- Banks now treat many CBI and dual-passport holders as high-risk, triggering enhanced due diligence (EDD) and tougher onboarding.
- EU court action and large-scale revocations have elevated AML, sanctions, and reputational risk perceptions across private banks and fintechs.
- A standardized source‑of‑wealth/provenance pack, aligned onboarding narrative, and proactive monitoring reduce de‑risking and account friction.
- Build a jurisdictional risk note per client (including Armenia ties where relevant), and pre‑clear with relationship banks to anticipate EDD questions.
- Use a coordinated playbook—watchlists, red‑flags, and remediation paths—to preserve optionality in investment migration portfolios.
Introduction
CBI banking compliance is under a microscope. After high‑profile rulings and revocations, KYC for CBI clients now entails deeper AML due diligence, more detailed source‑of‑wealth files, and closer scrutiny of dual‑citizenship risk. This guide distills a practical, bank‑ready playbook to minimize de‑risking pain while maintaining client optionality in investment migration strategies.
Table of Contents
- Regulatory crackdown on citizenship-by-investment (CBI) programs and why banks are reacting
- How global banks and wealth managers are reclassifying CBI and dual‑citizenship holders as high‑risk
- AML scale and typologies: misuse of CBI/RBI programmes and money‑laundering vulnerabilities
- What KYC and enhanced‑due‑diligence (EDD) banks now expect during onboarding
- Building source‑of‑wealth and provenance packs: standardized narratives
- Docs and red‑flags
- Jurisdictional risk notes and country guidance — practical considerations including Armenia‑centric risks
- Coordinating onboarding: aligning lawyers
Regulatory Crackdown on Citizenship-by-Investment (CBI) Programs and Why Banks Are Reacting
In April 2025, the EU's highest court ruled Malta's investor‑citizenship scheme unlawful, a watershed signal to compliance teams that CBI passports pose elevated regulatory, AML, and reputational risk across markets. The scale of such programs has been meaningful; Malta's scheme alone conferred nationality on more than 5,300 people and raised about €1.6 billion by late 2023. Meanwhile, Cyprus has revoked around 360 CBI citizenships since 2020, illustrating real, retroactive enforcement risk that banks cannot ignore.
Compliance and risk teams have responded by tightening onboarding and ongoing monitoring of CBI clients, viewing second passports obtained via investment as higher‑risk until proven otherwise.
How Global Banks and Wealth Managers Are Reclassifying CBI and Dual‑Citizenship Holders as High‑Risk
Across private banking hubs—Switzerland, the UAE, Singapore, and the EU—institutions have begun treating certain dual‑citizenship and second‑passport clients as high‑risk, triggering EDD, periodic reviews, and even account closures in some cases. This trend aligns with a broader "de‑risking" posture where onboarding hurdles increase unless the client can demonstrate transparent identity, clean lineage of funds, and robust tax/risk governance.
Practically, "high‑risk" flags can arise from: a CBI jurisdiction of nationality, inconsistencies between passports and tax residency, PEP/sanctions exposure, or opaque corporate structures—each of which invites deeper KYC for CBI profiles.
AML Scale and Typologies: Misuse of CBI/RBI Programmes and Money‑Laundering Vulnerabilities
International bodies have warned that investor‑migration channels can be misused by criminals and corrupt officials to launder large‑scale proceeds of crime, with risks reaching into the billions globally. Typologies relevant to banks include:
- Identity arbitrage: using alternative nationality and new identifiers to bypass controls or adverse media.
- Layering via opaque vehicles: mixing CBI with complex offshore structures to obscure ultimate beneficial ownership and source of funds.
- Sanctions and PEP evasion: exploiting increased mobility and weak due diligence in certain programs to evade detection.
These typologies explain heightened scrutiny of investment migration clients and sharpen banks' expectations for robust provenance evidence and ongoing monitoring.
