Compliance
Compliance & AML Updates in Cayman Islands: What Financial Service Providers Should Know
Cayman Islands is tightening its AML/CFT/CPF and sanctions compliance rules, with new regulations coming into effect 18 September 2026—here’s what providers must do to avoid penalties and ensure regulatory readiness.
By NomadicTax Research Team • 5-8 min read • September 16, 2026
## Overview of New Rules
- CIMA has issued two new **Rules**:
* **Rule on Effective Compliance Programme for the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing** (AML/CFT/CPF compliance programme for FSPs)
* **Rule on Compliance with Financial Sanctions and Targeted Financial Sanctions**
These Rules **take effect 18 September 2026**. ([cima.ky](https://www.cima.ky/aml-cft-faqs?utm_source=openai))
## Key Requirements for Regulated Financial Services Providers (FSPs)
- Must maintain robust governance including appointment of an **AML Compliance Officer**, independent audit function, regular risk assessments.
- Must adopt a **risk-based approach** to both money laundering and sanctions compliance; tailor controls proportionate to size and complexity of operations.
- Sanctions compliance uplift: TFS obligations include screening, reporting, and strictly observing UN/UK sanctions regimes.
## Practical Steps for Compliance
1. **Review internal frameworks**: Ensure policies and procedures are updated to reflect the new Rules.
2. **Train staff**: AML/CFT/CPF training for all employees; sanctions screening and audit process.
3. **Engage external audits**: Independent audit functions need to test effectiveness of controls.
4. **Document risk assessments and decision making**: key in event of regulatory inquiry or investigation.
## Implications of Non-Compliance
- Entities falling short may face **administrative penalties, loss of licence, reputational harm**.
- Given Cayman’s role as a financial centre, failure to satisfy FATF standards can impact correspondent banking relationships and international operations.
## Related Policy Landscape
- These Rules support Cayman’s wider financial crime prevention strategy and strengthen alignment ahead of its forthcoming FATF 5th Round Evaluation.
- Consultations are ongoing in several other areas (Recovery Planning, Beneficial Ownership Transparency) which may introduce further obligations. ([cima.ky](https://www.cima.ky/update-importance-of-a-comprehensive-crisis-management-framework-and-cimas-commitment-to-implementation?utm_source=openai))
## Example: Matching Rules to Practice
- If you're a ride-sharing payment platform registered in Cayman, you must ensure your AMLCO is in place, onboard new users with required jurisdictional sanctions checks, and undergo periodic independent audits.
- An insurer providing Risk-Relevant Financial Business (RFB) must separately comply with sanctions and AML-CFT obligations even if core business is regulatory exempt otherwise.
**Takeaway**: Effective 18 September 2026, every FSP must carefully assess and bolster its AML and sanctions risk frameworks—evaluate eligibility under new Rules and engage early.