Penalties for Failing Anti-Money Laundering Duties

AML penalties in Mauritius come from two directions. The courts can impose fines and imprisonment after a conviction, and a supervisory body can impose an administrative sanction without going to court. Both rest on the Financial Intelligence and Anti-Money Laundering Act (FIAMLA), Act 6/2002, in force since 10 June 2002. The version consolidated and published by the Financial Intelligence Unit (FIU) in 2026 incorporates Act No. 3 of 2026.

This guide sets out the penalties that can fall on the company, its directors and its Money Laundering Reporting Officer (MLRO), and what usually separates a serious breach from a minor one. It is general information, not advice: how a given provision applies to your company depends on its activity and on the facts.

The two routes: criminal and administrative

The FIAMLA does not rely on a single type of sanction. Understanding the difference helps you see where the risk sits.

The two are not mutually exclusive in principle: the same failure can attract regulatory attention and, if it amounts to an offence, a prosecution. Which route is used in practice is for the authorities to decide.

Criminal penalties under the FIAMLA

Breaching the core preventive duties

A reporting person, or an officer, employee or agent of that person, who knowingly or without reasonable excuse breaches sections 17 to 17G of the FIAMLA faces a fine of up to Rs 10 million and imprisonment of up to 5 years. The same ceiling applies to destroying a record the law requires you to keep, and to facilitating a transaction under a false identity.

Two points stand out. First, the wording covers conduct that is merely "without reasonable excuse", so intent to launder money is not what the court looks at for these breaches. Second, the destruction of records is treated as seriously as the breach of the due diligence duties themselves. A tidy-up of old files can therefore become an offence if the files were ones the company had to keep. The practical rules are in company records: what to keep and for how long and in the guide to KYC for corporate clients.

Failing to report a suspicious transaction

A suspicious transaction must be reported within 5 working days. Failing to do so is an offence under section 14(3) of the FIAMLA, punishable on conviction by a fine of up to Rs 1 million and imprisonment of up to 5 years.

This is the provision that most often concerns the MLRO, since the report is normally filed through the MLRO. How the report works in practice is covered in suspicious transaction reports in Mauritius, and the filing channel in registering with the FIU and using goAML.

Maximum, not tariff

The figures above are ceilings. A court sets the actual sentence in light of the facts, and nothing on this page should be read as a typical or expected amount. What the text does tell you is the order of magnitude of the exposure and that imprisonment is available, not just a fine.

Administrative sanctions and regulatory enforcement

Section 19N covers the case where a regulatory body has reason to believe that one of its members has breached the FIAMLA. The body may impose an administrative sanction, but only after it has notified the member of its intention to do so and allowed 21 days for written observations.

That procedure matters for two reasons:

• You have a defined opportunity to respond. A written reply, backed by documents, is the place to explain a failure, show the steps already taken to remedy it and correct any factual error.
• The notice is the moment to act. Waiting for the sanction itself leaves nothing to influence.

Who the regulatory body is depends on the type of business. The FIAMLA schedule lists professions that are subject to the law, with a regulator for each. A Company Service Provider appears in that schedule, with the Registrar of Companies as regulatory body. Activities that count as company service provider activities include acting as a formation agent for a legal person, such as a company, a foundation or a limited liability partnership, by helping a third party to incorporate, register or set it up. A company that is not itself a company service provider, such as an ordinary trading company, may fall under a different regime or none at all, which is why the first question is always whether your company is a "reporting person" in its own right.

For businesses licensed by the Financial Services Commission (FSC), the supervisory relationship and the enforcement tools sit with the FSC. If you deal with an FSC-licensed corporate service provider (Management Licence), expect its own AML programme to be inspected and expect to be asked for documents on your side. Detail on that relationship is in how to choose a corporate services provider.

Who is exposed

The company

A company that is a reporting person carries the primary obligations: risk assessment, due diligence, record keeping, internal controls and reporting. A failure to meet them is the company's failure, and the sanctions above can be directed at it.

Even a company that is not a reporting person has AML-adjacent duties of its own. Every Mauritian company must identify its beneficial owner, keep the information in a separate register and make it available without delay to the competent authorities on request. Under section 91 of the Companies Act 2001, the last directors of a company that ceases business keep beneficial ownership information for at least 7 years. See the beneficial ownership register guide and who counts as a beneficial owner.

Directors

The FIAMLA offence for breaches of sections 17 to 17G reaches an officer, employee or agent of the reporting person as well as the reporting person itself. A director who takes part in, or knowingly allows, a breach is therefore not shielded by the company's separate legal personality. Directors also have general duties under company law, discussed in directors' duties under Mauritian company law, and an AML failure can sit alongside them. For the particular position of a resident director, who is easy to reach for the authorities, read liability of a resident director in Mauritius.

The MLRO

The MLRO is typically an officer or employee of the reporting person, so the wording on officers and employees can reach them. The reporting duty in section 14 makes the MLRO's workload the most visible exposure: a report that is late, or never made, is the classic failure. Equally, an MLRO who raised a concern and was overridden is in a very different position from one who did nothing, and a written trail is what shows the difference. The role itself is described in the MLRO: role and appointment.

What tends to trigger enforcement

The statute does not rank triggers, but the offences and the procedure point to recurring weak spots:

1. Missing or thin due diligence. Files without proof of identity, beneficial ownership or the purpose of the relationship.
2. Records that cannot be produced. Either never kept or discarded too early.
3. Late or absent suspicious transaction reports. Especially where staff noticed a red flag and did not escalate it.
4. No documented risk assessment. See business risk assessment for AML purposes.
5. No training and no independent review. Covered in AML/CFT training and independent audit.

Reducing your exposure

The following steps do not remove risk, but they are what a supervisory body or a court is likely to look for.

• Confirm whether your company is a reporting person under the FIAMLA schedule
• Appoint an MLRO and record the appointment
• Complete and date a written risk assessment
• Keep identity, beneficial ownership and source-of-funds evidence on file
• Define who may destroy records, and when
• Set an internal escalation route so that suspicious transactions reach the MLRO in time
• Train staff and keep attendance records
• Keep the beneficial ownership register accurate and ready to produce

What the sources do not say

The consolidated FIAMLA text sets out the ceilings above, but a few things should not be assumed:

• The text relied on here does not give a scale of administrative amounts for each type of breach, so none is quoted.
• Whether a particular failure leads to prosecution, a regulatory sanction or both is a matter for the authorities.
• Late filing penalties under the Companies Act are a separate topic, handled in penalties for non-compliance in Mauritius.

For the wider framework in which these penalties sit, start with AML/CFT compliance for Mauritian companies and AML/CFT legislation explained for business owners. If you want an adviser to review your own position, use the contact form.