The Four-Tier DD Industry: Who Actually Reads a CBI File Before You Do
9 min read
Most applicants picture one officer reading one file and choosing yes or no.
A serious citizenship review is closer to a layered verification system. The licensed agent checks whether the package is suitable to submit. A commercial diligence provider may investigate identity, reputation, companies, litigation, sanctions, public functions, and wealth. A government program unit evaluates the application and vendor findings under national law. Financial-intelligence, law-enforcement, immigration, sanctions, or other competent authorities may supply separate checks.
Calling these “four tiers” is a useful model, not a universal statutory diagram. One jurisdiction may combine functions. Another may use several vendors or agencies. A database is a tool, not a decision-maker. INTERPOL does not approve citizenship applications. A commercial screening company does not grant nationality.
The value of the model is diagnostic. Each layer has a different mandate and can ask for different evidence. A file that satisfies the agent can still produce a provider query. A clear provider report can still leave a sovereign policy question. An apparent database hit can still belong to somebody else.
Know which layer asked the question before trying to answer it.
Tier One Is The Licensed Agent’s Control
Citizenship by Investment (CBI) is a statutory route through which a sovereign state may grant citizenship after prescribed screening and a qualifying contribution or investment. In many programs, an applicant must use an authorised or licensed agent rather than file directly.
The agent’s first duty is not to approve the applicant. It is to assemble, review, and submit a compliant file within the authority granted by law and engagement. This can include identity collection, civil-document review, form preparation, source-of-funds intake, beneficial-owner mapping, fee administration, and communication with the program unit.
The eligibility review helps identify that first gate. The key point here is that agent clearance is internal. It means the advisor considers the file ready or sufficiently understood to proceed. It is not government approval.
An effective internal desk should run name and sanctions screening, test declared history, reconcile forms, identify adverse information, and challenge the financial narrative before a paid external or government review begins. It should distinguish a curable document gap from a legal or risk issue that may make submission irresponsible.
This is where an unclear proof of address, expired police certificate, unexplained company payment, or wallet-ownership gap should be found. The agent can ask for a better exhibit without consuming a sovereign decision.
The agent also sees only what the applicant discloses and what its tools reveal. It does not possess every government intelligence source. Pre-clearance reduces avoidable risk; it cannot guarantee the result.
Tier Two Is Independent Commercial Diligence
Governments may engage external firms to add investigative capacity and an independent report. The provider’s scope can include identity and address verification, criminal and civil records, company ownership, regulatory action, politically exposed person status, sanctions, adverse information, professional history, and source of wealth or funds.
The joint FATF and OECD CBI/RBI report describes private diligence firms using public and private records, interviews, customer-due-diligence information, and asset verification. It recommends multi-layered diligence rather than sole reliance on one actor.
Commercial providers do not all use the same sources, update cycle, transliteration, or matching logic. One may locate a local-language court record another misses. One may treat a corporate association as relevant context while another does not. A hit is the start of analysis, not proof that the subject is the applicant or that the underlying allegation is true.
The provider may request clarifying documents through the agent. A birth record can disambiguate names. An employment chronology can separate the applicant from a public official. Court dispositions can show that a charge was dismissed. Corporate records can explain why a name appears beside an entity.
A diligence layer does not become reliable by producing more hits. It becomes useful by connecting the right person to verified facts and explaining the remaining uncertainty.
Vendor names should be treated carefully. A firm may provide screening somewhere in the industry without serving a particular program today. Unless the authority or contract confirms the relationship, describe the provider’s capabilities, not its alleged client.
Tier Three Is The Government’s Substantive Review
The sovereign authority owns the citizenship decision. It reviews the statutory conditions, application, agent submission, diligence results, and any other information available under national law.
This layer can agree with a vendor, ask for more work, refer a matter, interview an applicant, or apply a risk tolerance that the commercial report does not decide. A provider may accurately report an old regulatory action. The government decides its relevance to eligibility and public interest.
The FATF/OECD report warns that unclear roles, conflicts, insufficient resources, and weak coordination can undermine investment-migration programs. Its mitigation measures include clear responsibilities, quality control, peer review, in-house expertise, information sharing, and escalation for higher-risk files.
Government review can therefore include administrative, legal, financial, security, and policy judgments. Some are transparent in regulations. Others involve protected information. An applicant may not receive every source or internal analysis behind a refusal.
“The vendor cleared me” is not a legal argument for citizenship. Nor should a government outsource its sovereign judgment completely. The vendor supplies evidence and analysis. The authorised state body applies law and discretion.
Status language should identify this distinction. “External diligence complete” is different from “substantive government review complete.”
Tier Four Is The Competent-authority Cross-check
The fourth tier is not one global super-database. It is the collection of official checks and information channels available to competent authorities.
