The short answer: No single body regulates investment migration. Programs are created by national legislation and governed by national law, but they operate under sustained pressure from supranational institutions that cannot abolish them directly and have found other levers instead. Understanding that structure explains why the sector changes the way it does.
The foundation: national sovereignty
Deciding who may enter and reside in a territory is among the most fundamental attributes of statehood. There is no international treaty requiring states to admit investors, and equally none prohibiting it.
Consequently, every program originates in domestic law — either primary legislation passed by a legislature or, in some jurisdictions, ministerial regulation made under delegated powers. That distinction matters practically: a program written into statute generally requires legislative action to change, while one resting on regulation can be amended or withdrawn far more quickly.
It also explains why these programs are so changeable. They are ordinary domestic policy, subject to elections, budgets and public opinion — not contracts with the investors who use them.
The European Union: the most consequential external actor
The EU has no direct competence over member states' nationality or immigration decisions. It has nevertheless been the single most influential force in reshaping the sector, through three mechanisms.
Political pressure
The European Parliament and Commission argued for years that investor schemes posed risks of money laundering, tax evasion, corruption and security infiltration, and that one member state's decision effectively binds all others. Repeated resolutions and reports created a sustained political cost for maintaining these programs.
Infringement proceedings
The Commission opened formal action against member states operating citizenship schemes, arguing incompatibility with EU law. Cyprus wound down its program in 2020 amid this pressure and its own domestic scandal.
Judicial determination
The decisive step came on 29 April 2025, when the Court of Justice of the European Union ruled that Malta's citizenship-by-investment scheme was incompatible with EU law. The Court held that the scheme amounted to the commercialisation of member-state nationality and, through it, Union citizenship — incompatible with the nature of that status and with the duty of sincere cooperation between member states.
The ruling's scope is important and frequently misstated. It concerned citizenship by investment within the EU. It did not strike down residency programs, which continue to operate across the bloc. But it established the legal principle definitively and made revival of citizenship schemes within the Union effectively impossible.
The OECD and the tax dimension
The OECD's concern has been narrower and more technical: that investment migration might be used to defeat the Common Reporting Standard, the framework under which financial institutions identify account holders' tax residency and exchange that information across borders.
The mechanism it worried about is straightforward. If residency or citizenship can be obtained cheaply in a low-tax jurisdiction, an account holder might present that status to a bank to misrepresent where they are genuinely tax resident, defeating automatic exchange.
The OECD accordingly reviewed schemes it judged high-risk — typically those offering status with negligible physical presence in low-tax jurisdictions — and issued guidance requiring financial institutions to apply enhanced scrutiny rather than accepting a residence document at face value. The practical result is that banks now ask harder questions of clients presenting investment-migration status.
FATF and the anti-money-laundering framework
The Financial Action Task Force sets global standards on money laundering and terrorist financing. It does not regulate immigration, but its standards shape the compliance environment in which these programs operate — particularly source-of-funds verification and the treatment of politically exposed persons.
FATF's leverage is reputational and severe. Jurisdictions placed on its increased-monitoring or high-risk lists face significantly higher friction in international banking, which affects the whole economy rather than just the program. For a small state, that risk substantially outweighs program revenue, which is why FATF assessments drive real behaviour.
Industry self-regulation, and its limits
The sector maintains its own bodies, most prominently the Investment Migration Council, which publishes standards, runs professional qualifications and advocates for the industry.
Self-regulation has produced genuine improvements in professional practice. Its limitation is structural and unavoidable: an industry body funded by participants cannot credibly discipline governments, and its advocacy function inevitably sits in tension with its standard-setting one. It is a useful complement to public oversight, not a substitute.
Where accountability actually sits
In practice, four pressures constrain these programs, and only the first is formally a regulator.
- Domestic politics. The most powerful force by a wide margin. Programs die when they become electorally costly — housing affordability ended more European schemes than any regulator did.
- Access agreements. Visa-free travel arrangements are granted bilaterally and can be withdrawn. For Caribbean programs this is the binding constraint, since the product's value depends almost entirely on the access it confers.
- Banking relationships. Correspondent banking access is a practical veto. A jurisdiction whose institutions cannot clear transactions internationally has a serious problem regardless of its immigration policy.
- Litigation and judicial review. The 2025 Malta ruling demonstrated that courts can settle questions politics could not.
What this means for applicants
Three practical implications follow.
Programs can change without warning, and no regulator will protect your expectations. There is no ombudsman for investment migration. Filed applications are generally assessed under the rules in force at filing, which is the main protection available — and it is a reason to file early rather than late.
Compliance friction will increase, not decrease. The direction of travel across every institution described above is toward more scrutiny. Assume banks will ask more questions over time, not fewer.
Program legitimacy is worth paying for. A cheaper program with weaker oversight carries a specific risk to you: that its access arrangements are withdrawn, or that holding its status invites scrutiny elsewhere. Rigour is a feature.
Frequently asked questions
Is there an international regulator for golden visas?
No. Programs are governed by national law. International bodies exert influence through standards, assessments and access arrangements rather than direct regulation.
Did the EU ban golden visas?
No. The 2025 Court of Justice ruling concerned citizenship by investment in Malta. Residency programs continue to operate within the EU.
Can the EU force a member state to close a residency program?
It has no direct power to do so, but it has effective indirect influence through political pressure, funding relationships and legal argument. Several closures followed sustained pressure rather than formal compulsion.
Does the OECD prohibit certain programs?
It cannot prohibit them. It identifies schemes it considers high-risk for CRS circumvention and directs financial institutions to apply enhanced due diligence, which changes how banks treat the status in practice.
Who protects applicants if a program closes?
Generally nobody, beyond the usual practice of honouring applications already filed. This is a policy risk borne by the applicant, and it argues for jurisdictions with stable statutory programs and for filing promptly once decided.
Are industry bodies meaningful?
They improve professional standards among advisers and are a reasonable signal when choosing whom to work with. They do not regulate governments.
Regulatory context is one of the better predictors of whether a program will still exist in a decade. If you would like help assessing the durability of a particular jurisdiction, we are happy to discuss it.
General educational information, not legal advice. Regulatory positions evolve — verify current requirements and rulings with qualified professionals.