Financial Sanctions Compliance for Cayman Funds and Companies

Cayman sanctions compliance applies to every individual and entity in, or undertaking activities within, the Cayman Islands, not only to regulated businesses. UK and UN financial sanctions are extended to the Islands by Overseas Orders in Council, and CIMA's Rule on Compliance with Financial Sanctions and Targeted Financial Sanctions has set the minimum standard for CIMA-regulated funds, managers and service providers since 18 September 2026.

Key takeaways

• The Governor is the competent authority for financial sanctions in the Cayman Islands; the Financial Reporting Authority (FRA) receives sanctions reports and licence applications under delegation.
• Anyone who knows or has reasonable cause to suspect that they hold or control funds or economic resources of a designated person must freeze them, must not deal with them or make them available, and must report to the FRA.
• CIMA's sanctions rule requires regulated persons to screen applicants, customers, beneficial owners, transactions, service providers and connected persons, and to re-screen all customers when a sanctions list is updated.
• Simplified due diligence never reduces screening, and a country subject to UK, UN or US sanctions related to money laundering, terrorist or proliferation financing risks cannot be rated low risk.
• Breaching financial sanctions is a criminal offence.

Where Cayman sanctions law comes from

CIMA's sanctions overview explains that the sanctions in force in the Cayman Islands are essentially the same as those imposed in the United Kingdom. The UK extends them to its Overseas Territories by Orders in Council, which have the force of law in the Islands. The Cayman Islands also implements United Nations Security Council resolutions on terrorist and proliferation financing without delay under the Terrorism Act (As Revised) and the Proliferation Financing (Prohibition) Act (As Revised). Under the latter, the FRA may issue directions imposing enhanced due diligence, monitoring, reporting or cessation of business.

The Governor is the competent authority. Under the Governor's delegation, the FRA receives reports and licence applications and publishes guidance, including its guides to financial sanctions. The FRA's general guidance states that financial sanctions also apply to a "Territory person" wherever in the world they are, and to ships and aircraft registered in the Cayman Islands.

United States sanctions

The FRA does not give guidance on foreign sanctions, but its guidance notes that some, such as those administered by the US Office of Foreign Assets Control, have extra-territorial effect and may still be relevant, for example where a business is owned by a US corporation. CIMA's rule also requires US sanctions to be taken into account when rating geographic risk.

Who must comply

The FRA's guidance is direct: all individuals and legal entities in or undertaking activities within the Cayman Islands must comply with the UN and UK financial sanctions in force there. CIMA's rule repeats the point: compliance is a legal obligation across the jurisdiction and is not limited to regulated persons.

That matters for structures that are not regulated by CIMA at all, such as holding companies, special purpose vehicles, family office entities and foundation companies. Their directors need to know who their shareholders, counterparties and payees are, and how they would respond to a match. The ongoing obligations of an unregulated company are covered in our guide to Cayman exempted company obligations, and Bell Rock's Cayman AML and compliance support covers both regulated and unregulated entities.

What to do if you find a match

According to the FRA's financial sanctions guidance, a person who knows or has reasonable cause to suspect that it holds, controls or is dealing with funds or economic resources owned, held or controlled by a designated person must:

• freeze the funds or economic resources;
• not deal with them, or make them available to or for the benefit of the designated person, unless an exception applies or the Governor has issued a licence; and
• report to the FRA.

Reports are made using the FRA's Compliance Reporting Form, which is used for suspected designated persons, frozen assets and suspected breaches. "Reasonable cause to suspect" is an objective test: whether an honest and reasonable person would have inferred knowledge or formed the suspicion from the facts. An asset freeze does not transfer ownership, and frozen assets are not handed to the FRA. Where a licence is needed for an act that would otherwise be prohibited, the application is made to the Governor, with a copy to the FRA.

False positives

Most potential matches are not true matches. CIMA's rule requires regulated persons to verify potential matches by comparing the name against other identifying information before concluding whether the person is in fact designated. The reasoning should be recorded either way.

