On 25 June 2026 the European Commission wrote to five Caribbean governments (Antigua and Barbuda, Dominica, Grenada, Saint Kitts and Nevis, and Saint Lucia) and asked them to end their Citizenship by Investment (CBI) programmes by 1 June 2028. As an interim step, it wants stronger due diligence and the exclusion of EU-sanctioned applicants in place by September 2026.
The interim step deserves more attention than the deadline. Stronger due diligence is a technical problem with known tools: continuous sanctions screening, biometric checks, document forensics and monitoring after approval. Those tools are used in banking compliance today. Deployed through the region's new joint regulator, they would give five small economies evidence to bring to Brussels, for programmes that in some years have been worth up to 40% of GDP.
Antigua and Barbuda's prime minister, Gaston Browne, has publicly rejected the phase-out, and the other four have not said they will comply on the EU's timeline. None has yet published a technical case that its vetting now answers the EU's concerns.
What the EU has said and when
| Date | Event |
|---|---|
| 29 April 2025 | Court of Justice of the EU rules in Commission v Malta (Case C-181/23) that Malta's investor citizenship scheme breached EU law by commercialising Union citizenship. The last CBI programme inside the EU ends. |
| 2025 | The five Caribbean states agree through legislation to create ECCIRA, a joint CBI regulator. |
| December 2025 | The Commission's 8th Annual Visa Suspension Mechanism Report says CBI schemes are "in itself, a ground for suspending the visa-free status of third countries," and names the five states for low rejection rates and more than 100,000 passports issued. |
| 31 December 2025 | Revised Visa Suspension Mechanism adopted. |
| 25 June 2026 | Letters signed by Commissioner for Home Affairs and Migration Magnus Brunner ask for phase-out by 1 June 2028. |
| September 2026 | Deadline for stronger due diligence and EU sanctions exclusion. |
| 1 June 2028 | End of the 24-month transition. |
The December report changed the EU's argument. For years the concern was whether an individual applicant had a "genuine link" to the country. The report treats the existence of a paid citizenship scheme as the problem in itself. The Commission reads the low rejection rates as evidence of weak screening, not of a well-qualified applicant pool.
How much these economies depend on CBI
- Eastern Caribbean Currency Union, 2025: CBI receipts were 4.3% of GDP and 14.5% of government revenue.
- Dominica, 2023: about US$230 million, close to 37% of GDP. Some of it has helped pay Social Security pensions.
- Grenada, 2024: about US$412 million, one of its strongest years.
- Saint Kitts and Nevis and Dominica: CBI revenue has ranged from 14% to 40% of GDP depending on the year.
Dominica shows what is at stake. Hurricane Maria in 2017 caused damage worth more than 200% of the island's GDP, and the government built its plan to become "the world's first climate resilient nation" largely on CBI receipts. Brussels sees a security loophole; Roseau sees how it paid for its recovery.
The EU's two positions leave room for a vetting argument
The December report says running a CBI scheme is the problem whatever the quality of vetting. The June letters, from the same Commission, still ask for stronger due diligence before 2028. If vetting quality were irrelevant, there would be no reason to ask for an interim upgrade.
The evidence the Commission chose to publish was low rejection rates. That is what largely manual vetting produces when licensed agents run it, it is done once at application, and each island does it differently. Such a process is built for volume and is poor at catching a sanctioned person, a forged document or an owner hidden behind a shell company. Those are specific gaps, and AI screening was built to close them in banking.
Five AI screening tools and what each fixes
| Tool | What it does | Gap it closes |
|---|---|---|
| Continuous sanctions and PEP screening | Checks applicants against OFAC, EU, UN and regional sanctions lists and politically exposed persons lists, which update several times a day | The EU's exact interim request: excluding EU-sanctioned applicants |
| Biometric identity checks | Matches fingerprints and faces against international identity databases | Applicants using a different name or nationality; does not rely on the applicant's own papers |
| Document forensics | Vision models trained on fraud patterns inspect passports, bank references and source-of-funds papers | Uneven manual review across five bureaucracies with different staffing |
| Ownership and source-of-funds analysis | Maps company ownership chains and scans news and court records in several languages | Money routed through nominees and shell companies |
| Post-approval monitoring | Re-screens every approved citizen against updated sanctions and adverse media for the life of the passport | A citizen sanctioned or indicted years after approval, whom a one-time check never sees |
Post-approval monitoring answers the EU's structural objection most directly. Today a file is closed once the passport issues. Re-screening turns a single check into a continuing one, which answers the worry that a programme clean today becomes a liability in five years with nobody watching.
