Pakistan PK

Pakistan this cycle presents a country that clears every standing country-level sanctions and grey-list threshold while continuing to generate friction at the level of individual actors and unsupervised value-transfer corridors. Reading the position through a three-level sanctions-architecture lens, at the country level Pakistan remains off both the FATF grey list and the FATF high-risk call-for-action list as of the June 2026 Plenary, having exited the grey list in October 2022, and delegated regulations issued by the European Commission in December 2025 updating the high-risk third-country annex, Regulations (EU) 2026/46 and (EU) 2026/83, again confirm that Pakistan has not been re-added. Both signals point toward a jurisdiction judged, at the level of formal listing, to have addressed the technical deficiencies that once triggered enhanced monitoring.

At the scheme level, a different picture holds. On 16 January 2026 the U.S. Treasury Office of Foreign Assets Control added Pakistani national Imran Asghar, together with associated Dubai-based petroleum-trading entities, to the Specially Designated Nationals list under an Ansarallah, or Houthi-linked, network designation. The action targeted an individual and a corporate network operating through a Gulf trade hub rather than the jurisdiction itself, demonstrating that clean country-level status coexists with continuing exposure at the level of individual actors and cross-border trade-finance relationships tied to correspondent banking.

At the architecture level, the persistent vulnerability remains the Pakistan-Afghanistan-Iran hawala and hundi corridor, an unsupervised value-transfer channel through which bulk cash smuggling into Afghanistan has been reported at up to several million US dollars per day. This finding is corroborated across a FATF and APG technical assessment, financial-press reporting, and the 2025 National Risk Assessment published by the United Kingdom, giving it a durable, structural character rather than the profile of a one-off event. It is this architecture, not any single designation, that keeps the country a live sanctions-evasion concern despite its clean formal status.

Reading these three levels together, the strategic consequence is a divergence pattern in which enforcement targets nationals, networks and unsupervised corridors rather than the jurisdiction as a whole, which suggests that the country-clean status functions as a floor rather than a ceiling on financial-integrity risk. Firms with correspondent-banking or trade-finance exposure to Pakistan-linked flows face a picture in which the absence of a grey-list or high-risk-third-country designation does not remove the practical case for enhanced due diligence around individual counterparties, Gulf trade-hub intermediaries and the regional cash-based corridor. The obligation architecture already reflects this: the EU high-risk-third-country framework and OFAC screening obligations under Executive Order 13224 as amended operate as parallel, not substitute, layers of control, and a firm satisfying one does not thereby satisfy the other.

This cycle also establishes, as a baseline finding, that Pakistan plays only a minimal and peripheral role in Russian sanctions-evasion architecture, with no evidence identified this cycle of Pakistan-based intermediaries materially servicing evasion beyond occasional discounted-crude interest and a yuan-settlement angle connected to Chinese intermediation. This negative finding is useful for calibrating relative risk: the sanctions-architecture concern specific to Pakistan is concentrated in the counter-terrorism-designation and hawala-corridor findings above, not in a Russia-facing evasion role.

Outlook

The next formal checkpoint is the October 2026 FATF Plenary, the scheduled review point for the residual technical-compliance ratings of Pakistan under APG enhanced follow-up; this is a monitoring-status checkpoint rather than a firm-specific event, and its outcome remains uncertain at this stage. Absent a fresh triggering event, the country-clean, individual-designated divergence pattern established this cycle is assessed as likely to persist as the baseline description of the sanctions-architecture posture of Pakistan into the second half of 2026, with the hawala and hundi corridor remaining the structural condition most likely to generate further individual-level designations of the kind seen in January 2026. The sanctions-regime-divergence pattern documented here is expected to remain the defining sanctions-architecture signal for this jurisdiction absent a change in either the FATF and EU country-level assessment or a materially different individual-designation pattern.

