Estonia — Country Risk Report

Estonia (Europe • Northern Europe). Risk report as of the 19 Jun 2026 FATF plenary.

Moderate country risk, with AML/CFT effectiveness gaps. Estonia's country risk score is 4.1/10, placing it in the moderate-risk band. The principal score driver is AML/CFT effectiveness, contributing 2.6 of 4.1 points. Separately, the treatment overlays show that Estonia is not currently FATF grey- or black-listed, and that Estonia is not subject to comprehensive country-wide sanctions and has no direct country-level programme identified. Firms should apply additional scrutiny where exposure involves state-linked entities, restricted sectors, sensitive technology, dual-use goods or politically exposed counterparties.

Recommended treatment

Standard due diligence for most relationships, with enhanced checks where defined risk triggers are present.

At a glance

  • FATF status: Not currently listed (one indicator only; it does not set the overall country risk rating by itself)
  • No direct country-level sanctions programme identified; sanctions remain a legal treatment overlay and applicable lists must still be screened.
  • Governance and institutions: 2.0/10
  • Corruption (CPI 2025): 76/100, rank #12 of 182
  • Enforcement data: not yet assessed (no RegActions coverage)

Country Risk Score: 4.1/10 (Moderate)

Higher score means higher country risk (global average 5.5). Full information available. Composite score. Strong supporting evidence. Enforcement activity and CPI are context only; FATF listing and sanctions are regulatory overlays except the labelled FATF listing status used where no mutual evaluation exists.

All three underlying risk pillars are available. All three underlying risk pillars are available and weighted using the published formula. Weight sensitivity 3.9–4.2/10.

How this score was calculated

  • AML/CFT effectiveness: 5.8/10 — 45% of this score
  • Technical compliance: 3.7/10 — 20% of this score
  • Governance and institutions: 2.0/10 — 35% of this score

Sanctions treatment: No direct programme identified. FATF treatment: none.

Show the exact calculation

effectiveness 5.8 × 45% + safeguards 3.7 × 20% + governance 2 × 35% = 4.1; sanctions and FATF listing are overlays except a labelled FATF listing substitute where no mutual evaluation exists

Principal risk drivers

  • AML/CFT effectiveness: 5.8/10 × 45% = 2.6 points
  • Technical compliance: 3.7/10 × 20% = 0.7 points
  • Governance and institutions: 2.0/10 × 35% = 0.7 points

Mitigating factors

  • Not currently on the FATF grey or black list.
  • No comprehensive country-wide sanctions programme.
  • Comparatively stronger rule of law and institutions (1.7/10).
  • Risk is concentrated in specific counterparties, sectors and transactions rather than applying uniformly.

Business impact

  • Customer onboarding (Standard): Verify ultimate beneficial ownership and control from more than one source.
  • Payments and transactions (Elevated): Review transaction purpose, counterparties and the full payment routing.
  • Trade and export activity (Elevated): Screen goods, end users and potential dual-use exposure.
  • Corporate clients (Standard): Assess state ownership, government links and political exposure.
  • Ongoing monitoring (Elevated): Alert on ownership changes, new designations and status changes.

Recommended controls

  • Verify ultimate beneficial ownership using more than one reliable source.
  • Identify state ownership, government influence and politically exposed persons.
  • Screen entities, directors and beneficial owners against applicable sanctions lists.
  • Apply enhanced review to technology, defence, telecommunications, financial services and dual-use activity.
  • Document transaction purpose and source of funds where cross-border structures are complex.
  • Escalate unresolved ownership opacity or adverse information to Compliance.

Enhanced due diligence triggers

  • State ownership / control
  • PEP involvement
  • Sensitive / restricted sectors
  • Opaque ownership
  • Adverse media
  • Dual-use goods & technology
  • High-risk intermediary routing

FATF status: Not currently listed

Estonia is not on the FATF grey or black list as of the 19 Jun 2026 plenary.

Source details

International sanctions by issuing body

  • UN: No
  • EU: No
  • UK: No
  • US: No

No means the complete UN, UK, EU and US review found no direct country-level programme. People or organisations may still appear on sanctions lists.

