Macau SAR CN-MO

The baseline assessment of Macau establishes a structural sanctions asymmetry as the central finding of this domain: the territory is not listed on the FATF grey list or the black list as of the 19 June 2026 plenary, and the 2019 follow-up upgrade of Recommendations 22, 23 and 32 to Largely Compliant is a Recommendation-level technical-compliance rating, not a jurisdiction-list designation (fim-2026-W28-001). This corrected footing, reached after an adversarial challenge flagged a research-stage mischaracterisation, matters because it changes how firms should treat Macau: not as a listed high-risk jurisdiction, but as a jurisdiction structurally outside three separate high-risk-third-country perimeters.

European Commission Delegated Regulations dated December 2025 added Bolivia, the British Virgin Islands and Russia to the EU high-risk third country AML/CFT list, delisting six others, and left Macau untouched despite its cash-intensive casino sector (fim-2026-W28-010). United Kingdom Amendment Regulations dated 2024 removed the static Schedule 3ZA list entirely and redefined high-risk-third-country status by direct, mechanical reference to the live FATF Increased Monitoring and Call for Action lists; because FATF does not list Macau, Macau is automatically excluded from the UK regime as well, a linkage that differs structurally from the discretionary delegated-act process of the EU (fim-2026-W28-011). A FinCEN notice dated 9 October 2025, reiterating FATF-identified high-risk and increased-monitoring jurisdictions following the October 2025 plenary, likewise did not name Macau (fim-2026-W28-012).

The architecture-over-incident reading is that this is not simple regulatory neglect but a structural feature: three separate designation mechanisms, one EU discretionary, one UK mechanical and FATF-linked, one US FATF-reiterative, converge on the same non-listing outcome for the same jurisdiction. The comparison case sharpens the point. Macau sits outside dedicated jurisdiction-specific sanctions programmes of the EU, UK and US alike, in contrast to Hong Kong, which carries a bespoke US sanctions architecture under Executive Order 13936 and the Hong Kong Autonomy Act despite a comparable one country two systems status (fim-2026-W28-019). Two Special Administrative Regions with structurally similar governance arrangements receive materially different sanctions-regime treatment, and the divergence stands without a documented Macau-specific triggering event. It is also not, on the present record, explained by evidence of superior AML/CFT performance, given that this baseline documents an active billion-dollar laundering corridor operating through Macau casino credit and successor junket arrangements, evidenced by a March 2026 indictment of ten individuals by the Taiwan Yunlin District Prosecutors Office for laundering more than New Taiwan dollars 33 billion, approximately USD 1.02 to 1.03 billion (fim-2026-W28-003, fim-2026-W28-004). Enablement, in the FIM analytical register, is itself a signal: the absence of a jurisdiction-specific sanctions or high-risk designation for a cash-intensive casino economy documented to host an active large-scale laundering corridor is as analytically significant as any designation would be.

No confirmed Russian sanctions-evasion nexus through Macau exists in the current window, and the standing tracker for that channel records only latent risk grounded in the cash-intensive casino and underground-banking capacity historically repurposed for sanctions-adjacent settlement, illustrated by the 2005 Banco Delta Asia precedent in the wider region, without a confirmed 2025 to 2026 case. This absence should be read cautiously given the sourcing-thinness caveat applying across this baseline: independent Macau-specific AML/CFT reporting is comparatively thin, and most recent English-language coverage arrives via UNODC, OCCRP and TRM Labs analysis of the broader regional casino underground-banking nexus rather than direct primary Macau Financial Intelligence Office or DICJ disclosure (fim-2026-W28-018).

The jurisdiction risk tracker records the overall risk direction for Macau as stable and its enforcement-versus-enablement balance as mixed, reflecting the coexistence of an autonomous Financial Intelligence Office with legal AML/CFT coverage extending to banks, casinos and junket promoters, alongside the registry and conviction-rate gaps recorded elsewhere in this baseline. The FATF Recommendation footprint of the jurisdiction spans Recommendations 22, 23, 24, 25 and 32, the customer due diligence, DNFBP and reporting provisions most directly implicated by casino-sector money laundering, underscoring that the sanctions-architecture question and the underlying AML-effectiveness question are analytically distinct but empirically entangled: a jurisdiction can sit outside every sanctions-specific and high-risk-third-country perimeter while still carrying the effectiveness gaps that such perimeters exist to flag.

