Money Laundering Reporting Officer: Role and Appointment

The MLRO in Mauritius is the senior contact point for suspicious activity inside a regulated business. If you are searching for what a money laundering reporting officer in Mauritius actually does, the short answer is this: the MLRO receives internal reports from staff, judges whether a suspicion is well founded, and, where it is, files a report with the Financial Intelligence Unit (FIU). The role sits at the centre of a company's wider AML/CFT compliance programme.

This page explains where the role comes from, who has to fill it, what the person does day to day, and how to appoint and record the appointment. It is general information, not advice: whether your company is a regulated business at all depends on its activities.

Where the MLRO role comes from

Mauritian anti-money laundering law is built on the Financial Intelligence and Anti-Money Laundering Act (FIAMLA), Act 6/2002, in force since 10 June 2002. The consolidated version published by the FIU in 2026 incorporates Act No. 3 of 2026. The Act applies to "reporting persons", a category that covers financial institutions and a list of designated professions and businesses.

Under the Act, a reporting person must appoint officers responsible for compliance and for reporting suspicion. The compliance officer looks after the overall programme; the MLRO handles suspicious activity. In smaller businesses one individual may hold both titles, provided they have the standing and time to do both properly. The AML/CFT legislation explained page gives the wider legal picture.

Does your company need an MLRO?

Not every Mauritian company is a reporting person. An ordinary trading company is generally not. The obligation follows the activity, not the legal form.

The FIAMLA schedule lists the Company Service Provider among the regulated professions, with the Registrar of Companies as supervisory body. Activities that fall within that definition include acting as a formation agent for a legal person, such as a company, a foundation or a limited liability partnership, by helping a third party to incorporate, register or set it up.

In practice this means:

• A business that provides corporate services to others is a reporting person and needs its own MLRO.
• A business that is a client of such a provider is not made a reporting person by that relationship, but it will be asked for identity and ownership documents.
• A company that carries out another listed activity (for example certain financial or professional services) may be caught for that reason.

Whether a particular company is caught is a question of fact. Take advice before assuming that you are in or out.

What an MLRO does

The duties vary with the size and risk of the business, but they usually fall into five groups.

Receiving internal reports

Staff who see something unusual report it to the MLRO, not to the FIU directly. The MLRO logs each report, asks for further information and records the outcome.

Deciding whether to report externally

The MLRO weighs the facts and decides whether there are grounds for suspicion. A reporting person or an auditor must report a suspicious transaction to the FIU as soon as they become aware of it, and no later than five working days after the suspicion arises (section 14 of the FIAMLA, consolidated text 2026). The MLRO's decision needs to be quick and documented, because the clock runs from the moment of suspicion. The mechanics are covered in Suspicious Transaction Reports in Mauritius.

Handling cash and other threshold reports

Section 17G of the FIAMLA requires a reporting person to send the FIU, within the prescribed time and in the prescribed form, a report on any cash transaction reaching the prescribed amount, including linked transactions. The MLRO normally owns this process, or supervises whoever runs it.

Keeping the programme alive

An MLRO typically contributes to the business risk assessment, checks that client due diligence is applied consistently, and follows up on politically exposed persons and sanctions screening hits.

Training and liaison

The MLRO briefs staff, supports AML/CFT training and the independent audit, and is the person the regulator or the FIU contacts. The FIU also expects reporting persons to be registered on its reporting platform; see Registering With the FIU and Using goAML.

MLRO and related roles compared

Who can be an MLRO?

The Act does not turn the role into a licence; what matters is that the person is suitable. In practice a sound candidate has:

• sufficient seniority to question management and to be heard;
• a working knowledge of the FIAMLA, the regulator's guidance and the business's own risks;
• access to client files and to the records needed to assess a report;
• enough time, which is a real constraint for a director with other duties;
• no conflict that would stop them from reporting a matter involving a colleague or a major client.

The fit and proper test for directors is a useful benchmark for the character and competence you would look for, even though the MLRO is not necessarily a director.

A common question is whether the resident director can double as MLRO. It is possible, but it concentrates a lot of responsibility in one person, and the liability of a resident director is already significant. Many businesses prefer a separate, trained person.

How to appoint an MLRO

Step 1: record the decision

Appoint by a board decision, either at a meeting or by written resolution. Minutes should name the individual, the date, the scope of authority and the deputy who acts during absence. Guidance on drafting is in How to Write Board Minutes Step by Step.

Step 2: give the MLRO real authority

The resolution should state that the MLRO has direct access to the board, access to all client information, and the power to file a report without prior approval from management. Without that independence, the role is only nominal.

Step 3: write the internal reporting procedure

Staff need a simple route: who to tell, what form to use, and what they must not do (in particular, tipping off the client). Keep every report and every decision, including decisions not to report, with reasons.

Step 4: keep the appointment current

Review the appointment each year. If the MLRO leaves, appoint a replacement promptly and update the FIU details and internal documents. Add the review to your annual compliance checklist.

Outsourcing the MLRO function

Some businesses use an external professional. Responsibility remains with the reporting person: outsourcing the function does not outsource the liability. If you outsource, check that the individual is based where they can act quickly, that they have access to the files, and that the contract covers confidentiality and record keeping.

Where a company is an Authorised Company, the registered agent has duties that include AML/CFT measures and keeping records such as minutes, resolutions and transaction documents (section 71A(8) of the Financial Services Act). That is a statutory duty of the agent, which does not by itself make the agent your MLRO. For guidance on selecting a provider, see How to Choose a Corporate Services Provider in Mauritius.

What happens if the role is neglected

A missing or ineffective MLRO is a weakness a supervisor looks for. Failures of reporting or of the supporting controls can lead to regulatory action and criminal exposure, depending on the breach. The categories are summarised in Penalties for Failing Anti-Money Laundering Duties. The specific penalty depends on the offence, so check the current text of the Act.