Citizenship by investment (CBI) and residence by investment (RBI) both offer foreign investors a route to status in another country. Yet the documents required, the depth of background checks, and the scrutiny applied after approval can differ considerably.
Caribbean CBI programs generally run extensive checks on an applicant’s identity, personal history, finances, and source of funds. Some European RBI programs follow a narrower process, although Malta shows how rigorous RBI screening can be.
By the logic of risk, the more heavily vetted route should draw less hostility. Precisely the opposite has happened.
The European Commission has asked the five Eastern Caribbean CBI states to wind down their programs by June 2028. From golden visa programs inside the EU, Brussels asks only for stronger checks.
Permanence explains the gap better than vetting does. A residence permit lapses unless a government renews it. Citizenship endures unless a government takes it away, and that proves far harder.
Status and scope
CBI grants nationality and the right to a national passport. RBI provides residence rights, which may be temporary, renewable, or permanent.
Issued by a Schengen country, a residence permit can also facilitate short visits elsewhere in the Schengen Area, generally for up to 90 days within a 180-day period. It does not automatically grant the right to live permanently in every Schengen state.
Both routes can create cross-border implications. What matters is how thoroughly authorities screen applicants before approval and what safeguards remain in place afterward.
Caribbean vetting
Caribbean CBI applications require substantial personal and financial disclosure. Depending on the jurisdiction, applicants may need to provide birth and identity records, residential and employment histories, police clearances, and banking documentation. They must also explain in detail how they generated their wealth and their investment funds.
Each country’s Citizenship by Investment Unit (CIU) examines these records as part of a wider due diligence process. Independent investigators look into the applicant’s identity, professional activities, criminal history, reputation, and financial background. Since the 2023 US-Caribbean agreement on six common principles, interviews have been mandatory for main applicants and, in several programs, for older family members too.
The objective is to establish who the applicant is, where his money comes from, and whether granting citizenship would create an unacceptable risk. Some filters apply before any investigator starts work. Each of the five programs excludes anyone refused a visa by a country its passport can enter visa-free.
Applicants pay for the scrutiny, and the bill covers the whole family. All five programs charge due diligence fees for older dependents as well as the main applicant, starting at age 12 in Antigua and Barbuda. Saint Kitts and Nevis charges US$10,000 for a main applicant and US$7,500 for each dependent aged 16 or over.
Files do fail. Denials at Saint Lucia’s CIU reached 355 in the year to March 2025, or 13.5% of the decisions issued, a record for the program.
Brussels reads the numbers differently. In its December 2025 visa suspension report, the Commission called Caribbean rejection rates very low. It cited 2024 figures of 1.7% for Antigua and Barbuda, 5.3% for Saint Lucia, and 6.5% for Dominica.
A refusal rate captures only the final filter. Licensed agents often screen out weak files before submission, a pre-screening role the Financial Action Task Force (FATF) itself describes. And when the Commission surveyed EU golden visa programs in 2019, it found statistics on rejected applications missing or insufficient.
After approval
An important distinction in the Caribbean model is that security concerns do not necessarily end when a government grants citizenship. Regional cooperation through the Caribbean Community Implementation Agency for Crime and Security (CARICOM IMPACS) and its Joint Regional Communications Centre (JRCC) supports security screening and information exchange.
The agreement establishing the Eastern Caribbean Citizenship by Investment Regulatory Authority (ECCIRA), signed in September 2025, expands JRCC capacity with CBI revenue. It also sets common standards for biometric enrollment, including for existing citizens when they renew their passports. Saint Kitts and Nevis moved first, requiring all its investor citizens, children included, to enroll biometrically from April 2026.
Where credible information later raises concerns about a citizen, including potential sanctions violations or criminal activity, the relevant authorities may investigate. Revocation of citizenship or of the passport may be possible where national law provides grounds for it, subject to the applicable procedures.
The distinction matters. Screening at the application stage gives an initial assessment, and information sharing lets authorities respond to risks that emerge afterward.
The RBI gap
No single European RBI due diligence standard exists. Requirements depend on the country, the program, and the type of residence on offer.