Government effectiveness and rule of law (World Bank 2024, percentile)

  • Government Effectiveness: 77/100
  • Regulatory Quality: 77/100
  • Rule of Law: 83/100

Regulators and legal framework

FATF network

FATF network via MONEYVAL.

Last mutual evaluation: 2023 · report

National regulators

Regulator profiles not yet available on RegActions.

FIU: Egmont Group member (Estonian FIU)

Framework signals

  • FATF listing: Not currently listed
  • International sanctions: no direct country programme identified (legal treatment overlay remains applicable)
  • BO register: Public (live since 2018)
  • Corruption (CPI 2025): 76/100, rank #12 of 182
  • Rule of law (WGI): 2.1/10 risk

Regulatory ecosystem and enforcement visibility

This evidence map is separate from Country Risk v3. It describes official mandates, publication access and RegActions coverage; it does not judge regulatory strength or add points to country risk.

Transparency Index: not scored · Evidence disposition: local-authority-evidence · Mapped official authorities: 3.

Evidence level: Level 1: Identity confirmed. The ladder uses the authority evidenceLevel schema directly and does not infer a level from a URL, site access or RegActions feed count.

  1. 1. Identity confirmed — The authority and its mandate are evidenced by official directory provenance.
  2. 2. Regulatory activity visible — A qualified authority-owned route has provisional dated activity in the first-page scan.
  3. 3. Enforcement visible — A qualified authority-owned enforcement route has provisional dated activity in the first-page scan.
  4. 4. Score eligible — Shown only when the authority evidence schema explicitly records score-eligible; no authority currently does.
How to read activity and enforcement visibility

Only qualified authority-owned routes can support Level 2 or Level 3. External official context and unqualified candidates do not promote the evidence level. Blocked and unavailable sources remain unknown.

Enforcement visibility: No authority is classified enforcement-visible or score-eligible in the authority evidence schema. Enforcement visibility remains unknown or limited to identity/activity evidence; this is not evidence of no enforcement.

Authorities and mandate evidence

Download regulatory ecosystem PDF · CSV · JSON

Sector exposure

  • Banking & payments (Low): No FATF overlay and governance pillar within normal range
  • Trade & export controls (Low): No direct sanctions or FATF call-for-action overlay identified
  • Crypto & virtual assets (Low): No FATF overlay and effectiveness pillar within normal range
  • Real estate & luxury assets (Low): Beneficial-ownership and governance signals are within normal range
  • State-linked & procurement (Low): Current risk pillars show no elevated procurement signal

Derived from sanctions tier, FATF listing, World Bank WGI governance and CPI; no per-sector dataset is asserted.

Estonia: analysis

Estonia's profile reflects its governance indicators alone, with no FATF or sanctions overlay. Corruption is the strongest domain, consistent with the country's high CPI ranking globally. Rule of law and institutions, voice and accountability and political stability are similarly rated. All domains are tightly clustered in the low-risk range. Estonia is not on the FATF grey or black list and faces no sanctions exposure. The CPI reading is among the strongest in this batch and confirms the integrity of Estonia's institutional environment.

Outlook

Estonia's risk profile is stable and well-grounded within EU and FATF frameworks. The country's governance indicators have been consistently strong. No enforcement data are available for this assessment period, which does not alter the overall risk picture. No escalation triggers are in prospect.

Key watchpoints

  • Monitor any AML-related supervisory guidance or enforcement activity from Estonian financial regulators.
  • Track EU AML framework developments applicable to Estonia as an EU member state.
  • Review annual CPI and WGI updates to confirm the continued low-risk trajectory.
  • Watch for FATF mutual evaluation findings or any future changes in listing status.

Assessment currency

  • FATF status: Not listed (as of 19 Jun 2026)
  • Sanctions exposure: None identified (as of Jul 2026)
  • Governance (WGI): Latest dataset incorporated (as of 2024)
  • Corruption (CPI): 76/100 (as of 2025)
  • RegActions assessment: Reviewed (as of 19 Jun 2026)

Public evidence layer

FATF action: none. No FATF call-for-action or increased-monitoring status was identified at the latest plenary. This does not establish low risk.