What KYC and Enhanced‑Due‑Diligence (EDD) Banks Now Expect During Onboarding
Banks have raised the bar for KYC for CBI clients, with EDD commonly focusing on identity integrity, country risk, and clean wealth provenance. Expect requests for:
- Multi‑jurisdiction identity and residency verification (all passports, national IDs, visas, tax residency proofs).
- Detailed source‑of‑wealth (SoW) narrative and supporting contracts, registers, and filings.
- Source‑of‑funds (SoF) evidence for each deposit, including bank statements and transaction trails.
- Sanctions/PEP/adverse‑media screening, often supplemented by open‑source intelligence questions.
- Tax compliance confirmations aligning declared residencies, filing positions, and economic ties with the client's mobility profile.
EDD Item vs. Examples of Acceptable Proof
| EDD Requirement | Examples of Evidence Banks Accept |
|---|---|
| Identity and residency | All passports/IDs, visas, utility bills/leases, tax residency certificates |
| Source of wealth | Share registers, M&A/sale agreements, audited accounts, payroll/dividend records |
| Source of funds | Bank statements, SWIFT slips, escrow confirmations, notarized contracts |
| Reputation checks | PEP/sanctions screens, court records, compliance attestations |
Building Source‑of‑Wealth and Provenance Packs: Standardized Narratives
For CBI banking compliance, the single most effective friction‑reducer is a standardized SoW/SoF pack that addresses predictable EDD questions upfront. We recommend structuring it as follows:
- Executive profile: nationalities, tax residencies, PEP/sanctions statement, sectors of activity.
- Wealth story timeline: annotated milestones (business formation, major exits, real‑estate sales, inheritances, dividends) with dates and counterparties linked to evidence.
- Document bundle: corporate registries, audited financials, contracts, valuations, tax filings, bank statements cross‑referenced to the timeline.
- Economic‑tie map: residences, operating businesses, investments, and philanthropy that align with declared tax residencies.
- Adverse‑media rebuttals: short memoranda clarifying resolved disputes or misleading press, with documentary support.
Docs and Red‑Flags
For high‑risk onboarding, assemble a "no surprises" dossier and audit it against common red‑flags.
Core Documents (Prepare Originals and Certified Copies Where Available):
- All passports/IDs; CBI certificate or naturalization record; visas; tax residency certificates.
- Corporate documents: incorporation extracts, share registers, UBO charts, audited financials.
- Wealth proofs: sale/purchase agreements, inheritance/probate records, payroll/dividends, asset valuations, bank statements/SWIFTs tracing funds to origin.
- Reputation pack: sanctions/PEP screens, court search printouts, compliance letters, adverse‑media log with clarifications.
Red‑Flags to Pre‑Empt (and How to Mitigate):
- Identity arbitrage or inconsistent biodata across documents — reconcile names and dates; include official change‑of‑name certificates.
- Opaque wealth provenance — provide multi‑point corroboration (contracts, filings, bank trails) for each major wealth event.
- Sanctions/PEP exposure — include thorough screening and role descriptions; demonstrate risk controls and compliance history.
- Tax residency mismatch — present filing confirmations and economic ties that align with declared residencies.
Jurisdictional Risk Notes and Country Guidance — Practical Considerations Including Armenia‑Centric Risks
Banks evaluate country risk holistically. For clients with CBI or multi‑jurisdiction footprints, add a short "jurisdictional note" that clarifies:
- Why the CBI jurisdiction was selected (mobility, family reunification, investment thesis) and how it fits a transparent tax position.
- Where the center of vital interests and operating businesses actually are, and how those ties are evidenced (leases, payroll, corporate filings).
- Any exposure to higher‑risk geographies or sectors, with risk controls explained (governance, audits, independent valuations).
Where relevant, Armenia‑centric clients should clearly differentiate ordinary residency/citizenship and banking footprints from any separate CBI nationality, and present coherent tax documentation and business substance.
