Mauritius AMLA 2026: Practical Compliance Guide for Boards, Fund Managers & Trustees

The Anti‑Money Laundering, Combatting the Financing of Terrorism and Countering Proliferation Financing Act 2026, commonly shortened to AMLA 2026, was enacted on 18 April 2026, replacing and consolidating the previous FIAMLA framework and reshaping AMLA compliance Mauritius obligations for every regulated entity on the island. The new statute broadens the definitions of reportable persons, strengthens the Financial Intelligence Unit’s (FIU) investigative powers, and introduces explicit beneficial‑ownership register requirements that reach deep into fund structures, Global Business Companies (GBCs) and trust arrangements. For board directors, fund managers, trustees and corporate service providers, the practical question is no longer whether compliance frameworks must change, but how quickly remediation can be completed before regulators begin targeted inspections.

This guide delivers the actionable checklists, entity‑specific obligation tables and 30/60/90‑day remediation playbook that decision‑makers need right now.

Executive Summary: Who Should Read This and Why It Matters Now

Read this if you are a board member, trustee, fund manager or corporate service provider in Mauritius. The Anti‑Money Laundering Act 2026 creates immediate new obligations that cannot wait for the next board cycle. Here is what changed, who is affected and what to do first:

• What changed. AMLA 2026 consolidates and expands Mauritius’ AML/CFT/CPF framework. It widens the scope of “reporting persons,” introduces mandatory beneficial‑ownership registers, strengthens FIU powers and raises maximum penalties for non‑compliance.
• Who is affected. Licensed funds, fund managers (including alternative investment fund managers), GBCs, trust and corporate service providers, banks, insurance companies, designated non‑financial businesses and professions (DNFBPs), and their boards of directors.
• Immediate actions (30/60/90 days). Within 30 days: conduct a gap analysis against AMLA 2026 and convene a board briefing. Within 60 days: update AML/CFT policies, appoint or reconfirm the Money Laundering Reporting Officer (MLRO), and begin beneficial‑ownership register remediation. Within 90 days: complete staff training, test the updated suspicious‑activity reporting chain and document everything for audit readiness.

The sections that follow unpack each obligation, map it to the relevant entity type, and provide downloadable templates to accelerate implementation.

The Anti‑Money Laundering Act 2026: Quick Legal Snapshot

AMLA 2026, formally cited as Act 3 of 2026, received Presidential assent on 18 April 2026 and came into operation on that date. The full text is published on the Laws of Mauritius portal. It replaces the Financial Intelligence and Anti‑Money Laundering Act 2002 (FIAMLA) and related subsidiary legislation, consolidating AML, CFT and countering proliferation financing (CPF) into a single statute. The key statutory changes that practitioners must absorb are:

• Expanded scope of “reporting persons.” The definition now expressly captures virtual‑asset service providers (VASPs), trust and corporate service providers (TCSPs), and certain categories of professionals previously treated as DNFBPs under separate guidance.
• Mandatory beneficial‑ownership registers. Legal persons and legal arrangements must establish, maintain and keep current a register of beneficial owners. Trustees must identify and verify beneficial owners of trusts and transmit that information to the relevant supervisory body.
• Enhanced FIU investigative powers. The FIU may now request information directly from any reporting person without a court order, issue compliance directives and share information with foreign counterpart agencies under broader mutual‑assistance provisions.
• Corporate service provider obligations. Management companies and corporate service providers face explicit due‑diligence duties for the entities they administer, including ongoing monitoring of transactions and source‑of‑funds verification.
• Increased penalties. Maximum fines and custodial sentences for money‑laundering offences and regulatory non‑compliance have been raised substantially.

Key Statutory Definitions to Watch

Practitioners should pay close attention to the expanded definition of beneficial owner, which now captures any natural person who ultimately owns or controls a legal person or arrangement, including through a chain of ownership or control. The Act also introduces a definition of virtual‑asset business activity (VBA) aligned with FATF standards. The treatment of politically exposed persons (PEPs) is tightened, requiring ongoing, not merely onboarding, enhanced due diligence.

Enforcement and Penalties

AMLA 2026 increases the maximum custodial sentence for money‑laundering offences and raises the ceiling for administrative fines that regulators may impose on non‑compliant reporting persons. Directors and senior officers may be held personally liable where non‑compliance results from their neglect, consent or connivance. Industry observers expect the strengthened penalty framework to signal a more assertive enforcement posture from both the FSC and the Bank of Mauritius in the coming inspection cycle.