Pakistan sits outside the direct perimeter of the EU AML Package, and the developments most directly relevant to its own beneficial-ownership and corporate-transparency exposure are domestic rather than European. The Securities and Exchange Commission of Pakistan administers beneficial-ownership information for companies and limited liability partnerships under a 25-percent-shareholding-or-effective-control definition, but discloses that information to foreign counterparts on a case-by-case basis through international-cooperation channels rather than through an open, interconnected public register. This is a structural transparency gap rather than an episodic lapse: it rests on a submission made directly by Pakistan to the UNCAC Secretariat in response to the questionnaire on beneficial-ownership and trust regimes, and no movement toward interconnection has been identified this cycle.

Layered onto that structural gap is an evidentiary gap at the enforcement layer. No fresh, independently verified senior-politically-exposed-person money-laundering enforcement action was identified for Pakistan within the eighteen-month review window; the most prominent precedent, the 2022 acquittal of Prime Minister Shehbaz Sharif and his son, predates that window. This is an absence-of-evidence finding rather than a positive determination, and it rests on a single secondary source, but it raises rather than resolves the question of whether elite-linked money-laundering enforcement functions as intended in Pakistan, a question that bears directly on the state-capture filter applied across this monitor coverage.

For financial institutions and professional service firms handling Pakistan-linked corporate or fund structures, the request-driven beneficial-ownership disclosure model translates into a practical due-diligence burden: verification of ultimate beneficial ownership for Pakistani companies, limited liability partnerships and fund structures cannot rely on an interconnected public register and instead depends on the international-cooperation channel operated by the Securities and Exchange Commission of Pakistan on a case-by-case basis. This affects cross-sector and investment-firm exposure to Pakistani corporate and fund structures, and it compounds the same-jurisdiction gap in politically-exposed-person enforcement outcomes: a firm relying on both beneficial-ownership verification and adverse-media or enforcement-history screening currently has only a partial picture from either channel.

Globally, the EU AML Package sets the structural direction against which beneficial-ownership regimes elsewhere are increasingly measured, even where it does not apply directly. The package now comprises three distinct instruments: the directly applicable AML Regulation, Regulation (EU) 2024/1624, which will apply from 2027; the sixth AML Directive, transposed on a per-Member-State basis; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and shifts supervision of the highest-risk cross-border obliged entities from purely national authorities toward a hybrid EU-level regime of direct and indirect supervision. Pakistan, as a non-European-Economic-Area third country, sits outside this direct and indirect supervision perimeter, and 6AMLD per-Member-State transposition tracking is not applicable to it. Its only structural touchpoint with the European framework remains the EU high-risk third-country annex, from which it was removed in December 2022 and on which it remains absent through the December 2025 delegated-regulation updates. This backdrop is worth naming precisely because it illustrates the direction other jurisdictions are moving toward interconnected, supervised beneficial-ownership regimes, a direction against which the request-driven, non-public Pakistani model reads as comparatively opaque.

Analysts should note that both structural findings in this domain rest on differing source strength: the beneficial-ownership disclosure model is drawn directly from the national submission of Pakistan to the UNCAC Secretariat, a national-primary source, while the enforcement-absence finding rests on a single secondary-tier report and should be read as raising, not settling, the underlying question.

Outlook

No dedicated Pakistan-specific beneficial-ownership reform was identified on the near-term regulatory horizon this cycle. The most relevant near-term checkpoint remains institutional rather than legislative: a National Strategy against Organized Crime, expected to be finalised in the second half of 2026, is described as covering money laundering alongside cybercrime and human smuggling, and its finalisation may shape the institutional coordination through which beneficial-ownership and enforcement gaps are eventually addressed. Absent a fresh senior-politically-exposed-person enforcement test case or a primary-source indication of movement toward an open beneficial-ownership register, the state-capture question flagged this cycle is assessed as remaining open rather than resolved into the next cycle.

Assessed through the enabler-jurisdiction filter, Pakistan this cycle presents a mixed picture of persistent technical-compliance gaps alongside a new institutional-coordination initiative. The December 2025 APG Follow-Up Report confirms that Pakistan remains in enhanced follow-up, with 38 FATF Recommendations still rated only compliant or largely compliant. This is a structural finding rather than an episodic one: it reflects the pace of implementation of the 2019 APG Mutual Evaluation findings rather than any single event, and it sits alongside the fact that Pakistan itself remains off both the FATF grey list and the high-risk call-for-action list as of the June 2026 Plenary. The combination illustrates a familiar enabler-jurisdiction pattern in which formal delisting from the highest-visibility monitoring category does not equate to completed technical-compliance remediation.

