A restricted list reads like a single verdict. These places are out; presumably something is wrong with them. That reading is wrong, and it is unfair to most of the countries on any such list. Three separate mechanisms put a country there. They have almost nothing to do with each other, they are decided by different people for different reasons, and only the first is a judgement about anything.
Reason one: dealing there would be unlawful
Sanctions are legal instruments. Governments and the UN Security Council impose them, and businesses within reach of those authorities obey them. Some regimes are comprehensive: they cover a whole territory and forbid most commercial dealing with it. North Korea is the clearest example. Most sanctions are narrower and target named individuals, companies, vessels, banks or government bodies rather than everyone within a border.
A business does not pick which regimes to observe. It observes every one that binds it: the law of the country it operates from, and the rules attached to whatever financial infrastructure it touches. Dollar-denominated value tends to pass through American infrastructure and brings American rules with it. Euro payments pass through European banks and bring theirs. Where two lists disagree, the stricter one governs, because breaching either is a breach.
This category has no flexibility in it. An operator who made an exception would not be doing a customer a favour; they would be committing an offence, and in many jurisdictions a serious one carrying personal liability. There is no appeal to the exchange, because the exchange is not the decision-maker. See sanctions and PEP screening, explained.
Reason two: the service is not authorised to operate there
Financial services are permitted country by country. A licence granted in one jurisdiction does not travel. Offering to buy vouchers from residents of a country that requires its own authorisation for that activity is unlawful in that country, whatever the law says where the business sits. Regulators take a dim view of firms that solicit their residents from a distance, and they have the power to act.
So businesses serve the markets where they are permitted to and stay out of the rest. This is the reason with the least drama attached to it and the one that says least about anybody. Nothing is wrong with the country. Nothing is wrong with the customer. The paperwork does not exist.
France is not a served market. That is a decision about where this service is offered, not a statement about anyone in France or about French law.
This category also moves in ways that have nothing to do with a country's reputation. A regulator introduces a registration requirement that did not exist before, and a country that was served becomes restricted. A licensing regime opens, an application succeeds, and the reverse happens. On this platform the virtual asset licence application is in progress and trading is not enabled; the served list will follow whatever authorisation is ultimately granted. The compliance page sets out the current position.
Reason three: the transaction cannot be completed safely
The third group is pure plumbing. The law permits it, the authorisation covers it, and it still cannot be done.
- There is no payout rail. PayPal is unavailable in a long list of countries. Banks refuse transfers into certain corridors, or accept them and then hold them for weeks. Where a country's banks have lost their correspondent relationships — the arrangements that let a local bank reach the international system through a larger one — international transfers become slow, expensive and unreliable regardless of who is sending. If there is no dependable way to deliver money to someone, there is no honest way to promise it.
- Identity cannot be established. Verification depends on documents that can be checked: machine-readable travel documents, national registers, issuing authorities that can be reached. Where those checks are unavailable, nobody resident there could ever complete verification, so the country is excluded at every amount rather than served up to a ceiling. See our verification process.
- Fraud is concentrated in a corridor. Fraud is not evenly spread. It clusters by route and by method, and it migrates. A corridor worked hard one season goes quiet the next. Where the volume of attempted fraud on a route exceeds what manual review can responsibly handle, the route closes for a while. This is a statement about a criminal operation, not about a population, and it is usually temporary.
FATF listing sits at the softer end of this category. When a jurisdiction is placed under increased monitoring, the effect on customers is extra checks and slower decisions rather than a refusal.
Why keeping them separate matters
Collapse the three and you end up saying something false about most of the people affected.
Reason one concerns the conduct of a government or of named individuals, and the restriction is a legal wall. Reason two concerns filing cabinets. Reason three concerns banks, document databases and criminal geography. A person whose country is restricted for reason two or three is not suspected of anything whatsoever. Nobody has assessed them. Nobody has looked at their file, because there is no file. The service does not reach them, in the same way a courier does not deliver to every address.
That distinction is worth stating plainly, because the experience of being refused feels identical in all three cases and it is easy to read an accusation into it.
Restriction attaches to people as well as to places
A country list is only half the check. Residence, nationality, current location, the destination of the payout and the origin of the voucher are all relevant, and they do not always point to the same place. Someone can hold citizenship of a served country and be resident in a restricted one, or the reverse.
Screening also runs against individuals, and sanctioned individuals live everywhere, including in countries that are entirely unrestricted. Passing the country check is not the same as passing screening, and failing the country check does not mean a person is listed anywhere.
Attempting to appear elsewhere — a VPN, someone else's address, a friend's documents — does not defeat the check. It converts a straightforward refusal into a file that looks like an attempt to evade sanctions screening, which is the worst thing a file can be made to say.
If you are a resident of a served country and happen to be travelling, say so rather than working around it. The honest version is a question for support. The dishonest version is a permanent problem.
Lists move in both directions
Sanctions are lifted as well as imposed. Licensing regimes open. Corridors that were unusable become usable when a bank relationship is restored or a document database comes online. A country restricted today is not restricted forever, and a country served today may not be served next year.
The practical consequence: check before you commit, not after. The current position is published on the restricted countries page, and it is the one that governs — not what a forum post said, and not what applied the last time you looked. A restriction discovered before you buy or accept a voucher is an inconvenience. A restriction discovered with a code already in your hand is a code you cannot do anything with.