Investor periodic review and KYC refresh procedures for Mauritius fund administrators

Investor periodic review workflow is the systematic revalidation of customer due diligence at scheduled intervals or triggered by material changes. Mauritius fund administrators must conduct risk-proportionate investor periodic review procedures that refresh beneficial ownership verification, update source of funds, and reassess money laundering risk. Without systematic periodic review workflows, KYC data becomes stale within 18 months, transaction monitoring becomes ineffective, and FSC inspection findings multiply. This guide explains how to operationalize investor periodic review procedures that satisfy Section 22 FIAMLA obligations.

Introduction

Mauritius has intensified AML enforcement since exiting the FATF grey list in 2021. The 2024 Financial Crimes Commission establishment and the AMLA 2026 overhaul have raised FSC expectations on demonstrable ongoing monitoring effectiveness. During inspections, FSC examiners examine investor files to verify whether periodic KYC review procedures are actually executed. Fund administrators unable to produce systematic evidence of investor periodic review face administrative penalties up to MUR 250,000 under the 2025 amendments.

Most administrators track investor KYC status across spreadsheets without documented periodic review workflows. When beneficial ownership data ages without refresh, transaction patterns become unmonitored, and audit trails fragment. This guide outlines practical investor periodic review procedures satisfying FSC expectations while reducing manual administration.

What is investor periodic review?

An investor periodic review workflow is a scheduled or event-driven process that revalidates customer due diligence: confirming identity currency, refreshing beneficial ownership documentation, updating source-of-funds assertions, and reassessing money laundering or terrorist financing risk. Periodic reviews occur at intervals (annually for low-risk; quarterly for high-risk) or are triggered by material events (sanctions match, PEP listing, ownership structure change, regulatory guidance update).

Periodic review differs from onboarding: onboarding collects all CDD from scratch. Periodic review workflow confirms existing data remains accurate, refreshes aged information, and documents whether investor risk rating or monitoring intensity should adjust. This creates continuous audit evidence that investors were actively monitored throughout the business relationship, not passively archived after onboarding.

Section 22 FIAMLA and ongoing monitoring

Mauritius regulatory framework for ongoing monitoring and periodic review derives from Section 22 of the Financial Intelligence and Anti-Money Laundering Act 2002 (FIAMLA), as amended by the AMLA 2026. For full regulatory guidance and official resources, see the official Mauritius AML/CFT/CPF Portal.

Section 22 of the Financial Intelligence and Anti-Money Laundering Act 2002 requires verification of customer identity, address, and beneficial ownership. The FSC emphasizes that institutions maintain ongoing monitoring and review of customer relationships proportionate to assessed risk. Key regulatory expectations for investor periodic review procedures:

Risk-based review frequency: Low-risk investors require an annual minimum review. Medium-risk investors require semi-annual review. High-risk investors require quarterly minimum review, with more frequent review possible depending on transaction complexity.

Beneficial ownership refresh: Documentary evidence of beneficial ownership must be refreshed, not merely asserted by the investor. Complex structures (corporations, trusts, partnerships) require verification against official Mauritius Registrar extracts.

Sanctions and PEP re-screening: Periodic review includes re-screening against the UN Consolidated List and domestic designations. PEP status must be re-verified, particularly for investors with politically active jurisdiction connections.

Record retention: All periodic review documentation must be retained for a minimum of five years after relationship termination.

Periodic review checklist by risk category

Review Component	Low-Risk	Medium-Risk	High-Risk
Review frequency	Annual	Semi-annual	Quarterly minimum
Identity reconfirmation	Confirm address; request updated ID if moved	Confirm address/occupation; obtain updated ID	Obtain a government ID with a photo; verify against PEP databases
Beneficial ownership refresh	Individual: confirm no change. Corporate: accept registry extract	Request updated documentation; verify against the official registry	Obtain certified evidence; verify international registries; assess opacity
Source of funds	Confirm the stated source remains accurate	Request supporting documentation for new sources	Obtain bank statements and signed declarations; perform adverse media search
Sanctions re-screening	Annual; document date and provider	Semi-annual; investigate historical matches	Monthly; zero tolerance for unresolved matches; immediate escalation
PEP re-screening	Annual check; document results	Semi-annual check; escalate family/associate PEP links	Quarterly with dual-source verification; escalate all PEP links to senior management
Documentation retention	File review memo linked to record	Link all updates and screening results to the investor file	Maintain a complete audit file: memo, supporting docs, screening results, and approver sign-off

Common challenges and solutions

Review deadline drift: Implement automated scheduling with 60-day reminders and escalations at 30 days overdue.

Incomplete beneficial ownership refresh: Send structured forms requiring specific information. Require certified registry extracts for corporates.

Fragmented documentation: Centralize all periodic review records in a single investor profile with timestamps.

Static risk ratings: Make risk reassessment mandatory for every review. Document explicitly whether rating changes are based on refreshed data.

Frequently asked questions

_{What is the minimum frequency for investor periodic review in Mauritius?}

The FSC expects regular risk review cycles at minimum quarterly, with actual frequency proportionate to the documented customer risk rating. This means low-risk investors may require annual investor periodic review, medium-risk investors require semi-annual review, and high-risk investors require quarterly or monthly review

_{What gets refreshed?}

Investor periodic review workflow must refresh: customer identity and residential address (confirm current residence); beneficial ownership structure and ultimate beneficial owners (reconfirm for corporate entities); stated source of investor funds (confirm assertions remain accurate); transaction patterns (assess whether activity aligns with stated investment strategy and fund mandate); and sanctions/PEP status (re-screen against current UN Consolidated List and domestic designations).

_{How long must investor periodic review documentation be retained?}

Records of all investor periodic review procedures must be retained for a minimum of five years after the business relationship ends, per FIAMLA requirements.

_{What if the investor refuses updates?}

If an investor is unwilling or unable to provide updated KYC information during periodic review procedures, FIAMLA expectations suggest the relationship should be suspended or terminated. Document the investor’s refusal in writing with dates. Escalate the decision to senior management and the MLRO.

_{What is Cascade?}

Cascade is an end-to-end AML/KYC SaaS platform that automates investor periodic review workflows by calculating review schedules from risk rating, triggering structured beneficial ownership refresh forms, integrating sanctions and PEP re-screening results, and maintaining complete audit trails.

_{Who can benefit from automating investor periodic review procedures?}

Any organization conducting periodic KYC reviews for multiple investors across varying risk categories can reduce manual administration, ensure compliance consistency, and maintain FSC-ready audit evidence.

_{How do I implement investor periodic review procedures for my fund?}

Begin by documenting your periodic review policy, defining frequency by investor risk category, data to be refreshed, re-screening requirements, and documentation standards.

_Disclaimer: _{This article is for general information only and based on publicly available sources and regulatory guidance at the time of writing. We have made our best effort to ensure accuracy and relevance to Mauritius fund administration compliance, but FSC regulations, FIAMLA requirements, and business practices can change. Always verify key details against current FSC publications and consult with a qualified compliance specialist or legal advisor before making compliance or vendor decisions.}