Malta's Due Diligence Standards: Why They're Among the Strictest in the World
8 min read
You have probably started your CBI research the way most Bitcoiners do: looking for the fastest, most affordable passport. Vanuatu processes in 30 to 60 days. São Tomé and Príncipe starts at $90,000. Those are solid programs, and for many applicants, they are the right move.
But at some point, a different question starts forming. Not "which is fastest?" but "which is hardest to get?" Because if you have built something real, if your net worth runs seven or eight figures and your ambitions extend across borders, you start to understand something counterintuitive. The difficulty of obtaining a passport is directly proportional to the respect it commands at every border on earth.
Malta is the answer to that question. The Maltese passport ranks #5 globally with visa-free access to 184 countries. It is the only formal, merit-based pathway to full EU citizenship. And its due diligence framework is, by a wide margin, the most intensive screening process in the CBI world.
Here is what that actually looks like from the inside.
The Ruling That Killed Investment-based Eu Citizenship
Before we get to the due diligence, you need to understand why Malta's pathway exists in its current form.
On April 29, 2025, the European Court of Justice ruled in Case C-181/23 (European Commission v. Republic of Malta) that Malta's previous program, the Malta Exceptional Investor Naturalisation (MEIN) policy, violated EU law. The court found that granting citizenship primarily on the basis of financial contribution, without demonstrating a genuine link to the member state, was incompatible with the Treaties.
That ruling did not just shut down Malta's old program. It set binding legal precedent for every EU citizenship pathway. The investment-based model for EU citizenship has been permanently discontinued. No EU member state can offer citizenship for a fixed contribution ever again.
Malta responded by building something fundamentally different: a merit-based naturalisation framework under the Maltese Citizenship Act (Cap. 188), as amended by Act XXI of 2025. There is no fixed government fee. No guaranteed outcome. No published price. Every application is evaluated by an independent Evaluation Board and approved or rejected at the Minister's discretion.
The pathway is harder. That is precisely the point. A framework that cannot be challenged on the same grounds that terminated the old program is more legally defensible and more durable. And the due diligence that surrounds it reflects that standard.
The Four-tier Due Diligence Framework
Malta's screening process operates across four independent tiers. Most CBI programs run due diligence through one or two channels. Malta runs it through four, each examining a different dimension of the applicant's profile.
Tier 1: Security Screening. International criminal database checks, Interpol screening, global watchlist verification, and intelligence-level background review. Any adverse finding at this tier is disqualifying. This is the baseline, and Malta's baseline is already more rigorous than the complete process in many other jurisdictions.
Tier 2: AML and Sanctions Checks. Anti-money laundering verification against international sanctions lists, Politically Exposed Person (PEP) databases, and financial crime registries. This tier examines the money trail at a structural level: not the source of wealth itself, but whether the applicant or any associated persons have been flagged in global financial crime databases.
Tier 3: Source of Wealth Verification. This is the tier that separates Malta from every other CBI program. It is not enough to prove that the money you are contributing came from legitimate sources. Malta wants to understand how you built your entire wealth profile. Business ownership records. Investment portfolios. Employment history. Corporate structures. Revenue streams. If your net worth has grown significantly over the past decade, they want to understand why and how, with documentation to back every claim.
For Bitcoiners, this tier requires serious preparation. On-chain transaction histories, exchange records, acquisition documentation, wallet statements, and any prior tax filings that reference your Bitcoin holdings. Malta is not unfamiliar with digital assets; the country pioneered blockchain regulation with the Virtual Financial Assets Act. But the evaluators expect the same documentation rigor they would apply to traditional wealth. If you have been self-custodying since 2015 and your coins have moved through multiple wallets, get your records organized well before you begin.
Tier 4: Reputational Review. The final tier examines your public profile, media coverage, business associations, and overall reputation. Malta conducts adverse media screening across multiple languages and jurisdictions. They look at who you do business with, what entities carry your name, and whether anything in your public history raises questions about character or integrity.
Four tiers. Four independent assessments. A failure at any tier can result in rejection, and there is no guaranteed appeal mechanism. The Minister retains final discretion over every application.
