- EU pressure on golden visas and citizenship-by-investment shows AML scrutiny is rising; Malta's program was ordered shut by the EU's top court, and Spain is ending its real estate golden visa.
- Saudi Arabia's Private Capital Forum (PCF) 2025 will convene investors and policymakers on cross-border capital and regulations—watch for signals on regulatory harmonization and due diligence standards.
- Enhanced KYC/source-of-funds checks and documented risk-based rationales are becoming baseline expectations per EU guidance.
- Monitor policy moves like the EU's expanding high-risk AML list and visa-free restrictions tied to CBI programs.
- Use 2025 to audit compliance workflows, strengthen evidence trails, and align with emerging best practices.
Investor migration is being reshaped by anti-money-laundering (AML) pressure and geopolitical risk. Europe is tightening scrutiny of golden visas and citizenship-by-investment, while Saudi Arabia's PCF 2025 is spotlighting regulatory harmonization and capital mobility. For counsel, this is the moment to raise due diligence standards and future‑proof acceptance strategies.
Table of Contents
- Why AML in investment migration is tightening in 2025
- Signals from Saudi Arabia's PCF 2025
- Europe's stricter stance: golden visas and CBI under pressure
- Acceptance rates and due diligence: implications for 2025
- Compliance playbook: KYC, source-of-funds, and risk-based documentation
- How to apply: upgrading your compliance workflow
- Monitoring regulatory developments: what to watch next
- FAQ
Why AML in Investment Migration Is Tightening in 2025
Across Europe, authorities are escalating scrutiny of investor migration pathways. The EU's top court ordered Malta to terminate its citizenship-for-investment program, underscoring that such schemes face legal and security hurdles under EU law. Spain, a former mainstay of real-estate golden visas, announced it will end its €500,000 property-based route, reflecting both affordability and security concerns; Spain issued nearly 5,000 such permits between 2013 and 2022.
Brussels has long emphasized AML risks tied to investor schemes. A European Commission report calls for enhanced due diligence, rigorous source-of-funds/wealth checks, and clear communication of findings to authorities when assessing investor applications. The enforcement climate extends beyond the EU: the bloc suspended visa-free access for Vanuatu over concerns tied to its citizenship-by-investment framework, signaling that CBI programs can trigger material mobility consequences. In 2025, the EU also expanded its list of high-risk jurisdictions for money laundering, adding 10 countries including Monaco—yet another marker of tightening AML oversight.
Signals from Saudi Arabia's PCF 2025
Saudi Arabia's Global Private Capital Forum 2025 will bring together institutional investors, fund managers, and policymakers to examine private equity, venture capital, private credit, and regulatory enablers for cross-border investment. Expect themes that directly intersect investor migration practice:
- Regulatory harmonization: Dialogue on aligning standards for capital flows can foreshadow how due diligence frameworks might converge across jurisdictions, affecting investment-linked residency pathways.
- Capital mobility and risk: Panels on cross-border private markets often emphasize AML/CFT guardrails and disclosure norms. These feed into how host countries calibrate investor screening and post-entry monitoring.
- Policy signalling: Statements from regulators and sovereign funds at PCF often telegraph near‑term shifts that shape market access—and by extension, acceptance criteria for investor migrants.
Practitioners should monitor PCF outputs to anticipate policy drift toward stronger documentation and interoperable standards—key for multi-jurisdictional portfolios.
Europe's Stricter Stance: Golden Visas and CBI Under Pressure
Multiple datapoints indicate a harder European line in 2024–2025:
- Malta's citizenship-by-investment program must end per the EU's top court, after generating an estimated €1.4 billion in revenue since 2015—a stark example of revenue considerations losing out to rule-of-law and security concerns.
- Spain will scrap its golden visa via real estate, reflecting both housing market and security/AML sensitivities; the program issued nearly 5,000 permits from 2013–2022.
- The EU's action on Vanuatu's visa-free regime underscores a readiness to recalibrate mobility privileges when CBI vetting is seen as insufficient.
For investor migrants, the upshot is not a universal shutdown but a consistent policy vector: enhanced AML expectations and more selective approvals, in line with Commission guidance on source-of-funds verification and inter-agency information flows.