Coordinating Onboarding: Aligning Lawyers
Coordination with relationship banks and fintechs—before the file lands in compliance—reduces EDD friction. Industry advisers emphasize preparing detailed SoW narratives and standardized onboarding packages that anticipate bank questions for high‑risk clients. A practical, lawyer‑led playbook:
- Risk pre‑screen: sanctions/PEP checks, adverse‑media scan, and gap analysis against common red‑flags.
- Jurisdiction and bank targeting: shortlist institutions aligned with the client's risk profile and economic ties; avoid banks that categorically de‑risk CBI nationalities.
- Build the SoW/SoF pack: standardized narrative, document matrix, and cross‑referenced transaction trails.
- Pre‑engage compliance: share a sanitized outline for an informal read to surface likely EDD queries early.
- Submit and track: centralize Q&A; log clarifications; update the narrative to reflect answers and avoid inconsistencies.
- Ongoing monitoring: calendar periodic refreshes (IDs, tax proofs, beneficial‑ownership attestations) to avoid surprise reviews and de‑risking outcomes.
- Remediation playbook: if adverse signals arise (e.g., revocation in a program), be ready with corrective filings, alternative accounts, and updated tax/legal positions referencing the changed facts.
For clients combining mobility, investment, and asset protection objectives, complement the banking plan with well‑documented pathways for citizenship, visas, and investment choices that align with KYC/AML expectations.
Conclusion
In 2026, onboarding CBI clients under heightened scrutiny requires discipline: anticipate EDD, document wealth provenance thoroughly, and align onboarding narratives with banking partners. With a standardized pack and jurisdiction‑savvy guidance—including Armenia‑centric planning where relevant—you can reduce de‑risking, speed time‑to‑account, and safeguard flexibility in investment migration strategies. To build a tailored KYC for CBI roadmap, contact our team of licensed attorneys.
FAQ
CBI Client Onboarding Playbook — At a Glance
- Banks now treat most CBI and dual-passport holders as high-risk, triggering enhanced due diligence (EDD) and tougher onboarding worldwide.
- The CJEU’s April 2025 ruling against Malta’s CBI scheme and approximately 360 Cyprus revocations have elevated AML and reputational risk across private banks and fintechs.
- A standardized source-of-wealth and provenance pack, an aligned onboarding narrative, and proactive monitoring reduce de-risking friction and account delays.
- Armenia is not on any FATF grey or black list as of 2026. Armenian banks follow FATF-aligned KYC but have no CBI-specific restrictions, positioning Armenia as a pragmatic banking base for investment migration clients.
- Use a coordinated playbook with watchlists, red-flag mitigation, and remediation paths to preserve optionality in investment migration portfolios.
CBI banking compliance is under a microscope in 2026. After the EU’s highest court struck down Malta’s citizenship-by-investment program and Cyprus revoked hundreds of previously issued CBI citizenships, KYC for CBI clients now demands deeper AML due diligence, more detailed source-of-wealth files, and closer scrutiny of dual-citizenship risk. This guide provides a practical, bank-ready playbook to minimize de-risking while maintaining client optionality in investment migration strategies.
Whether you hold a Caribbean CBI passport, are exploring residence by investment in Armenia, or manage multi-jurisdiction banking relationships, the compliance landscape has shifted fundamentally. Understanding what banks expect and preparing accordingly is now essential.
Table of Contents
- Regulatory crackdown on CBI programs and why banks are reacting
- How banks reclassify CBI holders as high-risk
- AML typologies and international frameworks
- KYC and EDD requirements for CBI onboarding
- Building source-of-wealth and provenance packs
- Documentation checklist and red flags
- Armenian banking: what CBI clients should know
- Fintech and digital banking for CBI holders
- Jurisdictional risk notes
- Coordinating the onboarding process
- Frequently asked questions
Regulatory Crackdown on CBI Programs and Why Banks Are Reacting
On 29 April 2025, the Court of Justice of the European Union (Case C-181/23) ruled Malta’s investor-citizenship scheme unlawful, finding that “commercialising” citizenship violated EU treaty obligations under TEU Article 4(3) and TFEU Article 20. This watershed decision signaled to compliance teams worldwide that CBI passports carry elevated regulatory, AML, and reputational risk.
