Cayman Islands Monetary Authority (CIMA)

Overview

The Cayman Islands Monetary Authority (CIMA) was established in 1997 as the primary financial services regulator and monetary authority for the Cayman Islands. CIMA serves as the chief regulator of the Cayman Islands' financial sector, overseeing banking, insurance, investment funds, securities businesses, trust companies, and virtual asset service providers. The jurisdiction has established itself as a major offshore financial centre, attracting substantial investment in banking, insurance, captive insurance, mutual funds, and more recently, virtual assets and cryptocurrency services.

Current Leadership: As of November 1, 2024, Mrs. Cindy Scotland, OBE, serves as Chief Executive Officer (CEO) of CIMA, transitioning from the title of Managing Director which she held since June 2000. This change reflects CIMA's organizational restructuring to align with international best practices. The Deputy Managing Director positions were revised to include Chief Supervision Officer, Chief Operations Officer, and Chief Legal Affairs, Enforcement, AML/CFT Officer roles.

Institutional Background: The Cayman Islands financial services industry is one of the world's largest and most sophisticated, with deep expertise in banking, insurance, fund administration, and trust services. CIMA's regulatory framework reflects this maturity and the jurisdiction's commitment to maintaining its position as a leading international financial centre with robust regulatory standards.

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

CIMA exercises comprehensive supervision over banks and trust companies licensed to conduct business in or from the Cayman Islands. The regulatory framework establishes a dual-layer licensing regime: banks and trust companies must be licensed under the Banks and Trust Companies Act, while also conforming to CIMA's Regulatory Handbook and prudential standards.

Licensing and Authorization:

• Applications for banking licenses undergo rigorous due diligence, including assessment of ownership structure, management quality, business plan viability, and financial resources.
• Minimum capital requirements are set according to the complexity and risk profile of proposed operations.
• Foreign banks operating in Cayman Islands must demonstrate compliance with home country regulations and establish adequate local representation.

Prudential Supervision:

• Banks are required to maintain minimum capital adequacy ratios aligned with Basel III standards.
• Risk management frameworks must address credit, market, operational, and liquidity risks.
• Large exposure limits restrict concentration of credit risk.
• Regular stress testing and scenario analysis are required to assess resilience.

Conduct of Business Rules:

• Customer due diligence (KYC) and ongoing customer monitoring are mandatory.
• Anti-money laundering (AML) and counter-terrorist financing (CFT) policies must be implemented and maintained.
• Segregation of customer deposits from operational funds is required.
• Banks must maintain adequate records and reporting systems.

On-site and Off-site Supervision:

• CIMA conducts risk-based supervisory inspections of banks.
• Off-site monitoring includes analysis of prudential returns and regulatory reports.
• Examination findings inform supervisory priorities and enforcement actions.

Securities and Investment Business Regulation

CIMA regulates the securities and investment business sector under the Securities Investment Business Act (2020 Revision). The regulatory scope includes investment managers, investment advisers, securities dealers, and market makers operating in or from the Cayman Islands.

Authorization Framework:

• Investment businesses must obtain Category licenses based on the scope and nature of services provided.
• The licensing regime distinguishes between different types of investment services, with corresponding prudential and conduct requirements.

Market Conduct Standards:

• Investment firms must maintain fair dealing standards in client interactions.
• Conflicts of interest must be disclosed and managed appropriately.
• Suitability requirements obligate advisers to recommend investments aligned with client objectives.
• Custody and settlement arrangements must protect client assets.

Prudential Requirements:

• Investment firms must maintain minimum capital and liquid resources.
• Risk management frameworks must address market, credit, operational, and liquidity risks.
• Regular stress testing is required to assess solvency under adverse scenarios.

Supervision and Compliance:

• CIMA conducts on-site inspections and off-site monitoring of investment businesses.
• Regulatory reporting requirements provide ongoing visibility into financial condition and compliance.

CIMA supervises the insurance and reinsurance industry under the Insurance Act (2010, as amended). The regulatory scope includes general insurance (property and casualty), long-term insurance (life), reinsurance, and captive insurance operations.

Licensing and Authorization:

• Insurance companies must obtain licenses categorized by the type of insurance business (Class A for general insurance, Class B for long-term insurance, Class C for reinsurance, etc.).
• Applicants must demonstrate adequate capital, management expertise, and business viability.
• Captive insurance entities (licensed to insure risks of affiliated entities) are subject to distinct licensing and supervisory requirements.

Solvency and Capital Standards:

• Insurance companies must maintain minimum solvency margins and capital adequacy ratios.
• Own Risk and Solvency Assessment (ORSA) requirements apply to larger insurers.
• Investment portfolios must align with liability profiles and regulatory limits on asset concentration.

