Nepal NP

Nepal has been reviewed or deferred at every FATF plenary since its listing on 21 February 2025, retained through the June 2026 plenary as a Jurisdiction Under Increased Monitoring with five of seven action-plan items still outstanding; the only area of confirmed progress is targeted-financial-sanctions technical compliance relating to terrorist and proliferation financing. This anniversary-length persistence is itself an architecture-level signal: it demonstrates that grey-list status, once assigned, tends to function as a durable classification rather than a transitional one, particularly for jurisdictions facing capacity rather than willingness constraints.

Layered onto the FATF designation is a structurally uneven international response that constitutes the more analytically significant finding this cycle. The European Union classifies Nepal as a high-risk third country through Commission Delegated Regulation (EU) 2025/1184, effective 10 June 2025 and retained through the December 2025 update, a formal delegated-act mechanism requiring an affirmative EU-level legislative step. The United Kingdom achieves the equivalent designation automatically under Money Laundering Regulation 33, a mechanism that incorporates the FATF list without a discrete UK legislative act, most recently reaffirmed in a 19 June 2026 advisory notice continuous since February 2025. The United States, by contrast, has issued only a non-binding FinCEN advisory (26 February 2025, citing 31 CFR 1010.610) that recommends but does not mandate enhanced due diligence for Nepal-linked business, and maintains no standalone codified high-risk-third-country list at all. The result is three distinct compliance obligations attaching to the same underlying jurisdiction risk: mandatory EDD under EU delegated authority, mandatory EDD under UK automatic incorporation, and discretionary EDD under US advisory guidance.

The divergence carries direct operational consequences for the correspondent-banking relationships through which Nepal-linked payment flows are typically routed. Both the EU and UK designations attach, in the structured evidence base, to correspondent-bank customer-typology exposure, meaning banks and payment companies maintaining correspondent relationships touching Nepal face mandatory enhanced due diligence in two of three major regulatory blocs and only recommended due diligence in the third. Cross-sector obliged entities more broadly, not only banks, fall within the affected-firm-type scope of both the EU and UK designations, widening the population of institutions required to apply differentiated controls depending on which regulatory perimeter governs a given relationship. For globally active institutions operating across all three jurisdictions, this is not a gap in any single regime but a structural feature of how the sanctions and high-risk-country architecture is currently built, an arbitrage surface in miniature, even absent any confirmed exploitation this cycle.

A third strand concerns terrorist-financing and sanctions-evasion vulnerability rather than confirmed evasion activity. Nepal's porous, high-volume land border with India, combined with entrenched hawala/hundi settlement infrastructure, is consistent with FATF's generic hawala typology for currency-control, tax, and sanctions evasion. Nepal's own Mutual Evaluation Report finds no material domestic terrorist-financing risk, and no confirmed incident evidence links this corridor to sanctions circumvention this cycle; the finding is carried at Possible confidence and should be read as a standing structural vulnerability rather than an active scheme, distinguishing it clearly from the higher-confidence grey-list and HRTC-divergence findings above.

Outlook

The FATF's October 2026 plenary is the next material inflection point for Nepal's sanctions-architecture posture: whether TFS technical-compliance progress and nascent hundi-sector enforcement steps are judged sufficient to advance Nepal toward eventual delisting, against a baseline where five of seven action-plan items remain outstanding. Grey-list exit before that review is assessed as unlikely. Separately, the United Kingdom's Money Laundering and Terrorist Financing (Amendment) Regulations 2026, expected to commence in the third quarter of 2026, will revise, without altering the underlying automatic-incorporation logic, how UK regulated firms apply Regulation 33 enhanced due diligence to Nepal-linked relationships. Absent a coordinated EU-UK-US convergence effort, which no source this cycle indicates is under consideration, the tripartite divergence in designation mechanics is likely to persist as a standing feature of Nepal's sanctions-architecture profile through at least the next plenary cycle.

Since Nepal is not an EU or EEA Member State, the European Union's AML Package is not the primary lens through which Nepal's beneficial-ownership exposure should be read; rather, Nepal's most directly relevant developments this cycle are domestic: a politically-transition-driven wave of prosecutions set against an unreformed corporate-registry verification gap. Following the September 2025 Gen Z protests and the March 2026 installation of a reformist government under Prime Minister Balendra Shah, Nepal's Department of Money Laundering Investigation and Commission for the Investigation of Abuse of Authority have detained or charged a five-time former Finance Minister (court-approved emergency arrest and seven-day remand extension, 20 June 2026, the most senior figure detained to date), a former Energy Minister (detained 29 March 2026), a former Parliament Speaker charged over a gold-smuggling and laundering scheme, and an alleged power broker under investigation for a $25.6 million secondary-market share-purchase scheme.