Some programs concentrate on identity documents, criminal-record eligibility, evidence of the qualifying investment, and confirmation that the funds are lawful. Renewals may focus on whether the investor has maintained the investment and continues to meet the program’s conditions.
Where source-of-wealth investigations or independent background checks are less extensive, authorities may have a narrower picture of an applicant’s financial and professional history. That gap deserves attention. A residence permit may still provide access to the issuing country and short-term mobility across the Schengen Area, even though it does not confer citizenship.
International standard-setters have documented the pattern. In a 2023 report, the FATF and the Organisation for Economic Co-operation and Development (OECD) observed that CBI programs vet almost entirely before approval. Citizenship arrives quickly and carries great weight, so the checks cannot wait.
RBI programs, the report found, often run “less stringent pre-application processes” and review the investor over time instead. Private due diligence firms, it added, work more commonly for CBI units. Kristin Surak of the London School of Economics (LSE) goes further, writing that such firms play no role in RBI vetting beyond any screening they may supply for banks.
The European Commission reached similar conclusions when it surveyed investor residence programs in 20 member states in 2019. It found scarce information and wide discretion in how states handled security concerns, along with some national laws that provided no particular checks on the origin of funds.
Follow-up checks during a permit’s validity existed in only six member states. In most, investors’ family members faced no enhanced due diligence at all.
Britain offers the starkest case. Until 2016, according to Surak, the Home Office assumed banks were vetting its investor-visa applicants, while the banks assumed the Home Office was. The UK closed the route in 2022, citing financial crime risks among its reasons.
Those who want to avoid scrutiny notice the difference. Portugal told the FATF that politically exposed persons (PEPs) had put their spouses forward as lead golden visa applicants. Once the spouse held a permit, the PEP applied for family reunification, assuming residence vetting would be lighter.
Malta’s model
Malta offers a strong example of a more extensive approach to permanent residence by investment. Under the Malta Permanent Residence Programme (MPRP), a multi-tiered due diligence process extends beyond applicants to donors, benefactors, and business associates.
Applicants must hold a clean criminal record, meet financial and eligibility requirements, and pose no potential threat to national security, public policy, or the public interest. Financial checks cover the source of wealth and funds, supported by documentation. Asset-compliance requirements also continue through the program’s initial five-year period.
Malta demonstrates that RBI can incorporate substantial financial investigation and security screening. The strength of a program’s safeguards depends on its actual procedures rather than on whether it grants citizenship or residence.
Its own history illustrates the asymmetry. From 2014, Malta ran investor citizenship through a four-tier due diligence process.
In April 2025, the Court of Justice of the European Union (CJEU) ruled that the successor program breached EU law, and Malta ended it that July. Meanwhile the MPRP, vetted by the same state, carries on.
EB-5 and PNPs
Malta is not alone. The main North American investor routes to permanent residence apply financial scrutiny that rivals the Caribbean’s.
America’s EB-5 Immigrant Investor Program requires that investors prove the lawful source of every dollar, gifts and loans included. Petitioners must also document the path the money took into the project.
Since 2022, US Citizenship and Immigration Services (USCIS) has required that petitioners file seven years of tax returns and disclose judgments and pending cases from courts worldwide. They must also name everyone who transfers funds into the United States on their behalf.
Canada’s provinces apply similar rigor. In British Columbia’s Provincial Nominee Program (PNP), a province-authorized accounting firm reviews an invited entrepreneur’s net worth and verifies how he accumulated it.
Both countries also keep a hand on the switch after approval. EB-5 investors first receive a two-year conditional green card, and USCIS terminates that status if it denies their petition to remove the conditions.
British Columbia’s entrepreneurs arrive on a work permit. They secure nomination only after a final report, filed 18 to 20 months later, shows they met a signed performance agreement. Where a residence route leads toward a passport, these governments vet it like one.
Repeal versus regulate
The European Union has raised concerns about security, corruption, and money laundering in connection with investment migration. Those concerns extend to both citizenship and residence programs.