Conduct of Business and Market Conduct:

• Insurance intermediaries (brokers and agents) must be licensed and maintain professional standards.
• Policy documentation and disclosure requirements protect consumer interests.
• Fair claims handling and customer complaint procedures are required.

Supervision and Examination:

• CIMA conducts periodic examinations of insurance companies and intermediaries.
• Prudential returns provide ongoing financial monitoring.
• Thematic reviews assess emerging risks (e.g., cybersecurity, climate risk).

CIMA's AML/CFT framework constitutes one of the foundation pillars of financial regulation in the Cayman Islands, implementing Financial Action Task Force (FATF) standards and Best Practice Recommendations.

Legal Framework:

• Proceeds of Crime Act (2025 Revision) — Establishes the primary AML offences and financial crime prevention obligations.
• Anti-Money Laundering Regulations (2025 Revision) — Implement detailed obligations for all financial service providers.
• CIMA Guidance Notes on Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing (February 2024) — Provide detailed interpretive guidance and expectations for compliance.

Core AML/CFT Requirements:

1. Customer Due Diligence (CDD) and Know Your Customer (KYC):

• All financial service providers must implement robust KYC procedures.
• Customer identity verification using official documentation.
• Beneficial ownership identification and verification for entity customers.
• Ongoing customer monitoring to detect suspicious activity.

1. Suspicious Activity Reporting:

• Reporting obligations to the Financial Investigation Division (FIU) when suspicious transactions are detected.
• Reporting thresholds and timelines established in regulations.
• Protected reporting status for good faith suspicious activity reports.

1. Money Laundering Reporting Officer (MLRO):

• Each regulated entity must designate an MLRO responsible for AML/CFT compliance.
• MLRO responsibilities include policy implementation, training, and suspicious activity assessment.
• Independence and authority to escalate concerns required.

1. Transaction Monitoring and Record Keeping:

• Systems to detect transactions inconsistent with customer profile or risk profile.
• Maintenance of transaction records for minimum periods specified in regulations.
• Audit trails and documentation of AML/CFT decision-making.

1. Proliferation Financing (PF) Sanctions:

• Compliance with UN Security Council resolutions on weapons of mass destruction financing.
• Screening of customers and counterparties against relevant PF lists.

Enforcement and Compliance:

• CIMA conducts risk-based examinations of AML/CFT programs.
• Deficiencies are remedied through supervisory engagement or formal enforcement actions.
• Administrative penalties up to specified amounts may be imposed for AML/CFT violations.

FATF Compliance and Upcoming Evaluation:

CIMA is proactively preparing for the Financial Action Task Force's (FATF) 5th Round Mutual Evaluation, with the on-site inspection scheduled to commence in late 2027. The evaluation will be conducted by the Caribbean Financial Action Task Force (CFATF), which will assess the effectiveness of Cayman's AML, CFT, and CPF measures against FATF recommendations and best practices. This evaluation is a critical international assessment of the jurisdiction's financial crime prevention regime.

Regulatory Powers

CIMA exercises comprehensive enforcement authority to ensure compliance with financial services laws and regulations. The legal basis for enforcement powers is established in the Monetary Authority Act and sector-specific legislation.

Enforcement Powers Include:

1. Administrative Actions:

• Issuance of supervisory guidance and requirements for remediation of deficiencies.
• Formal directions requiring licensees to take or refrain from specific actions.
• Imposition of conditions or restrictions on licenses.

1. Financial Penalties:

• Administrative fines up to specified amounts for regulatory violations (under Monetary Authority Administrative Fines Regulations 2025 Revision).
• Penalties calibrated according to violation severity, entity size, and deterrence objectives.

1. License Actions:

• Suspension of license for temporary non-compliance or pending remediation.
• Revocation of license for serious violations or inability to meet regulatory requirements.
• Refusal to renew licenses for entities failing to demonstrate ongoing compliance.

1. Investigative Powers:

• Authority to compel production of documents and records.
• Power to examine witnesses and obtain testimony.
• Ability to access premises and conduct inspections.
• Powers to obtain information from third parties.

1. Restitution and Recovery:

• Authority to require restitution to customers harmed by violations.
• Power to require disgorgement of illegal profits.

Enforcement Principles:

CIMA exercises enforcement authority in a manner that is transparent, lawful, rational, proportionate, and consistent with publicly stated policies. The Authority pursues enforcement action that is timely and effective in dissuading licensees from future contraventions, and exercises powers in a procedurally fair manner. In considering enforcement actions, CIMA's Supervisory and Compliance Divisions consider:

• Impact on stakeholders' interests and market confidence
• Extent of risk posed by the contravention
• Ability of remedial action to rectify the contravention
• Willingness and ability of the party to cooperate with CIMA

CIMA publishes an Enforcement Manual detailing its enforcement philosophy and procedures, and maintains a publicly accessible register of enforcement actions and notices.