Beneath this enforcement intensity, the structural deficiency that makes such schemes possible remains unresolved: the Office of the Company Registrar's beneficial-ownership data is fully reliant on customer self-declaration with no proactive verification mechanism, a deficiency the 2023 Mutual Evaluation Report rated non-compliant or a major shortcoming under Recommendations 24 and 25, with no reported reform through the June 2026 follow-up cycle. The Mahara case illustrates the gap in practice: approximately $527,000 in gold-smuggling proceeds were layered through land purchases and bank accounts of associates and shell travel and tour companies, structures that an unverified registry cannot flag at onboarding. A parallel scheme, the Gorkha Media Network/Galaxy 4K TV savings-cooperative scandal implicating former Home Minister Rabi Lamichhane, shows the same weak-supervision dynamic operating through cooperative rather than corporate vehicles.

The credibility of the current enforcement wave is itself qualified by a demonstrated political-cycle vulnerability. The Attorney General's withdrawal of organised-crime and money-laundering charges against Lamichhane shortly before elections, now under Supreme Court show-cause review, with petitioners describing the withdrawal as unconstitutional and politically timed, shows that prosecutorial discretion over money-laundering cases in Nepal remains exposed to political timing. Read together, the 2026 wave should be assessed as genuine political-transition-driven prosecutorial momentum that nonetheless remains structurally reversible, rather than as evidence of durable institutional reform.

Globally, the EU AML Package sets the structural direction for beneficial-ownership regulation: the AML Regulation (Reg (EU) 2024/1624, the AMLR) applies directly across Member States, the sixth AML Directive (6AMLD) is transposed nationally, and the AMLA Regulation (Reg (EU) 2024/1620) establishes the Anti-Money Laundering Authority with a direct- and indirect-supervision perimeter that shifts obliged-entity oversight from purely national authorities toward a hybrid EU-level regime. Nepal sits outside this perimeter entirely; its EU nexus runs instead through the pre-AMLA Article 9 AMLD high-risk-third-country delegated-act mechanism, which the European Commission is expected to migrate into the AMLR/AMLA supervisory architecture as AMLA's direct-supervision remit builds out through 2026-2028. This is durable structural backdrop against which Nepal's own beneficial-ownership verification gap should be read, not a substitute for it: the AMLA transition affects how EU-based obliged entities treat Nepal-linked exposure, but it does not itself reform the Company Registrar.

Outlook

No legislative reform of the Company Registrar's verification mechanism has been signalled this cycle, and the overdue completion of Nepal's third National Risk Assessment update, which would be a natural vehicle for such reform, remains pending with no confirmed start date beyond a missed January 2025 target. The Supreme Court's pending show-cause ruling on the Lamichhane charge withdrawal is the most concrete near-term test of whether the current enforcement wave can withstand political-cycle pressure; its outcome will materially inform whether the 2026 prosecutions are read as durable or episodic. Institutions maintaining correspondent or direct exposure to Nepali politically-exposed persons, high-net-worth clients, or corporate structures should treat the current absence of independent beneficial-ownership verification as a standing control gap rather than a condition likely to be resolved in the near term.

Nepal's enabler-jurisdiction profile this cycle is defined by continuity rather than change: two entrenched informal-value-transfer and cash-intensive channels remain functionally unsupervised, and a newly charged corruption case extends the enabler lens to a foreign state-linked contractor. The hundi/MVTS informal value-transfer network continues to settle cross-border value between Nepal and India/Gulf-remittance corridors through non-bank trade and cash settlement outside formal money-value-transfer-service licensing. FATF's action plan requires Nepal to identify and sanction materially significant illegal providers without disrupting financial inclusion, a dual mandate that is difficult to execute given that the scale, geographic corridors, and provider count of illegal hundi operators remain unmapped by Nepali authorities, a gap this cycle's evidence base does not resolve.