CIMA's sanctions rule for regulated entities

CIMA's Rule on Compliance with Financial Sanctions and Targeted Financial Sanctions applies to persons regulated and supervised by CIMA under the regulatory Acts, a definition that expressly includes licensees, registered persons and registrants. It took effect on 18 September 2026 and has the force of law. Its main requirements are:

• the sanctions programme must be an integral part of the AML compliance programme, with its own policies, procedures, systems and controls;
• risk assessments must consider sanctions that may apply to applicants, customers or countries;
• applicants, customers, beneficial owners, transactions, service providers and connected persons must be screened;
• all customers must be re-screened, without delay, when a sanctions list is updated, regardless of their due diligence risk classification;
• funds or economic resources of designated persons, or of persons they own or control, must be frozen without delay and without prior notice;
• every action taken on a true match or suspicion, and the rationale, must be documented; and
• staff must be trained regularly on identifying designated persons and frozen assets, and on the process to follow.

The rule defines "without delay" as, ideally, within a matter of hours of a designation by the UN Security Council or its relevant committee. In practice that means automated screening against list updates, not periodic batch reviews alone. The rule sits alongside CIMA's compliance programme rule, which requires financial sanctions compliance to be addressed in every regulated entity's policies.

What this means for Cayman funds

In a typical fund, investor onboarding and screening are carried out by the administrator, but the fund remains responsible. As a matter of practice, the board should:

• confirm in writing what the administrator screens, against which lists, how often and how list updates are processed;
• receive regular reporting on matches, false positives and any escalations;
• ensure that subscriptions, redemptions, distributions and transfers can be stopped promptly if a match is confirmed;
• extend screening to the fund's own service providers and counterparties, which the rule expressly includes; and
• in a master-feeder structure, agree which entity screens which investors so that no gap arises at the master level.

Our article on master-feeder fund structure and governance describes the entities whose responsibilities need to be mapped, and the beneficial ownership contact person regime overlaps with the same investor data.

Digital assets

CIMA's rule defines targeted financial sanctions to include measures preventing funds or other assets, including virtual assets, from being made available to designated persons. Digital asset funds and virtual asset service providers should therefore screen wallet addresses and counterparties as well as names, and be able to freeze or segregate assets held in wallets they control. Our article on Cayman VASP registration and licensing sets out the wider regulatory framework.

Frequently asked questions

Do Cayman sanctions follow UK sanctions?

CIMA states that the sanctions in force in the Cayman Islands are essentially the same as those imposed in the United Kingdom, extended by Orders in Council, together with UN measures implemented under the Terrorism Act and the Proliferation Financing (Prohibition) Act.

Do unregulated Cayman companies have to comply?

Yes. All individuals and legal entities in or undertaking activities within the Cayman Islands must comply. CIMA's rule adds specific programme requirements for the entities CIMA regulates.

Where is a sanctions match reported?

To the FRA, using its Compliance Reporting Form. The FRA publishes the form and its contact details for financial sanctions matters on its website.

Does simplified due diligence reduce sanctions screening?

No. CIMA's rule states that simplified due diligence does not reduce or waive screening, and its compliance programme rule requires sanctions screening to continue where simplified measures apply.

Where Bell Rock fits

Bell Rock Group Financial Services Limited is licensed by CIMA as a Company Manager under the Companies Management Act (As Revised), Licence No. 633916. Bell Rock provides AML officer appointments through named individuals and coordinates the sanctions policies, board reporting and records that CIMA-regulated entities need, and supports unregulated Cayman companies with their governance records. Directors appointed through Bell Rock act in their personal capacity.

Related reading

• AML obligations for relevant financial business
• Crypto fund governance for independent boards
• Cayman family offices: structuring and governance
• CIMA's Rule on an Effective Compliance Programme: What Changes for Cayman Entities
• AML Officers for Cayman Funds: MLRO, DMLRO and AMLCO Explained
• Cayman Beneficial Ownership Requirements: What Entities Must Do

Bell Rock supports sanctions and AML programmes through its Cayman AML and compliance support service.