D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Crown Dependency with a strong technical AML/CFT statutory framework (IOMFSA supervision of financial institutions and DNFBPs, Companies (Beneficial Ownership) Act 2012, mirrored UK sanctions regimes via Orders in Council) but persistent effectiveness gaps in TCSP-group supervision, foreign-predicate ML prosecutions, and confiscation policy identified by MONEYVAL.
Sanctions is not yet covered for this jurisdiction in this report.
The Isle of Man sits outside the European Union's AML Package direct perimeter: the AML Regulation (Reg (EU) 2024/1624, the AMLR), the sixth AML Directive (6AMLD), and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority do not bind the Island as an autonomous Crown Dependency outside the EU/EEA. The directly relevant development for the Isle of Man this cycle is domestic: the Central Registry opened a consultation on a Companies Miscellaneous Amendment Bill intended to strengthen corporate laws in line with current AML/CFT standards, including placing the Registrar's powers to cooperate with, and disclose information to, foreign AML/sanctions enforcement bodies onto a statutory footing. This is an Assessed-confidence finding resting on a single Tier-3 source, and it remains at consultation stage rather than enacted.
Globally, the EU AML Package sets the structural direction for beneficial-ownership and corporate-transparency supervision, shifting from a purely national-authority model toward a hybrid regime in which AMLA exercises direct and indirect supervision over certain cross-border obliged entities, operating alongside the directly-applicable AMLR and the per-Member-State transposition of 6AMLD. This is durable structural backdrop rather than an Isle of Man-specific development, and it is included here as context against which the Island's own, separate transparency consultation should be read: the Isle of Man's proposed statutory footing for cross-border information-sharing is a parallel but independent move, not a transposition of the EU instruments.
Because the underlying development rests on a single Tier-3 source, this sub-brief is flagged for limited signal this cycle: the consultation's existence and its stated aims are reasonably clear, but its legislative timeline, the precise scope of the Registrar's proposed powers, and its interaction with existing Isle of Man company law disclosure requirements are not yet evidenced in sufficient primary-source depth to support a fuller assessment.
The Companies Miscellaneous Amendment Bill consultation is the item to track: whether it advances to a Bill introduced in the Legislative Assembly, and on what timeline relative to the MONEYVAL on-site visit expected in October 2026, will determine whether the Island can present the statutory cross-border information-sharing footing as completed reform or as work in progress at evaluation. A Tier-1 primary-source update on the consultation's outcome would materially improve confidence in this domain for the next cycle.
The Isle of Man's own risk-management architecture, rather than any external enforcement action, is the source of this cycle's enabler-jurisdiction signal. The Island's National Risk Appetite Statement, dated May 2025, restricts eGaming business carrying ownership or control exposure in East or Southeast Asia, a limit the Statement frames as a response to criminal-landscape risks including casino and eGaming exploitation. This sits alongside the Gambling Supervision Commission's first dedicated Gambling Sector Money Laundering Risk Assessment, published in February 2026, which concluded an overall Medium-High risk of money laundering in the gambling sector. Both findings are Assessed-confidence, drawn respectively from a Tier-2 secondary source and a Tier-1 primary government publication, and together they describe a jurisdiction actively identifying and constraining its own highest-risk exposure within the gambling sector rather than having that exposure identified externally.
Read as an enabler-jurisdiction signal, the pattern is one of self-correction: a Medium-High sector risk rating combined with a targeted geographic ownership restriction indicates the Isle of Man is narrowing, rather than expanding, the population of gambling-sector counterparties it is willing to service where ownership or control exposure sits in specific higher-risk geographies. This is consistent with -- though distinct from -- the licensing-side contraction of the Island's gambling operator base tracked elsewhere.
This sub-brief is flagged for limited signal this cycle because the evidentiary base rests on one Tier-2 secondary source for the National Risk Appetite Statement's own citation and one Tier-1 primary source for the risk assessment itself, without a direct Tier-1 citation of the National Risk Appetite Statement text; a primary-source citation of the Statement itself would strengthen confidence in the precise scope of the East/Southeast Asia restriction.
The Medium-High gambling-sector money-laundering rating and the East/Southeast Asia ownership-risk restriction are likely to remain the standing reference points for enabler-jurisdiction assessment of the Isle of Man through the MONEYVAL evaluation window, absent a material change in either. Any update to the National Risk Appetite Statement itself, or a subsequent sector risk assessment revising the Medium-High rating, would be the clearest trigger for reassessing this domain next cycle.
Conflict Finance is not yet covered for this jurisdiction in this report.