Acceptance Rates and Due Diligence: Implications for 2025
Acceptance rates in 2025 are under pressure where programs elevate AML risk or where documentation is weak. While there is no single EU‑wide acceptance dataset, the direction of travel is clear: more intensive due diligence, expanding high‑risk jurisdiction designations, and closer scrutiny of CBI/RBI programs. Counsel should assume:
- Higher documentation thresholds for source of funds/wealth, especially for complex corporate structures and alternative assets, consistent with EU guidance on enhanced checks for investor schemes.
- More frequent requests for supplemental evidence and longer processing timelines as authorities validate risk-based rationales.
- Greater sensitivity to applicants connected with high-risk jurisdictions or sectors flagged by EU listings and risk typologies.
Compliance Playbook: KYC, Source-of-Funds, and Risk-Based Documentation
Use 2025 to harden your due diligence program. The following practices align with the EU's emphasis on enhanced checks for investor citizenship/residence schemes:
Enhanced AML Due Diligence Checklist (Investor Migration)
| Control | What "Good" Looks Like |
|---|---|
| Applicant KYC | Government ID, verified address history, sanctions/PEP screening with archived results and match-resolution memos. |
| Source of Funds (SoF) | Bank statements, sale contracts, audited financials, tax filings, dividend/bonus slips linked to transactions funding the investment. |
| Source of Wealth (SoW) | Narrative plus corroborating documents showing long-term accumulation (business ownership records, inheritance/wills, liquidity events). |
| Corporate Mapping | Ultimate beneficial owner chart, registry extracts, and cross-border link analysis for intermediaries. |
| Adverse Media and Litigation | Third-party reports with documented false-positive clearance and escalation notes where needed. |
| Risk-Based Rationale | File memo explaining risk rating, mitigating controls, and why the case meets threshold despite identified risks. |
| Ongoing Monitoring | Triggers defined (e.g., sanctions updates, corporate control changes) and annual refresh protocols. |
How to Apply: Upgrading Your Compliance Workflow
- Map regulatory touchpoints: Identify all jurisdictions in play (origin of funds, corporate entities, destination program). Flag any on high-risk AML lists or subject to enhanced scrutiny.
- Define risk taxonomy: Calibrate risk scoring and escalation thresholds to reflect investor‑migration specific risks cited by the European Commission (e.g., reliance on intermediaries, cross-border opacity).
- Harden SoF/SoW evidence: Pre-collect transaction-level proofs and long-term wealth corroboration; ensure bank letters and auditor attestations reconcile to inflows/outflows.
- Strengthen third-party checks: Use reputable providers for sanctions/PEP/adverse media; archive datasets and decision logs to support file defensibility.
- Draft the risk-based memo: Document the rationale linking facts to risk mitigants and the governing standard (enhanced due diligence for investor programs).
- Establish monitoring triggers: Set refresh cadence and event-driven reviews (e.g., material business changes, new EU AML listings).
- Conduct a red-team review: Have independent counsel stress-test the file as if by a skeptical regulator; remediate gaps before submission.
Monitoring Regulatory Developments: What to Watch Next
- PCF 2025 outputs: Note any communiqués or session notes suggesting convergence on AML and disclosure norms for cross-border capital.
- EU-level guidance and case law: Track Commission reports and court decisions shaping the boundaries of RBI/CBI programs and required due diligence.
- Enforcement-led mobility changes: Watch for adjustments to visa-free regimes or high-risk listings, as seen with Vanuatu and the EU's expanded AML list.
Bottom line: AML in investment migration is moving to a higher bar in 2025. Programs that thrive will be those whose files show clear, corroborated source-of-funds and a defensible risk-based rationale. If you are planning an investment-led pathway—whether in the EU or considering Armenia's residency and business options—build a robust compliance spine now and align your documentation to emerging standards.
Contact Our TeamFAQ
Saudi Arabia's Private Capital Forum 2025 convenes global investors, fund managers, and policymakers to discuss private markets and enabling regulations. Its focus on cross-border capital and regulatory harmonization can foreshadow due diligence trends that spill over into investor migration screening.
The EU's top court ordered Malta to terminate its citizenship-for-investment program, signaling tight legal constraints on such schemes within the EU. Malta's scheme had generated about €1.4 billion since 2015.