Caribbean CBI programs face scrutiny because citizenship through investment grants nationality and passport rights. Yet European RBI programs can also provide valuable residence and cross-border travel benefits. Where applicant checks are less extensive, holders may obtain those benefits without the same depth of investigation into their background or finances.
The remedies differ sharply. In March 2022, weeks into the war in Ukraine, the Commission urged member states to repeal investor citizenship programs immediately and to put strong checks on investor residence programs.
Adopted in 2024, the EU’s Anti-Money Laundering Regulation draws the same line and applies from July 2027. It subjects firms that broker golden visas to anti-money laundering obligations and leaves CBI out. According to the European Parliament’s legislative tracker, EU institutions consider CBI prohibited and therefore impossible to regulate.
The CJEU’s ruling against Malta addressed citizenship alone. No comparable Commission case has targeted a golden visa.
Outside the EU, the pressure falls on citizenship too. Since December 30, 2025, running a CBI program has counted in itself as grounds for suspending a country’s Schengen visa waiver.
That applies “regardless of how well it is managed,” as Antigua and Barbuda’s government summarized the Commission’s position. The Commission’s letters of June 25, 2026, then asked all five Eastern Caribbean programs to close by June 1, 2028.
London and Washington have acted as well. Britain imposed a visa requirement on Saint Lucians in March 2026, calling CBI “inherently high-risk.” A US proclamation restricted several visa categories for nationals of Antigua and Barbuda and Dominica from January 2026, citing CBI without residence requirements.
Golden visas close too, but by domestic choice. Spain ended its program in April 2025 after a vote in its own parliament, citing housing pressure.
The off switch
The issuing state controls a golden visa, and most permits expire on a fixed date. Every renewal gives the authorities a fresh chance to re-vet the holder and say no.
Most golden visas never mature into anything more. Surak estimates that settled status remains out of reach for the large majority of RBI participants worldwide, likely more than 85%.
Citizenship runs the other way. It persists unless a state acts to remove it, and removal runs through statutory grounds, notice periods, and in some countries an appeal.
On paper, CBI states hold wide revocation powers, several of them exercisable on a minister’s opinion with no crime alleged. Practice looks different.
Cyprus illustrates the gap. A judicial inquiry found that 53% of the 6,779 citizenships Cyprus granted between 2007 and August 2020 failed to meet legal requirements. Since the program closed, revocations total 360 people, 101 of them investors.
Turkey has moved faster, announcing in August 2026 that it had canceled or withdrawn the citizenship of 6,134 people. Most lost it over collusive or irregular property transactions.
Even a revocation leaves loose ends. One CBI jurisdiction told the FATF it had failed to recover revoked passports in most cases, leaving them in circulation as apparently valid identification.
Inside the EU, the bar sits higher still. EU case law requires an individual proportionality assessment before a member state strips a nationality that carries EU citizenship. The Commission’s own 2022 call to review golden passports held by sanctioned Russians deferred to that case law.
Foreign governments face a harder problem. An EU member state can refuse to renew a golden visa, but no EU authority can revoke anyone’s Dominican or Saint Lucian citizenship. Europe’s strongest lever over a Caribbean passport is the visa waiver, which covers every citizen of the country at once.
Governments accept lighter upfront checks on residence because they can revisit the decision. On citizenship that another state grants, they demand heavier checks and then distrust them, because they cannot.
A fair test
Ongoing monitoring deserves consideration too. The ability to identify new risks, exchange intelligence, and investigate concerns after approval is an important part of program oversight, whether the individual holds citizenship or residence.
Ultimately, the central question is whether the level of scrutiny matches the rights granted and the risks involved. If Caribbean CBI applicants face extensive checks before approval and mechanisms for later security review, regulators should hold European RBI programs to comparable standards. A fair comparison must look at the safeguards operating in practice across both models.
Measured by upfront vetting, Caribbean CBI is the more heavily regulated route. On money laundering risk, the answer depends on the program rather than the label. Governments that judge by the label will keep closing the better-vetted route, for no better reason than that the other one lets them change their minds.