The scale of these programs has been significant. Malta’s scheme conferred citizenship on over 6,100 individuals (approximately 1,830 main applicants and 4,300 dependants) and generated more than €1.4 billion in revenue since its 2015 inception. The program was formally abolished following the CJEU ruling, making it the last EU-based CBI scheme to close. Meanwhile, Cyprus had already terminated its program and revoked approximately 360 CBI citizenships by September 2025 (101 investors and 259 family members), illustrating real, retroactive enforcement risk.
The EU’s 8th Visa Suspension Mechanism Report, published in December 2025, documented 107,625 CBI-obtained EU passports in circulation and 10,573 new applications in 2024 alone, explicitly naming CBI programs as a visa-free access trigger warranting continued scrutiny. All five Caribbean CBI programs (St. Kitts and Nevis, Dominica, Grenada, Antigua and Barbuda, and St. Lucia) remain active but now operate under the ECCIRA reform framework, which mandates biometric identification, enhanced due diligence standards, and pricing harmonization across jurisdictions.
How Banks Reclassify CBI Holders as High-Risk
Across private banking hubs in Switzerland, the UAE, Singapore, and the EU, institutions have begun treating certain dual-citizenship and second-passport clients as high-risk. This triggers enhanced due diligence, periodic reviews, and in some cases account closures. The trend aligns with a broader de-risking posture where onboarding hurdles increase unless the client demonstrates transparent identity, clean lineage of funds, and robust tax and risk governance.
No major bank publishes a CBI-specific EDD manual. Instead, CBI holders are folded into existing high-risk and PEP frameworks under FATF Recommendation 10. High-risk flags commonly arise from a CBI jurisdiction of nationality, inconsistencies between passports and tax residency, PEP or sanctions exposure, and opaque corporate structures. Each of these invites deeper KYC scrutiny for CBI profiles.
For clients exploring residency permits or visa options alongside CBI, coordinating banking access with immigration planning is increasingly important to avoid triggering conflicting risk signals at different institutions.
AML Typologies and International Frameworks
The primary international reference document remains the joint FATF-OECD report on “Misuse of Citizenship and Residency by Investment Programmes,” published on 22 November 2023. No standalone FATF typology paper specifically addressing CBI/RBI was published in 2024 or 2025; academic and industry references in this period consistently point back to the 2023 report.
CBI and RBI risks are integrated into broader FATF expectations under Recommendations 1 (risk assessment), 10 (customer due diligence), 12 (PEPs), and 19 (higher-risk countries). The typologies most relevant to banks include:
- Identity arbitrage: using alternative nationality and new identifiers to bypass controls or adverse media screening.
- Layering via opaque vehicles: mixing CBI with complex offshore structures to obscure ultimate beneficial ownership and source of funds.
- Sanctions and PEP evasion: exploiting increased mobility and weak due diligence in certain programs to avoid detection.
- Second citizenship as a red flag: FATF increasingly treats “second citizenship via investment” as an inherent risk indicator requiring enhanced verification.
The EU Anti-Money Laundering Authority (AMLA) has not issued standalone guidance targeting CBI holders specifically. CBI is addressed indirectly through the EU visa suspension mechanism and general AML/CTF policy frameworks.
KYC and EDD Requirements for CBI Onboarding
Banks have raised the bar for CBI client KYC, with EDD commonly focusing on identity integrity, country risk, and clean wealth provenance. Expect requests for:
- Multi-jurisdiction identity and residency verification (all passports, national IDs, visas, tax residency proofs).
- Detailed source-of-wealth (SoW) narrative and supporting contracts, registers, and filings.
- Source-of-funds (SoF) evidence for each deposit, including bank statements and transaction trails.
- Sanctions, PEP, and adverse-media screening, often supplemented by open-source intelligence.
- Tax compliance confirmations aligning declared residencies, filing positions, and economic ties with the client’s mobility profile.