Spain announced it will scrap its €500,000 real-estate golden visa. Nearly 5,000 permits were issued between 2013 and 2022.
The EU revoked visa-free access for Vanuatu over concerns about its CBI program, showing a willingness to alter mobility privileges based on AML/CFT risk assessments. The EU also expanded its list of high-risk AML jurisdictions in 2025.
Expect enhanced KYC plus source-of-funds and source-of-wealth evidence (e.g., bank statements, audited financials, sale contracts, tax filings), aligned with the EU's emphasis on strengthened vetting for investor schemes.
At a Glance
- The EU’s Court of Justice ordered Malta to terminate its citizenship-by-investment program (Case C-181/23, April 2025), and Spain closed its entire golden visa framework via Organic Law 1/2025.
- The EU Anti-Money Laundering Authority (AMLA) became operational in July 2025, with direct supervision of cross-border institutions beginning in 2028.
- In January 2026, the EU added Russia, Bolivia, and the British Virgin Islands to its high-risk AML jurisdictions list while delisting six African nations.
- Enhanced KYC, source-of-funds verification, and documented risk-based rationales are now baseline expectations — not best practice — for investment migration applications.
- Armenia offers a business-driven residency model with streamlined registration, providing a compliant pathway for investors seeking stable jurisdictions with growing regulatory credibility.
Investor migration is being reshaped by anti-money-laundering (AML) pressure and geopolitical risk. Europe has dramatically tightened scrutiny of golden visas and citizenship-by-investment throughout 2025 and into 2026, while new regulatory architecture — including a fully operational EU AML Authority — signals that due diligence standards will only increase. For counsel and investors, the question is no longer whether compliance requirements will rise, but how to build acceptance strategies that meet these elevated standards.
Why AML in Investment Migration Tightened in 2025–2026
Across Europe, authorities escalated scrutiny of investor migration pathways throughout 2025. The EU Court of Justice ruled in Case C-181/23 (April 2025) that Malta’s citizenship-for-investment program violated EU law and the principle of sincere cooperation. Malta subsequently enacted Act XXI of 2025, formally terminating the program that had generated an estimated €1.4 billion since 2015.
Spain followed with Organic Law 1/2025, which took force on 3 April 2025 and left Articles 63–67 of Law 14/2013 “without content” — effectively closing the entire investor visa framework, not just the €500,000 real estate route. Existing holders received transitional protections, but no new applications are accepted.
The enforcement climate extends beyond program closures. The EU suspended visa-free access for Vanuatu (Regulation 2025/11, effective 3 February 2025) over concerns about its CBI framework’s vetting standards. In January 2026, the EU expanded its high-risk AML jurisdictions list through two delegated regulations, adding Russia (via autonomous review after FATF membership suspension), Bolivia, and the British Virgin Islands, while delisting Burkina Faso, Mali, Mozambique, Nigeria, South Africa, and Tanzania.
New EU Regulatory Architecture: AMLA and AMLD6
Two landmark pieces of legislation now reshape AML oversight across the EU and directly affect investment migration compliance:
EU Anti-Money Laundering Authority (AMLA) — Regulation (EU) 2024/1620 established a centralized supervisory authority headquartered in Frankfurt. AMLA became operational on 1 July 2025. The EBA transferred its AML/CFT mandates and the EuReCA database to AMLA on 1 January 2026. A Strategic Priorities Document for 2026–2028 was published in February 2026. Direct supervision of cross-border financial institutions begins in 2028.
Sixth Anti-Money Laundering Directive (AMLD6) — Directive (EU) 2024/1640, adopted 31 May 2024, establishes the main transposition deadline of 10 July 2027, with interim milestones on 10 July 2025, 10 July 2026, and 10 July 2029. Member states must harmonize national AML supervision, beneficial ownership registries, and cross-border cooperation mechanisms.
For investment migration practitioners, these structures mean centralized oversight, shared intelligence databases, and increasingly uniform due diligence standards across EU member states — reducing the ability to arbitrage weaker national frameworks.