A second entrenched channel is Nepal's border-casino sector, which draws foreign clientele using cash and foreign holding accounts and has been identified by prior APG assessment as the primary channel for laundering foreign proceeds through Nepal. Both the hundi network and the casino sector operate in the continued absence of risk-based supervision of designated non-financial businesses and professions: casinos, real estate agents, dealers in precious metals and stones, and legal and accounting professionals remain entirely outside active AML/CFT supervision despite having been flagged high-risk in the 2020 National Risk Assessment. This is a structural capacity deficit rather than a policy choice against supervision; the gatekeeper sectors assessed as highest-risk function, in practice, as an unmonitored parallel financial system.

The Pokhara International Airport case extends this analysis beyond domestic facilitators. Nepal's Commission for the Investigation of Abuse of Authority has filed corruption charges against 55 officials, five former ministers, and China CAMC Engineering, alleging embezzlement, inflated costs, and procurement-law breaches during construction of the Belt-and-Road-linked airport project, with some accused arrested and tried before a special court. The case is significant for enabler-jurisdiction analysis not because it demonstrates a novel scheme, but because it implicates a foreign state-linked contractor within Nepal's domestic procurement and construction ecosystem, illustrating how enabler-jurisdiction vulnerabilities extend to the professional and contracting networks that intersect with major infrastructure financing, including Belt-and-Road-linked projects.

Applying the Enabler Jurisdiction Filter's four-dimension assessment, legal framework, enforcement, capacity versus choice, and systemic significance, Nepal's profile is best characterised as capacity-constrained rather than a jurisdiction that has affirmatively chosen permissiveness. The legal framework nominally covers DNFBP supervision and MVTS licensing; what is absent is operational capacity and resourcing to activate it, a distinction with direct bearing on how counterparties should weight Nepal-linked exposure relative to jurisdictions where permissiveness reflects policy choice rather than resource constraint.

Outlook

No DNFBP supervisory commencement timeline has been established this cycle, and no enforcement statistics quantifying illegal hundi/MVTS provider scale have been published, both remain open gaps that would need to close before Nepal's enabler-jurisdiction risk can be meaningfully downgraded. The Pokhara Airport prosecution's special-court proceedings are ongoing and represent the most concrete near-term test of whether foreign-contractor-linked corruption in Nepal's infrastructure sector will be pursued to conviction rather than settled short of judicial resolution. Absent visible movement on DNFBP supervision or hundi-sector enforcement statistics, Nepal's enabler-jurisdiction status is likely to remain structurally stable, neither materially improving nor deteriorating, through the next assessment cycle.

No Nepal-specific conflict-finance or extractive-industry-integrity findings were identified in this cycle's evidence bundle. This domain is carried forward in accordance with the fixed six-domain analytical set rather than populated with findings not supported by this cycle's research: Nepal's evidence base this cycle concerns FATF grey-list dynamics, beneficial-ownership opacity, enabler-sector channels, virtual-asset policy, and compliance-technology capacity, none of which extend into confirmed armed-conflict financing or extractive-industry-integrity territory for Nepal specifically. The nearest adjacent signal, the hawala/hundi-adjacent terrorist-financing and sanctions/currency-control-evasion vulnerability at the Nepal-India border, carried under D1 and cross-referenced to SCEM for regional conflict-finance monitoring, is a structural vulnerability rather than a confirmed conflict-finance flow, and Nepal's own Mutual Evaluation Report finds no material domestic terrorist-financing risk. No extractive-industry sector (mining, timber, or other resource-trade corridor) findings specific to Nepal appear in this cycle's structured claims at all.

Outlook

This domain is flagged as limited signal for the current cycle and should be read as a placeholder for continuity rather than a substantive assessment. Any future extractive-industry or conflict-finance signal specific to Nepal, for example developments touching cross-border resource-trade corridors or documented armed-group financing routed through Nepali intermediaries, would warrant reactivation of this domain with dedicated findings rather than continued placeholder treatment. No such signal is anticipated in the near term based on this cycle's research coverage.

Nepal's digital-asset regulatory posture is defined by a blanket statutory prohibition rather than by licensing or registration architecture, which is the frame through which Nepal's D5 exposure should be read before any comparison to global instruments such as MiCA or FATF's virtual-asset standards. Nepal prohibits exchanging, transferring, producing, selling, holding, or transacting in virtual assets, with penalties including confiscation and up to five years imprisonment; the prohibition is rooted in foreign-exchange control policy rather than in a money-laundering or terrorist-financing risk assessment. Because the ban is policy-driven rather than risk-based, it has not eliminated virtual-asset activity in Nepal; illegal VASP activity continues underground and entirely outside any monitoring framework, a finding corroborated by both the 2023 Mutual Evaluation Report and the 2024 Follow-Up Report.

