HomeCirculars › RBI/2009-10/398

RBI Alert: FATF-Listed High-Risk Jurisdictions for AML/CFT

Digital Payments / UPI
Live · in forceNo withdrawal recorded as of 20 Jun 2026. Reviewed by Vikram Jain; always verify against the official RBI source below.
Issued by RBI: FY 2009-10  ·  Decoded by BankPulse: 20 Jun 2026, 16:02 IST
⏱ ~1 min read
📄 Official RBI source ↗
Quick answerRBI directs all payment system operators to factor in AML/CFT risks from FATF-identified jurisdictions: Iran (countermeasures), Angola, DPRK, Ecuador, Ethiopia (no action plan), and Pakistan, Turkmenistan, Sao Tome & Principe (unaddressed deficiencies).

What changed

RBI issued a circular on April 13, 2010, updating the FATF statement of February 18, 2010, which categorizes jurisdictions with strategic AML/CFT deficiencies into three groups. This replaces the earlier December 22, 2009, reference and requires operators to consider risks from these countries.

What it means for you

Banks and payment operators must enhance due diligence for transactions involving these jurisdictions, potentially applying countermeasures for Iran. Non-compliance could expose institutions to regulatory action and reputational risk. This aligns with global FATF standards to curb money laundering and terrorist financing.

What you must do

Who it affects

All payment system operators authorized under PSS Act, 2007, Banks and financial institutions involved in cross-border payments, Compliance and AML/CFT teams in Indian financial entities

What are the three FATF groups mentioned in this circular?

Group 1: Iran (subject to countermeasures). Group 2: Angola, DPRK, Ecuador, Ethiopia (no action plan). Group 3: Pakistan, Turkmenistan, Sao Tome and Principe (unaddressed deficiencies).

Does this circular apply to all payment systems or only specific ones?

It applies to all payment system operators authorized under the Payment and Settlement Systems Act, 2007, covering all digital payment systems including UPI.

What action should banks take for transactions with Iran?

Banks should apply countermeasures as called by FATF to protect the financial system from ML/FT risks, which may include enhanced scrutiny, restrictions, or transaction monitoring.

Key dataSee the live numbers behind this topic: RBI Penalty Tracker, Credit & Deposit Growth — updated from official RBI data.
Key termsPlain-English definitions of terms in this circular — see the full Indian banking glossary. UPI · KYC / AML · Deposit insurance (DICGC) · NEFT / RTGS
Track this rule
🗂 Master Direction family: Payment & Settlement Systems⏳ How this rule evolved — History Map →Full RBI rulebook crosswalk →
AI-drafted · 3-model AI consensus fact-check · under the editorial review of Vikram Jain · decoded & published by BankPulse · 20 Jun 2026, 16:02 IST
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=5592&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by Vikram Jain. Independent platform, not affiliated with the Reserve Bank of India; never reproduces RBI text verbatim.