Saudi Arabia’s Private Capital Forum 2025: What Happened
Saudi Arabia’s Private Capital Forum (PCF) 2025, organized by the Saudi Venture Capital Company (SVC), convened on 22–23 October 2025 at the King Abdullah Financial District in Riyadh. The forum brought together over 500 investors and 50+ speakers to examine private equity, venture capital, and private credit within Saudi Arabia’s Vision 2030 framework.
While PCF 2025’s official agenda focused on Saudi private capital markets rather than AML or investment migration specifically, the forum’s emphasis on regulatory enablers for cross-border capital flows carries implications for investor migration practitioners:
- Capital mobility standards: Discussions on cross-border private market infrastructure signal how documentation and compliance standards may converge across Gulf and European jurisdictions.
- Regulatory convergence: Saudi Arabia’s own regulatory modernization creates parallels with EU frameworks, suggesting that investors operating across both regions should build compliance systems capable of satisfying multiple regulatory standards simultaneously.
- Institutional investor expectations: As sovereign wealth funds and institutional investors raise their own AML/KYC requirements for fund managers, those standards cascade to individual investors seeking residency through investment vehicles.
Europe’s Stance: Golden Visas and CBI Programs in 2026
The European policy trajectory is now clear — enhanced AML expectations and more selective approvals are the norm, not the exception:
- Malta: CBI terminated per CJEU C-181/23 and implementing Act XXI of 2025. The program that generated €1.4 billion since 2015 is permanently closed.
- Spain: Entire investor visa framework closed via Organic Law 1/2025 (effective 3 April 2025). Nearly 5,000 permits were issued between 2013 and 2022. Existing holders protected transitionally.
- Portugal: Real estate route removed by Law 56/2023, already in force since 2023. Remaining routes include non-real-estate collective investment funds, company capitalization, job creation, and research contributions.
- Greece: Raised investment thresholds rather than closing entirely.
- Hungary: Redesigned its program to a real-estate fund model with 10-year residency requirements.
- EU Parliament: In March–April 2025, proposed mechanisms to suspend visa-free access for countries offering golden passports without genuine links to the issuing state.
The EU Commission has signaled greater hostility toward CBI than RBI but has called for tighter harmonization and economic substance requirements for residency-by-investment programs across the bloc.
FATF 2025 Updates: What Changed for Due Diligence
In February 2025, FATF updated Recommendations 1, 10, and 15, refining risk management requirements, customer due diligence thresholds, and ongoing monitoring standards. Key changes affecting investment migration:
- The €/$15,000 occasional-transaction threshold for enhanced CDD was confirmed, meaning investment migration transactions — which far exceed this threshold — automatically trigger full enhanced due diligence.
- Stricter ongoing CDD for high-risk clients now requires continuous monitoring rather than one-off checks at application stage.
- Risk-based approach reforms emphasize financial inclusion alongside security — meaning legitimate investors with clean documentation should experience faster processing, while those with gaps face greater scrutiny.
Due Diligence Standards for Investment Migration in 2026
Modern investment migration due diligence operates across multiple layers — from agent pre-screening through government unit review to ongoing post-approval monitoring. The following checklist reflects current baseline expectations:
| Control | Current Standard |
|---|---|
| Applicant KYC | Government ID verification, address history, sanctions/PEP screening with archived results and match-resolution memos |
| Source of Funds | Bank statements, sale contracts, audited financials, tax filings, dividend/bonus documentation linked to the specific investment transaction |
| Source of Wealth | Narrative plus corroborating documents showing long-term accumulation — business ownership records, inheritance documentation, liquidity events |
| Corporate Mapping | Ultimate beneficial owner chart, registry extracts, cross-border link analysis for all intermediaries in the ownership chain |
| Adverse Media & Litigation | Third-party screening reports with documented false-positive clearance and escalation notes |
| Risk-Based Rationale | File memo explaining risk rating, mitigating controls, and defensible reasoning for acceptance despite identified risk factors |
| Ongoing Monitoring | Defined triggers (sanctions updates, corporate control changes, adverse media alerts) with annual refresh protocols and event-driven reviews |
| Family Members | Full DD applied to dependents aged 16+ (some programs require 12+). Separate SoF documentation if dependents hold independent assets |
Gatekeeper Liability: Why Service Providers Face Growing Risk
A significant shift in 2025–2026 enforcement is the targeting of “gatekeepers” — attorneys, wealth managers, accountants, and corporate service providers who facilitate investment migration. OFAC and EU enforcement agencies now pursue strict liability for professionals involved in complex corporate structures that obscure sanctioned persons or illicit fund flows.