The clearest facilitator-network finding this cycle concerns militant-group financing along the Afghanistan-Pakistan frontier. Groups including Lashkar-e-Tayyiba and its affiliate Jamaat-ud-Dawa, the Tehrik-i-Taliban Pakistan, the Haqqani Network and ISIS-Khorasan raise and move funds through direct support, public fundraising, non-profit-organisation abuse, criminal proceeds and hawala and hundi channels, exploiting weak sectoral supervision of money-service businesses and non-profit entities. This finding is corroborated by the UN 1267 Committee listing of Lashkar-e-Tayyiba and by FATF terrorist-financing risk reporting, and it identifies the professional-facilitator layer, informal value-transfer operators and non-profit intermediaries, as the connective tissue enabling militant access to the financial system, rather than any single formal institution.

Set against these persistent gaps, Pakistan this cycle launched its first National Action Plan against migrant smuggling, on 18 February 2026, under a Prime-Minister-chaired Task Force that formally engages the national AML and CFT authority and financial institutions, in cooperation with INTERPOL, Europol and Frontex, to disrupt smuggling-network finance. This is a new institutional-coordination mechanism rather than a completed remediation, and its significance lies in formally routing financial-intelligence capability toward a facilitator network, migrant-smuggling finance, that has not previously been a named priority in the AML and CFT institutional architecture of Pakistan.

Read together, these three findings describe an enabler-jurisdiction profile in which technical-compliance capacity constraints (APG follow-up), an active facilitator network exploiting those constraints (militant-group financing via hawala and non-profit-organisation abuse), and a new attempt at institutional coordination (the migrant-smuggling National Action Plan) coexist. The professional-facilitator dimension here is not a licensed-professional-intermediary story of the kind associated with company-formation agents or trust and company service providers, but rather an unlicensed, informal-sector facilitator story: money-service businesses and non-profit organisations operating with weak sectoral supervision. Taken as a whole, this domain supports the broader jurisdiction-level characterisation of Pakistan as exhibiting a mixed enforcement-versus-enablement balance and a mixed structural-versus-episodic risk profile, in which institutional reform efforts are underway but have not yet closed the technical-compliance and facilitator-network gaps identified across multiple independent assessments.

Outlook

The next formal test of the enabler-jurisdiction posture of Pakistan is the October 2026 FATF Plenary, the scheduled checkpoint for the APG enhanced-follow-up status, at which the pace of technical-compliance remediation against the 38 outstanding recommendations will be reassessed. A parallel institutional development to watch is the finalisation, expected in the second half of 2026, of a National Strategy against Organized Crime intended to cover money laundering, cybercrime and human smuggling, which would extend the coordination logic of the migrant-smuggling National Action Plan into a broader institutional framework. Whether the new coordination mechanisms translate into a measurable reduction in the informal-sector facilitator risk documented here, particularly around hawala and non-profit-organisation abuse, remains an open question at this stage.

This cycle carries no dedicated Pakistan-specific extractive-industry or war-economy finding. The only conflict-finance-relevant material identified is a cross-reference from this monitor D3 enabler-jurisdiction and counter-terrorist-financing analysis: the financing of Lashkar-e-Tayyiba and its affiliate Jamaat-ud-Dawa, the Tehrik-i-Taliban Pakistan, the Haqqani Network and ISIS-Khorasan through hawala and hundi channels, non-profit-organisation abuse and criminal proceeds sustains armed-group activity along the Afghanistan-Pakistan frontier. That finding is classified primarily as a D3 and counter-terrorist-financing matter, corroborated by the UN 1267 Committee listing of Lashkar-e-Tayyiba and FATF terrorist-financing risk reporting, and it is surfaced here under the conflict-finance filter because the same financing channels that enable militant operational capability also sustain frontier armed-group activity more broadly.