The structural deficiency underlying this posture is the absence of an updated risk assessment. No National Risk Assessment update covering virtual assets, VASPs, or new-technology risk has been completed since 2020, despite a missed January 2025 completion target confirmed in the June 2024 Follow-Up Report. This leaves Nepali authorities unable to calibrate either continued prohibition or any future licensing regime to actual exposure: the current policy setting was not derived from an assessment of where virtual-asset-related money-laundering or terrorist-financing risk in Nepal actually concentrates, and none of this cycle's evidence indicates that gap is close to resolution.

Set against the global backdrop, the EU's Markets in Crypto-Assets Regulation and FATF's Recommendation 15 travel-rule and VASP-licensing standards represent the direction of travel that risk-based jurisdictions are converging toward: supervised, licensed VASP activity subject to travel-rule and AML controls, rather than blanket prohibition. Nepal's approach diverges from that direction entirely, and the practical consequence is analytically significant in its own right: a prohibition that pushes activity underground removes the visibility that a licensing regime would otherwise provide, without removing the underlying demand for virtual-asset services. This is the core of the D5 finding for Nepal this cycle, enablement through absence of a monitoring framework, rather than through permissive licensing, which is the less common but analytically equivalent enabler pattern.

Outlook

Resolution of Nepal's VA/VASP policy gap depends on completion of the overdue third National Risk Assessment update, which has no confirmed start date beyond the missed January 2025 target; until that assessment exists, any shift away from blanket prohibition toward risk-based licensing is unlikely, and underground VASP activity is assessed as likely to continue growing in scale even as it remains formally illegal. Nepal Rastra Bank's virtual-asset policy is not expected to change materially before a risk assessment is completed, and no source this cycle indicates such an assessment is imminent.

Nepal's compliance-technology posture this cycle is characterised by a persistent, foundational capacity gap rather than by any active-defence or RegTech adoption signal. Multiple AML-relevant Nepali agencies, cooperatives regulators, real estate registries, revenue and tax authorities, customs and import-export bodies, and precious-metals-trade oversight, still lack electronic record-keeping, forcing manual file retrieval for any investigation touching those sectors. This is not a discrete technology gap confined to one agency; it spans the institutional map of bodies whose data the Department of Money Laundering Investigation and Nepal Rastra Bank would need to draw upon to move from case-by-case manual investigation toward automated transaction-monitoring or analytics-driven supervision.

The practical consequence connects directly to this cycle's other domain findings. The beneficial-ownership verification gap at the Company Registrar, the entrenched but unmapped hundi/MVTS network, and the underground virtual-asset activity operating outside any monitoring framework all describe risks that a digitised, cross-agency data environment would make substantially more detectable. Their persistence as structural rather than resolving issues is, in part, a downstream consequence of this capacity gap: without electronic records at the cooperative, real estate, revenue, and customs level, Nepali authorities cannot deploy the kind of automated red-flag detection that would allow beneficial-ownership opacity or trade-based laundering patterns to surface outside of politically-driven, case-specific investigations such as the current anti-corruption wave.

This positions Nepal's compliance-technology profile as a watch-status structural constraint rather than an active or evolving finding this cycle: no new RegTech investment, supervisory-technology procurement, or digitisation initiative was identified in the evidence base, and none of the gaps identified, including the absence of a DNFBP supervisory technology framework, show signs of near-term resolution.

Outlook

Meaningful improvement in Nepal's compliance-technology posture would most plausibly emerge as a byproduct of the overdue third National Risk Assessment update, if that update is paired with a digitisation or supervisory-technology component, though no source this cycle confirms such a component is planned. Absent a dedicated RegTech or SupTech investment programme, Nepal's reliance on slow, manual, case-by-case investigation is assessed as likely to persist through at least the next assessment cycle, continuing to constrain the analytical reach of the Department of Money Laundering Investigation and Nepal Rastra Bank even as case-specific enforcement activity, as seen in the 2026 anti-corruption wave, continues under the current manual model.