Qatar Strengthens Risk-Based Approach to AML Controls in the Charitable Sector

Qatar is placing greater emphasis on risk-based anti-money laundering and counter-terrorist financing controls within the country's non-profit sector, as authorities seek to strengthen the protection of charitable organisations from financial crime while ensuring that legitimate humanitarian activities can continue without unnecessary disruption.

The Regulatory Authority for Charitable Activities organised a dedicated forum to examine the implications of the latest update to Qatar's national assessment of money laundering and terrorist financing risks for non-profit organisations. The discussions focused on governance, transparency, financial integrity and the practical application of risk-based controls within charitable organisations.

The forum comes as Qatar updates its assessment of national money laundering, terrorist financing and proliferation financing risks for the 2020–2024 period. The assessment is intended to provide authorities and regulated sectors with a clearer understanding of emerging vulnerabilities and areas where existing safeguards may require strengthening.

For the charitable sector, the exercise is particularly important because non-profit organisations can face distinctive financial-crime risks. Charities frequently receive and distribute funds across borders, work with large networks of partners and suppliers, operate in jurisdictions with varying levels of financial transparency and may handle significant volumes of donations intended for humanitarian or development purposes.

These characteristics can expose organisations to risks involving the misuse of funds, fraudulent activity, money laundering and terrorist financing. At the same time, excessive or poorly targeted controls can create unnecessary obstacles for legitimate charitable activity.

The approach being promoted in Qatar is therefore based on proportionality. Rather than requiring every organisation or transaction to be subjected to the same level of scrutiny, non-profit organisations are encouraged to identify their particular risks and apply controls corresponding to those risks.

A central theme of the forum was the importance of risk-based self-assessment. Charities are expected to understand the risks associated with their activities, geographical exposure, partners, beneficiaries, suppliers and financial flows and then develop appropriate measures to address those risks.

This approach places greater responsibility on individual organisations to understand their own risk profiles rather than relying exclusively on external supervision.

The updated national risk assessment is intended to provide a broader framework for that process. By connecting national-level findings with sector-specific assessments and the internal assessments conducted by individual organisations, charities can identify where their exposure may be greatest and direct compliance resources accordingly.

The framework also recognises that risks are not evenly distributed. A charity operating exclusively within Qatar may face a different risk profile from an organisation financing projects across multiple countries, particularly where funds are transferred to regions with higher levels of financial crime or terrorist-financing exposure.

International operations therefore require careful consideration of the countries involved, local partners, payment channels and ultimate beneficiaries of charitable funds.

Due diligence is another important element of the framework. Organisations need to establish appropriate procedures for assessing partners and other counterparties before entering into relationships and throughout the duration of those relationships.

The forum highlighted practical experience from major Qatari charitable organisations in developing these controls. One example involved the use of artificial intelligence to support compliance and risk management activities across humanitarian and development operations.

AI-based systems can assist organisations in assessing country risks, conducting due diligence on partners, screening suppliers and supply chains, monitoring projects and preparing oversight reports. Used appropriately, these technologies can allow organisations to process larger volumes of information and identify potential risk indicators more efficiently.

However, technological tools are not intended to replace human oversight. The responsible use of AI requires appropriate governance, controls and supervision, particularly when systems are being used to assess organisations, individuals or transactions.

The principle of proportionality remains important. Compliance resources should be concentrated on activities presenting the greatest risks rather than distributed equally across all operations.

This can be particularly valuable for charitable organisations, which often operate with limited resources and need to balance administrative expenditure with their humanitarian objectives. A risk-based system allows organisations to focus enhanced controls on areas where the potential exposure is greatest while avoiding unnecessary procedures for lower-risk activities.

The Qatar Red Crescent Society also presented its methodology for conducting internal assessments of money laundering and terrorist financing risks. The approach includes identifying relevant risk factors, assessing their significance and establishing preventive and supervisory measures according to the resulting risk profile.

Such self-assessment processes can provide organisations with an early-warning mechanism. Instead of waiting for a regulator or financial institution to identify weaknesses, a charity can periodically evaluate its own operations and determine whether existing controls remain appropriate.

The wider regulatory framework also depends on cooperation between different government bodies. Qatar's National Anti-Money Laundering and Terrorism Financing Committee has a coordinating role in supporting cooperation among national authorities and promoting joint efforts to reduce money laundering and terrorist financing risks.

This coordination is increasingly important as financial crime becomes more complex and transactions become more international. Charitable organisations may operate through banks, payment providers, foreign partners and suppliers in several jurisdictions, meaning that effective oversight cannot depend on a single institution.

The emphasis on the non-profit sector also reflects broader international AML and CFT standards. FATF frameworks recognise that non-profit organisations can face potential terrorist-financing risks while also stressing the importance of ensuring that measures designed to mitigate those risks do not unnecessarily disrupt or discourage legitimate charitable activity. Qatar's broader AML framework has similarly moved towards a risk-based model for supervision and assessment.

For charities, this means that compliance is increasingly becoming an integral part of operational governance rather than simply a regulatory obligation.

Organisations will need to maintain appropriate policies covering areas such as partner due diligence, financial controls, transaction monitoring, record keeping, risk assessment and the escalation of suspicious activity.

Board-level oversight is also likely to become increasingly important. Senior management and governing bodies need to understand the organisation's principal financial-crime risks and ensure that adequate resources are allocated to managing them.

The emphasis on governance is particularly relevant where charities operate internationally. A strong internal control environment can help organisations demonstrate to regulators, banks, donors and international partners that funds are being used for legitimate purposes and that reasonable safeguards exist against misuse.

Financial institutions may also take greater interest in the quality of a charity's compliance framework. Banks and other financial service providers are themselves subject to AML obligations and may assess the risk associated with customers operating in the non-profit sector. Organisations with clearly documented risk assessments and effective due-diligence procedures may therefore be better positioned to maintain banking relationships and conduct international transfers efficiently.

The development of these standards does not necessarily mean that charitable organisations will face blanket restrictions. On the contrary, the risk-based model is designed to distinguish between higher-risk and lower-risk activities and to avoid imposing identical requirements on organisations with very different exposure profiles.

This distinction is particularly important for humanitarian organisations. International aid operations can involve emergency transfers, unfamiliar counterparties and work in difficult jurisdictions, all of which may increase financial-crime risks while also making conventional due-diligence processes more challenging.

A proportionate framework allows organisations to recognise these risks without treating every transaction or partner as inherently suspicious.

The latest initiative therefore represents an attempt to strike a balance between two objectives: protecting the charitable sector from exploitation and preserving its ability to provide legitimate humanitarian assistance.

As Qatar continues strengthening its national AML and CFT framework, non-profit organisations are likely to face increasing expectations around transparency, risk management and demonstrable compliance. At the same time, regulators appear to be placing greater emphasis on practical guidance and risk-sensitive supervision rather than purely prescriptive controls.

For the charitable sector, the message is increasingly clear: effective AML and CFT compliance should begin with understanding the organisation's actual exposure to risk. Once those risks have been identified, controls can be designed around the nature and scale of the organisation's activities.

The latest forum provides another indication that Qatar is seeking to develop a more sophisticated compliance environment in which national risk assessments, sector-specific vulnerabilities and individual organisational assessments are connected.

For charities operating domestically or internationally, this approach is likely to make risk assessment, due diligence and financial governance increasingly important components of day-to-day operations, while helping ensure that stronger financial-crime safeguards do not come at the expense of legitimate charitable and humanitarian work.

By fLEXI tEAM