boltKey takeaways
- Cayman funds registered with CIMA are financial service providers under the Anti-Money Laundering Regulations and must run a risk-based AML/CFT/CPF program.
- Every in-scope fund must appoint an AMLCO, an MLRO and a deputy MLRO. They must be natural persons at managerial level, and the MLRO and deputy must be different people.
- CIMA's AML Rule and Sanctions Rule took effect on 18 September 2026. They make parts of the guidance notes binding and add duties on governance, outsourcing oversight, training and independent AML audits.
- Investor KYC is usually delegated to the administrator, but the fund's board or general partner stays responsible and must be able to show oversight.
- Registered funds can meet beneficial ownership obligations by appointing a licensed Cayman contact person, but blockers and other unregistered entities in the structure may need their own register.
Cayman Islands investment funds registered with the Cayman Islands Monetary Authority (CIMA), whether mutual funds or closed-ended private funds, must keep an AML/CFT program that meets the Anti-Money Laundering Regulations. That means risk-based due diligence on every investor, screening against sanctions, named AML officers, and suspicious activity reporting to the Financial Reporting Authority. Since 18 September 2026, two binding CIMA rules also set governance, outsourcing and independent audit requirements that used to sit mostly in guidance.
For U.S. sponsors running a Cayman feeder or a master-feeder structure, Cayman AML is often the strictest investor-onboarding regime (see AML and KYC for private funds for the U.S. side) that applies to the fund, more demanding in places than current U.S. requirements.
The legal framework#
Cayman AML for funds rests on four layers:
| Instrument | What it does |
|---|---|
| Proceeds of Crime Act | Creates money laundering offenses, including failure to report, and the reporting framework |
| Anti-Money Laundering Regulations | Sets the core requirements for "relevant financial business": due diligence, risk assessment, record keeping, AML officers and internal controls |
| CIMA Rules (AML Rule and Sanctions Rule, effective 18 September 2026) | Binding CIMA rules that turn parts of the guidance notes into enforceable requirements |
| CIMA Guidance Notes on AML/CFT | Sector-specific guidance, including for investment funds, on how to meet the Regulations |
The Regulations are revised periodically, and the 2025 Revision is current as of late 2026. Because the text is consolidated and renumbered often, refer to the current revision rather than relying on paragraph numbers from older memos.
Which entities are covered#
- Mutual funds registered or licensed under the Mutual Funds Act (open-ended funds)
- Private funds registered under the Private Funds Act (closed-ended funds, including most PE, VC and private credit funds)
- Securities investment business registrants, such as some Cayman investment managers
Each covered fund is responsible for its own compliance, even though the fund itself usually has no employees. For an exempted limited partnership, the governing body is the general partner. For a company, it is the board of directors.
Registration interacts with AML#
A Cayman private fund generally has to apply for CIMA registration within 21 days after accepting capital commitments, and must be registered before it accepts capital contributions. Onboarding must therefore be under way before first close, with AML officers appointed and a due diligence process ready, not added afterward.
AML officers: AMLCO, MLRO and DMLRO#
Each covered fund must designate three roles:
- AML Compliance Officer (AMLCO): oversees the fund's AML program and reports to the governing body
- Money Laundering Reporting Officer (MLRO): receives internal suspicious activity reports and decides whether to file with the Financial Reporting Authority
- Deputy MLRO (DMLRO): acts when the MLRO is unavailable
Each must be a natural person at managerial level with suitable knowledge of Cayman AML law. The officers do not have to live in Cayman. One person may serve as both AMLCO and MLRO, but the MLRO and DMLRO must be different people.
Funds commonly appoint individuals from the fund administrator, the investment manager or a specialist AML service provider. Under the 2026 AML Rule, the AMLCO must be independent of business functions. Law-firm commentary reads the rule as preventing the AMLCO from sitting on the governing body. Confirm the position for your fund's specific appointments with Cayman counsel.
What CIMA's 2026 rules added#
CIMA published two rules in July 2026, both effective 18 September 2026:
- the AML Rule, covering effective compliance programs to prevent money laundering, terrorist financing and proliferation financing
- the Sanctions Rule, covering compliance with financial sanctions and targeted financial sanctions
They mostly codify existing expectations, but several points are new or now enforceable:
- Documented governance. The governing body must adopt a written AML framework that assigns roles and designates the officers. It must oversee the framework, including reviewing the AMLCO's annual report, at minuted meetings.
- Fund-level risk assessment. Prepared at launch, reviewed at least annually, and refreshed after trigger events such as new sanctions that affect investors or holdings.
- Outsourcing oversight. Delegation to an administrator or sponsor is permitted, but the governing body keeps ultimate responsibility and must be able to show it supervises the delegate.
