Citizenship and residency by investment (CBI/RBI) programmes are government-administered programmes that grant citizenship or residency to foreign investors by expediting or bypassing normal migration processes. These programmes can help spur economic growth through foreign direct investment, but they are also attractive to criminals and corrupt officials seeking to evade justice and launder the proceeds of crime reaching into the billions of dollars. This report highlights how CBI programmes can allow criminals more global mobility and help them hide their identity and criminal activities behind shell companies in other jurisdictions. It highlights the vulnerabilities of these complex and international investment migration programmes, including the frequent use of intermediaries, involvement of multiple government agencies, abuse by professional enablers and lack of proper governance of the CBI/RBI programmes. The report proposes measures and examples of good practice, that can help policy makers and those responsible for managing the investment migration programmes address these risks. These include an in-depth analysis and understanding of how criminals can exploit CBI or RBI programmes and incorporating risk mitigation measures, such as multi-layer due diligence, in the design of the investment migration programme.