Who Enforces and Supervises AMLA Compliance Mauritius?

Mauritius operates a multi‑agency AML/CFT/CPF supervisory architecture. Understanding which body supervises your entity type is the first step toward efficient compliance.

• Financial Intelligence Unit (FIU). The central agency for receiving, analysing and disseminating suspicious transaction reports (STRs) and suspicious activity reports (SARs). All reporting persons must file SARs with the FIU.
• Financial Services Commission (FSC). The primary regulator for non‑bank financial services, including licensed funds, fund managers, GBCs, insurance, securities and global business. The FSC issues AML/CFT codes and conducts supervisory inspections of FSC licensees.
• Bank of Mauritius (BoM). Supervises banks, non‑bank deposit‑taking institutions and payment service providers. The BoM publishes AML/CFT guidance and conducts on‑site examinations for banking‑sector entities.
• Director of Public Prosecutions (DPP). Prosecutes money‑laundering, terrorism financing and proliferation financing offences referred by the FIU or law enforcement.
• Gambling Regulatory Authority, Registrar of Companies and other sectoral supervisors. Exercise delegated AML supervisory functions for their respective sectors under AMLA 2026.

How Regulator Expectations Differ by Sector

Banks supervised by the BoM face the most granular KYC and transaction‑monitoring expectations, codified in BoM guidance notes. FSC‑regulated entities, funds, fund managers and GBCs, must comply with the FSC AML/CFT Code, which cross‑references AMLA 2026. Corporate service providers administering GBCs operate under both FSC expectations and the express statutory duties now embedded in the Act. Early indications suggest the FSC will prioritise beneficial‑ownership compliance during its first post‑enactment inspection round, while the BoM is expected to focus on enhanced due‑diligence processes for correspondent banking and cross‑border payment flows.

Impact on Funds, Fund Managers and GBCs Under AMLA 2026

AMLA 2026 affects fund managers compliance Mauritius obligations at every stage of the fund lifecycle, from investor onboarding through ongoing monitoring to exit. GBC requirements Mauritius have also shifted, particularly around beneficial‑ownership transparency and the responsibilities of management companies that administer GBC structures. This section maps the key obligations by entity type.

Licensed Funds (FSC‑Regulated)

Licensed funds, whether open‑ended or closed‑ended, must ensure that investor KYC files meet the new statutory standard for beneficial‑ownership identification. Where a fund relies on its manager or administrator to perform CDD, the fund itself retains ultimate responsibility under AMLA 2026. Ongoing monitoring of investors and transactions must be documented, and the frequency of periodic reviews should be calibrated to the fund’s assessed risk profile.

Licensed Fund Managers and AIFMs

Fund managers must establish a compliance function that is independent from business lines. The MLRO must have direct reporting access to the board and sufficient authority to escalate SARs without delay. Staff training on AML/CFT must be conducted at onboarding and refreshed annually, with evidence retained for inspection. Where the fund manager also acts as investment adviser to offshore vehicles, AMLA 2026 obligations apply to the Mauritius‑based advisory function.

Global Business Companies (GBCs)

GBCs must now maintain a statutory beneficial‑ownership register, updated promptly whenever ownership or control changes. The management company or corporate service provider administering a GBC bears concurrent obligations: it must collect, verify and retain BO data and make the register available to the FSC on request. For GBC structures involving nominee arrangements, the Act requires disclosure of the nominator’s identity through to the ultimate natural‑person beneficial owner.

Board and Trustee Duties: Corporate Governance AML Obligations and Director Liability

AMLA 2026 places direct obligations on boards of directors, reinforcing the link between corporate governance AML standards and statutory compliance. Directors can no longer delegate AML responsibility entirely to compliance officers and then claim ignorance. Under the new framework, the board must:

• Formally approve the entity’s AML/CFT/CPF policy and ensure it reflects AMLA 2026 requirements.
• Appoint the MLRO, ensure the role’s independence and confirm adequate resourcing.
• Receive and consider periodic compliance reports, at a minimum, quarterly.
• Allocate sufficient budget for compliance technology, training and external advisory support.
• Ensure that all directors complete AML awareness training appropriate to the entity’s risk profile.
• Record AML governance decisions in board minutes with sufficient detail to evidence active oversight.

