International Fraud and Asset Tracing 2025

CAYMAN ISLANDS Trends and Developments Contributed by: Alan Bercow, Jae Shin and Ross McLeod, Appleby

nesses adapt to the comprehensive require - ments. The implementation has followed a phased approach, with CIMA issuing (among other things) detailed guidance and consultations on AML practices specific to virtual assets (the “AML Guidance Notes for VASPs (2021)” ), vir - tual asset custody standards (February 2022), regulatory policy for the registration or licensing of VASPs (May 2024), and rules for virtual asset custodians and virtual asset trading platforms (December 2024). The full range of regulatory measures can, at the time of writing (March 2025), be found on CIMA’s website. These guid - ance documents have proven valuable in trans - lating the principles-based legislation into practi - cal compliance frameworks. General obligations for VASPs Registered VASPs must comply with significant ongoing obligations, including: • extensive AML obligations aligned with FATF recommendations; • strict data protection and cybersecurity requirements; • filing of annual accounts with CIMA; • ensuring senior officers and beneficial owners meet “fit and proper” standards; • obtaining prior CIMA approval for senior officer appointments; • securing CIMA approval before any issuance of virtual assets; and • obtaining CIMA approval for any shareholding changes above 10%. These requirements reflect the jurisdiction’s commitment to maintaining high regulatory standards while still providing a framework that supports legitimate innovation in the digital asset space.

Enforcement mechanisms The VASP Act invests CIMA with robust investi - gative and enforcement powers. These include authority to conduct on-site inspections (Sec - tion24(1)(c)) and to request information and documents (Section9(4)(b)). The enforcement regime is bolstered by crimi - nal penalties for operating without appropriate registration, with potential fines of more than KYD100,000 (USD80,000) and imprisonment for the most serious violations (Section 35). This dual administrative and criminal enforcement approach creates significant deterrence against non-compliance. CIMA has established a specialised VASP and Fintech Innovation Unit, with technical exper - tise in blockchain forensics and virtual asset monitoring. The VASP and Fintech Innovation Unit works closely with the Financial Reporting Authority (FRA) and the RCIPS Financial Crimes Unit to investigate suspected fraud involving digital assets. Cryptocurrency fraud: typologies and potential responses Cryptocurrency frauds fall into several catego - ries: • Investment frauds – illegitimate initial coin offerings (ICOs) and token sales use vehicles to create a veneer of legitimacy but often the vehicles are not in fact based in the country they purport to be in. • Exchange vulnerabilities – these include hacks, insider theft, and mismanagement of customer assets by virtual asset exchanges. However, the risk of this is obviously greatest in markets that are less regulated than the Cayman Islands.

84 CHAMBERS.COM

Powered by