FATF 5th Round 2028: Preparation Roadmap for Japan

Compliance · June 2026 · RegTech

FATF’s 5th Round Mutual Evaluation methodology combines two assessment dimensions.

Japan’s 2021 Effectiveness Gaps: What the 5th Round Will Examine

The four areas where mid-market institution performance most significantly contributed to Japan’s 2021 effectiveness findings — and where the 5th Round will assess change — are:

Inconsistent application of the risk-based approach: many mid-market institutions were found to have risk assessment documents that did not genuinely inform operational controls. CDD tiers were applied uniformly regardless of assessed risk. Monitoring parameters were default vendor configurations. STR filing rates were inconsistent with assessed risk exposure. The 5th Round will assess whether this has been corrected.
STR filing quality and consistency: filing rates at mid-tier institutions were found to be inconsistent with their actual risk exposure, and the quality of information in filed STRs was variable. JAFIC STR statistics — disaggregated by institution tier — will be a direct input to the effectiveness assessment.
CDD quality below the Tier 1 bank level: CDD programme quality and consistency, particularly in beneficial ownership identification and periodic review, was a recurring finding below the megabank level. The March 2026 mandatory baseline addresses the standard required — but implementation must be evidenced through operational records.
Governance and board accountability: institutions that could not demonstrate meaningful board-level engagement with AML/CTF risk received adverse findings. The 2026 guideline revision strengthens documentation requirements — but meeting those requirements requires creating new governance processes and records, not simply updating policy documents.

The 24-Month Preparation Roadmap

Phase 1 — Months 1-6 (July-December 2026): Gap Assessment and Programme Design

The first phase establishes the baseline from which all remediation will be measured. Every action in subsequent phases depends on the quality and completeness of this assessment.

Conduct a comprehensive gap assessment against the March 2026 revised FSA guidelines. For each gap identified: document the specific regulatory basis, the operational implication, the risk significance, and a remediation target date. This is a substantive compliance project, not a self-assessment checklist.
Commission a technology assessment: evaluate whether current compliance infrastructure — transaction monitoring, PEP screening, STR management, case management — can generate the evidence quality the FATF effectiveness assessment requires. If not, identify the specific capability gaps and begin vendor evaluation.
Conduct a board governance review: assess current management information quality against the revised FSA governance requirements. Identify what needs to change in management reporting content, frequency, and board engagement process.
Begin vendor selection if technology upgrades are identified as necessary. Enterprise compliance platform procurement, contracting, and implementation take a minimum of six to nine months. Starting in the second half of 2026 means deployment in the first half of 2027 — which is necessary for the evidence-building timeline.

Phase 2 — Months 7-12 (January-June 2027): Remediation and Deployment

Phase 2 implements the remediation actions identified in Phase 1. The objective is to have upgraded infrastructure operational by June 2027, generating 12 to 14 months of performance data before the examination cycle begins.

Deploy upgraded compliance technology with Japan-specific configuration: domestic PEP database coverage, APTCP-aligned STR workflow, FSA reporting templates, and monitoring parameters calibrated to the revised risk assessment.
Implement the revised enterprise-wide risk assessment. Board approval is a required step — treat this as a substantive governance process, not an administrative sign-off.
Update CDD procedures to reflect the new mandatory baseline. For the existing customer book, conduct a systematic review to identify customers who may need re-classification, re-verification, or EDD that was not previously applied — particularly domestic PEP identification.
Establish new governance reporting structures. The revised FSA guidelines’ board accountability requirements are not satisfied by updating a policy document — they require new management information content and a new board engagement process to be operational and generating records.

Phase 3 — Months 13-18 (July-December 2027): Evidence Building

Phase 3 is critical. Upgraded infrastructure is operational. The objective is to accumulate 6 to 12 months of performance data that demonstrates operational effectiveness — the evidence the FSA will present to FATF assessors.

By July 2027, upgraded infrastructure should be generating meaningful performance data: alert volumes, false positive rates, STR filing rates and quality, alert resolution times, periodic review completion rates. This data is the core of the effectiveness evidence package.
Conduct an internal audit of the upgraded compliance programme against the FSA’s effectiveness assessment criteria. Document findings, remediation actions, and management responses — this audit report will itself be an examination evidence item.
Commission an independent effectiveness review modelled on FATF’s Immediate Outcomes assessment methodology. An experienced external reviewer will identify gaps that internal review may miss, and their findings are easier to remediate in 2027 than in 2028.

Phase 4 — Months 19-24 (January-June 2028): Examination Readiness

Phase 4 shifts from evidence building to examination preparation. The compliance programme is operating effectively. The objective is to ensure the institution can demonstrate that effectiveness credibly and efficiently when the FSA examination team arrives.

Compile the examination evidence package: governance records, risk assessment documentation, CDD sampling records, STR filing data and quality analysis, monitoring performance metrics, internal audit reports.
Conduct a dry-run effectiveness assessment with the compliance team, using the FSA’s effectiveness assessment framework and FATF’s Immediate Outcomes structure.
Brief the board on examination process, expected areas of scrutiny, and their specific role in governance evidence.
Establish the examination liaison team and internal coordination process — who manages FSA information requests, who is available for examination interviews, how document requests are tracked and fulfilled.

Why the preparation window matters

Evidence of effectiveness is built through time. A transaction monitoring system deployed in Q1 2027 cannot demonstrate 18 months of consistent STR filing history by Q3 2028. Governance records showing meaningful board engagement cannot be backdated. The preparation window that exists from July 2026 is the only window that generates the evidence base the 2028 examination requires. Institutions that begin preparation in 2027 will not have that evidence base.

Frequently Asked Questions

What is the FATF 5th Round Mutual Evaluation and when will it affect Japanese financial institutions?

Japan’s FATF 5th Round on-site inspection is scheduled for August 2028. It assesses both technical compliance and operational effectiveness. Financial institutions should be building operational effectiveness evidence from mid-2026 to ensure an adequate evidence base exists by the examination period.

What effectiveness gaps did Japan’s 2021 FATF evaluation identify at mid-market institutions?

Japan’s 2021 evaluation found: inconsistent risk-based approach application, STR filing rates inconsistent with assessed risk exposure, CDD quality gaps below the Tier 1 bank level, and insufficient board accountability for AML/CTF risk.

What is the key preparation action for mid-market institutions ahead of the FATF 5th Round?

The most critical action is deploying upgraded compliance infrastructure by June 2027 at the latest, generating 12 to 14 months of operational performance data before the examination cycle begins. A gap assessment against the March 2026 revised FSA guidelines, initiated in the second half of 2026, is the prerequisite.

Why does evidence of AML effectiveness need to be built over time?

FATF’s effectiveness assessment evaluates operational performance over the assessment period. STR filing rates, monitoring performance, and governance records from the examination period are direct inputs. A compliance system deployed in 2027 can only demonstrate effectiveness from its deployment date.

What should a 24-month FATF 2028 preparation plan include?

Gap assessment against March 2026 FSA guidelines (July-December 2026); technology deployment and risk assessment update (January-June 2027); independent effectiveness review and evidence compilation (July-December 2027); and examination readiness preparation including dry-run assessment and board briefing (January-June 2028).