The Anatomy of a Citizenship-by-Investment Statute

You read the BIP line by line before you run the client, check the diff before a dependency touches a wallet you actually use, and never take a project’s word for what its own code does: you read the code, because a marketing page and a source file are not obligated to agree, and only one of them binds. Citizenship by investment asks for the same discipline, and almost nobody brings it. The working assumption is that a CBI program is a product: a price, a timeline, passport-booklet renderings, evaluated the way you evaluate a subscription. That assumption is incomplete. A CBI program is a specific piece of national legislation, passed by a specific legislature, published in a specific gazette, and amendable by that legislature. Once you accept that, the marketing page stops being the primary source and becomes what it actually is: someone else’s summary of a statute you have not read. The reframe is simple. In our own read of these laws, nearly every real CBI statute is built from the same six-part skeleton: a definitions section, an eligibility and exclusion clause, a schedule of investment options and thresholds, a due diligence mandate, a naturalization or registration mechanism, and a revocation clause that outlives the applicant. Learn those six parts, and you can read any CBI law yourself before wiring anything.

The Definitions Section

Most readers skip a statute’s definitions section the way most users skip a terms-of-service page, and that is exactly backward. The definitions section is where a CBI law draws the boundary of everything that follows: what counts as a qualifying investment, who counts as a dependent or a qualifying family member, and what the reviewing authority is formally called and what powers attach to that name. Every operative clause later in the statute inherits whatever the definitions section decided. If a term is defined loosely, or not defined at all, that looseness propagates into eligibility, into the investment schedule, into due diligence, into revocation.

Two examples make the stakes concrete. A statute that defines a qualifying dependent without an age cutoff leaves an open question for any family with an adult child or an aging parent, a question that should have been answered in the drafting, not discovered mid-application. A statute that defines a qualifying source of funds loosely, without documentary standards attached, hands the reviewing authority, and the applicant, an ambiguity that tends to surface at the worst moment: mid-review, with a contribution already in motion. A precise definitions section is not bureaucratic throat-clearing. It is where a statute decides, in advance, what it is willing to argue about later.

The Eligibility And Exclusion Clause

Every CBI statute performs two motions at once: it says who may apply, and who is barred regardless of the size of the check. The affirmative side names a category of qualifying investor or donor; the exclusionary side typically bars a serious criminal history, sanctions exposure, or adverse political exposure the state does not want attached to its citizenship registry. A statute that performs only the first motion is not really a due-diligence framework. It is a price list.

El Salvador’s version runs through Legislative Decree No. 918, approved by the Legislative Assembly on December 20, 2023, published in the Diario Oficial on January 9, 2024 (Official Gazette No. 5, Volume 442), and effective eight days later, on January 17, 2024. Decree 918 reformed Article 156 of the Ley Especial de Migración y Extranjería (the migration and foreigners law, originally enacted under Legislative Decree No. 286 on April 2, 2019) to add a fifth naturalization category: foreigners who meet the requirements of government programs designed to attract investors or donors supporting El Salvador’s economic, social, or cultural development, through a capital contribution or a sustainable investment project. The underlying constitutional grant sits in Article 92 of the Salvadoran Constitution, which allows foreign nationals to petition for nationality by naturalization in the first place; Decree 918 built a specific investor pathway inside that existing door rather than opening a new one.

This account is drawn from the decree’s published text, not a program summary. As of this writing, no repeal or amendment to Article 156’s fifth category appears in the Legislative Assembly’s public decree record; two later, unrelated reforms touch nearby residency and descent-based nationality provisions without disturbing the investor category. That check was not exhaustive, so treat the absence of a repeal as well supported, not certified, and verify against the primary decree text before relying on it.

The Investment Schedule: Options And Thresholds

A statute’s investment schedule is where legal drafting meets a term sheet. The industry has settled on a handful of recurring route types: a donation to a national development fund, a real estate purchase (often with a minimum hold period), government bonds, and enterprise or business investment with job-creation requirements attached. Each route carries a different risk and liquidity profile even though every one ships under the same “citizenship by investment” label, and a statute’s choice of which routes to offer, one or several, is itself a structural decision worth reading before a jurisdiction’s marketing page tells you what to think of it. A program that names only one route has made a deliberate choice to keep the legal architecture simple, not a compromise it is hiding from you.

Vanuatu’s Development Support Program (DSP) is a clean single-route example. It runs as a straight donation to the government, structured under the DSP Regulations and layered beneath Vanuatu’s citizenship and passport statutes, most recently updated by the Vanuatu Passport (Amendment) Act 2025. There is no real estate option inside the DSP, no bond option, and no enterprise-investment option; the entire qualifying contribution is a single government payment. The current government contribution for a single applicant is reported at $130,000, a figure that has held steady across recent fee schedules. A one-route statute is not a lesser statute. It is a narrower one, and narrower is easier to audit, which is the point of reading the schedule yourself instead of trusting someone’s summary of it.

The Due Diligence Mandate

A due diligence mandate is only as durable as the authority the statute names to carry it out. Some CBI laws leave screening to unnamed “relevant authorities,” which sounds thorough until you ask which office answers if a file is mishandled. A statute that names the screening authority directly, in the text itself, is making a durability commitment: the obligation does not depend on which agency happens to hold the file this year, because the law says who holds it.