The Isle of Man's own digital-asset tax-transparency development is the direct signal for this domain this cycle: the Island implemented the OECD Crypto-Asset Reporting Framework through the Income Tax (Crypto-Asset Reporting) Regulations 2025, approved by Parliament on 11 December 2025 and effective from 1 January 2026, following an Industry Advisory Notice. This is an Assessed-confidence finding resting on a single Tier-3 source, and it layers a dedicated tax-information-exchange obligation onto the Island's existing virtual-asset architecture rather than replacing it.
That existing architecture remains the Designated Businesses (Registration and Oversight) Act 2015 registration regime for virtual-asset service providers and the Travel Rule (Transfer of Virtual Assets) Code 2024 for cross-border virtual-asset transfers, both of which continue to operate independently of the new CARF tax-reporting obligation. Globally, frameworks such as CARF and the FATF's virtual-asset standards set the structural direction for digital-asset integrity supervision, but for the Isle of Man specifically the more immediately relevant fact is the domestic implementation date of 1 January 2026, which makes the reporting obligation a present, in-force requirement for Isle of Man crypto-asset operators rather than a pending commitment.
This sub-brief is flagged for limited signal this cycle: the CARF implementation itself is corroborated only by a single Tier-3 secondary source, a professional-services tax alert, and no Tier-1 primary text of the Income Tax (Crypto-Asset Reporting) Regulations 2025 or the underlying Industry Advisory Notice was available in the evidentiary base this cycle to confirm reporting scope, thresholds, or penalty provisions in more detail.
A Tier-1 primary-source citation of the Income Tax (Crypto-Asset Reporting) Regulations 2025 or the Treasury's Industry Advisory Notice would materially improve confidence in this domain for the next cycle. Absent that, the CARF implementation date of 1 January 2026 stands as the operative fact against which Isle of Man crypto-asset operators' reporting compliance should be assessed through the remainder of 2026.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
The Isle of Man's AML/CTF regime is under direct, near-term scrutiny: the Island's sixth-round MONEYVAL mutual evaluation is scheduled with an on-site component expected in October 2026. This is a high-confidence, well-corroborated finding, drawn from two independent Tier-1 sources, and it is the single most consequential financial-integrity fact for the Isle of Man this cycle. The Island's track record entering this evaluation is strong: at the fifth-round evaluation in 2016, the Isle of Man Financial Services Authority was positively marked on thirty-nine of the forty FATF Recommendations, a record that sets a high bar for the Authority to defend rather than rebuild at the sixth round.
That fifth-round baseline matters for how the sixth-round evaluation is likely to be read externally: a jurisdiction moving into a MONEYVAL evaluation from a position of near-complete compliance faces a different set of risks than one starting from a weak baseline -- principally the risk of erosion on Recommendations previously marked compliant, and the risk that newer typologies, such as crypto-asset activity and gambling-sector exposure, that did not feature prominently in 2016 are weighted more heavily in 2026's evaluation methodology.
Structurally, the Isle of Man sits outside the European Union and European Economic Area as an autonomous Crown Dependency, and is therefore assessed against the FATF Forty Recommendations directly rather than through the EU's AML Directive transposition mechanism. This is a durable jurisdictional fact, not a cyclical one: it means the AMLR, 6AMLD, and AMLA architecture that reshapes EU and EEA member states' supervisory perimeters does not bind the Isle of Man, and the Island's own legislative programme is calibrated instead to FATF recommendations and MONEYVAL's evaluation methodology.
The Island's designated-business AML perimeter was itself updated in the period leading into this cycle: Schedule 1 of the Designated Businesses (Registration and Oversight) Act 2015 was substituted by the Designated Businesses (Amendment) Order 2024, issued alongside the Travel Rule (Transfer of Virtual Assets) Code 2024. Both instruments extend the designated-business registration perimeter and the virtual-asset transfer conduct regime respectively, and both now sit within the body of legislation MONEYVAL evaluators will examine.
The Authority's own July 2026 bulletin adds texture to the picture, without yet constituting a new enforceable rule: it sets out next steps in the legislative reform programme, explains support measures intended to enhance MONEYVAL readiness, and outlines cross-agency work to raise awareness of sanctions risk and reporting. It also flags a plan to develop a new Authorised Push Payment fraud framework, an Assessed-confidence, single-source item that is forward-looking rather than enacted. None of these July 2026 items individually rival the MONEYVAL evaluation date as the cycle's lead signal, but together they describe an Authority actively building its case for the on-site visit across multiple fronts at once -- legislative, supervisory, and cross-agency.
The practical AML/CTF burden implied by this posture is one of sustained institutional attention rather than a single new statutory obligation this cycle: obliged entities operating under Isle of Man designated-business registration should expect continued regulatory engagement and readiness-testing activity through the MONEYVAL evaluation window, building on an already-substituted Schedule 1 and an already-effective Travel Rule Code.