- Independent AML audits. These may be internal for up to two consecutive cycles, after which every third audit must be performed externally. Frequency follows the fund's risk profile, and the audit report is filed with CIMA.
- Annual training for governing body members, AML officers and other relevant persons, with records kept.
- Sanctions procedures. Formal screening, monitoring, freezing and reporting procedures for targeted financial sanctions.
The rules apply only to CIMA-registered or licensed entities. Unregistered vehicles in a structure fall under the Regulations directly but not under these CIMA rules.
Investor due diligence in practice#
The Regulations require customer due diligence before or during the establishment of the business relationship. In practice, that means before a subscription is accepted. For a fund, the "customer" is the investor.
The standard file#
- Individuals: full name, date of birth, nationality, residential address and verification documents
- Entities: constitutional documents, registry evidence, directors or general partners, authorized signatories, and the natural persons who ultimately own or control the investor
- Source of funds, with source of wealth where risk warrants it
- Screening against sanctions lists, including the lists Cayman implements from the UK and UN regimes, and against PEP and adverse media databases
Ownership is traced to natural persons. For legal persons, the Regulations set a 10% ownership or control threshold for identifying and verifying beneficial owners, unless simplified due diligence applies. That is lower than the 25% common in U.S. bank CDD and the 25% used in Cayman's separate beneficial ownership register regime, so do not assume one figure covers both.
Simplified and enhanced due diligence#
Simplified measures may be available in defined lower-risk cases. Examples are investors that are regulated financial institutions in countries with equivalent AML regimes, or entities listed on recognized exchanges. They are never available where there is a suspicion of money laundering.
Enhanced due diligence is required for higher-risk relationships: PEPs, investors connected to high-risk jurisdictions, complex or opaque structures, and anything else the fund's risk assessment flags.
Reliance and eligible introducers#
A fund may in some cases rely on a regulated third party, such as a bank or placement agent, that has already done due diligence on an investor. The conditions are strict: the fund must be able to obtain the underlying information and documents without delay, and the fund remains responsible. Reliance should rest on a written agreement and periodic testing.
A worked onboarding flow (hypothetical)#
Assume a Cayman feeder with 40 investors at first close:
| Day | Step |
|---|---|
| T−30 | Governing body approves the AML framework, risk assessment and officer appointments |
| T−21 to T−3 | Administrator collects KYC, screens all investors, beneficial owners and controllers, and risk-scores each file |
| T−3 | AMLCO signs off on two high-risk files after enhanced due diligence. One investor with unresolved source-of-funds questions is deferred to a later close |
| T | First close: 39 investors admitted |
| T+21 | Deadline for the CIMA registration application, counted from the acceptance of commitments |
| Before first capital call | CIMA registration in place, so contributions can be accepted |
The deferral matters. Admitting an investor whose file is incomplete and fixing it afterward is exactly what Cayman inspections look for.
Sanctions and reporting#
Cayman implements UK and UN sanctions regimes. Funds must screen investors and relevant counterparties, freeze assets of designated persons, and report to the Financial Reporting Authority. Suspicious activity reports also go to the Financial Reporting Authority, through the MLRO. Tipping-off is an offense, so investor communications around a filed report need care.
U.S.-managed Cayman funds should run OFAC screening too, because the U.S. manager and U.S. persons involved remain subject to U.S. sanctions.
Beneficial ownership and the wider context#
The Beneficial Ownership Transparency Act, 2023 took effect on 31 July 2024. Funds registered with CIMA under the Mutual Funds Act or Private Funds Act can use an alternative route to compliance: instead of keeping a full register, they appoint a licensed or registered Cayman contact person who must provide beneficial ownership information to the competent authority on request, within short deadlines. Entities that are not registered, such as blockers, aggregators or trading subsidiaries, may need to keep their own register. This is a separate regime from the U.S. Corporate Transparency Act, which now reaches only certain foreign entities registered in a U.S. state.
Cayman's standing has improved since 2023. The FATF removed the Islands from its list of jurisdictions under increased monitoring in October 2023, and the EU removed them from its high-risk third-country list effective February 2024. LPs that once flagged Cayman as an onboarding risk generally no longer do, but they still expect a well-run program.
How Privatis helps#
Privatis supports Cayman fund onboarding with KYC/AML collection and risk scoring at the investor level, document storage in the LP data room, and an audit trail of reviews and approvals. A compliance filings calendar tracks CIMA-related deadlines such as registrations and annual returns. These records are the evidence a governing body needs to show oversight of a delegated administrator.
Cayman requirements are detailed and fact-specific. Confirm your fund's obligations with Cayman counsel.