1. Programme Legitimacy and Sovereign Risk
Not all investment migration programmes carry equal legal weight. The distinction between a legislated framework and an administrative scheme matters when a programme faces political headwinds.
What to verify:
Confirm the programme operates under formal legislation passed by the sovereign parliament — not merely an executive order or ministerial decree. Grenada's CBI, for example, is authorised under the Grenada Citizenship-by-Investment Act, with eligibility criteria, due diligence standards, and administrative authority codified in statute. Malta's former CBI programme was repealed in 2025 following an EU court ruling; its replacement, operating under Article 10(9) of the Maltese Citizenship Act (Chapter 188) and Subsidiary Legislation S.L. 188.06 (Legal Notice 159 of 2025), is classified as a discretionary naturalisation pathway — a fundamentally different legal instrument.
Key risk indicators:
Programme thresholds, eligibility criteria, or processing rules that change frequently without legislative process signal sovereign risk. Portugal's Golden Visa eliminated most real estate routes in October 2023 under the More Housing reform (Law 56/2023). Greece overhauled its pricing in September 2024 with a zone-based system pushing Athens-area thresholds to €800,000. Hungary abolished its €500,000 direct real estate route in January 2025. Investors who assume static programme rules risk finding their pathway altered or eliminated mid-process.
2. Regulatory and Supranational Pressure
The international regulatory environment has shifted from advisory to adversarial for CBI/RBI programmes.
EU and CJEU Actions
No EU member state now offers citizenship by investment. Montenegro, a candidate country, abandoned its programme to align with EU requirements. The European Parliament proposed a Union-wide phaseout of CBI schemes reaching zero issuances by 2025. The EU's ETIAS (European Travel Information and Authorization System) is set to launch in late 2026 and become mandatory by October 2027 — one-third of investment migration executives believe it will become a mechanism for discriminating against CBI passport holders, introducing pre-screened entry that could transform visa-free access into something more conditional.
US Six CBI Principles
The United States has formalised its expectations for Caribbean programmes through the Six CBI Principles, focusing on biometric screening, data sharing, and regular audits. Countries failing to meet security benchmarks face visa restrictions. Dominica lost visa-free access to the United Kingdom and Ireland in 2024. The US maintains a list of 36 countries with potential travel bans, including four Caribbean CBI states.
Vanuatu Precedent
Vanuatu's programme, once the Pacific's most established, suffered a permanent EU visa ban in December 2024 and UK visa requirements imposed in July 2023 after due diligence failures. Revenue declined 50% from peak levels. This is the most concrete example of how supranational sanctions can collapse a programme's core value proposition overnight.
Regulatory Body | Action | Impact |
EU Court of Justice | Banned EU citizenship-by-investment (Malta ruling, April 2025) | No CBI routes remaining in the EU |
European Commission | ETIAS launch late 2026, mandatory October 2027 | Potential conditional entry screening for CBI passport holders |
United States | Six CBI Principles; visa restrictions for non-compliant states | Biometric, audit, and data-sharing benchmarks required |
United Kingdom | Revoked visa-free access for Dominica (2024) | Precedent for unilateral mobility downgrades |
OECD / FATF | Report documenting money laundering through CBI channels | Enhanced international cooperation on screening |
3. Tax Transparency and Cross-Border Reporting Obligations
Acquiring a second citizenship or residence does not create a new tax shelter. It creates new reporting obligations.
FATCA (US Persons)
The Foreign Account Tax Compliance Act requires foreign financial institutions to report accounts held by US persons to the IRS. Non-compliance triggers a 30% withholding tax on certain US-sourced payments. Civil penalties for unreported accounts start at $10,000 per violation and escalate to $50,000 for continued non-compliance. Criminal prosecution remains possible in cases of wilful violation. US persons holding foreign financial assets exceeding $50,000 (or $200,000/$400,000 for overseas filers) must report on Form 8938 in addition to the FBAR (FinCEN Form 114).
CRS (Global)
The OECD's Common Reporting Standard now covers over 120 jurisdictions. Unlike FATCA, CRS focuses on tax residency rather than citizenship, has no de minimis threshold for individual accounts, and applies to virtually all foreign financial relationships. Financial institutions must identify customers' tax residency status and report accounts held by non-residents — automatically, annually, and without the account holder's permission.
The CBI-Specific Risk
The OECD specifically monitors CBI/RBI schemes that may be misused to circumvent CRS. Acquiring citizenship in a low-tax jurisdiction does not change your CRS reporting obligations if your centre of vital interests, habitual abode, or 183-day presence remains in your original jurisdiction. Misrepresented tax residency can result in back taxes, interest, and criminal prosecution.
Framework | Scope | Trigger | Penalty Baseline |
FATCA | US persons globally | Foreign financial assets > $50,000 | $10,000 per unreported account |
FBAR | US persons globally | Foreign accounts > $10,000 aggregate | $10,000 (non-wilful); up to $100,000 or 50% of account (wilful) |
CRS | 120+ jurisdictions | Tax residency outside account jurisdiction | Varies by jurisdiction; no global minimum |
OECD CBI/RBI Monitoring | High-risk CBI/RBI schemes | Residence/citizenship obtained by investment | Enhanced due diligence and information exchange |
4. ECCIRA and the Caribbean Regulatory Overhaul
The Eastern Caribbean Citizenship by Investment Regulatory Authority (ECCIRA) represents the most significant structural change to Caribbean CBI since the programmes began. Five jurisdictions — Antigua and Barbuda, Dominica, Grenada, St. Kitts and Nevis, and St. Lucia — have signed the founding agreement. Headquarters will be in Grenada. Operations are expected by mid-2026 (revised from the initial April 2026 target).