- Senior management sign-off for high-risk onboarding decisions.
| EDD Requirement | Examples of Evidence Banks Accept |
|---|---|
| Identity and residency | All passports/IDs, visas, utility bills/leases, tax residency certificates |
| Source of wealth | Share registers, M&A/sale agreements, audited accounts, payroll/dividend records |
| Source of funds | Bank statements, SWIFT slips, escrow confirmations, notarized contracts |
| Reputation checks | PEP/sanctions screens, court records, compliance attestations, adverse-media log |
| Ongoing monitoring | Periodic ID refreshes, UBO attestations, transaction monitoring reports |
Building Source-of-Wealth and Provenance Packs
For CBI banking compliance, the single most effective friction-reducer is a standardized SoW/SoF pack that addresses predictable EDD questions upfront. Banks expect a layered approach that covers both immediate source of funds (dividends, asset sales, salary) and long-term source of wealth (business income, investments, inheritances).
We recommend structuring the pack as follows:
- Executive profile: nationalities, tax residencies, PEP/sanctions statement, sectors of activity.
- Wealth story timeline: annotated milestones (business formation, major exits, real-estate sales, inheritances, dividends) with dates and counterparties linked to evidence.
- Document bundle: corporate registries, audited financials, contracts, valuations, tax filings, bank statements cross-referenced to the timeline.
- Economic-tie map: residences, operating businesses, investments, and philanthropy aligned with declared tax residencies.
- Adverse-media rebuttals: short memoranda clarifying resolved disputes or misleading press, with documentary support.
Proactive disclosure is key. Early risk mapping that addresses PEP status, geographic exposure, sanctions, and complex ownership structures demonstrates good faith and typically accelerates compliance review.
Documentation Checklist and Red Flags
For high-risk onboarding, assemble a “no surprises” dossier and audit it against common red flags before submission.
Core documents (prepare originals and certified copies):
- All passports and national IDs, CBI certificate or naturalization record, visas, tax residency certificates.
- Corporate documents: incorporation extracts, share registers, UBO charts, audited financials.
- Wealth proofs: sale/purchase agreements, inheritance/probate records, payroll/dividend statements, asset valuations, bank statements and SWIFT confirmations tracing funds to origin.
- Reputation pack: sanctions/PEP screening results, court search printouts, compliance letters, adverse-media log with clarifications.
Red flags to pre-empt and mitigate:
- Identity arbitrage or inconsistent biodata: reconcile names and dates across documents; include official change-of-name certificates where applicable.
- Opaque wealth provenance: provide multi-point corroboration (contracts, filings, bank trails) for each major wealth event.
- Sanctions or PEP exposure: include thorough screening results and role descriptions; demonstrate risk controls and compliance history.
- Tax residency mismatch: present filing confirmations and economic ties that align with declared residencies.
- Complex offshore structures: provide clear UBO charts with rationale for each layer; avoid structures that lack genuine commercial purpose.
Armenian Banking: What CBI Clients Should Know
Armenia is not on any FATF grey list or black list as of 2026. The country is a Moneyval member actively implementing AML/CFT reforms; a 6th Round Moneyval on-site evaluation was conducted in September–October 2025, with the report expected in 2026. Armenian banks strongly rely on FATF-aligned policies, meaning KYC procedures mirror international standards.
Crucially, the Central Bank of Armenia (CBA) has not issued any regulation specifically targeting CBI passport holders. Risk-based controls at Armenian banks focus on country risk (with enhanced scrutiny for clients connected to Syria, Iran, and certain other jurisdictions), customer type, UBO identification, and PEP status — not the method by which citizenship was acquired. Dual citizens are captured through standard UBO and identification rules without being classified as a separate risk category.
For foreign nationals opening bank accounts in Armenia, key requirements include:
- In-person presence (or notarized power of attorney) — remote non-resident onboarding is generally not available.
- A Personal Social Number (PSN), obtainable from the Migration and Citizenship Service by any foreigner physically present in Armenia.