For UK-facing firms specifically, the practical effect of the 2024 Amendment Regulations is that Schedule 3ZA, the prior static list mechanism, no longer functions as an independent basis for enhanced due diligence toward Macau; firms must instead track the FATF plenary calendar directly to know whether Macau status has changed, a screening-process implication distinct from the substantive AML-effectiveness question (fim-2026-W28-011).

Outlook

The near-term sanctions-architecture horizon for Macau is defined by continuity rather than scheduled change. No fifth-round on-site mutual evaluation under the 2022 FATF methodology has yet been scheduled by APG, and until one occurs, all three designation mechanisms will continue to treat Macau as outside their respective high-risk perimeters by default rather than by an evidenced clean bill of health (fim-2026-W28-013). Should a future mutual evaluation identify material deficiencies, the discretionary process of the EU and the FATF-linked mechanical process of the UK would respond on different timetables and through different procedural triggers, a divergence worth monitoring as a structural feature of the sanctions architecture rather than as a prediction of any specific outcome.

The baseline assessment of beneficial-ownership transparency in Macau finds a persistent structural gap rather than an outright absence of rules. No public central beneficial-ownership registry exists; Law 2/2006 requires beneficial-owner identification at a 25 percent ownership threshold at incorporation and on subsequent ownership change, overseen by the Financial Intelligence Office, but this identification obligation is not matched by public accessibility (fim-2026-W28-002). The distinction matters analytically: Macau is not a jurisdiction with no beneficial-ownership rule at all, but one where an identification obligation exists on paper without the public-registry infrastructure that would let counterparties, regulators outside Macau, or investigative journalists independently verify ultimate control.

This gap is not merely theoretical. Nominee junket-promoter corporate layering exploits it directly: junket promoters operate as licensed corporate vehicles contracted to gaming concessionaires, receiving commissions and complementary services while fronting VIP-room credit operations, and an APG mutual evaluation found gaps in the implementation and understanding of both suspicious-transaction-report obligations and beneficial-ownership-determination requirements among junket-adjacent designated non-financial businesses and professions (fim-2026-W28-009). The consequence, per the evaluation, is that organised-crime-linked individuals are able to control gaming-credit flows through corporate structures nominally compliant with the identification requirement, while ultimate beneficial control remains obscured absent a public registry against which nominal ownership can be checked.

This finding sits against a durable structural backdrop worth stating in full, because it frames how EU-based obliged entities read Macau counterparties. The EU AML Package comprises three distinct instruments: the AML Regulation, AMLR, Regulation (EU) 2024/1624, which is directly applicable across EU Member States; the sixth AML Directive, 6AMLD, transposed individually by each Member State; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and creates a hybrid supervisory perimeter in which AMLA directly supervises a defined set of high-risk cross-border obliged entities while indirect supervision extends the reach of the Authority over national supervisors more broadly, shifting the EU AML supervisory model away from a purely national architecture. Macau, as a third country, sits outside the direct-applicability perimeter of the AMLR, outside 6AMLD transposition obligations, which bind EEA Member States only, and outside AMLA direct or indirect supervision. The only touchpoint of Macau with the EU AML Package is the Article 9 high-risk-third-country list, from which it remains absent following the December 2025 Delegated Regulations update, meaning EU-obliged entities dealing with Macau counterparties apply only general third-country risk-based due diligence rather than the enhanced measures that a high-risk-third-country listing, or AMLA supervisory attention, would trigger. Read against the nominee junket-promoter layering finding, this is the structural condition under which the beneficial-ownership-opacity gap persists for EU-facing exposure: no EU mechanism currently reaches the beneficial-ownership gap in Macau directly.

The FATF Recommendation 24 and 25 revisions on multipronged beneficial-ownership-registry approaches, which call for a combination of registry, company, and alternative approaches to verifying beneficial ownership, have not yet been reflected in any Macau-specific follow-up assessment, leaving open whether the Law 2/2006 identification model of Macau would satisfy the newer multipronged standard.

The corporate customer typology most exposed under this gap includes high-net-worth individuals and corporate vehicles associated with gaming-credit intermediation, the customer segments the interpreter obligation references attach to FATF Recommendation 24 customer due diligence obligations, in a status recorded as covered at the recommendation level despite the practical accessibility gap. Cross-sector firms dealing with Macau-incorporated corporate counterparties, not solely gaming-sector firms, inherit this beneficial-ownership-verification gap whenever a Macau entity sits anywhere in a corporate ownership chain, since no independent registry exists against which such firms could conduct their own verification beyond reliance on the disclosure of the counterparty itself.

