What Actually Got the Philippines Off the List
The Philippines exited the FATF grey list on February 21, 2025, after nearly four years of AML/CFT reform following its June 2021 listing. That exit did not close the file: the Philippines' next FATF mutual evaluation is scheduled for 2027, and regulators have publicly framed the intervening period as critical for proving the reforms hold.
For BSP-supervised fintechs, PSPs, and e-money issuers, the practical requirements haven't changed direction: Circular 950's compliance pillars, GoTRACS reporting timelines, and the covered-persons and targeted-sanctions provisions introduced by RA 11521 are the baseline the 2027 evaluation will measure against, not a settled chapter.
Exiting the FATF grey list is a genuine milestone: it eases correspondent banking relationships, lowers international compliance friction, and signals that years of legislative and supervisory reform actually worked. It is not the same as being finished. The two years leading up to the 2027 evaluation are exactly the period regulators are watching most closely for signs that 2021–2025's reforms were durable rather than temporary. For BSP-supervised fintechs, that's the frame worth understanding, not because scrutiny is guaranteed to increase on some specific schedule, but because the standard being built toward now is the one that will be tested again.
FATF added the Philippines to its grey list in June 2021, citing specific deficiencies: weak oversight of casino-related transactions and virtual asset service providers, gaps in beneficial ownership transparency, and an inadequate track record prosecuting terrorism financing. Over the following four years, the Philippines expanded AMLA's covered-persons list, strengthened freeze and forfeiture powers, and built out risk-based supervision of designated non-financial businesses and professions.
FATF confirmed at its October 2024 plenary that the action plan was substantially complete, and formally removed the Philippines from the list on February 21, 2025, following an on-site visit that took place 20–22 January 2025.
What's Actually Different for Fintechs Now
The most consequential legal change directly behind the exit is Republic Act No. 11521, the AMLA amendment that took effect 8 February 2021, expanding covered persons to include real estate developers/brokers and offshore gaming operators/service providers, and granting AMLC the power to issue freeze orders for targeted financial sanctions related to terrorism and proliferation financing.
RA 11521's text does not itself name virtual asset service providers as a new covered-persons category, that's a separate track. VASP oversight in the Philippines runs through BSP Circular No. 944, Series of 2017 (which first brought virtual currency exchanges under BSP registration and AML compliance as remittance and transfer companies) and its 2021 successor, BSP Circular No. 1108, which formally defined VASPs and built out the current framework, including the FATF Recommendation 16 Travel Rule: for virtual-asset transfers of ₱50,000 or more, the originating VASP must collect and transmit originator and beneficiary information to the receiving institution. That's not a future item, it's a current supervisory expectation, and it sits on BSP Circular 1108, not RA 11521.
The reform process is also still active. As of September 2025, proposed amendments to the Bank Secrecy Law (Senate Bills 10476, 2327, 1508, and 389, with a companion House bill) were filed specifically to strengthen BSP's supervisory powers and AML/CFT examination effectiveness ahead of the 2027 evaluation, a concrete signal that the legal and supervisory framework fintechs operate under is still being actively shaped, not frozen in place since February 2025.
2027 Is the Real Deadline
"The next two years will be crucial, as the Philippines prepares for another mutual evaluation, where the country's AML/CFT standards will be assessed for their compliance with global standards."
— Emilio Aquino, Chairperson, Securities and Exchange Commission, February 2025
That statement, made at the same press conference announcing the grey-list exit, is worth sitting with. A mutual evaluation doesn't just check whether the letter of the law changed, it checks whether institutions actually apply it, at scale, under examination. For a mid-tier fintech, PSP, or e-money issuer, that means the compliance posture that mattered for the 2021–2025 reform period is the same posture that will be tested again, and "we fixed this for the FATF exit" is not a durable answer if it wasn't sustained afterward.
What This Means Day-to-Day Under Circular 950
The operational baseline for BSP-supervised institutions runs through Circular 950's AML provisions under Part Eight of the Manual of Regulations for Banks: Customer Due Diligence and beneficial ownership identification; Transaction Monitoring and STR/CTR filing; PEP and sanctions screening; and audit trail and documentation.
| Report | Trigger | Filing window |
|---|---|---|
| CTR | Cash transaction ≥ ₱500,000 in one banking day | 5 working days |
| STR | Determination of suspicion (any amount) | Next working day |
A Covered Transaction Report, triggered by a cash transaction of ₱500,000 or more, has a five-working-day window, while a Suspicious Transaction Report, triggered by a determination of suspicion at any amount, must be filed by the next working day under AMLC's GoTRACS. Getting that distinction wrong in an internal SLA is exactly the kind of gap a mutual-evaluation-adjacent examination cycle is built to surface.
Closing the Gap
None of the above requires new technology to address, it requires an honest audit of whether current documentation, filing timelines, and VASP-specific controls actually reflect RA 11521, BSP Circular 1108, and Circular 950 as they stand today, not as they stood before 2021's reforms.
Where a technology gap does exist, it's usually the same one across institutions: a fragmented stack where KYC, transaction monitoring, screening, and STR filing sit in separate systems with manual handoffs between them.
FT AML Solution runs those functions in one connected system, with a native, timestamped audit trail across every alert decision and filing step.
Frequently Asked Questions
When did the Philippines exit the FATF grey list?
February 21, 2025, after being added to the list in June 2021.
When is the Philippines' next FATF mutual evaluation?
2027. Philippine regulators, including the SEC, have publicly described the intervening period as critical for demonstrating the durability of post-2021 AML/CFT reforms.
What changed under RA 11521?
RA 11521 (took effect 8 February 2021) expanded AMLA's covered persons to include real estate developers/brokers and offshore gaming operators/service providers, and strengthened AMLC's freeze and forfeiture powers.
Does the FATF Travel Rule apply to Philippine VASPs?
Yes, under BSP Circular No. 1108 (2021). VASPs must collect and transmit originator and beneficiary information for virtual-asset transfers of ₱50,000 or more.
Is AML scrutiny increasing in the Philippines since the grey list exit?
There is no single confirmed BSP statement of increased examination frequency, but proposed Bank Secrecy Law amendments and the scheduled 2027 mutual evaluation both point to continued regulatory development.