- Standard KYC: passport, proof of address, source-of-funds documentation; an Armenian TIN is typically required.
- Processing timeline: 4–14 business days with enhanced KYC for foreign nationals.
Armenia participates in CRS/AEOI (automatic exchange of financial account information) since 2025, with 47 partner jurisdictions. The country is also FATCA-compliant, meaning US persons must provide W-9 or W-8 forms when opening accounts. Deposit insurance covers AMD 16,000,000 (~$40,500 USD) for AMD deposits and AMD 7,000,000 (~$17,700 USD) for foreign currency deposits — applying to individuals and individual entrepreneurs only. Corporate deposits are not covered.
Since January 2026, new cryptocurrency businesses must hold a CBA license. Incumbent providers operating before the July 2025 law have a transition deadline of 31 January 2027. Seventeen banks currently operate in Armenia under CBA supervision.
Fintech and Digital Banking for CBI Holders
Major fintech platforms such as Wise, Revolut, N26, and Payoneer do not publish explicit CBI-specific onboarding policies. These platforms apply standard KYC procedures including identity verification, proof of address, and sanctions/PEP screening to all customers. However, general e-KYC tightening across the fintech sector makes it progressively harder for clients with complex multi-jurisdiction profiles to pass automated verification.
CBI holders considering fintech accounts should be aware that algorithmic risk scoring may flag CBI-jurisdiction passports, dual-nationality combinations, or mismatches between stated residence and transaction patterns. While no fintech has publicly announced a blanket CBI exclusion, anecdotal reports of account restrictions or closures exist. Maintaining clear, consistent documentation across all platforms and proactively addressing any compliance queries reduces the likelihood of disruptions.
Jurisdictional Risk Notes
Banks evaluate country risk holistically. For clients with CBI or multi-jurisdiction footprints, prepare a short jurisdictional note that clarifies:
- Why the CBI jurisdiction was selected (mobility, family reunification, investment thesis) and how it fits a transparent tax position.
- Where the center of vital interests and operating businesses are located, and how those ties are evidenced (leases, payroll, corporate filings).
- Any exposure to higher-risk geographies or sectors, with risk controls explained (governance, audits, independent valuations).
Armenia-centric clients should clearly differentiate ordinary residency, citizenship, and banking footprints from any separate CBI nationality. Present coherent tax documentation and business substance that demonstrates genuine ties to Armenia independent of any CBI holding.
Coordinating the Onboarding Process
Coordination with relationship banks and fintechs — before the file lands in compliance — reduces EDD friction significantly. A practical, lawyer-led playbook:
- Risk pre-screen: sanctions/PEP checks, adverse-media scan, and gap analysis against common red flags.
- Jurisdiction and bank targeting: shortlist institutions aligned with the client’s risk profile and economic ties; avoid banks that categorically de-risk CBI nationalities.
- Build the SoW/SoF pack: standardized narrative, document matrix, and cross-referenced transaction trails.
- Pre-engage compliance: share a sanitized outline for an informal read to surface likely EDD queries early.
- Submit and track: centralize Q&A, log clarifications, and update the narrative to reflect answers and avoid inconsistencies.
- Ongoing monitoring: calendar periodic refreshes (IDs, tax proofs, beneficial-ownership attestations) to avoid surprise reviews and de-risking outcomes.
- Remediation playbook: if adverse signals arise (e.g., revocation in a program), prepare corrective filings, alternative accounts, and updated tax/legal positions referencing the changed facts.
For clients combining mobility, investment, and asset protection objectives, complement the banking plan with well-documented pathways for citizenship, visas, and residence by investment that align with KYC/AML expectations.
In 2026, onboarding CBI clients under heightened scrutiny requires discipline: anticipate EDD, document wealth provenance thoroughly, and align onboarding narratives with banking partners. With a standardized pack and jurisdiction-savvy guidance — including Armenia-specific planning where relevant — you can reduce de-risking, speed time-to-account, and safeguard flexibility in investment migration strategies.