This means investment migration advisors must maintain their own robust compliance infrastructure, not merely rely on the receiving program’s due diligence. Documentation of the advisor’s independent assessment — pre-screening before onboarding, verification before receiving funds, and confirmation before submission — is now a professional obligation with potential personal liability consequences.
Armenia’s Business-Driven Residency: A Compliant Alternative
As traditional golden visa routes close and AML scrutiny rises, Armenia’s business-driven residency model offers a compliant alternative for investors seeking stable jurisdictions. Unlike classic CBI programs that face EU legal challenges, Armenia’s pathway is tied to genuine economic activity — establishing or running a business in the country.
Key features of Armenia’s approach:
- Business registration in 1–3 days — one of the fastest company formation processes in the region, with no minimum share capital for LLCs.
- Temporary residence (1 year, renewable annually) available for those operating a business in Armenia, processed through the Migration and Citizenship Service in 10–15 business days.
- Genuine business requirement rather than passive investment thresholds — aligning with the EU Commission’s preference for economic substance over capital parking.
- Growing regulatory credibility — Armenia is not on EU or FATF high-risk jurisdictions lists, and maintains bilateral tax treaties and information-sharing agreements.
For investors building multi-jurisdictional portfolios, Armenia’s combination of fast business setup, straightforward residency, and competitive tax framework provides a jurisdiction that satisfies modern AML expectations without the legal and reputational risks now associated with EU golden visa programs. Learn more about Armenia’s residence permit options or explore business registration in Armenia.
Upgrading Your Compliance Workflow for 2026
Whether applying through an EU residency route, a Caribbean program, or Armenia’s business pathway, the compliance workflow should now follow these steps:
- Map regulatory touchpoints: Identify all jurisdictions in play (fund origin, corporate entities, destination program). Flag any on high-risk AML lists or subject to enhanced scrutiny under the January 2026 EU delegated regulations.
- Define risk taxonomy: Calibrate scoring and escalation thresholds to reflect investor-migration-specific risks — reliance on intermediaries, cross-border opacity, and complex beneficial ownership structures.
- Harden SoF/SoW evidence: Pre-collect transaction-level proofs and long-term wealth corroboration. Ensure bank letters and auditor attestations reconcile to actual inflows and outflows.
- Strengthen third-party checks: Use reputable providers for sanctions/PEP/adverse media screening. Archive full datasets and decision logs to support file defensibility during potential AMLA reviews.
- Draft the risk-based memo: Document the rationale linking facts to risk mitigants and the governing standard. This document should be able to stand alone under regulatory scrutiny.
- Establish monitoring triggers: Set refresh cadence and event-driven reviews — material business changes, new EU AML listings, sanctions updates, and corporate control changes.
- Conduct a red-team review: Have independent counsel stress-test the file as if reviewed by a skeptical regulator. Remediate gaps before submission.
What to Watch in 2026 and Beyond
- AMLD6 transposition: Member states must transpose the directive by 10 July 2027 — watch for early implementers creating higher national standards before the deadline.
- AMLA direct supervision: Beginning 2028, AMLA will directly supervise cross-border financial institutions. Expect harmonized reporting requirements that affect how investment migration funds are processed.
- Further EU high-risk list changes: Additional delegated regulations may expand or contract the list throughout 2026.
- EU Commission RBI legislative proposal: The Commission has signaled interest in regulating residency-by-investment via TFEU migration and internal-market articles — timing uncertain but potentially within this legislative cycle.
- Caribbean CBI reforms: The Eastern Caribbean CBI Authority continues to evolve regulatory standards for the region’s programs.
Bottom line: AML in investment migration has moved to a permanently higher bar. Programs and applications that succeed are those with clear, corroborated source-of-funds documentation and defensible risk-based rationales. If you are planning an investment-led pathway — whether in the EU or through Armenia’s residency-by-investment options and business setup services — build a robust compliance framework now and align documentation to these elevated standards.