Where this cross-reference is useful is in connecting the financial-integrity posture of Pakistan to conflict-finance monitoring focused on the broader Afghanistan-Pakistan frontier, in which the same informal value-transfer and non-profit-organisation-abuse channels described under the enabler-jurisdiction domain are the mechanism by which frontier armed-group financing is believed to occur, rather than a formal banking-sector or extractive-industry channel. No Pakistan-specific extractive-industry integrity finding, whether relating to mining, gemstones or other commodity-linked revenue streams, was identified this cycle. This is an honest coverage gap rather than a negative finding: it reflects the scope of research coverage this cycle rather than a determination that no such exposure exists.

Outlook

No dedicated Pakistan-specific conflict-finance or extractive-industry regulatory horizon item was identified this cycle. The domain will continue to be populated primarily through the conflict-adjacent cross-reference from the D3 militant-financing finding until a Pakistan-specific extractive-industry or war-economy finding is independently identified. Analysts using this brief for conflict-finance purposes should treat this domain, for Pakistan, as a cross-reference to D3 rather than a standalone assessment.

The developments most directly relevant to the digital-asset regulatory perimeter of Pakistan are domestic and recent. The Pakistan Virtual Assets Regulatory Authority, established in July 2025 following the March 2025 Pakistan Crypto Council, is now the second dedicated virtual-asset-service-provider regulator in the world, after the VARA authority in Dubai. Its establishment followed a rapid, high-level policy pivot: a May 2025 partnership between the Pakistan Crypto Council and the Trump-family-linked World Liberty Financial, alongside publicly stated plans for a Strategic Bitcoin Reserve, signalling political sponsorship of the crypto pivot at the highest level of government, ahead of any demonstrated supervisory maturity.

That sequencing, formal regulatory architecture established quickly following high-level political sponsorship, is the central digital-asset risk finding for Pakistan this cycle. Pakistan ranks among the highest-adoption crypto markets globally at the informal or grassroots level, and the newly established PVARA licensing and supervisory apparatus is, on the evidence available this cycle, still building the capability needed to bring that informal adoption inside a regulated perimeter. The structural risk is a supervisory-capacity gap: an active, high-volume informal ecosystem of peer-to-peer exchangers and offshore virtual-asset-service providers operating ahead of licensing coverage, a red-flag pattern most observable on-chain and most relevant to counterparties classified as virtual-asset-service-provider or retail.

Globally, frameworks such as the European Union Markets in Crypto-Assets regime and the FATF virtual-asset standards set a comparative direction for licensing and travel-rule compliance, but these are contextual backdrop rather than the operative regulatory perimeter for Pakistan, which sits outside the European Union framework and is instead building its own national licensing regime through PVARA. The near-term test of that regime, the PVARA invitation for internationally licensed virtual-asset-service providers to apply for Pakistani licences, is expected to progress through 2026 and represents the first substantive evidence of whether formal supervision narrows the gap with informal adoption, though no primary regulatory source describing the PVARA licensing pipeline, applications received or enforcement against unlicensed exchangers has yet been identified.

This domain trajectory is assessed as worsening rather than stable, reflecting the widening gap between the pace of adoption and the pace of supervisory build-out rather than any single adverse event. The World Liberty Financial partnership and Strategic Bitcoin Reserve plans, in particular, illustrate a pattern in which high-level political sponsorship of crypto policy has outpaced the operational licensing and enforcement capability needed to supervise the resulting market activity, a sequencing risk distinct from, but related to, the informal-adoption gap described above.

It is worth distinguishing this domain trajectory, assessed as worsening, from the compliance-technology trajectory addressed separately in this brief, assessed as improving: the move by the Financial Monitoring Unit toward machine-learning-assisted risk scoring is a suptech development relevant to suspicious-transaction-report triage generally, not a digital-asset-specific supervisory capability, and it does not, on the evidence available this cycle, offset the specific PVARA licensing-and-adoption gap described here.