The broader sourcing-thinness caveat applying across this Macau baseline bears specifically on beneficial-ownership findings: independent Macau-specific AML/CFT reporting is comparatively thin, with most English-language coverage arriving via UNODC, OCCRP and TRM Labs analysis of the wider East and Southeast Asian casino-underground-banking nexus rather than direct primary Macau Financial Intelligence Office or DICJ disclosure, and Macau company-registry data is not independently accessible in English-language open sources (fim-2026-W28-018). This constrains any assessment of beneficial-ownership-registry effectiveness to what mutual-evaluation-cycle documentation and the identified nominee-layering scheme reveal, rather than to direct verification of current registry practice.

Outlook

The beneficial-ownership-transparency gap has no scheduled remedy on the horizon distinct from the broader mutual-evaluation timeline: no fifth-round on-site evaluation of Macau has yet been scheduled by APG, and any future evaluation under the 2022 methodology would be the mechanism most likely to test whether the identification-without-registry model, and the nominee junket-promoter layering it enables, has been addressed (fim-2026-W28-013). Independent verification of how consistently the 25 percent threshold identification obligation is enforced in practice is limited by the unavailability of Macau company-registry filing data to open-source researchers, a standing gap in the evidentiary base of this baseline that should temper confidence in any assessment of on-the-ground enforcement.

The D3 baseline for Macau documents an enabler jurisdiction functioning through architecture rather than through discretionary policy choice, though the record also carries a structural political-oversight dimension. The organising fact is a persistent laundering corridor: organised networks exploit Macau casino gaming-floor credit and successor junket and offsetting arrangements to convert illegal gambling proceeds generated outside Macau, chiefly in Taiwan and mainland China, into clean funds, with bettors accruing and settling credit through casino chip and credit lines that never require physical cross-border cash movement, evading capital and currency controls, and proceeds subsequently offset domestically through underground networks (fim-2026-W28-003). The March 2026 indictment of ten individuals by the Taiwan Yunlin District Prosecutors Office, for laundering more than New Taiwan dollars 33 billion, approximately USD 1.02 to 1.03 billion, through these credit-card loopholes is the individual data point evidencing that this corridor survived the post-2021 licensed-junket crackdown rather than being eliminated by it (fim-2026-W28-004).

Applying the four-dimension enabler-jurisdiction test, legal framework, enforcement reality, capacity versus choice, and systemic significance, produces a mixed picture rather than a simple verdict. On legal framework, Macau maintains active gaming-sector supervision: the Gaming Inspection and Coordination Bureau continues implementing the January 2023 gaming regulations and the 2022 Gaming Reform Bill, sustaining tightened licensing and oversight on concessionaires and the sharply reduced pool of remaining junket operators, though UK government risk guidance continues to flag residual gaming-sector money-laundering exposure as significant despite this sustained supervisory effort (fim-2026-W28-005). On enforcement reality, an APG mutual evaluation found a persistently low money-laundering conviction rate relative to STR and case volume, attributed to prosecutorial resource shortages, heavy evidentiary requirements for third-party laundering, and difficulty obtaining foreign-predicate-offence evidence, a capacity gap that remains unresolved and unassessed under the newer FATF methodology (fim-2026-W28-016). This is a capacity-versus-choice distinction FIM analysis treats carefully: the record documents resourcing and evidentiary constraints rather than documented deliberate policy tolerance of laundering, though the low conviction rate nonetheless undermines deterrence in a cash-intensive gaming economy, precisely the economy the 2026 indictment illustrates.

The systemic-significance dimension carries a political-governance layer this baseline treats as assessed judgment rather than established fact. Twelve opposition candidates were disqualified ahead of the September 2025 Legislative Assembly election on vetting-criteria grounds, producing an all pro-Beijing legislature (fim-2026-W28-006). The reduced institutional pluralism that resulted is assessed as a state-capture risk factor lowering the political cost of under-enforcement against politically connected gaming and junket interests, though the causal link between the disqualifications and any specific enforcement outcome is analytical inference, not independently corroborated by enforcement-outcome data, and should be read with that qualification attached (fim-2026-W28-007).