Vanuatu’s framework names its screening authorities directly rather than leaving the function to agency discretion. Vetting runs through the Vanuatu Financial Intelligence Unit (VFIU), which reviews the financial and source-of-funds side of a file, alongside the Vanuatu Police Force, which runs an INTERPOL-linked background check, and Vanuatu’s Immigration Services, which handles the immigration-status side of the review. This three-authority model replaced an earlier, less formalized internal screening arrangement through an amendment to Vanuatu’s Citizenship Act, according to program reporting, though the exact amendment date is best confirmed against Vanuatu’s own consolidated legislation. What matters for statute literacy is the structure, not the vintage: three named bodies, each with a defined lane, is a materially different commitment than one undefined “vetting process” would be.

Program descriptions of Vanuatu’s process sometimes reference a third-party verification provider; this piece does not name one, because no government-sourced confirmation of a specific external verification firm was available at the time of writing.

The Naturalization Or Registration Mechanism

A statute that stops at “the applicant becomes eligible” has not finished its job. Somewhere in the text, the law has to specify the legal act that converts an approved file into citizenship: an oath administered by a named official, a certificate issued by a named office, an entry made in a national registry. That act is distinct from passport issuance, a downstream administrative step, not the legal moment citizenship attaches. Statutes that blur the two leave applicants unsure what they are actually waiting for at any given stage.

El Salvador’s Decree 918 addresses part of this directly. It assigns the Dirección General de Migración y Extranjería (DGME) a specific statutory duty, in the decree’s own language, to generate “a secure and expedited procedure” for naturalizing applicants under the new investor and donor category. The decree also tasks DGME, more broadly, with managing the preliminary procedures for naturalization petitions under Article 92 of the Constitution, work the decree itself describes as “gestionar los trámites previos,” the preliminary steps that precede a final decision. Decree 918 assigns that preliminary role to DGME clearly; it does not, in the language reviewed for this piece, identify which body issues the final naturalization decision itself, and this piece does not assert one. Passport production is, in any case, a separate administrative matter that follows naturalization rather than constituting it.

The Revocation Clause, And Why It Survives You

Two different questions live inside a revocation clause, and conflating them is a common reading error. The first is about the individual: does the statute reserve the right to revoke one person’s citizenship after the fact, if the grant is later found to rest on fraud, material misrepresentation, or a serious undisclosed criminal history? Most CBI statutes answer yes, and the clause that does it carries no expiration date. It is a standing power the state holds for as long as the citizenship exists.

Vanuatu’s Citizenship Act, Cap. 112, states the mechanism plainly: a person found by a court to have obtained citizenship through false representation, fraud, or concealment of a material fact ceases to be a citizen thirty days after that finding, unless the Prime Minister affirmatively confirms the citizenship in the interim. Nothing in that provision ties the exposure to a fixed window measured from the date the passport was issued; it is triggered by a court finding whenever that finding occurs, which makes the exposure effectively open-ended.

A clean, honest source-of-funds file matters exactly as much the day after approval as it did the day before, because the clause that can undo the grant has no expiration date.

The second question is separate: is the law itself fixed, or subject to periodic legislative review? Vanuatu answers this one concretely too, though the detail here leans on industry summaries of the bill rather than the gazetted final text. The Vanuatu Passport (Amendment) Act 2025 is reported to have revised the country’s original Passport Act No. 20 of 2009, adding a Passport Committee for document design, moving toward ICAO-standard compliance, mandating biometric data collection, and restricting diplomatic-passport eligibility for citizenship-by-investment applicants; confirm the enacted scope against Vanuatu’s official gazette before relying on it. What is not in doubt is that Parliament reopened and amended the earlier framework rather than leaving it untouched, a living instrument rather than a brochure with a permanent print run.

The Six Questions That Matter

None of this requires a law degree. It requires reading a statute the way you would read a client’s source, then asking six questions any CBI program’s marketing page should be able to survive. Does the law define its key terms precisely, or leave “dependent” and “qualifying investment” to be worked out later? Does it name who qualifies and who is barred, with real exclusion criteria? Does it specify investment routes and thresholds in the statute itself, or only on a sales page that can change without a legislative vote? Does it name the actual screening authority? Does it identify the specific legal act that converts an approved file into citizenship? And does it reserve an open-ended revocation power for fraud, while telling you whether the law itself is fixed or subject to review?

21 CBI’s own structural comparison tool runs a version of this checklist across programs, for a reader who wants it assembled in one place rather than pieced together clause by clause.

For a reader who wants El Salvador’s statute read against their own situation, the Freedom Passport is serviced through passport.sv.

For a reader whose situation centers on Vanuatu, the Development Support Program is serviced through cbi.vu.

A reader whose situation fits neither productized program is exactly who the Sovereignty Strategy Session and 21 CBI’s bespoke advisory track exist for.

This is general legal information about statutory structure, not legal or immigration advice. Verify any citation against the primary decree or act text, and consult a qualified immigration or legal professional before relying on any figure here.