What Changes for Investors
Mandatory residency: Approved applicants must spend at least 30 days in their citizenship country within five years, including a minimum of five days in the first year, plus participation in an integration or orientation programme. This requirement has been delayed to mid-2026 pending Saint Lucia's ratification following its December 2025 general election. Applications approved before implementation are not expected to be subject to retroactive residency requirements.
Mandatory interviews: All applicants and adult dependants will undergo in-person or virtual interviews as part of the due diligence process.
Unified exclusion policy: Applicants rejected by one participating state cannot apply to another, eliminating jurisdiction shopping.
Regional pre-qualification: Agents, developers, and due diligence providers must be regionally approved by ECCIRA before receiving a national licence.
Enforcement: ECCIRA can impose administrative fines, revoke licences, conduct audits, and issue binding directives. Breaches are treated as violations of law.
5. Citizenship Revocation and Passport Durability
Citizenship obtained through investment is not irrevocable. Governments reserve the right to revoke investment citizenship when applicants breach programme conditions.
Grounds for revocation typically include: fraud or misrepresentation in the application, subsequent conviction for serious criminal offences, sanctions violations, and national security determinations. In Turkey, the GEDAŞ (Real Estate Valuation Center) system introduced in January 2026 now requires all real estate transactions to match the official determined value. A purchase price that deviates from the government-appointed valuation leads to immediate citizenship application rejection.
Passport renewal risk: Under ECCIRA's proposed framework, Caribbean passports issued to CBI applicants will carry an initial validity of five years. Renewal will be contingent on demonstrating the 30-day aggregate physical presence requirement. Failure to meet this condition could result in non-renewal.
Mobility degradation: Even without formal revocation, the utility of a CBI passport can be diminished unilaterally by third countries revoking visa-free access, as demonstrated by the UK's actions against Dominica and the EU's permanent visa ban on Vanuatu.
6. Real Estate and Investment Structure Risks
For programmes requiring real estate investment, the legal risk extends beyond programme compliance into property law, valuation, and holding-period enforcement.
Risk Factor | Detail |
Holding period | Typically 3–5 years; sale before expiry invalidates the citizenship basis |
Valuation manipulation | Turkey's GEDAŞ system now mandates government-determined property values; mismatches trigger rejection |
Off-plan purchases | Purchasing without a final habitation certificate (Iskan) carries significant legal risk in several jurisdictions |
Total cost vs. headline | Real estate routes often cost $50,000+ more than donation alternatives after government fees, legal fees, taxes, and maintenance |
Currency exposure | In Turkey, while investment is converted to Lira for the DAB, prime-district properties are effectively USD-pegged — but this is not guaranteed |
Short-term rental restrictions | Greece now prohibits Airbnb use for Golden Visa properties, with €50,000 fines and permit revocation for violations |
Donation or fund contribution routes generally offer lower complexity and faster processing. Dominica's donation route, for example, typically processes within three to four months with no ongoing property obligations.
7. Due Diligence Exposure and Reputational Risk
The due diligence process in 2026 is multi-layered. Applicants are screened through international compliance databases, specialist risk-assessment firms, and increasingly, mandatory interviews. The FATF-OECD report documenting significant money laundering through CBI channels has prompted enhanced international cooperation on information sharing and applicant screening.
Pre-application audit: Investors should conduct their own internal due diligence review before applying. Source-of-funds documentation must be conservative, verifiable, and structured to withstand scrutiny from multiple jurisdictions. Incomplete or inconsistent documentation is the most common cause of rejection.
Agent and adviser risk: Using unlicensed or non-accredited agents carries direct legal and financial risk. Under ECCIRA, agents must be regionally pre-qualified. Engaging non-compliant intermediaries may result in application rejection, financial loss, or reputational exposure.
Banned nationalities: Most established programmes now exclude applicants from Russia, Iran, and North Korea, with enhanced checks for nationals of other higher-risk jurisdictions.
Comparison: Caribbean CBI vs. European Golden Visa (2026)
Dimension | Caribbean CBI (ECCIRA States) | European Golden Visa (Portugal / Greece) |
Minimum Investment | $200,000 (unified threshold) | €250,000–€800,000 depending on route and zone |
Outcome | Full citizenship and passport | Residence permit; citizenship after 5–7+ years |
Processing Time | 2–6 months | 6–39+ months (Portugal backlog at 39.6 months) |
Physical Presence | 30 days over 5 years (from mid-2026) | 7 days/year (Portugal); none (Greece) |
Tax Residency Trigger | No automatic tax residency | 183+ days creates tax residency exposure |
Regulatory Risk | ECCIRA enforcement; US/UK/EU supranational pressure | EU legislative pressure; programme rule changes |
Mobility Value | 140–160 visa-free destinations; no Schengen | Schengen access; EU freedom of movement (with citizenship) |
Revocation Risk | Fraud, criminal conviction, sanctions breach | Status loss for non-compliance with investment or presence rules |
WorldPath View
The legal risk landscape for investment migration in 2026 is characterised by convergence: jurisdictions are moving toward stricter due diligence, greater transparency, and enhanced cross-border information exchange — simultaneously.
This programme is best suited for: investors and family offices who treat a second citizenship or residence as a long-term component of a multi-jurisdictional risk management strategy, not a transactional purchase. The compliance burden has increased materially, and the margin for error has narrowed.
The professional verdict: the era of "buy and forget" investment migration is over. Every CBI or RBI commitment now requires a parallel compliance architecture — covering tax reporting (FATCA/CRS/FBAR), physical presence tracking, investment holding-period management, and ongoing monitoring of programme regulatory developments. Investors who build this infrastructure before applying will protect their capital and mobility. Those who do not will discover the risks the hard way.