Contextual signals (not scored)

  • FATF network membership: FATF regional network: MONEYVAL (present, as of 2026-07)
  • EU non-cooperative tax jurisdictions: Not listed in Annex I (absent, as of 2026-02-17)
  • Egmont Group FIU: Estonian FIU (present, as of 2026-07-17)
  • Beneficial-ownership register: Public (live since 2018) (present, as of 2026-08-23)
  • Transparency International CPI: 76/100, rank 12 (present, as of 2025)

Evidence freshness

  • FATF monitored-jurisdiction status: current; data 2026-06-19
  • FATF mutual evaluation and follow-up ratings: current; data 2026-08-24; follow-up 2025-12; base assessment 2023-01
  • World Bank governance indicators: current; data 2024
  • UN, UK, EU and US sanctions regimes: current; data 2026-08-30

Contextual signals are public evidence only and do not change the current country-risk score.

Download evidence PDF · CSV · JSON

Contextual risk evidence (not scored)

These eight evidence families provide context only. They do not change the v3.1 headline score. Unavailable means no reviewed, country-comparable evidence is currently ingested; it does not mean the risk is absent.

  • Organised crime: Not available. No reviewed country-level organised-crime dataset is currently checked in; no risk value is inferred. Candidate sources are research leads only; they have not been ingested as evidence.
  • Fraud and cybercrime: Not available. No reviewed country-level fraud or cybercrime dataset is currently checked in; no risk value is inferred. Candidate sources are research leads only; they have not been ingested as evidence.
  • Terrorism and proliferation financing: Not available. No reviewed country-comparable terrorism/proliferation threat dataset is currently checked in; FATF listing status remains a separate overlay. Candidate sources are research leads only; they have not been ingested as evidence.
  • Trafficking: Not available. No reviewed country-level trafficking dataset is currently checked in; no risk value is inferred. Candidate sources are research leads only; they have not been ingested as evidence.
  • Financial secrecy and offshore exposure: Not available. No reviewed, licence-clean financial-secrecy index is currently checked in; jurisdiction type alone is not used as a proxy. Candidate sources are research leads only; they have not been ingested as evidence.
  • Tax cooperation: Not listed in EU Annex I. Annex I is a political/legal tax-cooperation list, not a general AML, corruption, or country-risk score. Source
  • Political stability and conflict: 78/100 WGI percentile. WGI is an institutional perception indicator, not a conflict event feed or a prediction of future violence. Source
  • Beneficial ownership: Register accessible for due diligence. The Open Ownership map is a live-register snapshot and absence means no register was identified in that snapshot, not that no register exists. Source

Regional peer scores

FAQ

Is Estonia on the FATF grey list?

No. Estonia is not on the FATF grey or black list as of the 19 Jun 2026 plenary. FATF listing is one AML indicator; absence from the list does not by itself make Estonia low risk. The next FATF plenary review is scheduled for Oct 2026.

Is Estonia subject to sanctions?

No country-level programme was identified. In the approved RegActions snapshot, no comprehensive or targeted country-wide sanctions programme was found for Estonia, but individual listed persons may still exist, so firms should continue to screen counterparties against the applicable lists.

What is Estonia's country risk rating?

RegActions rates Estonia at 4.1/10 (Moderate risk), where a higher score means higher country risk. The v3 score combines AML/CFT effectiveness, technical compliance, and governance and institutions. FATF listing and sanctions are shown as overlays and do not add points. Transparency International's 2025 Corruption Perceptions Index scores Estonia 76/100 (rank #12 of 182) as context only.

What due diligence applies to Estonia?

Standard due diligence for most relationships, with enhanced checks where defined risk triggers are present. This is decision-support based on Estonia's FATF status, governance and sanctions signals, and is not a substitute for a firm's own risk assessment.

Source: FATF black & grey lists · World Bank WGI (CC BY 4.0 — World Bank WGI) · TI CPI (CC BY-ND 4.0 — Transparency International, display only)