Structural checkpoints rather than near-term events define the forward trajectory of this domain. Six casino concessionaires received ten-year licences in November 2022 under the Gaming Reform Bill with diversification-investment and tightened AML-compliance conditions attached, expiring in 2032 and marking the next structural checkpoint for gaming-sector oversight (fim-2026-W28-014). Gaming revenue recovery through 2025, with July and August gross gaming revenue beating estimates, is in the interim increasing the cash-intensive transaction volumes exposed to the laundering risk this domain documents (fim-2026-W28-020). As with the rest of this baseline, Macau-specific open-source AML/CFT reporting is comparatively thin, arriving largely through UNODC, OCCRP and TRM Labs analysis of the broader regional casino-underground-banking nexus rather than direct primary Macau Financial Intelligence Office or DICJ disclosure, a standing caveat on confidence for the enabler-jurisdiction assessment (fim-2026-W28-018).

Firms conducting correspondent or custody relationships touching Macau casino-sector counterparties should read the high-net-worth and money-services-business customer typologies flagged against this corridor as the segments most exposed to the credit-settlement mechanism this baseline documents, given that the red flag indicators of the scheme center on casino chip and credit-line settlement patterns that leave no cross-border cash trail.

Outlook

The most consequential open question for the enabler-jurisdiction assessment is whether a future fifth-round APG mutual evaluation, not yet scheduled, would test the persistence of both the casino-credit laundering corridor and the low-conviction-rate capacity gap under the 2022 methodology, which places greater weight on demonstrated effectiveness than the technical-compliance framework of the 2017 report (fim-2026-W28-013). Until such an evaluation is scheduled, the 2032 concessionaire-relicensing checkpoint stands as the nearer structural moment at which the diversification-investment and AML-compliance conditions attached to the 2022 licences would be tested in practice.

This baseline cycle identifies no Macau-specific conflict-finance or extractive-industry nexus. The domain tracker records this row as quiet, with standing global D4 coverage, Russian war-economy financing, Sahel conflict-minerals flows, and Democratic Republic of Congo mining governance, not implicated by the Macau jurisdiction record established this cycle. This is a genuine absence of signal rather than an unexamined gap: the economy of Macau is casino-gaming and financial-services centered rather than extractive-industry or conflict-adjacent, and none of the enforcement actions, sanctions changes, or scheme findings collected in this baseline Macau-specific research touches armed-conflict financing or extractive-sector integrity.

One adjacent connection is worth noting without overstating it. The D5 and D3 findings of this baseline document Chinese Triad networks migrating underground-banking capacity, historically rooted in Macau and Hong Kong junket operations, into Southeast Asian scam compounds located in Cambodia and Myanmar, jurisdictions that carry fragile-governance and, in parts of Myanmar, conflict-adjacent characteristics. This connection is flagged to SCEM as a cross-monitor signal rather than developed as a D4 finding in its own right, since the classification of the underlying scheme in this baseline is professional-enablement and crypto-migration rather than conflict-finance, and no evidence collected this cycle traces Macau-linked flows to armed-group financing specifically.

Outlook

Absent new evidence, this domain is carried forward as a clean no-items row. Any future material change would most plausibly arrive through further development of the Cambodia and Myanmar scam-compound nexus already flagged to SCEM, should evidence emerge connecting that nexus to armed-conflict financing rather than to cyber-enabled fraud and underground banking alone.

The D5 baseline for Macau is the one domain this cycle carrying a worsening trajectory rather than stability, and the finding is structural: no virtual-asset service provider licensing framework exists in Macau, in contrast to the operational and expanding SFC and HKMA regimes in neighbouring Hong Kong, and the 2021 digital-currency feasibility study conducted by the Autoridade Monetaria de Macau with the Peoples Bank of China remains unresolved (fim-2026-W28-015). The absence is not a temporary gap awaiting imminent legislation; it is a durable regulatory blind spot that leaves crypto-to-fiat conversion, over-the-counter brokering and stablecoin activity touching Macau residents or visitors effectively outside dedicated AML/CFT supervision (fim-2026-W28-017).

The reason this gap rises to a material D5 finding rather than a background observation is the documented migration of the legacy laundering infrastructure of Macau into exactly the channels this gap leaves unsupervised. Chinese Triad groups, including 14K and Sun Yee On, which historically controlled Hong Kong and Macau gambling junkets and VIP rooms, are migrating that underground-banking operating model into Southeast Asian scam compounds, online casinos and USDT-based crypto settlement, using Macau and Hong Kong as the legacy training ground and node for the wider regional underground-banking ecosystem (fim-2026-W28-008). This is architecture-over-incident in its clearest form: the same networks, the same operating logic, the same underground-banking capacity that built the casino-credit laundering corridor documented under the enabler-jurisdiction findings of this baseline are now documented redeploying that capacity into the crypto and digital-asset space, a jurisdiction segment that has essentially no dedicated supervisory perimeter in Macau to intercept it.

