CIMA's Rule on an Effective Compliance Programme for the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing, together with the Rule on Compliance with Financial Sanctions and Targeted Financial Sanctions, were gazetted in July 2026 and took effect on 18 September 2026. Both Rules carry more regulatory weight than the Guidance Notes they sit alongside, and a fund's directors, not only its AML officer, now have specific accountability under them.

CV5 Insight: A Guidance Note is a strong recommendation a board could historically explain its way around. A Rule made under section 34(1) of the Monetary Authority Act is not. The gap between the two closed on 18 September 2026, and board minutes that still read like they are addressing a recommendation are already out of date.

What Changed

The AML Rule and the Sanctions Rule formalise obligations that funds have generally been expected to meet in substance for some time, but now do so with the direct force the Monetary Authority Act gives to a Rule. This includes an independently reviewed, enterprise-wide risk assessment; a demonstrably independent AML compliance officer function; a defined audit cycle for the AML programme; and, for outsourced compliance functions, a notification obligation to CIMA. The Sanctions Rule separately requires screening against the applicable consolidated sanctions list, freezing designated assets without delay, and reporting through the Financial Reporting Authority.

Board-Level Actions Required Now

The Common Misunderstanding

Some boards have treated the transition from Guidance Notes to Rules as a documentation exercise, updating policy wording without testing whether the underlying practice actually meets the new standard. A risk assessment that has not been substantively reviewed in over a year, or an AMLCO whose independence exists on an organisational chart but not in practice, will not withstand a CIMA inspection simply because the policy document has been reformatted to reference the new Rules.

How CV5's Platform Model Supports This

CV5 Capital's platform funds operate with an AML compliance function structured for genuine independence from the investment manager, a documented enterprise-wide risk assessment reviewed on a defined cycle, and sanctions screening built into onboarding, consistent with the requirements summarised above. This sits alongside the platform's broader detailed coverage of the AML and Sanctions Rules and the fund's AML, KYB and KYA onboarding framework.

Risks and Caveats

Some aspects of implementation, including the precise timing expectations for filing certain AML audit outputs with CIMA, have not been uniformly described across professional guidance published since the Rules were gazetted. Boards should confirm current filing expectations directly with their administrator, AML officer or legal counsel rather than relying on any single published summary, including this one.

This article is for general information only and does not constitute legal, regulatory, tax or investment advice. Fund managers should obtain advice based on their specific structure, investors, strategy and regulatory obligations.

Conclusion

The AML Rule and Sanctions Rule are now in force, and the accountability they create sits with the board, not only the AML officer. A board that has not tested its risk assessment, AMLCO independence, audit cycle and sanctions screening against the actual text of the Rules since 18 September 2026 has an outstanding action item, not a completed one.

Speak with CV5 Capital about board-level compliance readiness under CIMA's AML and sanctions Rules.

FAQs

Do the AML and Sanctions Rules apply to digital asset funds as well as traditional funds?
Yes. Both Rules apply across CIMA-regulated funds, with particular relevance to digital asset funds given the additional wallet and counterparty screening considerations involved.

Is the fund's AML officer solely responsible for compliance with the Rules?
No. The board retains oversight accountability and should be able to demonstrate active engagement with the risk assessment, audit findings and sanctions screening, not delegate the matter entirely.

What happens if a fund's AML programme has not been updated since the Rules took effect?
This should be treated as an urgent governance item. Boards should commission a gap assessment against the current Rules rather than assume prior Guidance Notes-based compliance remains sufficient.

CV5 Capital is registered with the Cayman Islands Monetary Authority (CIMA Registration No. 1885380, LEI: 984500C44B2KFE900490).