Where non‑compliance results from a director’s neglect, consent or connivance, AMLA 2026 allows personal liability to attach. The likely practical effect will be a marked increase in the specificity of AML‑related board resolutions and the frequency with which boards receive compliance updates.

Trustees Compliance Mauritius: Specific Obligations and Conflict Management

Trustees face a distinct set of obligations under AMLA 2026. They must identify and verify the beneficial owners of every trust they administer, including settlors, protectors, beneficiaries and any person exercising effective control. Where a trust has a class of beneficiaries rather than named individuals, the trustee must assess risk on a class basis and apply enhanced due diligence at the point of distribution. Trustees must also manage conflicts of interest: where a trustee simultaneously acts as MLRO and investment decision‑maker, the Act’s independence requirements may necessitate restructuring internal reporting lines or appointing an external MLRO.

Sample Board Resolution Wording

“RESOLVED that the Board, having reviewed the Anti‑Money Laundering, Combatting the Financing of Terrorism and Countering Proliferation Financing Act 2026, hereby approves the updated AML/CFT/CPF Policy dated [DATE], appoints [NAME] as Money Laundering Reporting Officer with direct reporting access to the Board, and directs the Compliance function to complete a full gap analysis and staff training programme within 90 days.”

AML Risk Assessment Mauritius: Customer Due Diligence and KYC Under AMLA 2026

A robust AML risk assessment Mauritius framework is the foundation of every compliant programme. AMLA 2026 requires all reporting persons to carry out a business‑wide risk assessment, document the methodology and update it whenever material changes occur. The assessment must follow the standard three‑step process: identify ML/TF/PF risks, assess their likelihood and impact, and mitigate them through proportionate controls.

The Act distinguishes three tiers of customer due diligence:

• Simplified due diligence (SDD). Permitted only where the risk assessment demonstrates genuinely low risk, for example, listed companies with transparent ownership or government entities.
• Standard CDD. The default for all new and existing business relationships. Requires identification and verification of the customer’s identity, the purpose and intended nature of the relationship, and the beneficial owner.
• Enhanced due diligence (EDD). Mandatory for PEPs, correspondent banking relationships, customers in high‑risk jurisdictions, complex or unusual transactions and any situation where the entity’s risk assessment flags elevated risk.

Ongoing monitoring must be proportionate to the assessed risk. For high‑risk relationships, industry observers expect regulators to look for evidence of at least annual file reviews and transaction‑pattern analysis.

KYC File and Recordkeeping Requirements

Every CDD file must contain the customer’s identification documents, verification records, the nature and purpose of the relationship, and all subsequent updates. The minimum retention period under AMLA 2026 is seven years from the date the business relationship ends or the transaction is completed. Records must be retrievable in a form that allows prompt response to FIU or supervisory requests. Boards should ensure that digital recordkeeping systems are tested for search and retrieval functionality before the next inspection cycle.

AML risk assessment template checklist:

• Country/geographic risk factors identified and rated
• Customer‑type risk factors (PEPs, complex structures, bearer instruments)
• Product/service risk factors (cross‑border, high‑value, anonymous)
• Delivery‑channel risk factors (non‑face‑to‑face, third‑party reliance)
• Mitigating controls documented for each risk factor
• Risk assessment approved by the board and dated
• Next scheduled review date recorded

Reporting, Suspicious Activity Reporting (SAR) and Asset Freezing Under AMLA 2026

AMLA 2026 requires every reporting person to file a suspicious activity report with the FIU as soon as there is knowledge or reasonable suspicion that a transaction or activity is linked to money laundering, terrorism financing or proliferation financing. There is no minimum monetary threshold, the obligation is triggered by suspicion, not value.

The SAR process under the new Act operates as follows:

• Internal escalation. Staff must report suspicions to the MLRO. The MLRO evaluates the information and, if the suspicion is maintained, files a SAR with the FIU.
• Filing with the FIU. SARs must be submitted using the FIU’s designated filing platform. The FIU may request additional information, and reporting persons must respond promptly.
• Tipping‑off prohibition. Reporting persons and their staff must not disclose to the customer or any third party that a SAR has been filed or is being considered.
• Asset freezing. The FIU may issue a direction to freeze assets where it has reasonable grounds to believe they are proceeds of crime or connected to terrorism financing. Reporting persons must comply immediately upon receiving the direction.