The customer typologies most directly implicated, virtual-asset-service-provider counterparties and money-services-business-adjacent actors, sit at the interface between the legacy casino-credit channel and the emerging crypto-settlement channel, meaning firms with exposure to either sector inherit exposure to the migration this baseline documents. Because Hong Kong has built an operational VASP licensing and stablecoin regime while Macau has not, firms and counterparties operating across both Special Administrative Regions face a jurisdictional arbitrage incentive structurally similar to the sanctions-regime asymmetry documented elsewhere in this baseline; illicit-finance actors have a documented history of exploiting exactly this kind of adjacent-jurisdiction regulatory gap.

Confidence in this domain findings carries an explicit caveat. The AMCM VASP-absence and feasibility-study finding rests on a single, comparatively stale secondary source from 2021 with thin, indirect corroboration on any forward timeline, and is accordingly held at Possible rather than Assessed confidence (fim-2026-W28-015), while the triad-migration finding itself, though corroborated by both TRM Labs commercial forensic analysis and UNODC institutional reporting, is held at Assessed rather than High confidence given the inherent difficulty of independently verifying blockchain-forensics attribution specific to Macau-linked wallets or exchanges, a data gap this baseline gaps register records explicitly.

The red flag indicator this baseline associates with the migration, legacy junket-controlled VIP-room credit and offsetting arrangements migrating to USDT-based crypto settlement, is recorded as observable primarily through on-chain analysis rather than through traditional transaction-monitoring channels, a detection-method implication for firms whose monitoring architecture remains built around fiat rails. This observability profile is itself a signal: the migration this baseline documents is, in part, a migration toward channels where the absent VASP supervisory perimeter of Macau compounds an existing detection gap, since neither dedicated licensing-based oversight nor consistent on-chain monitoring capacity is confirmed to be in place.

The position of Macau in this migration is best read as a legacy training ground rather than a current operational hub, per the underlying scheme assessment, with Cambodia and Myanmar recorded as the jurisdictions where the migrated capacity is currently enabling scam-compound and DPRK-adjacent laundering typologies. This distinction matters for firms allocating compliance resources, since it suggests exposure runs through historical relationships and personnel networks originating in Macau and Hong Kong rather than through live Macau-domiciled crypto infrastructure, which does not yet exist at scale absent a licensing regime.

Outlook

Absent a VASP licensing regime, the digital-asset supervisory gap has no scheduled remedy on the current horizon, and this baseline assesses, without asserting as fact, that the gap could widen as regional triad networks continue migrating operating capacity into digital-asset channels (fim-2026-W28-017). Any future development on this front would most likely first appear as a revival of the stalled AMCM feasibility work with the Peoples Bank of China rather than as a dedicated VASP licensing initiative, though no confirmed timeline exists for either.

This baseline cycle identifies no RegTech, artificial-intelligence, or perpetual-KYC development specific to Macau. The domain tracker records D6 as quiet, and per the fixed-set carry-forward rule of this baseline, D6 is exempt from the substantive-finding floor applied to other domains, reflecting that an absence of compliance-technology signal for a single newly onboarded jurisdiction is not itself an anomaly requiring explanation.

This absence is nonetheless worth stating plainly against the backdrop of the other findings in this baseline. The beneficial-ownership gap, the digital-asset supervisory absence, and the persistently low money-laundering conviction rate documented for Macau are all findings that active-defence or compliance-technology deployment could, in principle, help address, whether through transaction-monitoring enhancements attuned to the casino chip and credit-line settlement patterns this baseline documents, or through onboarding-stage beneficial-ownership verification tools capable of partially compensating for the absence of a public registry. No evidence collected this cycle indicates that the Gaming Inspection and Coordination Bureau, the Financial Intelligence Office, or the casino concessionaires of Macau have deployed or announced any such technology-driven compliance enhancement.

The absence of a Macau-specific compliance-technology finding should not be read as evidence of technological adequacy; rather, it reflects the sourcing-thinness caveat applying across this baseline, under which direct primary disclosure from Macau regulators and concessionaires is not available in English-language open sources to confirm the presence or absence of such initiatives.

Outlook

This domain is carried forward as a clean no-items row. Any future material change would most plausibly be evidenced by a DICJ or Financial Intelligence Office announcement of a supervisory-technology initiative, or by casino-concessionaire disclosure of enhanced transaction-monitoring capability ahead of the 2032 relicensing checkpoint, neither of which has occurred in the evidence collected this cycle.