Sanctions screening can involve the United Nations Security Council consolidated list, the US Treasury OFAC sanctions lists, and the European Union consolidated financial sanctions list. Which regimes legally apply depends on jurisdiction, institution, transaction, and nexus.
INTERPOL explains that notices are international requests for cooperation or alerts, not international arrest warrants. A Red Notice requests location and provisional arrest pending extradition or similar action, subject to national law. INTERPOL does not decide CBI eligibility.
Immigration, border, police, financial-intelligence, tax, and other agencies may hold relevant information under domestic law. Their roles vary. The FATF/OECD report recommends domestic coordination among immigration authorities, law enforcement, and financial-intelligence units because investment-migration risks cross institutional boundaries.
Official list status must be interpreted accurately. A name resemblance is not identity. A PEP classification is preventive, not a criminal accusation. A sanctions designation is legally different from adverse media. A criminal allegation is different from a conviction. The response must fit the actual record.
Databases Are Inputs, Not Oracles
Commercial systems aggregate structured lists, corporate records, court materials, media, and provider research. They help reviewers find risk signals at scale. They also inherit spelling differences, stale records, duplicate identities, incomplete dispositions, and source errors.
A good review records full name, aliases, date and place of birth, nationality, address history, employer, company roles, relatives, and other identifiers. Matching only on a common name creates predictable false positives. Transliteration adds further variants.
The Vanuatu four-authority explainer shows how official checks can combine in one program. This article’s point is where those tools sit: inside agent, provider, or government work, not above the sovereign decision.
Applicants should disclose known issues before screening finds them. Disclosure does not neutralise a real bar, but it permits a documented explanation. If a hit is wrong, respond with identity evidence and authoritative disposition. If it is accurate, explain the facts, outcome, dates, and relevance without attacking the database for recording it.
Do not demand deletion from an aggregator before confirming the originating source. Correct the court, regulator, company registry, or publisher where appropriate, then preserve evidence of the correction.
Bitcoin Adds A Parallel Evidence Stack
For Bitcoin wealth, every layer may ask a version of the same question: how does this person connect to these assets?
The agent builds the chronology. A provider may review exchange records, wallet ownership, counterparties, and blockchain analysis. Government reviewers assess whether source and transfer satisfy the program. Financial institutions or settlement providers apply their own AML and sanctions duties.
FATF’s virtual-asset guidance says blockchain information can form a beginning foundation for recordkeeping but is insufficient alone because an address does not readily identify a natural person. That boundary should appear in every tier’s analysis.
A transaction graph can show movement. It does not prove the lawful economic activity that created the original wealth. A signed message can support current control. It does not prove historical beneficial ownership. Exchange KYC can connect an account to a person. It does not explain an external wallet before the exchange.
Build one evidence stack that all layers can read: economic origin, acquisition, identity linkage, custody transitions, counterparty explanations, tax or accounting treatment, and proposed settlement.
Answer The Layer That Asked
When a query arrives, identify origin, exact question, decision consequence, required format, and deadline. An agent completeness request may need an updated document. A vendor identity match may need disambiguation. A government source-of-wealth concern may need independent financial evidence. A sanctions issue requires qualified legal analysis.
Do not resubmit the same exhibit without explaining what it proves. Do not bury the response in volume. Use a short memo, numbered exhibits, and a direct reconciliation of names, dates, amounts, entities, and wallets.
The Sovereignty Fit Finder can identify broad program-fit issues before these reviews. It is not due diligence or pre-approval.
Map the review before submission.
Ask the licensed agent which internal review occurs, whether an external provider is used, which government body makes the decision, and which other agencies can be consulted. Accept that some vendor and security details may be confidential. The objective is a truthful process map, not access to protected systems.
Then prepare for the strictest reasonable question. Run names and companies. Map source of wealth and funds. Resolve proof of address. Preserve court and regulatory dispositions. Connect wallets to identity. Disclose uncertainty instead of inventing precision.
A paid Sovereignty Strategy Session gives you one hour with Adam Juchniewicz, CEO, to identify the likely review layer and evidence gap before a government file exists. It is $475 through BitSettle or $500 through Stripe, and the amount paid credits toward professional fees if you retain 21 CBI within 90 days. Book through advisory; there is no obligation to proceed.
Name the layer. Answer the question. Strengthen the File.
This article is general information, not legal, tax, immigration, investigative, or compliance advice. Review architecture, vendors, official checks, disclosure rights, and evidence standards vary and change. Confirm current procedures and obtain qualified advice before filing or responding.

Adam Juchniewicz, CEO
US Air Force veteran. Bitcoiner since 2020.
