A European money laundering watchdog has cautioned that a secretive investment-for-passports program run by Cyprus was vulnerable to money laundering and fraught with risk.