Mauritius has never lacked ambition when it comes to positioning itself as Africa’s most credible financial centre. The National Fintech Strategy, with its six-pillar structure spanning governance, market growth and innovation, is the latest expression of that ambition, and on paper it does something few African fintech strategies attempt: it puts governance on equal footing with growth. But according to Aamish Beedassy, Senior Compliance Executive and Deputy MLRO at ONS FinServ Ltd, having the right structure on paper is no longer the same as holding the advantage in practice.
“‘Trusted IFC’ isn’t Mauritius’s to keep by default anymore,” Aamish states bluntly. The competitive picture he paints is more contested than the jurisdiction’s reputation might suggest. “On current financial-centre rankings we sit second in Africa behind Casablanca as per the GFC Index, with Rwanda third and closing,” he points out, singling out Kigali’s KIFC, which “now runs a live Central Bank Sandbox and fintech-passporting agreements with Ghana and Kenya.” Further afield, he adds, “other competitors such as the DIFC have had a working crypto-token regime for years.” His assessment of the Strategy itself is measured but pointed: “The National Fintech Strategy shows the substance is there, but substance alone doesn’t differentiate anymore when peers ship comparable frameworks faster.” What matters now, in his view, is less the document than what follows it: “turning governance credibility into faster licensing and clearer digital-asset rules before competitors close the gap, not resting on reputation built over the last decade.”
That tension between pace and oversight threads through much of the conversation. Asked where the biggest regulatory opportunities and challenges lie as fintech innovation accelerates, Aamish is candid about where the real difficulty sits. “Faster licensing turnaround and unified digital onboarding would remove a genuine friction point,” he acknowledges, before redirecting attention entirely: “Where this really bites is cross-border banking and securities settlement, not domestic licensing.” Correspondent banks and global custodians moving funds through Mauritius, he explains, “apply their own AML/CFT lens on top of ours,” a dynamic sharpened by recent history. “A few years ago, Mauritius was placed on the FATF grey list for weak money-laundering controls, and that alone made some international banks reluctant to deal with us. That’s the real risk — one weak link can slow things down for everyone.” The same logic, he continues, extends to cross-border investment deals, where documentation tracing the origin of funds “must satisfy both sides, not just ours.” His counsel for firms navigating that reality is practical rather than reassuring: “build your compliance around whichever side of the deal has the strongest rules, not the easiest one.”
Digital assets raise a related but separate difficulty, one Beedassy frames as a genuine gap in monitoring capability rather than a merely administrative delay. “For COs and MLROs there exists a real monitoring gap,” he observes. “Without a settled classification framework for digital assets, firms are left applying traditional securities or payment-instrument logic to instruments that don’t cleanly fit either, which weakens both CDD and transaction-monitoring design.” His guidance for compliance teams in the interim is to stop waiting on regulators. “Until Mauritius publishes an actual digital-asset and securities-token framework rather than a passing mention, compliance teams handling these instruments will need to build their own risk taxonomy rather than wait for regulatory clarity.”
Technology, for Aamish, has moved from background groundwork to an active front line. “AI is now unavoidable,” he says, citing the Financial Services Commission’s September 2025 guidance notes on AI in financial services, which “already set out governance, fairness, transparency and security expectations,” while firms are “using AI for fraud detection and AML/CFT monitoring today.” He flags a structural mismatch in how the national strategies fit together: “the Fintech Strategy seems to only complement the National AI Strategy rather than integrating AI-specific supervisory expectations directly into its own framework.” His practical prescription is specific: prioritise “AI-assisted transaction monitoring and screening with a documented human-oversight layer.” Firms that delay, he warns, will pay for it later. “Firms treating AI adoption and AML/CFT compliance as separate workstreams will find themselves reconciling two governance frameworks later instead of building one properly from the start.”
On cross-border expansion, Aamish returns to the regional rivalry that opened the conversation, this time with a sharper edge. “Compliance becomes the enabler once it’s interoperable across jurisdictions, and this is where we need to watch the competition closely,” he says. Rwanda again features prominently in his thinking. “Rwanda’s KIFC isn’t trying to out-compete Mauritius on depth, its CEO has said openly they’re positioning against Mauritius and the UAE on investment structuring, but its fintech-passporting agreements with Ghana and Kenya give licensed firms a faster cross-border route than anything Mauritius currently offers explicitly.” Mauritius’s edge, he maintains, remains substantive: “the treaty network and supervisory body credibility, built on real casework.” Yet he stops short of calling it permanent. “That advantage erodes if competitors formalise passporting before we do. The Strategy’s cross-border pillar needs to move from aspiration to an actual passporting or mutual-recognition mechanism, or Mauritius risks having the credibility without the fastest route to market.”
For founders and institutional leaders building fintech businesses today, Aamish’s closing counsel is characteristically unsentimental. “Founders in digital assets or inclusion-focused products shouldn’t wait for national initiatives. Compliance must be part of the business model, and sequencing matters more than people think.” Regulatory gaps, he stresses, are no excuse to delay. “The Strategy still hasn’t settled a token classification framework or set numerical inclusion targets, but that’s no licence to defer your own CDD, source-of-funds and risk-appetite documentation, regulatory precision almost always arrives after the market has already moved, not before it.” The same principle, he adds, holds just as firmly for artificial intelligence.
Taken together, Aamish’s answers describe a jurisdiction with real strengths: a workable strategic blueprint, a deep treaty network, and supervisory standing earned through years of casework. What has narrowed, on his telling, is the margin for standing still. Casablanca, Kigali and Dubai feature throughout not as distant benchmarks but as rivals closing the distance in real time. His message to Mauritius’s fintech and compliance community lands less as a warning than as a call to sequencing: get the governance right first, build it properly, and never wait for the regulator to move before the market already has.
