Why AML Audits Matter in Mauritius: Key FSC Expectations for Regulated Entities

Mauritius continues to strengthen its position as a reputable international financial centre through an increasingly robust Anti-Money Laundering and Countering the Financing of Terrorism (AML/CFT) framework. As the jurisdiction aligns more closely with Financial Action Task Force (FATF) standards, the Financial Services Commission (FSC) has placed growing emphasis on governance effectiveness rather than purely procedural compliance.

Recent FSC enforcement actions demonstrate a clear regulatory trend: AML compliance is no longer assessed solely on the existence of policies and documentation, but on whether governance frameworks operate effectively in practice.

For FSC-regulated entities, including Global Business Licence (GBL) entities, investment firms, insurers, and a wide range of licensed intermediaries, this means AML governance must become more proactive, risk-based, and operationally integrated.

At FiveComply, we support licensed and licence-seeking entities in Mauritius and internationally with AML governance reviews, compliance assessments, independent AML audits, and regulatory readiness projects aligned with FSC expectations and international best practice.

1.  The Regulatory Landscape in Mauritius

AML/CFT obligations in Mauritius are primarily governed by the Financial Intelligence and Anti-Money Laundering Act (FIAMLA), supported by the Financial Intelligence and Anti-Money Laundering Regulations, FSC-issued codes, and the detailed guidance set out in the FSC Handbook.

The FSC applies a risk-based supervisory approach aligned with FATF standards. Regulated entities are therefore expected not only to implement AML controls, but also to demonstrate that those controls are proportionate to their risk profile, properly implemented, and continuously monitored.

2. What AML Governance Means in Practice

Under FSC expectations, effective AML governance is generally built around:

  • Board and senior management oversight
  • Independent compliance functions
  • Enterprise-wide risk assessments (EWRA)
  • Clear escalation and reporting procedures
  • Internal audit and independent assurance
  • Risk-based customer due diligence and monitoring

A key regulatory expectation is that AML responsibility cannot be delegated entirely to compliance teams. Boards and senior management remain ultimately accountable for the effectiveness of the AML framework.

From our experience at FiveComply, many governance weaknesses observed in practice stem not from the absence of policies, but from the lack of meaningful oversight, ownership, and operational integration of those policies.

3. Common Weaknesses Identified in FSC Enforcement Actions

FSC enforcement actions continue to highlight recurring deficiencies across regulated entities.

Limited Board Engagement in AML Oversight

Boards often receive AML reporting without sufficient challenge, documentation, or active involvement in risk management decisions.

At FiveComply, we regularly support boards and senior management teams in strengthening AML reporting frameworks to ensure that oversight is both structured and demonstrable.

Weak or Static Enterprise-Wide Risk Assessments

Enterprise-wide risk assessments are frequently generic, outdated, or poorly connected to operational controls and onboarding processes.

Customer Due Diligence and Beneficial Ownership Gaps

Common issues include incomplete KYC files, insufficient beneficial ownership verification, and inconsistent application of enhanced due diligence measures.

Ineffective Transaction Monitoring Frameworks

Regulators increasingly focus on whether monitoring systems are properly calibrated, alerts are meaningfully investigated, and suspicious activity escalation processes function effectively.

Weak Compliance Function Independence

Insufficient resourcing, unclear reporting lines, and operational interference can significantly reduce the effectiveness of AML compliance functions.

4. Enforcement Actions Reflect Broader Regulatory Expectations

FSC enforcement actions should not be viewed purely as punitive measures. They also provide insight into the regulator’s evolving supervisory priorities.

Regulated entities are increasingly expected to demonstrate not only that controls exist, but that they are effective in practice and supported by appropriate governance structures.

In this environment, proactive governance reviews and independent AML assessments are becoming increasingly important components of regulatory preparedness.

5. Key Lessons for Regulated Entities

Based on current enforcement trends, regulated entities should focus on:

  • Embedding AML governance at board level
  • Maintaining dynamic and evidence-based risk assessments
  • Ensuring compliance functions are independent and properly resourced
  • Strengthening internal audit and independent AML testing
  • Enhancing governance documentation and escalation frameworks

At FiveComply, we assist regulated entities in Mauritius with AML governance assessments, EWRA reviews, independent AML audits, remediation projects, and FSC regulatory readiness support aligned with evolving regulatory expectations and international best practices.

As FSC supervision continues to evolve towards effectiveness-focused compliance, proactive governance reviews and independent AML assessments are becoming essential for regulated entities seeking to strengthen their AML/CFT frameworks and reduce regulatory risk.

Disclaimer
This article is provided for general informational purposes only and does not constitute legal, regulatory, or tax advice.

Author

Maria Andreou

Regulatory Audit Supervisor – Offshore Division