The EU’s Visa-Suspension Lever Over Citizenship by Investment

Every Bitcoiner learns the same lesson early, usually the expensive way: the ledger is not the settlement. You can hold the coins, sign the transaction, watch it broadcast, and still have it sit there unconfirmed because the party that controls the rails decided not to move it. Custody is not access. Whoever runs the pipe can freeze the flow no matter what your balance says, and the only real defense is to not depend on a single pipe.

Now apply that to a passport. The visa-free list attached to a second citizenship reads like a settled asset: a number you buy once, a set of borders that open on arrival, a line item you can compare across programs before you wire the contribution. That is how the mobility maps are sold, and it is how most people shop for a passport. It is also wrong in the one way that matters. Visa-free access is not something your passport owns. It is a permission the destination grants, and the destination can revoke it. The European Union has spent the last four years building the exact tool to revoke it, and in late 2025 it wrote citizenship by investment (CBI) into that tool by name.

Where The Lever Lives

The EU’s visa-suspension mechanism lives inside Regulation (EU) 2018/1806, the regulation that lists which third countries’ nationals need a short-stay Schengen visa and which are exempt. Two annexes do the whole job. Annex I is the visa-required list. Annex II is the visa-free list. A country’s citizens travel to the Schengen area without a short-stay visa because that country sits in Annex II; move it to Annex I and they need a visa like everyone else. The suspension mechanism is the switch that moves a country from one annex to the other, and it can be pulled without the third country’s agreement.

That is the part worth sitting with. A visa waiver looks bilateral, a mutual arrangement between equals. In practice the EU holds the switch on its side alone. It can suspend the exemption temporarily while it applies pressure, and it can make the move permanent by amending the regulation. The waiver is real. So is the lever underneath it. For years that lever was awkward to pull: shorter suspensions, harder to extend, and no clean trigger aimed at investor-citizenship programs specifically. In late 2025 the EU rebuilt it.

What The 2025 Reform Added

Regulation (EU) 2025/2441 of 26 November 2025 amended the mechanism. It was published in the Official Journal on 10 December 2025 and has been in force since 30 December 2025. The Commission proposed it back in October 2023; the Parliament and Council reached a provisional agreement in June 2025; it was adopted late that year. This is settled law, not a proposal working its way through committee.

The reform did three things that matter to anyone weighing a CBI passport.

First, it added a new stand-alone ground for suspension: the operation of an “investor citizenship scheme” that grants nationality “in exchange for pre-determined payments or investments, without that person having any genuine link to that third country.” Before, a CBI program had to be argued in as a security or migration problem. Now it is a trigger in its own right, written into the text. Other new grounds arrived alongside it: hybrid threats including the state-sponsored instrumentalisation of migrants, a third country’s lack of alignment with the EU’s own visa policy, certain breaches of international law, and deficiencies in travel-document security.

Second, it lowered the thresholds for acting. A baseline 30% increase in refused entries, unauthorised overstays, or serious criminal offences by a country’s nationals can now trigger the mechanism, as can an asylum-application recognition rate below 20%, unless the Commission sets a different figure. The bar to start the process dropped.

Third, it extended how long a suspension can run. The initial suspension is now 12 months, imposed by implementing act, extendable by a further 24 months by delegated act, and stackable to roughly five years before the exemption is removed for good. The old version was shorter and harder to prolong. The new one gives the EU room to hold a country in visa-required limbo for years while it decides whether to make the change permanent.

The Genuine Link, Defined

That phrase, “genuine link,” is not decoration. It is doing legal work, and it was defined a few months before the reform passed.

On 29 April 2025 the European Court of Justice, sitting as a Grand Chamber, ruled in Case C-181/23, European Commission v Republic of Malta. The Court held that a member state granting citizenship “in exchange for pre-determined payments or investments” without a genuine link to the applicant breaches EU law; it cited Article 20 of the Treaty on the Functioning of the European Union (TFEU) and Article 4(3) of the Treaty on European Union (TEU), and it described the practice as a “commercialisation” of Union citizenship. Malta is background here, not an offering; 21 CBI does not advise on or service Malta. What matters is the doctrine the case produced: the EU now has a court-tested standard for what makes citizenship illegitimate in its eyes, and it is the absence of a genuine link between the person and the country whose passport they carry.

Read the two instruments together and the design is plain. The Court defined the standard in April. The visa-suspension reform wrote the same standard, the same “genuine link” language, into the suspension trigger in November. The judgment governs member states directly; the visa mechanism points the identical test outward, at any visa-free third country the EU judges to be selling nationality without that link. One doctrine, two ranges.

Vanuatu, The Executed Precedent

The EU has already run this play once, start to finish, and the sequence is the point. Do not collapse it into a single date; the precision is what tells you how the tool behaves.