How It Compares To Other Cbi Programs
Vanuatu runs due diligence through three independent screening bodies: the Financial Intelligence Unit (FIU), the Vanuatu Police Force (which handles INTERPOL NCB checks), and Immigration Services, reporting to the Citizenship Commission. That three-tier model is structurally unique in the Pacific and genuinely rigorous. But Vanuatu's system is designed for efficiency: thorough screening with a 30 to 60 day processing target.
Türkiye processes through the Provincial Directorate of Civil Registration and Nationality. Comprehensive background checks over 4 to 6 months, but through a single government channel rather than multiple independent tiers.
El Salvador screens through The Bitcoin Office and the Dirección General de Migración y Extranjería. Criminal databases, sanctions screening, AML/CTF compliance review. Real due diligence, but the program launched in December 2023 and the screening infrastructure is still building its track record.
São Tomé and Príncipe handles applications through the Citizenship Investment Unit (CIU) headquartered in Dubai. Standard international checks: AML/CTF screening, criminal records, sanctions, source of funds. Processing takes approximately 6 to 8 weeks.
Malta's process takes 12 to 24 months. That timeline is not bureaucratic delay. It is the time required to conduct four independent tiers of verification, evaluate a merit-based proposal through an independent Board, and allow the Minister to exercise meaningful discretion. The length of the process is the due diligence.
The Residency Requirement
Every other CBI program in our portfolio can be completed without visiting the country. Malta cannot. A minimum of 8 months of legal residence in Malta is required before naturalisation. You need to secure residential property, obtain health insurance, and establish genuine ties to the country.
This requirement exists because of the ECJ ruling. The court's core objection to the old program was the absence of a genuine link between the applicant and Malta. The 8-month residency is the structural answer to that objection: you are not just contributing to Malta, you are living there.
For some applicants, this is a dealbreaker. For others, it is a feature. Malta is an English-speaking EU member state in the Mediterranean with a non-domicile tax regime that zeroes out foreign capital gains, a 5% effective corporate tax rate through the shareholder refund system, and direct access to the EU single market of 450 million consumers. Eight months in Valletta is not a hardship. It is a strategic positioning move.
Why Strictness Is The Asset
The instinct is to view rigorous due diligence as an obstacle. It is the opposite. The rigor of Malta's screening is what makes the Maltese passport the most powerful citizenship achievable through any formal pathway.
184 visa-free destinations. Full EU citizenship: unrestricted rights to live, work, and bank across 27 member states. ESTA access to the United States. A network of over 80 double tax treaties. Permanent and hereditary citizenship that passes to your children and their children.
Every one of those benefits exists because other countries trust Malta's vetting. The passport is strong because the screening is hard. Weaken the screening, and you weaken the passport. Malta understood this when it rebuilt its framework after the ECJ ruling, and the four-tier due diligence is the structural guarantee that the passport will hold its value over time.
For Bitcoiners who think in generational terms, who understand that low time preference means building systems that compound over decades, this is the passport that matches that mindset. It takes longer to acquire. It costs more in preparation and presence. And it delivers more than any other CBI passport on earth.
Who This Is For
Malta is not for everyone. If your budget is under $150,000 and you need speed, Vanuatu or São Tomé and Príncipe are the right tools. If you need E-2 access to the US market, Türkiye is the play. If you want Bitcoin-aligned citizenship from the most forward-thinking nation in the space, El Salvador's Freedom Passport exists in a category of one.
But if you have built something exceptional in entrepreneurship, technology, science, culture, or philanthropy. If you want the most powerful passport attainable through any citizenship pathway. If you want EU access not as a visitor, but as a citizen. If you are willing to invest the time and the preparation to clear the most rigorous screening in the CBI world. Malta is the endgame.
At 21 CBI, our founder Adam Juchniewicz holds an LL.M. in European and Comparative Law from the University of Malta. This is not outsourced expertise; it is built into our advisory at the founding level. We coordinate the entire process through our licensed Maltese legal partner: strategic positioning, proposal development, Competent Professional representation, residency logistics, and navigation through all four tiers of due diligence.
The programs available today may not exist next year. Government frameworks evolve. But Malta's merit-based pathway was designed to endure precisely because it was built on the principles the ECJ demanded. The strongest passport requires the strongest screening. That is not a contradiction. That is the design.

Adam Juchniewicz
CEO, 21 CBI. US Air Force veteran. Bitcoiner since 2020.