Securities Act and is largely absent elsewhere on the continent. The absence of compliance technology signal should therefore be read as a downstream consequence of the still forming supervisory technology base of the continent rather than as evidence that no compliance technology activity is occurring; this assessment simply has no documented basis to report a specific development this cycle.

Where compliance technology capacity does exist to observe, it sits closest to the transaction monitoring layer implied by other domains findings this cycle: the flagging by the Eswatini Financial Intelligence Unit of commercially inexplicable large transactions connected to the special economic zone gold trade required some transaction monitoring capability to generate, even though the flag has not yet translated into a concluded enforcement outcome. This is a thin evidentiary basis for any broader compliance technology assessment, however, and this domain is held at limited signal status this cycle pending a stronger evidence base.

Outlook

This assessment will continue to watch for documented RegTech, transaction monitoring, or perpetual KYC developments as the VASP licensing build out in Nigeria and the broader AML supervisory infrastructure of the continent mature; the current absence of signal is expected to persist until a documented technology adoption milestone is published by a national regulator or a credible tier one or tier two source.