Vanuatu and the EU signed a short-stay visa waiver in 2015; it entered into force in 2017. Vanuatu nationals travelled to the Schengen area without a short-stay visa for a few years. Then the mechanism started moving. Council Decision (EU) 2022/366 of 3 March 2022, effective 4 May 2022, partially suspended the waiver, targeting Vanuatu citizenship-by-investment passport holders specifically. Council Decision (EU) 2022/2198 then suspended the waiver in whole for Vanuatu nationals, effective 4 February 2023. Finally, Regulation (EU) 2025/11 of 19 December 2024 moved Vanuatu out of Annex II and into Annex I, permanently ending the exemption. As of mid-2026, Vanuatu nationals need a Schengen visa.

Partially suspended in 2022. Fully suspended from February 2023. Permanently revoked in December 2024. That was the first time the EU permanently revoked a visa waiver over a citizenship-by-investment scheme, and it did it under the version of the mechanism that has since been sharpened. Vanuatu was the proof of concept, run in well under three years from first suspension to permanent revocation. The 2025 reform is the production version of the same machine.

The Caribbean, Warned But Not Cut

The next names are already on the record. In December 2025 the European Commission published its Eighth Report under the visa-suspension mechanism. In it, the Commission took the position that operating a CBI scheme is, in itself, a ground for concern under the mechanism, and it named the five Eastern Caribbean programs by jurisdiction: Antigua and Barbuda, Dominica, Grenada, St Kitts and Nevis, and St Lucia. It urged tighter vetting in the interim.

Note what has and has not happened. As of mid-2026, no Caribbean state has had its Schengen waiver suspended. Those five remain visa-free, sitting in Annex II, and their citizens still travel to Europe without a short-stay visa. They have been flagged, not cut. Vanuatu is still the only country that has actually lost access. But the warning is now official, written into a numbered Commission report, using the same reasoning that took Vanuatu from waiver to visa-required. A flag under this mechanism is not a verdict. It is the first move in a sequence the EU has already shown it will finish.

A visa-free list is a photograph of a permission, not a deed to it; the country that granted it keeps the switch.

What This Means If You Are Choosing A Program

For a Bitcoiner comparing programs, the lesson is not “avoid CBI.” It is to price mobility correctly. A visa-free count is a real number and a useful one, but it is a number as of a date, subject to a lever held by someone who is not you. Treat it the way you would treat any counterparty-controlled asset: worth holding, never worth depending on as a single point of failure. The durable question is not how many doors a passport opens today. It is who can close them, how easily, and how exposed this particular program is to the specific test the EU has now codified.

That question sorts the programs differently than a raw mobility map does. The five Eastern Caribbean programs share exactly the profile the mechanism now targets: CBI schemes, named in the Commission’s own report, still holding Schengen access the EU has openly flagged as a concern. Their visa-free European access is real today and at declared risk tomorrow. If Schengen is the reason you are buying, that risk is the main line item, not a footnote.

Vanuatu is the completed version of the same story, and it is worth being honest about what remains after the switch was pulled. Schengen was never the whole of that program’s case; the post-suspension picture of what a Vanuatu passport still does, and does well, is covered on its own terms at cbi.vu and in the honest Vanuatu mobility map. Losing one destination bloc is not the same as losing a program.

El Salvador sits differently, and it is worth being precise about why. The Freedom Passport, serviced through passport.sv, currently carries visa-free Schengen access as an Annex II country. That access rests on the same kind of EU permission as everyone else’s, so the same caveat applies: it is a permission, not a possession. But El Salvador’s case for a Bitcoiner was never built on the European visa list. It rests on a Bitcoin-native structure, a state Bitcoin Office and a strategic Bitcoin reserve, and a jurisdiction outside the OECD’s Common Reporting Standard (CRS), the system for automatic exchange of financial account information between participating countries. None of that is touched by the EU’s visa switch. When your reasons to hold a passport do not depend on one issuer’s goodwill, that issuer’s lever loses most of its bite.

If you want to compare mobility honestly across programs, do it with live data and hold the snapshot loosely. The Bitcoin Passport Index publishes current visa-free counts and rankings for the jurisdictions Bitcoiners actually weigh, and it updates as access moves, which is the entire point: the number is not fixed, so read it fresh rather than trusting a figure quoted in a sales deck last year. And if you want the mechanics of why programs get suspended in the first place, separate from this one EU tool, that is covered in why citizenship-by-investment programs get suspended.

Read the regulation. Map the exposure. Then choose. Low time preference does not mean waiting for certainty that a visa list will never move; it means building sovereignty that does not rise or fall on a single government’s switch. The EU has told you plainly what it can do and when it will do it. Take that as information, weigh it against the reasons you actually want a second passport, and pick the program whose value survives the lever being pulled.

This is general information about an EU legal framework that the EU itself updates, not tax or legal advice for your situation. Regulation (EU) 2025/2441, the thresholds it sets, and each country’s current Annex I or Annex II status can and do change; the instruments and figures cited here reflect the primary sources available as of this writing. Confirm the current visa status of any program and your own obligations with a qualified advisor before relying on any of it.