Regulatory Role and Function

Legal Foundation

CIMA exercises its regulatory powers through a comprehensive framework of primary and secondary legislation. The legal basis for CIMA's authority and regulatory mandate includes:

Foundational Legislation:

• Monetary Authority Act (2020 Revision) — Establishes CIMA as an autonomous statutory authority and grants it powers to license, supervise, and enforce compliance across the financial services sector. Section 6(1)(b) designates regulation, supervision, and enforcement as principal functions of the Authority.

Sector-Specific Regulatory Laws:

• Banks and Trust Companies Act (2025 Revision) — Governs the conduct of banking and trust business, establishing licensing requirements, prudential standards, and supervisory frameworks for deposit-taking institutions and trust companies. CIMA regulates trust business in accordance with this Act, the Private Trust Companies Regulations, and other related legislation including the Proceeds of Crime Act and Companies Act.
• Insurance Act (2010, as amended) — Regulates insurance and reinsurance businesses, including captive insurance operations and insurance intermediaries. This law establishes licensing requirements, solvency standards, and conduct of business rules for the insurance sector.
• Securities Investment Business Act (2020 Revision) (SIBA) — Regulates securities investment businesses including investment managers, investment advisers, securities dealers, and market makers. This Act establishes authorization requirements and prudential standards for securities service providers.
• Money Services Law (Revised) — Establishes licensing and regulatory requirements for money services businesses, including remittance service providers, currency exchange operators, and money transmission services.
• Virtual Asset (Service Providers) Act (2020, as amended) — Provides the legislative framework for the regulation of virtual asset service providers (VASPs), including cryptocurrency exchanges, custody providers, and trading platforms. This Act implements Financial Action Task Force (FATF) standards for virtual assets.

Ancillary Regulatory Framework:

• Proceeds of Crime Act (2025 Revision) — Forms the core of the AML/CFT regime, establishing money laundering offences and financial crime prevention obligations.
• Anti-Money Laundering Regulations (2025 Revision) — Implement regulatory obligations for all financial service providers, with detailed interpretive guidance provided in CIMA's Guidance Notes on the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing (February 2024).

Supervisory Principles: CIMA maintains both general rules applicable to all licensees and sector-specific guidance tailored to banks, insurers, fund administrators, and securities firms. Once authorized, financial service providers are subject to ongoing supervision through prudential reporting requirements, annual audits, and periodic risk-based inspections. Licensees must obtain prior approval for any material change in ownership, management, or business plan. Many sectors (banks, insurance companies, securities investment businesses, and company managers) remain subject to continuing financial resource requirements.

Licensing and Authorization Relevance

CIMA regulates money services businesses operating in or from the Cayman Islands, including remittance service providers, currency exchange operators, and money transmission service providers. The Money Services Law establishes licensing requirements and operational standards for these activities.

Scope of Regulated Activities:

• Remittance services (transfer of funds to foreign destinations)
• Currency exchange and conversion services
• Money transmission and payment services
• Prepaid cards and stored value products

Licensing Requirements:

• Money services businesses must obtain authorization from CIMA.
• Applicants must demonstrate fit and proper ownership, adequate capitalization, and effective AML/CFT controls.
• Business plan and operational procedures must align with regulatory standards.

Operational Standards:

• Robust AML/CFT policies and procedures, including customer due diligence.
• Segregation of customer funds from operational funds.
• Safeguards against fraud, cybersecurity threats, and operational risks.
• Complaint handling and customer protection mechanisms.

Supervisory Approach:

• Risk-based supervision based on business volume, customer base, and risk profile.
• Regulatory reporting requirements provide visibility into transaction flows and compliance.
• On-site inspections assess operational controls and AML/CFT implementation.

CIMA regulates virtual asset service providers under the Virtual Asset (Service Providers) Act (2020, as amended). This framework implements Financial Action Task Force (FATF) standards for virtual assets and provides legal clarity for cryptocurrency and blockchain-based businesses.

Definition and Scope:

A "virtual asset" is defined as "a digital representation of value that can be digitally traded or transferred, and can be used for payment or investment purposes, but does not include a digital representation of fiat currencies."

VASP Activities Subject to Licensing:

• Exchange of virtual assets for fiat currency or other virtual assets
• Transfer and transmission of virtual assets
• Custody and administration of virtual asset wallets on behalf of customers
• Trading platform operation and facilitation
• Virtual asset portfolio management services

Regulatory Framework and Timeline:

The Virtual Asset Act initially established a registration regime, with a phased approach to licensing. As of April 1, 2025, virtual asset custody providers and trading platform operators must now obtain a license. Existing VASPs performing licensable activities have a transitional period of 90 days from April 1, 2025 to submit license applications to CIMA.