The defining date on the horizon is the MONEYVAL on-site visit expected in October 2026; every other AML/CTF development this cycle, including the July 2026 Authority bulletin's forward-looking items, should be read as part of the Island's preparation for that visit rather than as independent developments. Given the Island's strong fifth-round track record, the central open question for the sixth round is less whether the underlying framework is sound and more whether the legislative reform programme -- including instruments still at consultation or planning stage -- advances far enough before the on-site visit to be credited as completed reform rather than work in progress. Whether the Financial Services (Miscellaneous Provisions) Bill and the Authorised Push Payment fraud framework move from bulletin-stage commitments to enacted or published instruments before October 2026 will be the clearest test of that readiness.
The Isle of Man's on-site MONEYVAL evaluation, expected October 2026, and the first sector-specific gambling ML risk assessment rating overall risk Medium-High, together raise the near-term bar for reportable-activity vigilance and enhanced due diligence in higher-risk gambling-sector relationships.
The Designated Businesses Act's Schedule 1 substitution and the Companies Miscellaneous Amendment Bill consultation both extend the obliged-entity and corporate-transparency perimeter the compliance function must map against, though the latter remains at consultation stage only.
The Companies Miscellaneous Amendment Bill would place the Registrar's cross-border cooperation and disclosure powers on a statutory footing; this is not yet enacted, but its progress is relevant to how information-sharing exposure for corporate structures may change.
A thirty-nine-of-forty FATF Recommendations track record from the fifth-round evaluation sets a high defensive bar for the sixth round, while the Medium-High gambling-sector ML rating is a reputational data point the Board should expect to see referenced in evaluation commentary.
The Income Tax (Crypto-Asset Reporting) Regulations 2025 create a distinct tax-information-exchange obligation for crypto-asset operators, layered on top of existing VASP and Travel Rule architecture rather than replacing it, with implications for reporting-system design.
The National Risk Appetite Statement's East/Southeast Asia ownership restriction and the Medium-High gambling-sector ML rating together describe a self-identified concentration risk that risk functions should track against the MONEYVAL evaluation timeline.
Operations teams administering designated-business registration and Travel Rule compliance should note the Schedule 1 substitution and Travel Rule Code 2024 as the current operative instruments underpinning day-to-day registration and transfer-screening workflows.
Internal audit scoping for AML/CFT and corporate-transparency control testing should reference both the historical thirty-nine-of-forty FATF Recommendations record and the Companies Miscellaneous Amendment Bill consultation as the current evidentiary baseline pending MONEYVAL.
MONEYVAL sixth-round preparation and a Medium-High gambling-sector ML risk rating define this cycle's AML exposure.
Legislative reform activity (Designated Businesses regime, Companies Bill consultation) is advancing ahead of MONEYVAL.
A proposed statutory footing for cross-border AML/sanctions information-sharing is under consultation.
The Island enters its MONEYVAL evaluation from a strong prior track record but with an elevated gambling-sector risk rating on record.
Crypto-asset tax reporting under CARF became a live obligation from 1 January 2026.
Enabler-jurisdiction exposure in the gambling sector has been self-flagged as Medium-High, alongside a geographic ownership restriction.
The designated-business registration perimeter (Schedule 1) was substituted ahead of this cycle and remains the operative registration basis.
The Island's strong fifth-round FATF track record and the ongoing corporate-transparency consultation are both auditable reference points.
Illustrative only: as the AMLA Regulation (Reg (EU) 2024/1620) transition moves EU/EEA supervision of certain cross-border obliged entities from purely national authorities toward direct and indirect AMLA oversight, alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-Member-State 6AMLD transposition, illicit-finance actors may probe the seams between newly harmonised EU-level supervision and jurisdictions, such as non-EEA Crown Dependencies, that sit structurally outside that perimeter. This is an illustrative structural sketch of a possible evasion-pathway shape, not an observed development in the Isle of Man or elsewhere this cycle.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No material change identified this cycle; sanctions updates covered ISIL/Al-Qaida and Afghanistan, not Russia-specific evasion architecture. |
| T2 · EU AML Package / AMLA | no_change | IM is outside the EU/EEA and not subject to AMLR/6AMLD/AMLA; no material development this cycle. |
| T3 · FATF Grey List | watch | IM is not on the FATF grey list; material procedural development this cycle is readiness for the 6th-round MONEYVAL mutual evaluation (onsite 28 Sept 2026), which will determine ongoing standing. |
| T4 · Beneficial-Ownership Register Status | no_change | No material BO-register development identified for IM this cycle. |
| T5 · Crypto & Digital-Asset Integrity | watch | Isle of Man Income Tax (Crypto-Asset Reporting) Regulations 2025 (implementing OECD CARF) took effect 1 January 2026, with first RCASP reporting deadline 30 June 2027. |
| T6 · Sanctions Regime Divergence | no_change | IM automatically implements UN and UK sanctions designations; no divergence signal identified this cycle. |