FATF Effectiveness Assessment: Japan’s 2021 Gaps and What Mid-Market Banks Must Do

FATF's effectiveness assessment measures real outcomes, not framework existence. Japan's 2021 evaluation identified specific mid-market institution gaps that the 5th Round will reassess directly.

Compliance  ·  June 2026  ·  RegTech

FATF’s mutual evaluation methodology has two dimensions that measure different things.

FATF’s 11 Immediate Outcomes

FATF’s effectiveness assessment is structured around 11 Immediate Outcomes. Each measures a specific dimension of whether the AML/CTF framework produces intended results. The outcomes most directly relevant to mid-market financial institution compliance programme performance are:

  • IO.1: risks in the country are understood and coordinated action is taken to address them. Japan’s national risk assessment and the inter-ministerial coordination structure are assessed here.
  • IO.3: supervisors appropriately supervise and monitor financial institutions for AML/CTF compliance. The FSA’s examination effectiveness and follow-up on findings is assessed.
  • IO.4: financial institutions adequately apply preventive measures commensurate with their risks and report suspicious transactions. This is the outcome most directly controlled by individual institution compliance programmes.
  • IO.5: legal persons and arrangements are prevented from misuse, and beneficial ownership information is available without impediment. The quality of UBO identification and verification at financial institutions is assessed.
  • IO.6: financial intelligence and other relevant information are used by competent authorities for ML/TF investigations. The volume and quality of STRs filed by financial institutions directly feeds this outcome.
  • IO.7: ML offences and activities are investigated and prosecuted. While primarily assessed through law enforcement outcomes, STR quality at financial institutions is an input.

Japan’s 2021 Ratings and the Mid-Market Dimension

Japan’s 2021 evaluation produced effectiveness ratings across all 11 Immediate Outcomes. For IO.3, IO.4, IO.5, and IO.6, the ratings were moderate — with specific observations about performance variation between Japan’s largest institutions and the mid-tier.

The evaluation noted that while Japan’s megabanks generally demonstrated adequate risk-based approaches and reasonable compliance programme quality, institutions below the Tier 1 level showed significant variation in:

  • CDD quality and beneficial ownership verification completeness — not all institutions were tracing corporate ownership through to the ultimate individual controller.
  • STR filing consistency — mid-tier institution filing rates did not consistently reflect their assessed risk exposure, with some institutions filing very few STRs despite business models that would indicate material exposure.
  • Risk-based approach application — risk assessments existed but were not demonstrably informing CDD tier assignments, monitoring calibration, or resource allocation.

This institutional variation — driven primarily by infrastructure limitations and programme maturity gaps at mid-market institutions — contributed directly to the moderate effectiveness ratings that Japan received in the 2021 evaluation.

The Evidence Package That Influences Effectiveness Ratings

FATF assessment teams evaluate effectiveness through a combination of country-level evidence compiled by the FSA and individual institution documentation reviewed during on-site visits. The components that are directly influenced by individual institution compliance programmes include:

JAFIC STR Statistics

JAFIC’s aggregated STR statistics, submitted to FATF, are a key input to IO.6 and IO.4 assessments. The data is examined in aggregate and by institution tier — mid-market institution filing rates are analysed separately from megabank rates. An institution with filing rates inconsistent with its risk profile contributes negatively to the national statistics across the assessment period.

FSA Examination Findings

The FSA compiles examination findings from on-site inspections conducted during the assessment period and presents them to FATF assessment teams. An institution with outstanding adverse FSA examination findings — unresolved issues from inspections conducted in 2025, 2026, or 2027 — contributes to Japan’s adverse effectiveness data. Resolving examination findings is both a direct compliance priority and a contribution to Japan’s overall FATF preparation.

Institution-Level Documentation

During FATF on-site visits, assessment teams interview FSA supervisors and may review institution-level compliance documentation. Institutions selected for review that can demonstrate strong operational effectiveness — through system-generated performance data, quality STRs, consistent CDD records, and substantive governance documentation — contribute positively to Japan’s assessment.

What Mid-Market Institutions Must Do to Close the 2021 Gaps

Closing the effectiveness gap identified in 2021 requires action across three dimensions, each of which must be implemented and generating performance data before the 2028 examination cycle:

  • Genuine risk-based approach: the connection between risk assessment and operational controls must be documented, consistently applied, and evidenced. Monitoring calibration rationale must connect directly to risk assessment findings. CDD tier assignments must be traceable to the risk assessment. STR filing rates must be consistent with assessed risk exposure. All of this must be demonstrable from system records.
  • STR filing quality and consistency: filing rates must reflect the institution’s risk profile. Quality improvements — ensuring STRs contain actionable intelligence for JAFIC — require integrated STR workflows that support structured information collection rather than free-form narrative reports.
  • Evidence infrastructure: the compliance programme must generate system-documented, system-timestamped evidence of every material compliance decision. The FSA cannot assess effectiveness, and FATF assessment teams cannot draw positive conclusions, from manually compiled records with inconsistent quality and completeness.

Frequently Asked Questions

Technical compliance assesses whether Japan’s laws contain the right provisions. Effectiveness assessment asks whether those provisions produce real outcomes — whether CDD is applied consistently, whether monitoring detects genuine risk, whether STR filings are actionable.
The 2021 evaluation found: significant variation in CDD quality and beneficial ownership verification completeness; STR filing rates at mid-tier institutions inconsistent with assessed risk exposure; risk assessments not demonstrably connected to operational controls; and insufficient board accountability.
JAFIC’s aggregated STR statistics — disaggregated by institution tier — are a direct input to IO.6 and IO.4 assessments. Individual institutions with filing rates inconsistent with their risk profiles contribute negatively to national statistics over the assessment period.
The evidence package should demonstrate: a compliant risk assessment connected to operational controls, monitoring calibrated to the risk assessment, STR filing rates consistent with assessed risk exposure, consistent CDD records, and substantive governance documentation.
Immediately. Evidence of effectiveness is built through sustained operational performance over time. The preparation window that exists now cannot be recovered if action is delayed.

FATF Effectiveness Assessment Japan: 2021 Gaps & Actions | Nexiant

FATF’s 11 Immediate Outcomes framework, Japan’s 2021 effectiveness ratings, the mid-market dimension of those gaps, and what evidence mid-market institutions must build for the 2028 evaluation.

Speak to our team

This article was accurate at the time of publication in June 2026 and is intended for general informational purposes only. It does not constitute legal, regulatory or compliance advice. Organisations should seek qualified professional guidance in relation to their specific obligations.