Outlook

The PVARA licensing rollout for internationally licensed exchanges is the single most consequential near-term horizon item in this domain, expected to progress through 2026 with improving but still uncertain risk direction. Assessed judgment holds that the pace of supervisory build-out is likely to continue lagging the already-high level of informal crypto adoption in Pakistan through the remainder of 2026, sustaining a window in which unlicensed peer-to-peer exchangers and offshore virtual-asset-service providers can intermediate laundering flows. Transaction-monitoring and on-chain-analytics functions handling Pakistan-linked virtual-asset flows should treat high-volume peer-to-peer and offshore-VASP activity as the primary observable red flag in this domain pending further evidence of licensing-driven consolidation. Firms considering Pakistani market access, and correspondent counterparties of Pakistani virtual-asset-service providers, should treat the absence of a documented PVARA licensing pipeline as an open gap rather than a settled compliance baseline.

The financial-intelligence apparatus of Pakistan shows the clearest positive-trajectory signal in this brief this cycle. The Financial Monitoring Unit convened workshops in December 2025 and February 2026, with support from UNODC and the United Kingdom International Development programme, to redesign risk-scoring frameworks and explore machine-learning-assisted prioritisation of suspicious-transaction reports. This represents a move by the national financial-intelligence unit toward a more analysis-led, technology-enabled posture for suspicious-transaction-report triage, rather than a reliance on volume-based or purely rules-based screening.

The finding is held at an assessed rather than high confidence level: the underlying source is a UNODC programme narrative rather than a primary Financial Monitoring Unit publication, and while the workshops are corroborated as having occurred, the operational outcome, whether machine-learning-assisted risk scoring has been deployed into live suspicious-transaction-report triage, is not yet independently documented. This is an honest evidentiary distinction rather than a downgrade of the underlying significance: institutional intent and pilot activity are documented; operational deployment is not yet confirmed.

This compliance-technology development sits in useful contrast to the digital-asset domain addressed separately in this brief, where the supervisory trajectory is assessed as worsening. Here, the trajectory is assessed as improving, reflecting institutional investment in analytical capability rather than a widening capacity gap. The two trajectories are not directly linked: the Financial Monitoring Unit risk-scoring pilot addresses suspicious-transaction-report triage generally, across all reporting sectors, rather than the specific virtual-asset-service-provider supervisory gap described under the crypto domain.

More broadly, this development illustrates a pattern relevant across enabler-jurisdiction assessments generally: technology-enabled suptech and regtech adoption by a financial-intelligence unit can improve the analytical capacity of a jurisdiction faster than it can close underlying structural gaps, such as the hawala-corridor and beneficial-ownership-disclosure gaps documented elsewhere in this brief for Pakistan. The Financial Monitoring Unit pilot should therefore be read as a capability-building signal operating in parallel with, rather than as a resolution to, the structural enabler-jurisdiction and beneficial-ownership findings addressed under the other domains in this brief.

The development also has cross-monitor relevance beyond this brief: the adoption of machine-learning-assisted risk scoring by a national financial-intelligence unit is a relevant data point for monitoring of artificial-intelligence governance in public-sector deployment, given the agentic and machine-learning dimension of the risk-scoring redesign described in the underlying source material. The pilot is relevant across the cross-sector and banking-sector reporting population that files suspicious-transaction reports with the Financial Monitoring Unit, since any recalibration of risk-scoring methodology affects which reports are prioritised for downstream investigative attention, with corresponding implications for the internal risk-scoring alignment of reporting entities over time.

Outlook

No independently verified operational deployment date or primary Financial Monitoring Unit publication describing the machine-learning-assisted risk-scoring framework was identified this cycle, and this remains the principal gap constraining a higher confidence assessment. The most relevant near-term development to watch is whether a primary regulatory or Financial Monitoring Unit source documents actual deployment of the redesigned risk-scoring framework into live suspicious-transaction-report triage, which would allow this finding to be upgraded from assessed to high confidence. Absent that, the improving trajectory identified this cycle should be read as institutional intent and pilot-stage activity rather than a completed capability upgrade. Firms with suspicious-transaction-reporting obligations in Pakistan should treat the current pilot as an early-stage signal rather than a settled methodology change, and should not yet assume that reporting thresholds or triage priorities have shifted in practice.