FATF’s 11 Immediate Outcomes
FATF’s effectiveness assessment is structured around 11 Immediate Outcomes. Each measures a specific dimension of whether the AML/CTF framework produces intended results. The outcomes most directly relevant to mid-market financial institution compliance programme performance are:
- IO.1: risks in the country are understood and coordinated action is taken to address them. Japan’s national risk assessment and the inter-ministerial coordination structure are assessed here.
- IO.3: supervisors appropriately supervise and monitor financial institutions for AML/CTF compliance. The FSA’s examination effectiveness and follow-up on findings is assessed.
- IO.4: financial institutions adequately apply preventive measures commensurate with their risks and report suspicious transactions. This is the outcome most directly controlled by individual institution compliance programmes.
- IO.5: legal persons and arrangements are prevented from misuse, and beneficial ownership information is available without impediment. The quality of UBO identification and verification at financial institutions is assessed.
- IO.6: financial intelligence and other relevant information are used by competent authorities for ML/TF investigations. The volume and quality of STRs filed by financial institutions directly feeds this outcome.
- IO.7: ML offences and activities are investigated and prosecuted. While primarily assessed through law enforcement outcomes, STR quality at financial institutions is an input.
Japan’s 2021 Ratings and the Mid-Market Dimension
Japan’s 2021 evaluation produced effectiveness ratings across all 11 Immediate Outcomes. For IO.3, IO.4, IO.5, and IO.6, the ratings were moderate — with specific observations about performance variation between Japan’s largest institutions and the mid-tier.
The evaluation noted that while Japan’s megabanks generally demonstrated adequate risk-based approaches and reasonable compliance programme quality, institutions below the Tier 1 level showed significant variation in:
- CDD quality and beneficial ownership verification completeness — not all institutions were tracing corporate ownership through to the ultimate individual controller.
- STR filing consistency — mid-tier institution filing rates did not consistently reflect their assessed risk exposure, with some institutions filing very few STRs despite business models that would indicate material exposure.
- Risk-based approach application — risk assessments existed but were not demonstrably informing CDD tier assignments, monitoring calibration, or resource allocation.
This institutional variation — driven primarily by infrastructure limitations and programme maturity gaps at mid-market institutions — contributed directly to the moderate effectiveness ratings that Japan received in the 2021 evaluation.
The Evidence Package That Influences Effectiveness Ratings
FATF assessment teams evaluate effectiveness through a combination of country-level evidence compiled by the FSA and individual institution documentation reviewed during on-site visits. The components that are directly influenced by individual institution compliance programmes include:
JAFIC STR Statistics
JAFIC’s aggregated STR statistics, submitted to FATF, are a key input to IO.6 and IO.4 assessments. The data is examined in aggregate and by institution tier — mid-market institution filing rates are analysed separately from megabank rates. An institution with filing rates inconsistent with its risk profile contributes negatively to the national statistics across the assessment period.
FSA Examination Findings
The FSA compiles examination findings from on-site inspections conducted during the assessment period and presents them to FATF assessment teams. An institution with outstanding adverse FSA examination findings — unresolved issues from inspections conducted in 2025, 2026, or 2027 — contributes to Japan’s adverse effectiveness data. Resolving examination findings is both a direct compliance priority and a contribution to Japan’s overall FATF preparation.
Institution-Level Documentation
During FATF on-site visits, assessment teams interview FSA supervisors and may review institution-level compliance documentation. Institutions selected for review that can demonstrate strong operational effectiveness — through system-generated performance data, quality STRs, consistent CDD records, and substantive governance documentation — contribute positively to Japan’s assessment.
What Mid-Market Institutions Must Do to Close the 2021 Gaps
Closing the effectiveness gap identified in 2021 requires action across three dimensions, each of which must be implemented and generating performance data before the 2028 examination cycle:
- Genuine risk-based approach: the connection between risk assessment and operational controls must be documented, consistently applied, and evidenced. Monitoring calibration rationale must connect directly to risk assessment findings. CDD tier assignments must be traceable to the risk assessment. STR filing rates must be consistent with assessed risk exposure. All of this must be demonstrable from system records.
- STR filing quality and consistency: filing rates must reflect the institution’s risk profile. Quality improvements — ensuring STRs contain actionable intelligence for JAFIC — require integrated STR workflows that support structured information collection rather than free-form narrative reports.
- Evidence infrastructure: the compliance programme must generate system-documented, system-timestamped evidence of every material compliance decision. The FSA cannot assess effectiveness, and FATF assessment teams cannot draw positive conclusions, from manually compiled records with inconsistent quality and completeness.
Frequently Asked Questions
FATF Effectiveness Assessment Japan: 2021 Gaps & Actions | Nexiant
FATF’s 11 Immediate Outcomes framework, Japan’s 2021 effectiveness ratings, the mid-market dimension of those gaps, and what evidence mid-market institutions must build for the 2028 evaluation.
Speak to our teamThis article was accurate at the time of publication in June 2026 and is intended for general informational purposes only. It does not constitute legal, regulatory or compliance advice. Organisations should seek qualified professional guidance in relation to their specific obligations.