For fund managers and trustees, the chain of reporting can be complex, particularly where multiple entities in a structure (fund, manager, administrator, trustee) become aware of the same suspicious activity. AMLA 2026 places the obligation on each reporting person individually, meaning concurrent SARs may be required. Compliance teams should map the reporting chain in advance and document it in the AML policy.

Interaction With Sanctions Screening and AML Sanctions Obligations

AMLA 2026 integrates Mauritius’ obligations under UN Security Council sanctions regimes. Reporting persons must screen customers and transactions against the consolidated sanctions lists and implement targeted financial sanctions, including asset freezing, without delay. The Act imposes a strict‑liability standard for failure to freeze designated assets. Compliance teams should automate sanctions screening and maintain audit logs of every screening event for at least seven years.

Practical Remediation Playbook: 30/60/90‑Day AMLA Compliance Mauritius Checklist

The following remediation playbook translates AMLA 2026 into concrete actions for compliance teams and boards. Each action is assigned a timeline, an owner and the evidence that should be retained for audit purposes.

Boards should treat this playbook as a minimum. Entities with complex structures, such as multi‑layered fund platforms or GBCs with nominee shareholders, may need to accelerate the timeline or engage external advisers to complete remediation within a shorter window.

Enforcement, Audits and What to Expect From Regulators

Industry observers expect both the FSC and the BoM to commence thematic inspections focused on AMLA 2026 compliance within the second half of 2026. Based on regulator communications and past inspection cycles, the likely focus areas include:

• Completeness and accuracy of beneficial‑ownership registers
• Independence and resourcing of the MLRO function
• Quality of business‑wide risk assessments (documented methodology, board approval, periodic review)
• Timeliness and quality of SAR filings
• Adequacy of training programmes and evidence of staff competence

During an on‑site inspection, regulators will typically request the AML/CFT policy, board minutes evidencing oversight, a sample of CDD files (including at least one EDD file), the BO register and evidence of sanctions screening. Entities should designate a single point of contact for regulatory communications and rehearse document retrieval to ensure files can be produced promptly.

Key Dates and Compliance Timeline

Entities should subscribe to FSC and BoM notification services and monitor the Mauritius IFC AML/CFT page for updates on compliance initiatives and upcoming deadlines.

Downloads and Templates

The following templates are designed to accelerate your AMLA 2026 remediation. Adapt each template to your entity’s specific structure, risk profile and licensing conditions before use:

• Board resolution template, sample wording for approving the updated AML/CFT policy and appointing the MLRO
• MLRO appointment letter template, includes reporting‑line, authority and independence clauses
• AML risk assessment template, structured worksheet covering geographic, customer, product and delivery‑channel risk factors
• Trustee BO verification checklist, step‑by‑step guide for identifying and verifying beneficial owners of trusts
• 30/60/90‑day remediation tracker, spreadsheet with built‑in owner assignment and evidence columns

Contact the editorial team to request Word and PDF versions of these templates.

Conclusion: AMLA Compliance Mauritius, Act Now, Document Everything

AMLA 2026 is not a future obligation, it is in force today. Boards, fund managers and trustees that move quickly to close gaps, update registers and train their teams will be best positioned to satisfy regulators and protect their licences. The 30/60/90‑day playbook above provides a structured path to readiness. For entities with complex structures or cross‑border dimensions, engaging specialist financial services compliance Mauritius advisers early will reduce risk, cost and the likelihood of enforcement action. The time to act on AMLA compliance Mauritius is now.

Sources

1. Anti‑Money Laundering, Combatting the Financing of Terrorism and Countering Proliferation Financing Act 2026, Laws of Mauritius
2. Financial Services Commission (FSC), AML guidance
3. Bank of Mauritius, AML/CFT supervisory expectations
4. FiveComply, Mauritius AMLA 2026: key changes to AML law and compliance requirements
5. Mauritius IFC, Overview of AML/CFT/CPF compliance and ongoing initiatives
6. Zigram, Mauritius AML/CFT/CPF Bill 2026
7. Appleby, Fund finance laws and regulations 2026: Mauritius