None of these tools removes the need for human judgment. Name-matching produces false positives, especially with transliterated Arabic, Russian and Chinese names, and every hit needs an analyst to clear or confirm it. Budget for the analysts as well as the software.
The Core Argument
The EU makes two claims: that CBI is incompatible with visa-free trust, and that stronger due diligence is worth asking for before 2028. The five governments can act directly only on the second. AI screening will not settle the question of principle. It can change the evidence the Commission relies on, and the negotiations will turn on that evidence.
ECCIRA is the place to deploy it
The Eastern Caribbean Citizenship by Investment Regulatory Authority already has most of what a shared screening system needs. Its mandate includes:
- a central applicant database coordinated through CARICOM IMPACS and the Joint Regional Communications Centre;
- shared biometric collection;
- data sharing between the five programmes;
- a mandatory 30-day residency requirement;
- harmonised annual application quotas.
No single island can afford to build and run continuous screening, biometrics, forensics and network analysis alone. A shared database also closes an old gap: an applicant turned down by one programme applying to a neighbour without either government knowing. With one screened database, that shows up at once.
What the two deadlines require
September 2026 needs working, demonstrable controls: EU sanctions exclusion and stronger due diligence running through ECCIRA, with numbers to show for it. A promise of future reform will not count.
June 2028 is harder. The Commission's principle, which the Court of Justice upheld against Malta, is that selling citizenship is itself the problem, and no screening system changes what a CBI programme is. What better vetting can do is remove the evidence the Commission cited: low rejection rates, uneven screening and no monitoring after approval. That is a stronger position from which to argue for a reformed, monitored programme than the one these governments hold now.
If nothing visible changes, the EU can suspend Schengen visa-free travel for citizens of a non-compliant state. That would hit every citizen, not only CBI applicants. I cannot say whether better vetting will move the Commission's principle, and the Malta ruling suggests it may not. It is still the only part of the dispute these governments control.
What the five governments and ECCIRA should do next
- ECCIRA board: procure one shared sanctions and PEP screening service for all five programmes, including the EU consolidated sanctions list, and re-screen every past approval against it. Publish the number of hits and what was done about each.
- CBI units in each state: move all applications to biometric capture through the shared ECCIRA database, so a refusal in one programme is visible to the other four at the next application.
- Finance ministries: fund post-approval monitoring from CBI fees, for example a small fixed amount per approved application, so the cost does not fall on the general budget.
- Heads of government, through the OECS: send the Commission a joint technical report on the new controls, with before-and-after rejection and refusal figures, well before the 2028 deadline.
- Each state: publish annual CBI statistics (applications, refusals, revocations and reasons) so outside observers, including the EU, can check the claims.
Frequently Asked Questions
Would a Schengen visa suspension affect all citizens or only CBI passport holders?
All citizens. The Visa Suspension Mechanism applies to a country's nationals as a whole, so students, business travellers and families from these five states would need visas for the Schengen area if it were used. That is why the dispute reaches well beyond the CBI industry. A suspension can also be temporary and partial, applying first to certain categories such as diplomatic or service passport holders.
Does the UK or Canada also restrict visa-free access for these countries?
Yes, in some cases. The United Kingdom imposed visa requirements on nationals of Dominica in 2023 over its CBI programme, and Canada withdrew visa-free access for Saint Kitts and Nevis in 2014 for similar reasons. Those cases show the EU is not the only partner watching CBI screening, and that access, once lost, is slow to recover.
How does post-approval monitoring work in practice?
Each approved citizen's identity details stay in a screening system that re-checks them automatically against updated sanctions lists and news sources, usually daily. A new match creates an alert for an analyst, who confirms or clears it. If it is confirmed, the government's legal process for revocation or investigation begins. Most CBI laws already allow revocation for fraud or misrepresentation, but each state should check that its law covers conduct after approval.
What does AI screening cost, and who should pay?
Commercial sanctions and adverse media screening is usually priced per search or per monitored person, and shared procurement across five programmes lowers the unit cost. Biometric capture needs hardware at each intake point. The cleanest approach is to add a fixed screening charge to each CBI application, so the programme pays for its own controls. Ask vendors for per-applicant pricing that includes ongoing monitoring.
Can a CBI applicant challenge a refusal made with AI screening?
They should be able to. Good practice is that software flags and a named official decides, with the reasons recorded. Applicants should be told a refusal was made, and states with data protection laws may have to explain automated decisions on request. A clear appeal route also protects governments from challenges based on false name matches.