Licensing Requirements:

• Applicants must demonstrate competent and honest management with no relevant criminal convictions.
• Robust AML/CFT programs addressing virtual asset-specific risks.
• Cybersecurity protocols including key management, multi-factor authentication, and audit logs.
• Business continuity and disaster recovery planning.
• IT infrastructure assessment and security certifications.

Key Compliance Obligations:

• AML/CFT Compliance: Licensees must implement customer due diligence procedures, beneficial ownership identification, and transaction monitoring systems aligned with FATF standards.
• Client Asset Segregation: Customer virtual assets must be segregated from operational assets and protected against unauthorized access.
• Cybersecurity Protocols: Robust defenses against hacking, data breaches, and unauthorized transactions. Key management systems must be auditable and subject to multi-factor authorization.
• Compliance Officer: A Money Laundering Reporting Officer (MLRO) responsible for AML/CFT oversight and suspicious activity reporting.

Supervisory Approach:

• Risk-based licensing and ongoing supervision based on business type and risk profile.
• Off-site monitoring through regulatory returns and compliance reporting.
• On-site inspections assessing AML/CFT implementation, IT security, and operational controls.
• International coordination through FATF and bilateral information sharing.

Payments and Money Movement Relevance

The Cayman Islands Monetary Authority (CIMA) has the following relevance to payments and money movement in Cayman Islands:

Payment Systems Governed or Overseen

The Cayman Islands Monetary Authority (CIMA) has oversight responsibilities across multiple financial sectors in Cayman Islands, including payment services:

The entity regulates payment service providers, e-money issuers, and related financial intermediaries within its integrated supervisory mandate.

Relationship to Other Regulators

CIMA actively participates in international regulatory coordination and information sharing arrangements to support the Cayman Islands' position as a reputable global financial centre and to combat cross-border financial crime.

Key International Memberships and Engagements:

1. Caribbean Financial Action Task Force (CFATF):

• CIMA participates as a member of CFATF, the regional FATF-style body for the Caribbean region.
• CFATF conducts mutual evaluations of member jurisdictions' AML/CFT regimes.
• Coordination on AML/CFT standards, best practices, and enforcement approaches.

1. International Organization of Securities Commissions (IOSCO):

• CIMA participates in IOSCO activities related to securities market regulation and oversight.
• Coordination on securities market standards, conduct of business rules, and supervision.

1. International Association of Insurance Supervisors (IAIS):

• CIMA engages with IAIS on insurance regulatory standards and best practices.
• Coordination on policyholder protection, solvency assessment, and market conduct.

1. Bilateral Cooperation:

• Memoranda of understanding (MOUs) with foreign financial regulators supporting information exchange.
• Participation in supervisory colleges for internationally active financial institutions.
• Coordination on cross-border enforcement matters and shared supervisory concerns.

1. Standard-Setting Bodies:

• CIMA follows Basel Committee guidance on banking supervision.
• Adoption of International Accounting Standards (IAS) and alignment with global accounting practices.
• Participation in Egmont Group initiatives on financial intelligence sharing.

Information Sharing Framework:

CIMA is authorized to share regulatory and supervisory information with foreign regulators, subject to confidentiality safeguards and legal restrictions. Formal mutual legal assistance treaties and regulatory cooperation arrangements support effective international coordination.

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

CIMA Headquarters:

• Address: Elizabethan Square, 4th Floor, P.O. Box 2231, Grand Cayman KY1-1111, Cayman Islands
• Website: https://www.cima.ky/
• Email: General inquiries available through website

Regulatory Contact Functions:

• Banking and Trust Companies Supervision: Available through main switchboard
• Insurance Supervision: Available through main switchboard
• Securities and Investment Business: Available through main switchboard
• Money Services Licensing: Available through main switchboard
• Virtual Asset Service Providers (VASP): Dedicated VASP licensing and compliance unit

Key Publications and Guidance:

• Regulatory Handbook — Comprehensive regulatory standards and prudential requirements
• Enforcement Manual — Enforcement philosophy, powers, and procedures
• Guidance Notes on Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing — AML/CFT interpretive guidance
• Virtual Asset Service Providers Resources — VASP licensing requirements and guidance
• Enforcement Notices — Published enforcement actions

Supervision Circulars:

CIMA publishes periodic regulatory updates and supervisory information circulars addressing emerging issues, regulatory changes, and supervisory expectations.

Notes on Naming and Language